Claude Code
the whole climb
40 RELEASES · 2026-06-17 → 2026-08-10 · 12 BREAKING
2026
Aug 7
- 10 2.1.227 Claude Code 2.1.227: GitHub Action Bash failures and expired-token flag fixes
- 08 2.1.226 Claude Code 2.1.226: unspecified fixes
- 07 2.1.225 Claude Code 2.1.225: OAuth token and MCP auth fixes, gateway spend limits
- 07 2.1.224 Claude Code 2.1.224: self-hosted runners and cross-session agent messaging
- 05 2.1.223 Claude Code 2.1.223: Bash permission bypass fixed, /review folded into /code-review BREAKING
- 04 2.1.222 Claude Code 2.1.222: worktree isolation escape fixed, ultraplan removed BREAKING
- 03 2.1.221 Claude Code 2.1.221: zsh permission bypass fixed, sandbox credential masking
Jul 22
- 24 2.1.220 Claude Code 2.1.220: unspecified fixes
- 24 2.1.219 Claude Code 2.1.219: Claude Opus 5 becomes the default Opus model
- 22 2.1.218 Claude Code 2.1.218: background code review, untrusted-hook fix, agent name restriction BREAKING
- 21 2.1.217 Claude Code 2.1.217: nested subagents off by default, concurrency cap, budget now halts background agents BREAKING
- 20 2.1.216 Claude Code 2.1.216: sandbox filesystem toggle, quadratic long-session slowdown fixed
- 19 2.1.215 Claude Code 2.1.215: /verify and /code-review no longer run autonomously
- 18 2.1.214 Claude Code 2.1.214: permission-check bypasses closed, dir/** glob scope narrowed BREAKING
- 16 2.1.212 Claude Code 2.1.212: /fork becomes a background session, /subtask added, runaway-loop caps BREAKING
- 15 2.1.211 Claude Code 2.1.211: prompt-caching billing regression fixed on Bedrock/Vertex/Mantle/Foundry
- 14 2.1.210 Claude Code 2.1.210: worktree isolation escape fixed, ultracode opt-in restricted to human input
- 14 2.1.209 Claude Code 2.1.209: restores /model and dialogs in background sessions
- 13 2.1.208 Claude Code 2.1.208: screen reader mode, memory-leak and long-session performance work
- 10 2.1.207 Claude Code 2.1.207: auto mode default on cloud providers, plugin shell-injection fix, Opus 4.8 default BREAKING
- 09 2.1.206 Claude Code 2.1.206: /commit-push-pr auto-allows non-origin push remotes, MCP timeout fix
- 08 2.1.205 Claude Code 2.1.205: transcript-tampering block, Windows worktree data-loss fix BREAKING
- 08 2.1.204 Claude Code 2.1.204: hook events stream during SessionStart in headless sessions
- 07 2.1.203 Claude Code 2.1.203: background agent reliability, worktree isolation and memory fixes
- 06 2.1.202 Claude Code 2.1.202: dynamic workflow size setting, /review reverts to single-pass
- 03 2.1.201 Claude Code 2.1.201: harness reminders drop the mid-conversation system role on Sonnet 5
- 03 2.1.200 Claude Code 2.1.200: AskUserQuestion stops auto-continuing, "default" permission mode renamed to Manual
- 02 2.1.199 Claude Code 2.1.199: subagent error propagation and retry behaviour fixes
- 01 2.1.198 Claude Code 2.1.198: subagents run in the background by default, Claude in Chrome GA BREAKING
Jun 11
- 30 2.1.197 Claude Code 2.1.197: Claude Sonnet 5 becomes the default model
- 29 2.1.196 Claude Code 2.1.196: MCP self-approval hole closed, Remote Control off on non-Anthropic base URLs BREAKING
- 26 2.1.195 Claude Code 2.1.195: hook matchers now exact-match instead of substring BREAKING
- 25 2.1.193 Claude Code 2.1.193: OTel now logs assistant responses where prompt logging is on
- 24 2.1.191 Claude Code 2.1.191: /rewind past /clear, ~37% less CPU while streaming
- 24 2.1.190 Claude Code 2.1.190: unspecified bug fixes
- 23 2.1.187 Claude Code 2.1.187: sandbox credential blocking and org model restrictions
- 22 2.1.186 Claude Code 2.1.186: CLI MCP auth, `!` bash output now answered by default, retry cap BREAKING
- 20 2.1.185 Claude Code 2.1.185: stream-stall hint reworded and delayed to 20s
- 19 2.1.183 Claude Code 2.1.183: auto mode blocks destructive git and IaC destroy commands
- 17 2.1.181 Claude Code 2.1.181: /config key=value, Apple Events entitlement, network-drive write fix