What shipped in Claude Code
13 releases, newest first.
Claude Code 2.1.316
Released October 31, 2026. CLAUDE_CODE_DISABLE_ULTRATHINK turns the ultrathink keyword off. The Claude apps gateway adds pooled group budgets: one monthly budget that a group's members share, on top of each member's own limit, set with pooled_budget on the spend limits admin API. CLAUDE_CODE_SUBAGENT_EFFORT sets the effort level subagents run at when nothing else names one, instead of inheriting the session's. managed.policy_mode set to layered applies every matching gateway policy, each merged over the ones listed below it. guardrail.input_tagging on Bedrock upstreams wraps prompts in the input tags an Amazon Bedrock guardrail's prompt attacks filter needs, and all_messages_and_system also tags the system prompt. Fast mode for Opus 4.8 is deprecated as of October 30, 2026, and will be removed on November 30, 2026. After removal, fast mode requests on Opus 4.8 return an error and do not fall back to standard Opus 4.8. Migrate to Opus 5.5 to keep the speedup. VS Code can sign in to a Claude apps gateway from the chat panel, and ultrathink runs its turn at xhigh effort. Cloud sessions can fill in or decline a form an MCP server asks for, and Enterprise members can add and delete network secrets on their own cloud environments. The Code Review analytics page adds a findings-by-severity card. The release also includes a large fix sweep for the shell, permissions, MCP, cloud sessions, VS Code, Claude Tag, and the terminal UI.
Source for Claude Code 2.1.316 (opens in a new tab)Claude Code 2.1.314
Released October 30, 2026. permissions.blockWritesOutsideWorkingDirectories makes Write, Edit, and NotebookEdit refuse paths outside the working directories in every permission mode. Claude apps gateway upstreams can list IdP groups so only those developers are sent to that upstream, including on failover, and Bedrock upstreams can set guardrail_trace to log which Amazon Bedrock guardrail filter fired without the matched text. In VS Code and Claude Desktop's Code tab, a conversation of 200K or more tokens that is left idle is summarized, and that summary is used on the next message if the prompt cache has expired. Idle compaction also runs for subscribers with telemetry turned off, and on Bedrock, Vertex, Foundry, and LLM gateways once the one-hour prompt cache is on. File tools ask before editing the local copy of an organization's server-managed settings. Flagged requests retry on another model instead of ending in a refusal when ANTHROPIC_DEFAULT_OPUS_MODEL, availableModels, or deniedModels leaves only an older Opus model, or none. Cloud sessions from the web, desktop, and mobile apps start even when a setup script exits with an error. The release also includes a large fix sweep for permissions, MCP sign-in, Remote Control, cloud sessions, VS Code, Claude Tag, and the terminal UI.
Source for Claude Code 2.1.314 (opens in a new tab)Claude Code 2.1.312
Released October 27, 2026. The Claude apps gateway adds oidc.user_id_claim so a person can be identified by an id_token claim other than sub, such as Microsoft Entra ID's oid. In fullscreen, clicking the "to send now" hint under a queued message sends it right away. Write now asks Claude to read all of a very large CLAUDE.md, rules file, or @-included file in a subdirectory, or to edit it in place, instead of overwriting it after seeing only the start. Bedrock, Vertex, Foundry, and Mantle use the shorter system prompt for model names Claude Code does not recognize, such as custom deployment names and inference profile ARNs; CLAUDE_CODE_SIMPLE_SYSTEM_PROMPT=0 keeps the full prompt. Cloud routines can set an effort level, and the cloud environment setup script box has a Bash editor. Claude Code stops sending the claude_code.safety_event OpenTelemetry event. The release also includes a large fix sweep for skills, commands, VS Code, cloud sessions, Remote Control, Claude Tag, and Code Review.
Source for Claude Code 2.1.312 (opens in a new tab)Claude Code 2.1.311
Released October 26, 2026. self-hosted-runner adds --hold-idle-file and --max-hold-min to keep an idle session while the host reports processes it left running. In the interactive terminal, ultrathink runs its turn at xhigh effort on Opus 5.5, Sonnet 5.5, Haiku 5.5, and Fable 5.1 through Anthropic's API, and typing it while Claude is working raises the rest of that turn. A standard-context session whose request runs over 200K tokens compacts and continues instead of stopping with "Usage credits required for 1M context". Claude Code on Bedrock, Mantle, Vertex, and Foundry loads model settings from a signed file on downloads.claude.ai; CLAUDE_CODE_MODEL_CATALOG=off turns that off. Claude Tag analytics adds a Skills view for how often each attached skill runs in Slack channels. The release also includes a large fix sweep for startup freezes, MCP, compaction, subagents, VS Code, cloud sessions, and Code Review.
