Huge stability pass: 61 fixes across CLI, VS Code, MCP, and cloud sessions — closes a safety gap for dangerous rm, fixes LSP hangs, broken --resume, and duplicate MCP calls.
rm command ran in a script without asking for confirmation$.ui.selection() for mods: returns the text you last selected in fullscreen mode and, when the selection lies within one transcript row, that rowgh api to cloud sessions whose image has no GitHub CLI, and fixed the built-in sending control characters from file names, jq filters or GitHub errors to the terminal--max-findings <n>|all to /code-review to report more or fewer findings than the usual limit; the choice is reused until you pass --max-findings default/usage-credits message shown to Team and Enterprise members whose organization has turned off usage credit requestsalwaysLoad: false--resume sometimes dropping files and other context that a compaction had just restored--resume showed the prompt unansweredCLAUDE_CODE_DISABLE_STRUCTURED_OUTPUTS to turn structured outputs offsonnet subagentCode element held a diff that does not parse; it now draws as plain code${user_config.*} and ${CLAUDE_PLUGIN_ROOT} placeholders in initializationOptions and settings instead of substituted values or manifest defaultstool.call hook making Bash fail and file searches read the wrong folder in subagents that run in a worktreegit-subdir plugin installs failing, or caching an incomplete plugin, on older git (before 2.39, e.g. Ubuntu 22.04's 2.34)--plugin-dir not showing "Configure options" in /pluginpython3 <<EOF) asking for approval on every run under sandbox auto-allow when the body holds only plain text and simple $VAR referencesBASHPID assignment whose value the shell would evaluate as arithmetic, instead of allowing it silentlyclaude_code.tool.blocked_on_user spans reporting unknown source or decision in -p and SDK sessions and for PreToolUse hook approvals-p or on an interrupted turn, emitting no tool_decision event/compact even though its history was still savedCLAUDE_CODE_RETRY_WATCHDOG) retrying for hours after a very long response stream failed; Claude Code now streams again, and gives up after three timeouts/login reporting "Login successful" when credentials could not be saved to secure storage; it now shows the failure, and offers a retry when the new login didn't take effect (anthropics/claude-code#73861)gcpAuthRefresh/awsAuthRefresh browser sign-in opening when a laptop wakes from sleep while another Claude Code process is signing in-p / SDK) sessions occasionally ignoring SIGTERM when a supervisor such as timeout or systemd sends SIGCONT alongside itmemorydisableAutoMode or an older model); typing, navigation and JavaScript still askclaude plugin install failing for GitHub-source plugins on macOS and Linux machines with no GitHub SSH key: the clone now falls back to HTTPS and prints a noticesandbox.credentials.files entries on git config files not taking effect while permissions.blockReadsOutsideWorkingDirectories is on/tui)tools: lists very many Agent(...) entriesclaude stub was installedowner/repo plugin marketplaces showing only the second attempt's error when both the SSH and HTTPS fetch fail; both errors are now shown, with the transport tried first on top.claude/rules and nested CLAUDE.md files not loading when Write or Edit creates or changes a file in their scope (previously only Read loaded them)rm (such as one on / or the home directory) inside a bash -c or sh -c script running without a prompt in bypassPermissions mode or under a shell allow rule (anthropics/claude-code#96300)requestTimeout)idle_prompt notification hooks firing while background agents are still running (anthropics/claude-code#93672)/login in a --bare session running a sign-in the session never reads, which could replace your saved login; it now says which credentials workclaude mcp serve always reporting no available agents and rejecting every subagent_type/theme's custom color search/permissions in screen reader mode: typing a rule's number now picks it instead of opening the search boxclaude plugin test reporting mods as turned off remotely when it had only read an out-of-date saved setting-p, Agent SDK, CI, cloud); terminal, desktop app and VS Code sessions have no limitANTHROPIC_DEFAULT_SONNET_MODEL pin that names Claude Sonnet 5.5 or Opus 5.5 and use Claude Sonnet 5 insteadclaude project purge to claude purge; the old name still works and prints a noticen: filter (and Ctrl+F search) so Enter opens the session whose name matches best instead of the top row/autocompact to save the auto-compact window per model, so each model keeps its own setting when you switchgh api: a refused gh command now prints its gh api equivalent, --paginate follows every page of a repository's lists, and a nested claude no longer removes it