aidev TIER 1 harness Anthropic

Claude Code

RELEASES50
BREAKING13
LATEST2.1.238
SHIPPED5d
TRACKED SINCE2026-06-17
FULL TIMELINE → OFFICIAL SITE ↗DOCUMENTATION ↗REPOSITORY ↗RELEASES ↗NPM ↗ § MARKDOWN ⌁ FEED
INSTALL npm i -g @anthropic-ai/claude-code

RELEASE CADENCE · LAST 12 MONTHS

09
10
11
12
01
02
03
04
05
06
07
08
The numbers behind the bars
Releases per month, last twelve months
MonthReleasesShare
2025-09 0 0%
2025-10 0 0%
2025-11 0 0%
2025-12 0 0%
2026-01 0 0%
2026-02 0 0%
2026-03 0 0%
2026-04 0 0%
2026-05 0 0%
2026-06 11 22%
2026-07 22 44%
2026-08 17 34%
12-MONTH TOTAL 50—

BREAKING CHANGES

2.1.233 Claude Code 2.1.233: GitLab MR support, user identity forwarding, todo tools removed from newer models 11d 2.1.223 Claude Code 2.1.223: Bash permission bypass fixed, /review folded into /code-review 20d 2.1.222 Claude Code 2.1.222: worktree isolation escape fixed, ultraplan removed 21d

RECENT

Density
5d
18:01
aidev claude-code

Claude Code 2.1.238: plugin headersHelper auth, self-hosted-runner proxy flags, long-session memory fix

A wide maintenance release: plugin marketplaces and MCP configs can now mint HTTP headers via a headersHelper command (gated behind folder trust and stripped of inherited credential env vars), self-hosted runners get graceful-shutdown and proxy-authorization options, and unbounded memory growth in long interactive sessions is fixed. Most of the rest is Remote Control and cross-session messaging reliability. Anyone relying on the Ctrl+L double-press /clear shortcut loses it.

featurefixsecurityapi-change
6d
23:57
6d
18:45
aidev claude-code

Default model env var, cross-session idle notification, auto mode improvements, screen reader support

Adds ANTHROPIC_DEFAULT_MODEL to set the starting model for new sessions while /model overrides persist across restarts. Adds notify_when_idle to SendMessage for one-shot cross-session coordination. Sandbox wildcard read-deny rules now correctly take precedence inside allowed regions. Auto mode gains severity-scored classification on all supported backends and a hardened git status check. VS Code gets screen reader support for the transcript. The /model picker trims to fit the terminal height. SIGTERM in print/SDK mode exits cleanly. Dozens of bug fixes across fullscreen rendering, session recovery, SendMessage, and more.

featurefixcapability
7d
18:24
claude-code Claude Code 2.1.235: optional spellcheck setting, permission dialog improvements, and bug fixes 2.1.235 · SIG 2/5
8d
18:19
aidev claude-code

Claude Code 2.1.234: auto-continue, GitLab MR badge, NT path security

Adds automatic session continuation after claude.ai usage limit resets, a GitLab merge request badge, the CLAUDE_CODE_PROJECT_DIR_NAME environment variable, and a selection:clear keybinding action. Hardens NT-namespace path handling against NTLM credential-leak vectors across file read, session restore, CLAUDE.md includes, workflow scripts, and uploads. Remote Control now publishes permission mode and effort level to connected clients. Dozens of fixes across permissions, rendering, MCP diagnostics, shell queuing, and cross-session messaging.

featuresecurityfix
11d
18:50
aidev claude-code BREAKING

Claude Code 2.1.233: GitLab MR support, user identity forwarding, todo tools removed from newer models

Claude Code adds GitLab merge request URL support to worktree and agents views, an opt-in user identity forwarding header for apps gateway, optional memory cgroup for Bash tool on Linux, and configurable WebFetch cache TTL. Several fixes target MCP v2 stream reconnection, cloud session loss, notification hooks, and a Windows NTLM credential-leak path through the \??\ device prefix. Notably, todo/task-tracking tools are removed from Opus 4.8, Sonnet 5, and newer models (opt-in via env var).

featurefixbreakingsecuritycapability
12d
21:30
12d
08:27
claude-code Claude Code 2.1.231: MCP OAuth redirect URI fix 2.1.231 · SIG 2/5
13d
19:28
aidev claude-code

Claude Code 2.1.229: SSE keepalives for long thinking, plugin marketplace command sources, VSCode session groups

Notable minor release. SSE keepalive pings prevent idle-timeout disconnects on Vertex and Bedrock during long thinking pauses. Plugin marketplace adds command sources — a local command prints the plugin directory, re-resolved each session without restart. Workflow fan-outs stagger same-prefix siblings to cache the prompt prefix. VSCode gains resizable side-question panels and session groups in the sidebar. The /commit-push-pr command no longer auto-approves dangerous git flags. A wide range of crash and edge-case fixes across the board.

featurefixapi-change
14d
17:45
claude-code Claude Code 2.1.228: skill-sync hardening and a Write-tool rule change 2.1.228 · SIG 2/5
15d
20:56
claude-code Claude Code 2.1.227: GitHub Action Bash failures and expired-token flag fixes 2.1.227 · SIG 2/5
18d
23:08
claude-code Claude Code 2.1.225: OAuth token and MCP auth fixes, gateway spend limits 2.1.225 · SIG 2/5
ALL 51 EVENTS →