chore(deps): update all dependencies - #37
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.201→2.1.2181.27.0→1.28.09c091bb→3d3c42e54f647b→e4fba860.23.0→0.23.1v46.1.18→v46.1.20Release Notes
anthropics/claude-code (@anthropic-ai/claude-code)
v2.1.218Compare Source
/code-reviewto run as a background subagent, so review work no longer fills your conversation and keeps stacked slash commands as its review targetOption+Delete,Ctrl+W,Cmd+Backspace,Ctrl+U,Ctrl+K) in--ax-screen-readermode\u-prefixed segments (likeC:\Users\unicorn) being corrupted into CJK characters in tool inputs, which made those files inaccessibleclaude mcp listand/mcpwhen a server fails to connect, and a warning for MCP config values with hidden leading or trailing whitespacejin place of newlines in terminals that encode pasted newlines as Ctrl+J/contextreporting stale pre-compact token usage after compacting from the message picker/ultrareviewfailing on descriptive arguments like "review my auth changes" — they now run a review of your current branch with the text applied as a note to the findings/code-review ultrasilently running a local review in non-interactive sessions — it now launches the cloud reviewtool_useblock left in the transcript when a tool aborted mid-response--ax-screen-readermodeCtrl+Bbackgrounding now applies the same background-shell caps as other paths/ultrareviewerror feedback so Claude can correct an invalid argument instead of retrying it unchanged&, and suspicious-Windows-path checks no longer open permission dialogs; the auto-mode classifier adjudicates them instead/deep-researchto start only when invoked manually; Claude no longer launches it on its own/config model=<x>or Remote Control:, which is reserved for plugin namespacingcontext: forkto run in the background by default; opt out per skill withbackground: falseyes/no/on/off/1/0(case-insensitive) as accepted values for skill and plugin frontmatter booleans, alongsidetrue/falsev2.1.217Compare Source
:heart:to insert ❤️, or:heafor suggestions — disable with theemojiCompletionEnabledsettingclaude.exemissing; failed updates now restore the preserved executable automatically/compactfailing once over the limitOTEL_EXPORTER_OTLP_ENDPOINTnot governing all signals — lower-scope signal-specific overrides no longer redirect telemetry away from the managed endpoint--resume/--continueand/resumefailing with a TypeError when a transcript has a malformed attachment entry/backgroundor←) or when the session exits on a heavily loaded machine, most visible on WindowsCLAUDE.mdorSKILL.mdpaths frontmatter value with many brace groups OOM-killing or stalling the CLI at startup — brace expansion is now budget-boundedFORCE_HYPERLINK=0to opt outCLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS) so one message can't fan out unbounded background agentsCLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTHto allow deeper nesting--max-budget-usdnot stopping background subagents: once the cap is reached, new spawns are denied and running background agents are haltedv2.1.216Compare Source
sandbox.filesystem.disabledsetting to skip filesystem isolation while keeping network egress controlc-operators and paste, statusline running twice on resume, and resume-picker hangs on failuregit -C,--git-dir, orGIT_DIR/GIT_WORK_TREEclaude daemon stop --anypotentially terminating an unrelated process via a stale legacy daemon lockfile&&lists or negations/memory,/plan,/keybindings, or Ctrl+G is open;/memoryno longer waits for the editor to close.claude, which could redirect writes outside the project/configsettings list in fullscreen mode clipping its keyboard-hint footerOTEL_METRICS_EXPORTER=prometheus) emitting invalid# UNITlinesnamefrontmatter field losing their plugin prefix in slash-command autocomplete/forkconfirmation to one line with the new session's name,claude attachid, and a note when the copy shares your checkoutgitandghcommand arguments in the PowerShell tool/ultrareviewdiff-too-large error to show configured limits, measured diff size, and largest contributing files/code-review ultraempty-diff message to name the exact base ref and suggest passing an explicit base/contextnow shows an explicit warning when the conversation exceeds the context window, and a failed/compactdisplays as an error/rewindno longer restores or deletes files through symlinks or hard links at tracked paths and reports how many paths it skipped/mcpand/install-github-appnow park a "needs input" request in the agent view when no client is attachedv2.1.215Compare Source
/verifyand/code-reviewskills on its own; invoke them with/verifyor/code-reviewwhen you want themv2.1.214dir/**allow rules likeEdit(src/**)auto-approving writes to nesteddir/directories anywhere in the tree instead of only<cwd>/dir[[ ]]comparisons as inert text — these commands now prompt for approvalhelpandmancommands that could run unsafe options, command substitutions, or backslash pathsmodifiedtimestamp to memory file frontmattermessage.uuid,client_request_id, andtool_sourceattributes to OpenTelemetry log events for message-level correlation and tool provenanceCLAUDE_CODE_OTEL_CONTENT_MAX_LENGTHto configure the 60 KB truncation limit on OpenTelemetry content attributessubagentStatusLinepayload, so custom agent rows can render model and effortdockercommands (including the Podmandockershim) carrying daemon-redirect flags (--url,--connection,--identity, and Podman's remote mode) that previously ran without onepkill -fpattern accidentally matched the CLI's own process (Linux)--settingspoints at a device file or multi-GB file; oversized (>2 MiB) settings files now fail at startup with a clear errorwhere.exe,fc.exe, anddiff.exeas errors when they return a valid negative answer (Windows)>and>>under the PowerShell tool on Windows PowerShell 5.1 writing UTF-16LE files that other tools couldn't read as UTF-8←or/backgroundand left idle keeping the background daemon and a worker process alive indefinitelyclaude rmor the agent view once the background service had gone idle/install-github-appand the/mcpsettings menu being blocked in agent-view sessions — they're now refused only in background sessions with no terminal attached--settingsCLI flag not loading (regression since v2.1.181)/ultrareviewrefusing to run in repos with no merge base — it now offers to review all tracked filesclaude updateandclaude doctorhanging silently, and the/statusSystem diagnostics section going blank, when a shell-config path is a directory#when memory files are savedmessage_deltaframesclaude rcworkspace-trust error in the home directory to say trust there is never saved and to suggest running from a project directorydir/**hookif:conditions to match only<cwd>/dir; write**/dir/**for any-depth matching.deny/askpermission rules keep their any-depth match.filecommands using-m/--magic-fileor-f/--files-fromto require permission instead of being auto-allowed as read-only"fork"when a session begins as a fork instead of"resume"v2.1.212Compare Source
/forknow copies your conversation into a new background session (its own row inclaude agents) while you keep working; the in-session subagent it used to launch is now/subtaskclaude auto-mode resetto restore the default auto-mode configuration, with a confirmation prompt (pass--yesto skip)CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION) to stop runaway search loopsCLAUDE_CODE_MAX_SUBAGENTS_PER_SESSION) to stop runaway delegation loops;/clearresets the budgetCLAUDE_CODE_MCP_AUTO_BACKGROUND_MS/resumein the agent view now opens a picker of past sessions — including sessions deleted from the list — and resumes your pick as a background sessiontouch,rm) without a permission prompt or SDKcanUseToolcallback.claude/worktrees, which could create files outside the repositorycontinue:falsehook's halt being dropped when the tool fails or completes mid-stream, and hook infrastructure errors being misreported as user rejections/backgroundandclaude --bgfailing with "EUNKNOWN: unknown error, uv_spawn" on Windows when Group Policy blocks PowerShell 5.1; the daemon now prefers PowerShell 7!) not executing commands containing file paths while the path autocomplete popup was open?help overlay/ultrareviewrejecting PR references like#123,PR 123, and pasted PR URLs; error hints now name the command you actually typed/ultrareview <branch>not fetching the branch from origin when it exists remotely; it now suggests the closest branch name on typos/ultrareviewskipping the billing confirmation in a new conversation after/clear/ultrareview's "not a git repository" error on Claude Desktop now suggesting the project's repository folder instead of terminal commandsExitWorktreefailing with "no active EnterWorktree session" after resuming a session with--continue/--resumein print/SDK mode/forklosing their live-parent protection after a state write failuretrace_id/span_idwhenTRACEPARENTis set in SDK/headless modeSendMessagebodies are no longer duplicated into replayed history and tool results/forkto name the