From d94f6bf62e549d84febc0cd6088dad54f1705ea8 Mon Sep 17 00:00:00 2001 From: Florian BRUNIAUX Date: Fri, 13 Feb 2026 11:06:07 +0100 Subject: [PATCH] =?UTF-8?q?docs:=20update=20Claude=20Code=20releases=20tra?= =?UTF-8?q?cking=20(v2.1.38=20=E2=86=92=20v2.1.41)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Add v2.1.39: recursive launch guard, Agent Teams 3P model fix, OTel speed - Add v2.1.41: claude auth CLI, Windows ARM64, /rename auto-name - Fix markdown missing v2.1.38 entry (security: heredoc, sandbox skills) - Add heredoc command smuggling to security breaking summary Co-Authored-By: Claude Opus 4.6 --- guide/claude-code-releases.md | 42 ++++++++++++++++++++-- machine-readable/claude-code-releases.yaml | 25 +++++++++++-- 2 files changed, 62 insertions(+), 5 deletions(-) diff --git a/guide/claude-code-releases.md b/guide/claude-code-releases.md index c564617..8fae1b1 100644 --- a/guide/claude-code-releases.md +++ b/guide/claude-code-releases.md @@ -4,7 +4,7 @@ > **Full details**: [github.com/anthropics/claude-code/CHANGELOG.md](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md) > **Machine-readable**: [claude-code-releases.yaml](../machine-readable/claude-code-releases.yaml) -**Latest**: v2.1.37 | **Updated**: 2026-02-08 +**Latest**: v2.1.41 | **Updated**: 2026-02-13 --- @@ -19,6 +19,43 @@ ## 2.1.x Series (January-February 2026) +### v2.1.41 (2026-02-13) + +- **New**: `claude auth login`, `claude auth status`, `claude auth logout` CLI subcommands +- **New**: Windows ARM64 (win32-arm64) native binary support +- **Improved**: `/rename` auto-generates session name from conversation context when called without arguments +- Improved narrow terminal layout for prompt footer +- Fixed: File resolution for @-mentions with anchor fragments (e.g., `@README.md#installation`) +- Fixed: FileReadTool blocking on FIFOs, `/dev/stdin`, and large files +- Fixed: Background task notifications not delivered in streaming Agent SDK mode +- Fixed: Auto-compact failure error notifications shown to users +- Fixed: Stale permission rules not clearing when settings change on disk +- Fixed: Permission wait time included in subagent elapsed time display +- Fixed: Proactive ticks firing while in plan mode + +### v2.1.39 (2026-02-11) + +- **New**: Guard against launching Claude Code inside another Claude Code session +- Added `speed` attribute to OTel events and trace spans for fast mode visibility +- Fixed: Agent Teams using wrong model identifier for Bedrock, Vertex, and Foundry customers +- Fixed: Crash when MCP tools return image content during streaming +- Fixed: `/resume` session previews showing raw XML tags instead of readable command names +- Fixed: Opus 4.6 launch announcement showing for Bedrock/Vertex/Foundry users +- Fixed: Hook blocking errors (exit code 2) not showing stderr to the user +- Fixed: Structured-outputs beta header sent unconditionally on Vertex/Bedrock +- Improved: Model error messages for Bedrock/Vertex/Foundry with fallback suggestions +- Improved: Terminal rendering performance +- Multiple stability fixes (fatal errors, process hanging, character loss at screen boundary) + +### v2.1.38 (2026-02-10) + +- Fixed: VS Code terminal scroll-to-top regression introduced in 2.1.37 +- Fixed: Tab key queueing slash commands instead of autocompleting +- Fixed: Bash permission matching for commands using environment variable wrappers +- Fixed: Text between tool uses disappearing when not using streaming +- **Security**: Improved heredoc delimiter parsing to prevent command smuggling +- **Security**: Blocked writes to `.claude/skills` directory in sandbox mode + ### v2.1.37 (2026-02-08) - Fixed `/fast` not immediately available after enabling `/extra-usage` @@ -438,6 +475,7 @@ | v2.1.2 | Command injection in bash command processing | | v2.1.6 | Shell line continuation permission bypass | | v2.1.7 | Wildcard permission rules compound commands | +| v2.1.38 | Heredoc delimiter command smuggling prevention | ### Syntax @@ -476,4 +514,4 @@ --- -*Last updated: 2026-02-06 | [Back to main guide](./ultimate-guide.md)* +*Last updated: 2026-02-13 | [Back to main guide](./ultimate-guide.md)* diff --git a/machine-readable/claude-code-releases.yaml b/machine-readable/claude-code-releases.yaml index 02f7be3..e101416 100644 --- a/machine-readable/claude-code-releases.yaml +++ b/machine-readable/claude-code-releases.yaml @@ -3,8 +3,8 @@ # Purpose: Track Claude Code product releases for documentation sync # Maintained: Manual updates when new releases are announced -latest: "2.1.38" -updated: "2026-02-10" +latest: "2.1.41" +updated: "2026-02-13" # ════════════════════════════════════════════════════════════════ # RELEASES (newest first, condensed highlights only) @@ -15,12 +15,30 @@ releases: # 2.1.x Series (January-February 2026) # ───────────────────────────────────────────────────────────── + - version: "2.1.41" + date: "2026-02-13" + highlights: + - "`claude auth login/status/logout` CLI subcommands" + - "Windows ARM64 (win32-arm64) native binary support" + - "`/rename` auto-generates session name from conversation context" + - "Multiple stability fixes (FileReadTool FIFOs, background tasks, stale permissions)" + breaking: [] + + - version: "2.1.39" + date: "2026-02-11" + highlights: + - "Guard against launching Claude Code inside another Claude Code session" + - "Fixed Agent Teams wrong model for Bedrock/Vertex/Foundry" + - "`speed` attribute in OTel events for fast mode visibility" + - "Multiple stability fixes (rendering, session close, fatal errors)" + breaking: [] + - version: "2.1.38" date: "2026-02-10" highlights: - "Fixed VS Code terminal scroll-to-top regression" - "Fixed Tab key queueing slash commands instead of autocompleting" - - "Fixed bash permission matching for commands with env var wrappers" + - "Security: Heredoc delimiter parsing to prevent command smuggling" - "Security: Blocked writes to `.claude/skills` in sandbox mode" breaking: [] @@ -535,6 +553,7 @@ breaking_summary: - "Wildcard permission rules compound commands fix (v2.1.7)" - "Shell line continuation permission bypass fix (v2.1.6)" - "Sandbox-excluded commands bypass with autoAllowBashIfSandboxed (v2.1.34)" + - "Heredoc delimiter command smuggling prevention (v2.1.38)" installation: - "npm installations deprecated - use native installer (v2.1.15)" behavior: