Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-13 · source-backed
The July 10 release blocks tampering with session transcript files and makes background-task notifications state explicitly that no human input occurred, "preventing fabricated in-transcript approvals from being acted on" (Releasebot). If you run headless agents, this is a direct guardrail against injection that forges a human "yes." Separately, v2.1.207 fixed a real bug where non-interactive runs permanently recorded managed-settings consent as granted without ever showing the dialog. Upgrade if you run claude -p or the SDK in cron or a pipeline. Earlier builds consented on your behalf.
Each link below shares sources, entities, or timing with this story.
Boris Cherny uses Claude Code / Shared entities / Same source / Shared topic / What happened next / Tension
Linked by a graph relationship (Boris Cherny uses Claude Code); both cover Claude Code, Releasebot; cite the same source (Releasebot).
Miasma criticizes Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Miasma criticizes Claude Code); both cover Claude Code, Releasebot; cite the same source (Releasebot).
Claude Code supports Linux / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Claude Code supports Linux); both cover Claude Code, Releasebot; cite the same source (Releasebot).
Claude Code uses MCP / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Claude Code uses MCP); both cover Claude Code, Releasebot; cite the same source (Releasebot).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover Claude Code, Releasebot; cite the same source (Releasebot).
Anthropic released Claude Code / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Claude Code, SDK; cite the same source (Releasebot).
Claude Code uses Sonnet / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Sonnet); both cover Claude Code, Releasebot; cite the same source (Releasebot).
Claude Code uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Claude Code, Releasebot; cite the same source (Releasebot).