v2.1.113 Claude Code Release Notes

Apr 17, 2026

Claude's Analysisby Sonnet 4.6

CLI switches to a native per-platform binary (breaking), security tightens Bash auto-approvals, and 22 fixes cover sessions, Remote Control, subagents, and terminal input.

Changes

Total Changes (vs Average)

4.4×

Version Type

Patch

Release Focus

Bug Fixes

Day Since Prior Release

Release # This Month

#17 of 17

Bug Fix Ratio

58%

Post-Release Edits

—

Change Category

Ecosystem Impact

Plugins/Skills appeared in 7 of the last 10 releases, MCP in 6, and AWS Bedrock and Google Vertex each in 6 — indicating sustained cross-cutting attention to extensibility and cloud-provider layers throughout April.

Key Themes

1Architectural Shift: Native Binary|5Security Hardening|22Broad Stability Pass: 22 Fixes|10Input Polish & Remote Control

May Help If You've Noticed

Subagent tasks stall silently with no error, forcing you to manually kill the session

Added1 change

•Added sandbox.network.deniedDomains setting to block specific domains even when a broader allowedDomains wildcard would otherwise permit them

Improved2 changes

•Improved /loop: pressing Esc now cancels pending wakeups, and wakeups display as "Claude resuming /loop wakeup" for clarity
•Improved /ultrareview: faster launch with parallelized checks, diffstat in the launch dialog, and animated launching state

Fixed22 changes

•Fixed MCP concurrent-call timeout handling where a message for one tool call could silently disarm another call's watchdog
•Fixed Cmd-backspace / Ctrl+U to once again delete from the cursor to the start of the line
•Fixed markdown tables breaking when a cell contains an inline code span with a pipe character
•Fixed session recap auto-firing while composing unsent text in the prompt
•Fixed /copy "Full response" not aligning markdown table columns for pasting into GitHub, Notion, or Slack
•Fixed messages typed while viewing a running subagent being hidden from its transcript and misattributed to the parent AI
•Fixed Bash dangerouslyDisableSandbox running commands outside the sandbox without a permission prompt
•Fixed /effort auto confirmation — now says "Effort level set to max" to match the status bar label
•Fixed the "copied N chars" toast overcounting emoji and other multi-code-unit characters
•Fixed /insights crashing with EBUSY on Windows
•Fixed exit confirmation dialog mislabeling one-shot scheduled tasks as recurring — now shows a countdown
•Fixed slash/@ completion menu not sitting flush against the prompt border in fullscreen mode
•Fixed CLAUDE_CODE_EXTRA_BODY output_config.effort causing 400 errors on subagent calls to models that don't support effort and on Vertex AI
•Fixed prompt cursor disappearing when NO_COLOR is set
•Fixed ToolSearch ranking so pasted MCP tool names surface the actual tool instead of description-matching siblings
•Fixed compacting a resumed long-context session failing with "Extra usage is required for long context requests"
•Fixed plugin install succeeding when a dependency version conflicts with an already-installed plugin — now reports range-conflict
•Fixed "Refine with Ultraplan" not showing the remote session URL in the transcript
•Fixed SDK image content blocks that fail to process crashing the session — now degrade to a text placeholder
•Fixed Remote Control sessions not streaming subagent transcripts
•Fixed Remote Control sessions not being archived when Claude Code exits
•Fixed thinking.type.enabled is not supported 400 error when using Opus 4.7 via a Bedrock Application Inference Profile ARN

Changed1 change

•Changed the CLI to spawn a native Claude Code binary (via a per-platform optional dependency) instead of bundled JavaScript

Removed2 changes

•Running cd <current-directory> && git … no longer triggers a permission prompt when the cd is a no-op
•Security: Bash(find:*) allow rules no longer auto-approve find -exec/-delete

