# Claude Code 2.1.207: auto mode default on cloud providers, plugin shell-injection fix, Opus 4.8 default

> Auto mode no longer needs the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in on Bedrock, Vertex AI, and Foundry, and those providers now default to Claude Opus 4.8. Several config surfaces stop honoring repo-resident settings, and plugin hooks/monitors reject `${user_config.*}` inside shell-form commands as a shell-injection fix — both change working setups.

| | |
|---|---|
| **Tool** | Claude Code |
| **Version** | 2.1.207 |
| **Kind** | release |
| **Published** | 2026-07-10 |
| **Observed** | 2026-08-11 |
| **Significance** | 4/5 |
| **Breaking** | yes |
| **Categories** | breaking, fix, security, feature, model-support, api-change |

## What changed


- Auto mode enabled by default on Bedrock, Vertex AI, Foundry; turn off with `disableAutoMode`
- Auto mode no longer reads `autoMode` from repo-resident `.claude/settings.local.json`; move it to `~/.claude/settings.json`
- Plugin hooks, monitors, and MCP `headersHelper` reject `${user_config.*}` in shell-form commands; use exec form (`args`), `$CLAUDE_PLUGIN_OPTION_<KEY>`, or read the value inside the script
- Plugin option values (`pluginConfigs`) no longer read from project-level `.claude/settings.json` — user, `--settings`, and managed settings only
- Bedrock, Vertex, and Claude Platform on AWS default to Claude Opus 4.8
- Security: remote managed settings from non-interactive runs (`claude -p`, SDK) were recorded as consented without ever showing the consent dialog
- Fixed terminal freezing/keystroke lag while streaming long lists, tables, or code blocks
- Fixed the auto-updater clobbering a custom launcher or symlink at `~/.local/bin/claude`; `/doctor` now reports externally managed launchers
- Fixed `extensions.worktreeConfig` left in `.git/config` after the last sparse-path worktree was removed (broke go-git tools like `tea`)
- Fixed an agent-teams crash loop on a malformed teammate mailbox message
- Fixed Bedrock re-requesting AWS SSO credentials on every API request, and an indefinite Windows hang when AWS credential resolution stalls
- Fixed Remote Control losing task status across reconnects and not showing background agent/workflow progress from desktop-hosted sessions
- `/usage-credits` now rejects malformed amounts instead of stripping them to digits; amounts over $1,000 need typed confirmation


## Sources

- [changelog_md](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/claude-code/2-1-207
Entity: https://changelogs.info/claude-code
Event ID: `evt_2026-07-10_claude-code_2-1-207`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.