Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-24 · source-backed
In auto and --dangerously-skip-permissions mode, the dangerous-rm prompt now waits 2 minutes, then denies with a rewrite hint, so unattended runs keep moving (CLAUDE_CODE_DISABLE_DANGEROUS_RM_TIMEOUT=1 opts out). It also prompts on a recursive rm whose target comes only from command substitution, even when a Bash allow rule matches (changelog). Breaking change for headless setups: self-hosted runners now pass system prompts as files, so wrappers appending --system-prompt or --append-system-prompt must switch to the -file variants. Check your wrapper flags and your rm-based cleanup steps before upgrading.
Each link below shares sources, entities, or timing with this story.
v2.1.270, September 12 at 19:45Z, ships one change: read-only git commands in Bash stopped honoring their allow rules and started prompting mid-session, a regression attributed to 2.1.269, the release carrying the two permission-rule escape fixes and the world-readable plugin...
Go rotate a key. I'll wait. Claude Code 2.1.246, released August 25, lists this in its changelog: a fix for "telemetry and metrics requests to Anthropic carrying the API key configured for a third-party gateway (ANTHROPIC_BASE_URL); a credential is now only sent to its own hos...
I've been telling people for months that the agent code I review is *correct and awful*. Correct in the sense that it compiles, passes the tests, does the thing. Awful in the sense that a 400-line function does the work of 80, the same helper exists three times under different...
The June 25 release adds autoMode.classifyAllShell to route every Bash and PowerShell command through the auto-mode classifier, surfaces denial reasons in the transcript, and emits a claude_code.assistant_response OTel event carrying the model's actual response text. (Claude C...
The changelog shows sandbox filesystem deny entries being bypassed on Linux and macOS: specifically, denyRead: "~/.aws/" written with a trailing slash was silently ignored. That follows the zsh regex bypass, the PreToolUse auto-allow bypass, and the tabs/invisible-Unicode prom...
Go check your API spend. Right now. I'll wait. Buried in the v2.1.211 changelog is a regression fix for prompt caching on Bedrock, Vertex, Mantle, and Foundry, where trailing system context was being billed as fresh input tokens. Cached context. Re-billed at full input rate. O...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.