Security pass closes permission bypasses (hidden Bash commands, sandbox escapes); /code-review replaces /review, and /teleport bridges cloud sessions to local machines.
"owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org/teleport hint in cloud sessions showing how to continue locally with claude --teleport <session id>import() to run code outside the workflow sandboxbypassPermissions mode ignored the org bypass-permissions disable policy/cd coming back emptyvertex_ai/claude-* or bedrock/anthropic.claude-*modelOverrides keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documentedmanaged-settings.json or MDM profile; admin env now merges per keysandbox.filesystem.denyWrite covers the working directorygit push outputCLAUDE_CODE_DISABLE_1M_CONTEXT to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200KCLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1 to restore the previous behavior/review to be an alias of /code-review, which reviews the current diff or a PR (/code-review <level> <pr#>); use /code-review ultra for a deep cloud review/code-review with no effort level to reuse the level you typed last; type a level like /code-review high to change it