This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
ReleasePort's take
Light signalThe login flow now correctly identifies expired sessions and prompts users to re‑authenticate instead of displaying a misleading model‑issue message.
Why it matters: Fixes the expired login error that previously showed a confusing "There's an issue with the selected model" message, improving user experience for all authentication attempts.
Summary
AI summaryFixed expired login error to prompt re‑authentication rather than misleading model issue message.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Added directory path suggestions to /cd matching /add-dir behavior Added directory path suggestions to /cd matching /add-dir behavior Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Added /doctor check proposing trimming checked-in CLAUDE.md files Added /doctor check proposing trimming checked-in CLAUDE.md files Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
/commit-push-pr now auto-allows git push to configured remote besides origin /commit-push-pr now auto-allows git push to configured remote besides origin Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
/login now supports Anthropic-operated public gateway endpoints /login now supports Anthropic-operated public gateway endpoints Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
EnterWorktree now asks for confirmation before entering a git worktree outside .claude/worktrees/ directory EnterWorktree now asks for confirmation before entering a git worktree outside .claude/worktrees/ directory Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Feature | Low |
/code-review findings quality improved on claude-opus-4-8 across all effort levels /code-review findings quality improved on claude-opus-4-8 across all effort levels Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Feature | Low |
Agents view status column now uses full terminal width instead of truncating at 64 characters Agents view status column now uses full terminal width instead of truncating at 64 characters Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Performance | Low |
Background agents upgrade to new version in background right after Claude Code update, avoiding stale‑session slowdown Background agents upgrade to new version in background right after Claude Code update, avoiding stale‑session slowdown Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Performance | Low |
Bedrock: fixed multi‑minute startup hang when using awsCredentialExport helper on restricted egress networks Bedrock: fixed multi‑minute startup hang when using awsCredentialExport helper on restricted egress networks Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Medium |
Fixed expired login error showing misleading "There's an issue with the selected model" message Fixed expired login error showing misleading "There's an issue with the selected model" message Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixed claude --resume and --continue ignoring keyboard input on startup Fixed claude --resume and --continue ignoring keyboard input on startup Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixed MCP servers ignoring per‑server request_timeout_ms, causing 60s default timeouts Fixed MCP servers ignoring per‑server request_timeout_ms, causing 60s default timeouts Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixed CLAUDE_CODE_EXTRA_BODY being ignored by agents / --bg workers; now follows dispatching session Fixed CLAUDE_CODE_EXTRA_BODY being ignored by agents / --bg workers; now follows dispatching session Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixed OAuth MCP servers requiring manual re‑authentication after a failed token refresh Fixed OAuth MCP servers requiring manual re‑authentication after a failed token refresh Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixed --permission-prompt-tool pointing at an MCP server crashing with "MCP tool not found" on cold start Fixed --permission-prompt-tool pointing at an MCP server crashing with "MCP tool not found" on cold start Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Low |
Fixed /model picker rows showing incorrect price for model and quoting first‑party prices on providers that don't bill them Fixed /model picker rows showing incorrect price for model and quoting first‑party prices on providers that don't bill them Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed server‑provided model rows being misplaced in /model picker when entitlements drop referenced rows Fixed server‑provided model rows being misplaced in /model picker when entitlements drop referenced rows Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed desktop sessions getting stuck showing "running" after a slash command mid‑turn Fixed desktop sessions getting stuck showing "running" after a slash command mid‑turn Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed keyboard input being ignored in agents view when setup prompt appears before claude --resume on Windows Fixed keyboard input being ignored in agents view when setup prompt appears before claude --resume on Windows Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed claude rm leaving removed job in daemon roster, causing row to reappear in claude agents Fixed claude rm leaving removed job in daemon roster, causing row to reappear in claude agents Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
