5Claude Code Release Notes·
Claude Code 2.1.214 release: security fixes, EndConversation tool, and extensive bug fixes
Anthropic released Claude Code version 2.1.214, a substantial patch addressing multiple permission-check security vulnerabilities including a Windows PowerShell 5.1 bypass, file-descriptor redirect bypass, and path-traversal issues in allow rules. The release adds the EndConversation tool enabling Claude to terminate sessions with abusive users or jailbreak attempts, improved OpenTelemetry observability attributes, and docker/Podman permission prompts. Dozens of bug fixes address Windows-specific issues, background session lifecycle problems, memory management, and streaming reliability.
Related guides (4)
Related events (8)
Claude Code 2.1.212 release: /fork background sessions, runaway-loop caps, and ~40 bug fixes
Anthropic shipped Claude Code version 2.1.212 with several notable behavioral changes: /fork now copies conversations into independent background sessions (previously launched in-session subagents), and new per-session caps on WebSearch calls (default 200) and subagent spawns (default 200) guard against runaway loops. MCP tool calls exceeding 2 minutes are automatically backgrounded to keep sessions responsive. The release also includes roughly 40 bug fixes spanning plan-mode permission bypasses, SIGTERM process-tree orphaning, Windows PowerShell compatibility, /ultrareview edge cases, OpenTelemetry export failures, and prompt caching improvements for LLM gateways.
Claude Code 2.1.176 release: session language, Bedrock caching, model allowlist fixes, Remote Control improvements
Anthropic released Claude Code version 2.1.176 with a mix of new features and bug fixes. Notable additions include session titles generated in the conversation language, a new footerLinksRegexes setting, and improved AWS Bedrock credential caching. Key fixes address model allowlist enforcement (alias models can no longer bypass blocked-model restrictions), auto-mode fallback for organizations without Opus 4.8 enabled, hook path pattern matching, and numerous Remote Control and background-session reliability issues across Linux, Windows, and tmux environments.
Claude Code 2.1.187 release: sandbox credentials, org model restrictions, MCP timeout fixes
Anthropic released Claude Code version 2.1.187 with a mix of security, reliability, and UX improvements. Notable additions include a sandbox.credentials setting to block credential file access in sandboxed commands, org-level model restriction enforcement in the model picker, and mouse click support in fullscreen menus. Key bug fixes address remote MCP tool calls hanging indefinitely (now abort after 5 minutes), subagent depth tracking on resume, leaked agent worktree registrations, and CJK text mojibake in certain terminals.
Claude Code CLI 2.1.205 patch: safety fixes, agent view improvements, and memory optimization
Anthropic released Claude Code CLI version 2.1.205, a patch addressing roughly 15 bugs and adding several improvements. Notable safety-relevant changes include a new auto-mode rule blocking tampering with session transcript files, explicit notifications that background task approvals require human input (preventing fabricated in-transcript approvals), and a prompt before running unresolvable `rm -rf` commands. Infrastructure improvements include streaming binary downloads that cut updater peak memory usage by ~400 MB, and the `/doctor` command is now a full diagnostic and repair tool.
Claude Code 2.1.210 release: bug fixes, security hardening, and agent workflow improvements
Anthropic released Claude Code version 2.1.210, a substantial patch addressing over 30 bugs and adding several improvements to the agentic coding tool. Notable fixes include hardening against indirect prompt injection via subagent-read content, correcting git worktree isolation for subagents, fixing hook callback timeouts that caused unattended sessions to stall, and resolving MCP server teardown during mid-session re-syncs. The release also improves auto-mode permission classification by defaulting to Sonnet 5 for external sessions and adds UX enhancements for the multi-agent dashboard.
Claude Code 2.1.208 release: accessibility, background agents, memory fixes, and performance improvements
Anthropic released Claude Code version 2.1.208, a substantial patch addressing dozens of bugs and adding several new features. Key additions include screen reader accessibility mode, vim insert-mode remapping, and a corporate process wrapper for enterprise deployments. The release fixes significant issues including memory leaks in long sessions, background agent reliability problems, streaming output truncation, and multi-second per-turn slowdowns from permission rule matching, alongside performance improvements yielding up to 7x faster tool rounds at high MCP tool counts.
Claude Code 2.1.211 release: subagent streaming, security hardening, and numerous bug fixes
Anthropic released Claude Code version 2.1.211 with a new --forward-subagent-text flag to expose subagent thinking in stream-json output, and a significant security fix neutralizing bidirectional-override and zero-width characters in permission previews that could visually alter approval messages. The release also fixes a prompt-caching regression on Bedrock, Vertex, Mantle, and Foundry that was incorrectly billing trailing system context blocks as fresh input tokens on every request. Dozens of additional bug fixes address session management, background agent lifecycle, Windows compatibility, MCP reconnection, and rendering performance.
Claude Code 2.1.181 release: /config syntax, Apple Events sandbox, subagent improvements, and ~40 bug fixes
Anthropic released Claude Code version 2.1.181 with several new features including a /config key=value prompt syntax for setting any configuration option, an opt-in Apple Events sandbox permission on macOS, and a new CLAUDE_CLIENT_PRESENCE_FILE environment variable for suppressing mobile push notifications. The release also includes improvements to subagent panel UX (auto-hide, depth limits, elapsed time fixes), streaming of long paragraphs, and auto-retry on mid-thinking connection drops. Approximately 40 bug fixes address issues ranging from 0-byte file writes on network drives, macOS TUI freezes, startup regressions, and credential refresh loops.