Other10 changes

•Fullscreen mode: Shift+↑/↓ now scrolls the viewport when extending a selection past the visible edge
•Ctrl+A and Ctrl+E now move to the start/end of the current logical line in multiline input, matching readline behavior
•Windows: Ctrl+Backspace now deletes the previous word
•Long URLs in responses and bash output stay clickable when they wrap across lines (in terminals with OSC 8 hyperlinks)
•/extra-usage now works from Remote Control (mobile/web) clients
•Remote Control clients can now query @-file autocomplete suggestions
•Subagents that stall mid-stream now fail with a clear error after 10 minutes instead of hanging silently
•Bash tool: multi-line commands whose first line is a comment now show the full command in the transcript, closing a UI-spoofing vector
•Security: on macOS, /private/{etc,var,tmp,home} paths are now treated as dangerous removal targets under Bash(rm:*) allow rules
•Security: Bash deny rules now match commands wrapped in env/sudo/watch/ionice/setsid and similar exec wrappers

Fixed22 changes

•Fixed MCP concurrent-call timeout handling where a message for one tool call could silently disarm another call's watchdog

•Fixed Cmd-backspace / Ctrl+U to once again delete from the cursor to the start of the line

•Fixed markdown tables breaking when a cell contains an inline code span with a pipe character

•Fixed session recap auto-firing while composing unsent text in the prompt

•Fixed /copy "Full response" not aligning markdown table columns for pasting into GitHub, Notion, or Slack

•Fixed messages typed while viewing a running subagent being hidden from its transcript and misattributed to the parent AI

•Fixed Bash dangerouslyDisableSandbox running commands outside the sandbox without a permission prompt

•Fixed /effort auto confirmation — now says "Effort level set to max" to match the status bar label

•Fixed the "copied N chars" toast overcounting emoji and other multi-code-unit characters

•Fixed /insights crashing with EBUSY on Windows

•Fixed exit confirmation dialog mislabeling one-shot scheduled tasks as recurring — now shows a countdown

•Fixed slash/@ completion menu not sitting flush against the prompt border in fullscreen mode

•Fixed CLAUDE_CODE_EXTRA_BODY output_config.effort causing 400 errors on subagent calls to models that don't support effort and on Vertex AI

•Fixed prompt cursor disappearing when NO_COLOR is set

•Fixed ToolSearch ranking so pasted MCP tool names surface the actual tool instead of description-matching siblings

•Fixed compacting a resumed long-context session failing with "Extra usage is required for long context requests"

•Fixed plugin install succeeding when a dependency version conflicts with an already-installed plugin — now reports range-conflict

•Fixed "Refine with Ultraplan" not showing the remote session URL in the transcript

•Fixed SDK image content blocks that fail to process crashing the session — now degrade to a text placeholder

•Fixed Remote Control sessions not streaming subagent transcripts

•Fixed Remote Control sessions not being archived when Claude Code exits

•Fixed thinking.type.enabled is not supported 400 error when using Opus 4.7 via a Bedrock Application Inference Profile ARN

Other10 changes

•Fullscreen mode: Shift+↑/↓ now scrolls the viewport when extending a selection past the visible edge

•Ctrl+A and Ctrl+E now move to the start/end of the current logical line in multiline input, matching readline behavior

•Windows: Ctrl+Backspace now deletes the previous word

•Long URLs in responses and bash output stay clickable when they wrap across lines (in terminals with OSC 8 hyperlinks)

•/extra-usage now works from Remote Control (mobile/web) clients

•Remote Control clients can now query @-file autocomplete suggestions

•Subagents that stall mid-stream now fail with a clear error after 10 minutes instead of hanging silently

•Bash tool: multi-line commands whose first line is a comment now show the full command in the transcript, closing a UI-spoofing vector

•Security: on macOS, /private/{etc,var,tmp,home} paths are now treated as dangerous removal targets under Bash(rm:*) allow rules

•Security: Bash deny rules now match commands wrapped in env/sudo/watch/ionice/setsid and similar exec wrappers

v2.1.113 Claude Code Release Notes

Changes in Claude Code v2.1.113

Added1 change

Improved2 changes

Fixed22 changes

Changed1 change

Removed2 changes

Other10 changes

v2.1.113 Claude Code Release Notes

Changes in Claude Code v2.1.113

Added1 change

Improved2 changes

Fixed22 changes

Changed1 change

Removed2 changes

Other10 changes