Claude Code 2.1.281 adds a 2-minute auto-deny on dangerous rm, prompts on rm -rf "$(pwd)", and makes self-hosted runners require --system-prompt-file
The 23 Sep release makes the dangerous-rm prompt in auto and --dangerously-skip-permissions mode wait 2 minutes and then deny with a rewrite hint, so unattended runs keep going (CLAUDE_CODE_DISABLE_DANGEROUS_RM_TIMEOUT=1 turns this off). It now prompts on a recursive rm whose target comes only from command substitution, even when a Bash allow rule matches. Self-hosted runners now pass system prompts as files, so wrappers or command hooks that append --system-prompt or --append-system-prompt must switch to the -file variants. The release also adds "attribution": false in settings.json to hide commit and PR attribution. Headless pipelines that shell out to claude should check their wrapper flags and any rm-based cleanup steps before upgrading.
↳ Follow the thread