copy after your prompt when the session has no title, so the row is recognizable in the agent view/btwto reopen the side-question panel on your most recent exchange so you can browse earlier answers←footer hint to pulseN donefor a moment when a background agent finishes while nothing needs your inputmodeparameter (now ignored); subagents inherit the parent session's permission mode by defaultforceLoginMethodto be enforced for VS Code extension, SDK,setup-token, andinstall-github-applogins, not just the terminalset_modelcontrol request mid-turn; the next model round-trip uses the new model instead of waiting for the next turnclaude agents --json: sessions waiting on a sandbox, MCP-input, or managed-settings prompt now show as "Needs input" instead of "Working"v2.1.211Compare Source
--forward-subagent-textflag andCLAUDE_CODE_FORWARD_SUBAGENT_TEXTenvironment variable to include subagent text and thinking in stream-json outputaskdecision for unsandboxed Bash — a hookasknow floors the decision at a prompt.claude/rules/*.mdfiles loading even when setting sources exclude project settings.prn) or trailing dot are now accepted, and files with multiple hard links are refused/loophiding the session from/resumeafter a single use/terminal-setupor onboarding terminal setupANTHROPIC_AUTH_TOKEN+ANTHROPIC_BASE_URL) coming back "Not logged in" after the daemon respawns themclaude agentsjobs becoming permanently undeletable when git no longer recognizes their worktree — the row now shows why the delete was refused instead of silently reappearing/clearnot resetting the session cost counter — the statusline's cost now starts at $0 after/clear/clear1e6and64_000/usage-creditsto ask for confirmation before sending a request to organization adminssandS(substitute char/line) to work in NORMAL mode, matching vim behaviorsave_to_diskon screenshot actions now writes the image to disk and returns the path; previously it did nothingv2.1.210Compare Source
Write(path),NotebookEdit(path), andGlob(path)permission rules — useEdit(path)orRead(path)insteadisolation: 'worktree'subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktreeultracodekeyword opt-in firing on non-human-originated input such as webhook payloads and relayed PR commentsclaude attachsometimes failing with "job not found" or "agent is still starting" errors during session transitions — attach now waits for the daemon to settle, and terminal resizes during a slow attach are applied once it completescdtook effect after its command was moved to the background; the tool result now states the working directory is unchanged/doctorskipping its auto-mode-default proposal on Bedrock, Vertex, and Foundry, where auto mode no longer needs an opt-in$1/$2positional placeholders in skills and commands being silently stripped; they are now preserved verbatimclaude agents --effort ultracodenot reaching dispatched sessions; the value was silently droppedgit worktree lockbehind; the periodic sweep now releases locks whose owning process is goneinitializecontrol request waiting until the next turn to start connectingCLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1.claude/*symlinks not being reconciled into the sandbox deny-write listv2.1.209Compare Source
claude agentsbackground sessions (reverts an overly broad guard)v2.1.208Compare Source
claude --ax-screen-reader, set CLAUDE_AX_SCREEN_READER=1, or add "axScreenReader": true to settings.vimInsertModeRemapssetting: map two-key insert-mode sequences likejjto Escape in vim modeCLAUDE_CODE_PROCESS_WRAPPER: agent view and the background service now honor a corporate launcher by running every Claude Code self-spawn through a required wrapper executableclaude agentsprocess was launched fromclaude -pCLAUDE_CODE_MAX_OUTPUT_TOKENSand similar env vars silently using the mantissa of scientific-notation values (1e6became1)apiKeyHelperscript failures being hidden behind a generic 401 after ~10 silent retries; the script's own error is now shown within 3 attempts/upgradeshowing a login flow instead of the upgrade URL when the browser fails to opencontrol_requestcarried a non-stringset_modelpayload; the CLI now answers with an error responsetoolslist resolves to nothing — it now returns a clear error naming the unrecognized entries/usageshowing stale cached bars over fresher data, and/mcpnot reclassifying placeholder servers after config edits~/.claude/workflows/instead of theCLAUDE_CONFIG_DIRlocation for user-scope saves/release-notesadding the viewed notes to the model's context — "Show all" previously injected the entire changelog into every subsequent request/tasksuntil cleanup instead of vanishing the moment they finishrm -rf ~) in commands containing$(…)/backticks/<(…)now prompt in--dangerously-skip-permissionsand auto mode, matching the plain form/install-github-appand the/mcpsettings menu no longer open in background sessions/mcpinstead of a config error/usagenow shows your last-known usage bars with an "as of" note when the usage endpoint is rate-limited, instead of an error screenv2.1.207Compare Source