Source for Claude Code 2.1.311 (opens in a new tab)Claude Code 2.1.310
Released October 23, 2026. Adds the Monitor tool and plugin monitors on Bedrock, Vertex, and Foundry, and when telemetry or nonessential traffic is disabled, and blocks long foreground sleeps there too. Requests that fail behind gateways and compatible servers that reject the effort-2025-11-24 beta value or mid-conversation system messages are retried without them. Compaction after a "Prompt is too long" error no longer keeps so much dense text, such as base64 or SVG, that the next request fails again. File-read permission prompts show where a symbolic link leads. Enterprise custom roles can include Claude Code cloud sessions and Remote Control permissions, and turning either on in admin settings asks for confirmation and lists the roles that have that permission. An MCP tool call that times out in a non-interactive session while elicitation is unanswered tells Claude that no answer came and not to repeat the call. On Linux, /sandbox and the sandbox startup warning name Ubuntu's AppArmor restriction on user namespaces when it keeps bubblewrap from starting the sandbox. The release also includes fixes for VS Code plan review, cloud sessions, Claude Tag, and Code Review.
Source for Claude Code 2.1.310 (opens in a new tab)Claude Code 2.1.309
Released October 22, 2026. sed -i now gets the standard Bash prompt and runs as written, instead of a simulated file-edit preview, and /rewind no longer restores those edits. claude ultrareview requires workspace trust: it asks in a terminal, otherwise it refuses, and scripts pass --trust-workspace or set CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK=1. In bypass-permissions mode in the Desktop app and VS Code, dangerous rm and rmdir prompts are denied immediately with a rewrite hint. The /claude-api skill builds Managed Agents subagent teams on multiagent_20261001 with dynamic workflows on by default, and service account keys and Workload Identity Federation tokens can manage OpenTelemetry destinations. The bundled dataviz skill accepts APCA as a text-contrast measure. Sandbox fixes cover startup files running outside the sandbox, symlink write denies, MCP config edits, and Bash permission checks. The release also includes a large fix sweep for worktrees, MCP, VS Code, cloud sessions, Slack, and Code Review.
Source for Claude Code 2.1.309 (opens in a new tab)Claude Code 2.1.307
Released October 21, 2026. Adds /claude-api api-version to move Claude API code to API version 2026-10-21, and the claude_code.safety_event OpenTelemetry event for each tool call a permission rule, auto mode, a safety check, a hook, or the sandbox stopped, prompted, or sent back. HTTP MCP tool calls that were sent twice when the connection closed mid-call are now retried only for read-only or idempotent tools. @claude review stop, also off and pause, ends an @claude review always subscription on a pull request without starting a new review. The release also includes a large fix sweep for MCP, autocompact, cloud sessions, the Agent SDK, and VS Code.
Source for Claude Code 2.1.307 (opens in a new tab)Claude Code 2.1.306
Released October 21, 2026. Fixes claude -p inside cloud sessions reporting that it is not logged in when started without the session's environment variables. Also fixes an API error being replaced by a prompt-is-too-long message, and an unneeded compaction, in sessions with many MCP tools.
Source for Claude Code 2.1.306 (opens in a new tab)Claude Code 2.1.305
Released October 20, 2026. Adds sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces, such as Chromium or rootless Podman, which lets those commands get around the sandbox's file protections. Adds CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS so unattended retry mode notices a usage limit that was lifted before its reset. Requests no longer all fail on Vertex, Bedrock, and other providers when the endpoint or a gateway rejects tool search, a 2.1.304 regression. The release also includes a large fix sweep for worktrees, MCP, cloud sessions, Remote Control, and Code Review.
Source for Claude Code 2.1.305 (opens in a new tab)Claude Code 2.1.304
Released October 19, 2026. Adds /auto-mode-setup, a guided setup that reads the project and recent sessions to teach auto mode about the environment, including on Bedrock, Vertex, Foundry, and telemetry-disabled sessions. A transcript line names the plugin when a plugin that runs first skips one of a mod's hooks. Pro and Max plans warn when resuming an inactive conversation would use a noticeable share of the 5-hour usage limit. Code Review owners can choose Quick, Standard, or Deep for the organization or a repository. The release also includes a large fix sweep.
Source for Claude Code 2.1.304 (opens in a new tab)Claude Code 2.1.302
Released October 16, 2026. Adds CLAUDE_CODE_AUTO_MODE_MODEL to choose the model the client-side auto mode classifier uses, an Idle compaction row in /config, and a notice that standalone Claude Design (claude.ai/design) closes by December 14, 2026. Image reads over 128 MB are refused, plugin startup does less file-system work, and the release includes a large fix sweep for cloud sessions, MCP, and worktrees.
Source for Claude Code 2.1.302 (opens in a new tab)Claude Code 2.1.300
Released October 14, 2026. Adds mod prompt virtualText decorations, agent transcript view via $.ui.view({ agentId }), /advisor on Claude Platform on AWS, richer OpenTelemetry GenAI attributes, and a large stability sweep for session resume, worktrees, and cloud sessions. Source: official Claude Code changelog.
Source for Claude Code 2.1.300 (opens in a new tab)Claude Code 2.1.296
The October 9, 2026 build can read an oversized file in one call instead of chunking it, and subagents can auto-compact earlier than the main conversation via an autoCompactWindow setting.
Source for Claude Code 2.1.296 (opens in a new tab)
Updated