Claude Code 2.1.260 fixes three permission-rule bugs that each left files writable or every edit broken
The 2026-09-03 release fixes Edit/Write/Read permission rules whose path contains parentheses being dropped as invalid and ignored by the Bash sandbox, which left folders intended as read-only actually writable; a single rule with an uncompilable pattern such as an unclosed bracket made every file edit fail with 'Invalid regular expression'; and Bash permission checks auto-approved zsh commands hiding a command substitution inside a REPORTTIME, REPORTMEMORY or DIRSTACKSIZE assignment. It also reverts the 2.1.259 change that applied Read() deny rules to Bash arguments, which had been denying 'npm run build' under a Read(./**/build/**) rule in every mode. Anyone running headless or sandboxed agents should re-read their deny rules for parentheses and bracket characters rather than assuming they took effect.
↳ Follow the thread