Skip to content
VibekollenBETAVibekollen
ReleaseClaude Code

v2.1.309

Article image or reusable cover for Claude Code

What's changed Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command Fixed macOS sandbox denyWrite glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with --mcp-config Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions Fixed the Bash permission check trusting a variable set by a command whose redirect can fail to open Fixed Bash permission checks not prompting for some compound commands that change directory before running git when the cd is wrapped or prefixed, as they do for a plain cd Fixed an Edit(path) deny rule not blocking a Bash redirect to that path in some commands that also held a subshell Fixed worktree-isolated sessions accepting some locale-prefixed commands the isolation guard should refuse Fixed worktree-isolated sessions on zsh accepting some arithmetic commands that the isolation guard should refuse Fixed worktrees and branch checkouts that Claude Code creates so they ignore git replace refs, as…

Read the full story at Claude Code →

The text is the source's own description of its publication. The content belongs to Claude Code.

More to read