Anthropic released Claude Code version 2.1.208, a substantial patch addressing dozens of bugs and adding several new features. Key additions include screen reader accessibility mode, vim insert-mode remapping, and a corporate process wrapper for enterprise deployments. The release fixes significant issues including memory leaks in long sessions, background agent reliability problems, streaming output truncation, and multi-second per-turn slowdowns from permission rule matching, alongside performance improvements yielding up to 7x faster tool rounds at high MCP tool counts.
Anthropic released Claude Code version 2.1.203, a substantial patch addressing over 25 bugs primarily affecting background agent sessions, subagent orchestration, and worktree isolation. Key fixes include automatic recovery when daemon session tokens go stale, correct subagent state carry-over when returning to sessions, and PATH/environment variable inheritance issues on Windows. The release also adds MCP roots/list integration for working directories and improves streaming responsiveness.
Anthropic released Claude Code version 2.1.210, a substantial patch addressing over 30 bugs and adding several improvements to the agentic coding tool. Notable fixes include hardening against indirect prompt injection via subagent-read content, correcting git worktree isolation for subagents, fixing hook callback timeouts that caused unattended sessions to stall, and resolving MCP server teardown during mid-session re-syncs. The release also improves auto-mode permission classification by defaulting to Sonnet 5 for external sessions and adds UX enhancements for the multi-agent dashboard.
Anthropic released Claude Code version 2.1.216, a maintenance update addressing a significant performance regression where message normalization cost grew quadratically with conversation length, causing multi-second stalls in long sessions. The release also fixes agent session state restoration (prompt and tool restrictions now persist across resumes), OAuth token expiry mid-session, and numerous edge cases in worktree isolation, background subagent lifecycle, and MCP re-authentication. Additional improvements cover UI rendering, telemetry accuracy, PowerShell/Bash command parsing, and cloud session resilience on container restart.
Anthropic shipped Claude Code version 2.1.191 with a notable set of bug fixes and performance improvements. Key additions include /rewind support for resuming conversations before a /clear, roughly 37% CPU reduction during streaming via coalesced text updates, and improved MCP server reliability with retry logic for transient network errors. Several agent-related bugs were fixed, including background agents resurrecting after being stopped and slash commands being incorrectly forwarded to background sessions.
Anthropic released Claude Code CLI version 2.1.205, a patch addressing roughly 15 bugs and adding several improvements. Notable safety-relevant changes include a new auto-mode rule blocking tampering with session transcript files, explicit notifications that background task approvals require human input (preventing fabricated in-transcript approvals), and a prompt before running unresolvable `rm -rf` commands. Infrastructure improvements include streaming binary downloads that cut updater peak memory usage by ~400 MB, and the `/doctor` command is now a full diagnostic and repair tool.
Anthropic released Claude Code version 2.1.200 with a notable default behavior change: the permission mode now defaults to 'Manual' across CLI, VS Code, and JetBrains integrations, replacing the previous auto-continue behavior for AskUserQuestion dialogs. The release includes extensive fixes for background agent reliability issues including daemon lock conflicts, session stalls after sleep/wake cycles, rate-limit handling, and MCP server configuration errors. Accessibility improvements for screen readers and terminal rendering fixes under tmux 3.4+ are also included.
Anthropic released Claude Code version 2.1.187 with a mix of security, reliability, and UX improvements. Notable additions include a sandbox.credentials setting to block credential file access in sandboxed commands, org-level model restriction enforcement in the model picker, and mouse click support in fullscreen menus. Key bug fixes address remote MCP tool calls hanging indefinitely (now abort after 5 minutes), subagent depth tracking on resume, leaked agent worktree registrations, and CJK text mojibake in certain terminals.
Anthropic released Claude Code version 2.1.211 with a new --forward-subagent-text flag to expose subagent thinking in stream-json output, and a significant security fix neutralizing bidirectional-override and zero-width characters in permission previews that could visually alter approval messages. The release also fixes a prompt-caching regression on Bedrock, Vertex, Mantle, and Foundry that was incorrectly billing trailing system context blocks as fresh input tokens on every request. Dozens of additional bug fixes address session management, background agent lifecycle, Windows compatibility, MCP reconnection, and rendering performance.