Claude Code 2.1.221: permission bypass fixed, Focus view in VSCode, credential masking
Version 2.1.221 patches a permission bypass and adds a few new modes:
• zsh could run hidden commands inside [[ ]] conditions without going through the Bash permission check. Those commands now require approval. • VSCode gets a Focus view: tool activity collapses into a per-step summary, toggled with Ctrl+Alt+F. • Linux and WSL get a mask mode for credential files. The sandbox reads a stub copy and the proxy swaps in the real value on the way out. On macOS you get a hard deny instead of masking. • A prompt-audit subcommand in the claude-api skill checks prompts and tool descriptions for tricks written for older models.
The release follows 2.1.219, which made Opus 5 the default Opus model.
Up next
Amodei worries people are joining Anthropic for the paycheck
Dario Amodei worries some people join Anthropic for the money, not the mission, Axios reports, and he won’t raise salaries to counter poaching by rival labs. Mission Local earlier flagged an Anthropic listing with a $65,000 to $85,000 base.
Related stories
- Worktree isolation was leaking git commands into the main copy
- Claude Opus 5 is the new default Opus model in Claude Code v2.1.219
- Claude Code 2.1.317: email check, SDK hook block, cost API
- Claude Code 2.1.314 adds write fence, IdP groups, compaction
- Claude Code 2.1.311 can drop its last rm -rf guard
- Claude Code 2.1.309 closes sandbox and permission holes
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.