Claude Code v2.1.187 Released: Security Enhancements and Numerous Bug Fixes
Score
67Why selected
Fixes over a dozen critical bugs affecting developer experience, adds security and org-control features without major new capabilities, scoring 85.
AI commentary
「This release significantly improves Claude Code's usability and reliability in enterprise development environments through security hardening and critical fixes, especially the structured output stability and remote MCP timeout handling directly impacting daily workflow.」
Quick overview
Claude Code v2.1.187 introduces sandbox credential blocking for enhanced security, org-configured model restrictions, and fixes over a dozen critical issues including model re-call loops, remote MCP timeouts, Korean/CJK text mojibake, agent view stuck background jobs, significantly improving developer experience and stability.
- New sandbox.credentials setting blocks sandboxed commands from reading credential files and secret env vars
- Org-configured model restrictions now shown in model picker, --model, /model, and ANTHROPIC_MODEL
- Fixed StructuredOutput infinite re-call after success; follow-up turns reliably return structured output
- Fixed remote MCP tool hangs after 5 min, Korean/CJK paste mojibake, agent view stuck background jobs, and more
Full text
Showing the source text; the full translation is being generated.
Uh oh!
There was an error while loading. Please reload this page.
anthropics / claude-code Public- Notifications You must be signed in to change notification settings
- Fork 21.9k
- Star 136k
v2.1.187
CompareChoose a tag to compare
Sorry, something went wrong.
Filter LoadingSorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
ashwin-ant
released this
23 Jun 21:03
v2.1.187
2aa6ef3
What's changed
- Added
sandbox.credentialssetting to block sandboxed commands from reading credential files and secret environment variables - Added org-configured model restrictions to the model picker,
--model,/model, andANTHROPIC_MODEL, with a "restricted by your organization's settings" message when a restricted model is selected - Added mouse click support to select menus (permission prompts,
/model,/config, etc.) in fullscreen mode - Fixed
--resumefailing with "No conversation found" when the original-prun produced no model turns - Fixed
--json-schemaand workflowagent({schema})structured output: the model can no longer re-callStructuredOutputindefinitely after a successful call, and follow-up turns now reliably return structured output - Fixed remote MCP tool calls that hang with no response for 5 minutes — they now abort with an error instead of blocking indefinitely (override with
CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT) - Fixed Claude Code Remote sessions taking ~2.7s longer to start after the agent proxy CA system-trust install was added
- Fixed pasted Korean/CJK text turning into mojibake in terminals that deliver paste as per-byte extended-key events
- Fixed
/updateover Remote Control hanging when a startup trust dialog would have shown - Fixed background jobs in the agents view getting stuck in "working" indefinitely when the agent ended a turn without producing structured output
- Fixed channel connections dropping after navigating to the agents view and back, and after
/bg,/tui, or/update - Fixed agent stop notifications not correctly attributing who stopped the agent, and improved wording ("finished"/"stopped" instead of "came to rest")
- Fixed subagent depth tracking: resumed subagents now restore their original spawn depth, and forked subagents now count toward the depth cap
- Fixed leaked agent worktree registrations: locked
.git/worktrees/entries from killed agents are now cleaned up automatically - Fixed Cmd+click not opening URLs in fullscreen mode in Ghostty on macOS
- Fixed
claude --helpnot listing the--bg/--backgroundflag - Fixed Esc, Ctrl-C, and Ctrl-D not working while
/shareis uploading - Improved
/install-github-app: GitHub Actions workflow setup is now optional — you can install just the GitHub App and skip the workflow/secret steps - Improved
/btwwith ←/→ arrow navigation to step through earlier answers - Improved
/pluginto surface plugins you haven't used recently so you can clean them up - [VSCode] Fixed extension becoming unresponsive when resuming a large session
Uh oh!
There was an error while loading. Please reload this page.