/remote-control now explains how to sign in instead of showing "Unknown command" when logged out /remote-control now explains how to sign in instead of showing "Unknown command" when logged out Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed left arrow not stepping back out of a phase or agent in workflow detail view Fixed left arrow not stepping back out of a phase or agent in workflow detail view Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed /status listing the same broken‑install warning twice Fixed /status listing the same broken‑install warning twice Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed false "disused plugin" tips and skewed disuse telemetry for LSP plugins Fixed false "disused plugin" tips and skewed disuse telemetry for LSP plugins Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
/doctor's update check now compares Homebrew installs against cask channel instead of settings channel /doctor's update check now compares Homebrew installs against cask channel instead of settings channel Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Bugfix | Low |
Fixed fullscreen jump‑to‑bottom pill suggesting Ctrl+End on macOS, not showing rebound chords, and wrapping over transcript Fixed fullscreen jump‑to‑bottom pill suggesting Ctrl+End on macOS, not showing rebound chords, and wrapping over transcript Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
| Refactor | Low |
Ctrl+X in agents view permanently removes a completed session; sessions no longer render twice; deleted background jobs stay deleted Ctrl+X in agents view permanently removes a completed session; sessions no longer render twice; deleted background jobs stay deleted Source: granite4.1:30b@2026-07-16-audit Confidence: high |
— |
Full changelog
What's changed
- Added directory path suggestions to
/cd, matching/add-dirbehavior - Added a
/doctorcheck that proposes trimming checked-inCLAUDE.mdfiles by cutting content Claude could derive from the codebase /commit-push-prnow auto-allowsgit pushto the repo's configured push remote (remote.pushDefault, or the sole remote when only one is configured) in addition toorigin- Gateway:
/loginnow supports Anthropic-operated public gateway endpoints EnterWorktreenow asks for confirmation before entering a git worktree outside the project's.claude/worktrees/directory- Background agents now upgrade to a new version in the background right after a Claude Code update, instead of paying a slow stale-session upgrade when you attach
- Fixed an expired login failing every model with a misleading "There's an issue with the selected model" error instead of prompting to run
/login - Fixed
claude --resumeand--continuenot responding to keyboard input on startup - Fixed MCP servers configured via
--mcp-configor.mcp.jsonignoring a per-serverrequest_timeout_ms, which caused long-running MCP tool calls to time out at the 60s default in fresh sessions - Fixed
CLAUDE_CODE_EXTRA_BODYbeing silently ignored byclaude agents/--bgbackground workers; the shell-exported override now follows the dispatching session - Fixed OAuth MCP servers requiring manual re-authentication after a single failed token refresh
- Fixed
--permission-prompt-toolpointing at an MCP server crashing with "MCP tool not found" on cold start before the server finishes connecting - Fixed
/modelpicker rows printing a price for a different model than the row named, and stopped quoting first-party list prices on providers that don't bill them - Fixed server-provided model rows being misplaced in the
/modelpicker when an entitlement or allowlist restriction drops the row they were positioned against - Fixed desktop sessions getting stuck showing "running" after a slash command was sent mid-turn
- Fixed keyboard input being ignored in the agents view when a setup prompt appeared before a bare
claude --resumeon Windows - Fixed
claude rmleaving the removed job in the daemon roster, causing the row to reappear inclaude agents - Fixed
/remote-controlshowing "Unknown command" when logged out — it now explains how to sign in - Fixed left arrow not stepping back out of a phase or agent in the workflow detail view
- Fixed
/statuslisting the same broken-install warning twice - Fixed false "disused plugin" tips and skewed disuse telemetry for LSP plugins
- Fixed
/doctor's update check to compare Homebrew installs against their cask's channel instead of the settings channel - Fixed the fullscreen jump-to-bottom pill suggesting Ctrl+End on macOS, not showing rebound chords, and wrapping over the transcript
- Bedrock: fixed a multi-minute startup hang when using an
awsCredentialExporthelper on networks with restricted egress - Improved
/code-reviewfindings quality on claude-opus-4-8 across all effort levels - Improved agents view: status column now uses full terminal width instead of truncating at 64 characters
- Changed agents view: Ctrl+X now permanently removes a completed session, and sessions no longer render twice; deleted background jobs stay deleted
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About claude-code
All releases →Related context
Earlier breaking changes
- v2.1.215 Claude no longer automatically runs /verify and /code-review skills
- v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
- v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
- v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.
Beta — feedback welcome: [email protected]