Skip to content

claude-code

v2.1.183 Breaking

This release includes 3 breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Summary

AI summary

Destructive git, Terraform, and Pulumi commands are now blocked by default unless explicitly requested.

Full changelog

What's changed

  • Improved auto mode safety: destructive git commands (git reset --hard, git checkout -- ., git clean -fd, git stash drop) are now blocked when you didn't ask to discard local work, git commit --amend is blocked when the commit wasn't made by the agent this session, and terraform destroy/pulumi destroy/cdk destroy are blocked unless you asked for the specific stack
  • Added a warning when the requested model is deprecated or automatically updated to a newer model, shown on stderr in print mode (-p) and now also covering models set in agent frontmatter
  • Added attribution.sessionUrl setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions
  • Added /config --help to list all available shorthand keys for /config key=value
  • Changed /config toggle behavior: Enter and Space both change the selected setting, and Esc now saves and closes instead of reverting
  • Removed the startup "setup issues" line under the logo — run /doctor to see configuration issues or use --debug
  • Fixed thinking.disabled.display: Extra inputs are not permitted 400 errors on subagent spawns and session-title generation for affected configurations
  • Fixed WebSearch returning empty results in subagents
  • Fixed the terminal cursor being stranded above the prompt after navigating history in vim mode with the native cursor enabled
  • Fixed fullscreen TUI corruption (statusline mid-screen, duplicated spinner rows, merged text) in Windows Terminal under heavy nested-subagent load
  • Fixed turns silently completing with no visible output when the model returned only a thinking block; Claude now re-prompts once
  • Fixed user-level skills appearing multiple times in slash-command autocomplete when multiple plugins are enabled
  • Fixed MCP servers requiring authentication exposing auth-stub tools to the model in headless/SDK mode
  • Fixed tmux teammate panes failing to launch when the shell has slow rc-file initialization, and keystrokes typed during agent spawn leaking into the new tmux pane instead of the leader prompt
  • Fixed background tasks started by a teammate being killed when the teammate finishes a turn
  • Fixed scheduled task and webhook trigger deliveries being treated as keyboard input; they now classify as task notifications and can no longer approve a pending action or set the session title in auto mode
  • Fixed focus mode showing "Ran N PostToolUse hooks" timing lines under each response

Breaking Changes

  • Blocks `git reset --hard`, `git checkout -- .`, `git clean -fd`, and `git stash drop` unless explicit discard of local work is requested
  • Blocks `git commit --amend` when the commit was not authored by the agent this session
  • Blocks `terraform destroy`, `pulumi destroy`, and `cdk destroy` unless a specific stack destruction request is made

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track claude-code

Get notified when new releases ship.

Sign up free

About claude-code

All releases →

Related context

Earlier breaking changes

  • v2.1.215 Claude no longer automatically runs /verify and /code-review skills
  • v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
  • v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
  • v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.

Beta — feedback welcome: [email protected]