👍 7 mike1858, hanchunjun, saita08, Maaattqc, Kovic-Odhiambo, coconutLatte, and distinguished-sre reacted with thumbs up emoji 😄 2 mike1858 and saita08 reacted with laugh emoji 🎉 3 mike1858, JRAVILES, and saita08 reacted with hooray emoji ❤️ 4 mike1858, JRAVILES, saita08, and jsaristi reacted with heart emoji 🚀 3 mike1858, JRAVILES, and saita08 reacted with rocket emoji 👀 3 mike1858, saita08, and distinguished-sre reacted with eyes emoji All reactions- 👍 7 reactions
- 😄 2 reactions
- 🎉 3 reactions
- ❤️ 4 reactions
- 🚀 3 reactions
- 👀 3 reactions
Related items
FeaturedDeepSeek V4 Doubles Token Share on OpenRouter, Driven by Agentic Workloads
DeepSeek V4 在 OpenRouter 上的代币份额翻倍，智能体工作负载成主要驱动力
The rapid adoption of DeepSeek V4 signals a strong market preference for high-performance, low-cost inference models, especially as agentic use cases reshape AI deployment.
91
FeaturedEnabling Two Settings Triples ARC-AGI-3 Benchmark Scores
启用两项设置使ARC-AGI-3基准测试分数提升三倍
This finding is crucial! It shows that model performance depends not only on training but also on inference-time configuration. For AI engineers and researchers, this is a must-know optimization direction. Teams deploying models on resource-constrained devices in particular could find a low-cost way to boost capabilities.
91
FeaturedGPT-5.6: Fusing Frontier Intelligence with Frontier Efficiency
GPT-5.6：前沿智能与前沿效率的融合
This news is worth watching as it marks a shift from pure parameter scaling to efficiency competition. For AI developers and business decision-makers, GPT-5.6 means higher performance at lower cost, especially for long-context or agentic tasks previously hindered by inference expenses. OpenAI's move may redefine what 'frontier' means.
91
FeaturedLFM2.5-Encoders: New Models for Fast Long-Context Inference on CPU
LFM2.5-Encoder：面向CPU快速长上下文推理的新模型
This blog post catches my eye because it directly solves the pain point of running long-context LLMs on CPU. For teams or individual developers without high-end GPUs, the LFM2.5-Encoder series offers a ready-to-use open-source solution. Highly recommended for those working on RAG, document search, or code analysis—now a standard server can handle million-token documents.
91
FeaturedGPT-Red: OpenAI Automates Red Teaming via Self-Play to Boost Model Robustness
GPT-Red：OpenAI通过自我对弈实现AI红队自动化，提升模型鲁棒性
GPT-Red marks a milestone from human to automated red-teaming—essential for safety engineers and alignment researchers. While reducing cost, it also raises ethical questions about automated attacks, worth pondering for everyone in AI governance.
91
FeaturedOpenAI Launches GPT-5.5 Bio Bug Bounty Program
OpenAI推出GPT-5.5生物漏洞赏金计划
This program deserves attention as it pioneers the extension of AI bug bounty to biosecurity, offering a new research direction for the security community and a practical training ground for AI risk governance. It is particularly important for model safety researchers, biosecurity experts, and practitioners concerned about dual-use AI risks.
91
FeaturedvLLM Introduces Native-Speed Transformers Modeling Backend for Enhanced Inference Performance
vLLM推出原生速度Transformers建模后端，大幅提升推理性能
This update is critical for AI engineering teams: eliminating format conversion speeds up model iteration, and 2-5x speedup directly reduces GPU costs. If you're building LLM online services or batch inference, this is practically a must-read technical update.
90
FeaturedGoogle DeepMind Introduces SL2T, a Sign Language-to-Text Model for Deaf Users
Google DeepMind 发布手语转文本模型 SL2T，助力聋人用户
This news matters not only as a technical breakthrough but also as a sign that AI is beginning to address the needs of marginalized groups. For developers, the architecture and technical approach of SL2T merit deep study; for accessibility advocates, it's a key case for advancing industry standards.