---
title: "Claude Code v2.1.187 发布：安全增强与大量 Bug 修复"
source: "Claude Code：GitHub Releases（RSS）"
source_tier: "t1_5"
url: "https://github.com/anthropics/claude-code/releases/tag/v2.1.187"
permalink: "https://feed.astralor.com/items/itm_8181476b540c17cc18273e2a"
published: "2026-06-23T21:03:48.000Z"
score: 67
channel: "ai"
tags: ["Anthropic","Bug修复","Claude Code","安全增强"]
---

# Claude Code v2.1.187 发布：安全增强与大量 Bug 修复

## 速览

Claude Code 发布 v2.1.187 版本，新增沙箱凭证限制以提升安全性，支持组织级模型限制，并修复了包括模型重调用、远程 MCP 超时、韩文/CJK 乱码、代理视图背景任务卡死等在内的十多项重要问题，大幅提升开发者体验和稳定性。

## 关键点

- 新增 sandbox.credentials 设置，阻止沙盒命令读取凭证文件和敏感环境变量
- 支持组织级模型限制，在选择器、--model 和 API 中显示受限提示
- 修复结构化输出中模型无限重调用的问题，后续轮次可靠返回结构化数据
- 修复远程 MCP 工具 5 分钟无响应挂起、韩文/CJK 粘贴乱码、代理视图背景任务卡死等十余项 bug

## 全文

What's changed Added sandbox.credentials setting to block sandboxed commands from reading credential files and secret environment variables Added org-configured model restrictions to the model picker, --model, /model, and ANTHROPIC_MODEL, with a "restricted by your organization's settings" message when a restricted model is selected Added mouse click support to select menus (permission prompts, /model, /config, etc.) in fullscreen mode Fixed --resume failing with "No conversation found" when the original -p run produced no model turns Fixed --json-schema and workflow agent({schema}) structured output: the model can no longer re-call StructuredOutput indefinitely after a successful call, and follow-up turns now reliably return structured output Fixed remote MCP tool calls that hang with no response for 5 minutes — they now abort with an error instead of blocking indefinitely (override with CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT) Fixed Claude Code Remote sessions taking ~2.7s longer to start after the agent proxy CA system-trust install was added Fixed pasted Korean/CJK text turning into mojibake in terminals that deliver paste as per-byte extended-key events Fixed /update over Remote Control hanging when a startup trust dialog would have shown Fixed background jobs in the agents view getting stuck in "working" indefinitely when the agent ended a turn without producing structured output Fixed channel connections dropping after navigating to the agents view and back, and after /bg, /tui, or /update Fixed agent stop notifications not correctly attributing who stopped the agent, and improved wording ("finished"/"stopped" instead of "came to rest") Fixed subagent depth tracking: resumed subagents now restore their original spawn depth, and forked subagents now count toward the depth cap Fixed leaked agent worktree registrations: locked .git/worktrees/ entries from killed agents are now cleaned up automatically Fixed Cmd+click not opening URLs in fullscreen mode in Ghostty on macOS Fixed claude --help not listing the --bg/--background flag Fixed Esc, Ctrl-C, and Ctrl-D not working while /share is uploading Improved /install-github-app: GitHub Actions workflow setup is now optional — you can install just the GitHub App and skip the workflow/secret steps Improved /btw with ←/→ arrow navigation to step through earlier answers Improved /plugin to surface plugins you haven't used recently so you can clean them up [VSCode] Fixed extension becoming unresponsive when resuming a large session

---

引用前请核对原文;本文由星际流动整理:https://feed.astralor.com/items/itm_8181476b540c17cc18273e2a