This release includes 2 breaking changes for platform teams planning a safe upgrade.
Published 23d
Developer Productivity
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
auth
rbac
Summary
AI summaryDialogs no longer auto‑continue; permission mode defaults to Manual.
Full changelog
What's changed
- Changed
AskUserQuestiondialogs to no longer auto-continue by default; opt into an idle timeout via/config - Changed the "default" permission mode to "Manual" across the CLI,
--help, VS Code, and JetBrains;--permission-mode manualand"defaultMode": "manual"are accepted alongsidedefault - Fixed a crash at startup when
disabledMcpServersorenabledMcpServersin.claude.jsonis set to a non-array value - Fixed background sessions silently stopping mid-turn after sleep/wake or when reopening a stalled session
- Fixed background sessions re-running a turn cancelled with Esc after a stall respawn
- Fixed background agents never starting again after a crash left a stale
daemon.lockwhose PID the OS reused - Fixed background-agent daemon handover so a reinstalled older build can no longer take over the daemon; build recency is now judged by the version's embedded build timestamp
- Fixed background-agent roster issues: transient corruption permanently disabling orphan cleanup, older binaries not preserving fields written by newer versions, and socket auth tokens being stripped during daemon restarts
- Fixed subagents cut off by a rate limit before producing any text output returning an empty result instead of failing cleanly
- Fixed control bytes from background-agent output reaching the terminal in the agent view
- Fixed
claude agents --plugin-dir <dir>not showing the plugin's agents and skills in the agent view when the flag is placed afteragents - Fixed project-scoped plugins not loading correctly from git worktrees of the same repository
- Fixed
/mcpserver list not tracking focus for screen readers and magnifiers - Fixed voice dictation showing a misleading "Voice connection failed" message when a recording captures no audio
- Fixed rendering flicker under tmux 3.4+ by enabling synchronized terminal output
- Improved screen-reader output: decorative glyphs are now hidden, transcript symbols read as short labels, and nested tables read as
Header: value.lines - Improved the install script to explain when installation is killed by the system running out of memory
Breaking Changes
- Changed `AskUserQuestion` dialogs to no longer auto‑continue by default; opt into an idle timeout via `/config`
- Changed the "default" permission mode across CLI, VS Code, and JetBrains to "Manual" (accepts `--permission-mode manual` and `
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About claude-code
All releases →Related context
Earlier breaking changes
- v2.1.215 Claude no longer automatically runs /verify and /code-review skills
- v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
- v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
- v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.
Beta — feedback welcome: [email protected]