Aug 6, 2026 07:12 UTC
github_releases+npm+pages
anthropics/claude-code
anthropics/claude-code published a release: v2.1.223 — corroborated across 3 sources (github_releases, npm, pages)
[MERGED across 3 sources: github_releases, npm, pages]
shared signal: claude-code
--- npm :: @anthropic-ai/claude-code ---
@anthropic-ai/claude-code 2.1.222 -> 2.1.223: +25 strings, -4 strings, 1 flagged as interesting
[sentence] (1)
+ User didn't comment; observed by the model.
--- github_releases :: anthropics/claude-code ---
anthropics/claude-code release: v2.1.223
name: v2.1.223
published: 2026-08-06T00:52:37Z
url: https://github.com/anthropics/claude-code/releases/tag/v2.1.223
## What's changed
- Added owner wildcard entries (`"owner/*"`) to the `strictKnownMarketplaces` and `blockedMarketplaces` managed settings for allowing or blocking all marketplace repos under a GitHub org
- Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead
- Added a `/teleport` hint in cloud sessions showing how to continue locally with `claude --teleport <session id>`
- Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks
- Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog
- Fixed workflow scripts being able to use dynamic `import()` to run code outside the workflow sandbox
- Fixed a permission gap where an agent definition's `bypassPermissions` mode ignored the org bypass-permissions disable policy
- Fixed resuming a session after a mid-session `/cd` coming back empty
- Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as `vertex_ai/claude-*` or `bedrock/anthropic.claude-*`
- Fixed `modelOverrides` keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented
- Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local `managed-settings.json` or MDM profile; admin env
caught by the 20-minute sweep · the live wire · all receipts