v2.1.309
Article image or reusable cover for Claude Code
What's changed Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command Fixed macOS sandbox denyWrite glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with --mcp-config Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions Fixed the Bash permission check trusting a variable set by a command whose redirect can fail to open Fixed Bash permission checks not prompting for some compound commands that change directory before running git when the cd is wrapped or prefixed, as they do for a plain cd Fixed an Edit(path) deny rule not blocking a Bash redirect to that path in some commands that also held a subshell Fixed worktree-isolated sessions accepting some locale-prefixed commands the isolation guard should refuse Fixed worktree-isolated sessions on zsh accepting some arithmetic commands that the isolation guard should refuse Fixed worktrees and branch checkouts that Claude Code creates so they ignore git replace refs, as…
The text is the source's own description of its publication. The content belongs to Claude Code.
More to read
Lumaril, which develops AI software for optimizing industrial production by connecting to existing control systems, raised a $66M Series A at a $400M valuation
Techmeme 3 h ago
DeepSeek open sources Super-Agent as a research prototype, a proactive coding agent it says can monitor group chats for coding issues and suggest solutions
Techmeme 3 h ago
Insurance software maker Guidewire agrees to acquire Hyperexponential, which makes AI-powered insurance underwriting and pricing software, for $1.7B in cash
Techmeme 3 h ago
One word for AI agents in 2027
Nate Herk 7 h ago