CLAUDE_CODE_ENABLE_AUTO_MODEopt-in on Bedrock, Vertex AI, and Foundry; disable viadisableAutoModein settingsclaude -p, the SDK) being permanently recorded as consented without ever showing the security consent dialog~/.local/bin/claudeon every release;/doctornow reports an externally managed launchercdprompting for permission when the only output redirect was to/dev/nullextensions.worktreeConfigbeing left in the repo's.git/config(breaking go-git tools liketea) after the lastworktree.sparsePathsworktree was removed.ignore, and.worktreeincludebreaking file reads, file suggestions, and worktree creation[Pasted text #N]placeholder instead of adding a second onewaiting 3m) instead of the same timestamp twiceautoModefrom.claude/settings.local.json(repo-resident); use~/.claude/settings.jsoninsteadcredential_process): the 60-second stall guard now fires instead of waiting forever.${user_config.*}in shell-form commands is now rejected (shell-injection fix). Hooks: use exec form (argsarray) or$CLAUDE_PLUGIN_OPTION_<KEY>; monitors and headersHelper: read the value inside the script (config file or the server'senvblock).pluginConfigs) are no longer read from project-level.claude/settings.json; only user,--settings, and managed settings are honored/usage-creditsamount inputs silently stripping malformed values (e.g. a pasted timestamp) to digits; malformed amounts are now rejected with an error, and amounts over $1,000 require a typed confirmationv2.1.206Compare Source
/cd, matching/add-dirbehavior/doctorcheck that proposes trimming checked-inCLAUDE.mdfiles by cutting content Claude could derive from the codebase/commit-push-prnow auto-allowsgit pushto the repo's configured push remote (remote.pushDefault, or the sole remote when only one is configured) in addition toorigin/loginnow supports Anthropic-operated public gateway endpointsEnterWorktreenow asks for confirmation before entering a git worktree outside the project's.claude/worktrees/directory/loginclaude --resumeand--continuenot responding to keyboard input on startup--mcp-configor.mcp.jsonignoring a per-serverrequest_timeout_ms, which caused long-running MCP tool calls to time out at the 60s default in fresh sessionsCLAUDE_CODE_EXTRA_BODYbeing silently ignored byclaude agents/--bgbackground workers; the shell-exported override now follows the dispatching session--permission-prompt-toolpointing at an MCP server crashing with "MCP tool not found" on cold start before the server finishes connecting/modelpicker rows printing a price for a different model than the row named, and stopped quoting first-party list prices on providers that don't bill them/modelpicker when an entitlement or allowlist restriction drops the row they were positioned againstclaude --resumeon Windowsclaude rmleaving the removed job in the daemon roster, causing the row to reappear inclaude agents/remote-controlshowing "Unknown command" when logged out — it now explains how to sign in/statuslisting the same broken-install warning twice/doctor's update check to compare Homebrew installs against their cask's channel instead of the settings channelawsCredentialExporthelper on networks with restricted egress/code-reviewfindings quality on claude-opus-4-8 across all effort levelsv2.1.205Compare Source
--json-schemasilently producing unstructured output when the schema was invalid, and schemas using theformatkeyword being rejected--max-turnslimitSendMessageclaude attacherroring when a background agent was mid-upgrade restart instead of waiting for it to come backclaude mcp add-from-claude-desktopgetting stuck when a server name contains unsupported characters; invalid names are now reported and remaining servers still importrm -rfon a variable it can't resolve from contextclaude agents/doctoris now a full setup checkup that can diagnose and fix issues;/checkupis its aliasv2.1.204Compare Source
v2.1.203Compare Source
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.