release aidev BREAKING SIG 4/5

Claude Code 2.1.207: auto mode default on cloud providers, plugin shell-injection fix, Opus 4.8 default

Auto mode no longer needs the CLAUDE_CODE_ENABLE_AUTO_MODE opt-in on Bedrock, Vertex AI, and Foundry, and those providers now default to Claude Opus 4.8. Several config surfaces stop honoring repo-resident settings, and plugin hooks/monitors reject ${user_config.*} inside shell-form commands as a shell-injection fix — both change working setups.

PUBLISHED2026-07-10
OBSERVED2026-08-11
AGE1mo
SOURCES1
  • Auto mode enabled by default on Bedrock, Vertex AI, Foundry; turn off with disableAutoMode
  • Auto mode no longer reads autoMode from repo-resident .claude/settings.local.json; move it to ~/.claude/settings.json
  • Plugin hooks, monitors, and MCP headersHelper reject ${user_config.*} in shell-form commands; use exec form (args), $CLAUDE_PLUGIN_OPTION_<KEY>, or read the value inside the script
  • Plugin option values (pluginConfigs) no longer read from project-level .claude/settings.json — user, --settings, and managed settings only
  • Bedrock, Vertex, and Claude Platform on AWS default to Claude Opus 4.8
  • Security: remote managed settings from non-interactive runs (claude -p, SDK) were recorded as consented without ever showing the consent dialog
  • Fixed terminal freezing/keystroke lag while streaming long lists, tables, or code blocks
  • Fixed the auto-updater clobbering a custom launcher or symlink at ~/.local/bin/claude; /doctor now reports externally managed launchers
  • Fixed extensions.worktreeConfig left in .git/config after the last sparse-path worktree was removed (broke go-git tools like tea)
  • Fixed an agent-teams crash loop on a malformed teammate mailbox message
  • Fixed Bedrock re-requesting AWS SSO credentials on every API request, and an indefinite Windows hang when AWS credential resolution stalls
  • Fixed Remote Control losing task status across reconnects and not showing background agent/workflow progress from desktop-hosted sessions
  • /usage-credits now rejects malformed amounts instead of stripping them to digits; amounts over $1,000 need typed confirmation

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.