Stability pass led by a fix for requests failing on Vertex, Bedrock and gateways rejecting tool search, plus Cloud Sessions, Claude Tag and runner fixes and a smarter /usage.
sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces (Chromium, rootless podman); this lets them get around the sandbox's file protectionsCLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS so unattended retry mode (CLAUDE_CODE_RETRY_WATCHDOG) notices a usage limit that was lifted before its reset/usage: each warning is now a one-line fix that names its source, and f applies the fixes; the same fixes appear in VS Code and /doctorImage to draw its picture in iTerm2 3.5 and later with fullscreen rendering, where it showed only its alt textw now says the new mode is saved for the folder, and a later claude remote-control start that uses the saved mode says where it came from--tools (a 2.1.304 regression): Claude Code now retries without it/effort and /autocompact settings not applying when the model name differed from a modelOverrides value by letter case or a [1m] tagENOSPC file path: the error now says the disk is full and that nothing ransetMcpServers being replaced later in the session by a same-named server from your own settingspipeline() and parallel() agents instead of serving them from the run's journal/resume after switching conversations with /resume/usage rows being cut off in narrow terminalsResource temporarily unavailable when TERM is set (a 2.1.300 regression)GIT_CONFIGspinnerVerbs setting replaces the built-in verbs with short onesallowedMcpServers to stop filtering managed-mcp.json stdio servers that use ${VAR} only in env: one your allowlist left out now loads on upgrade; use deniedMcpServers to keep it offallowed-tools when your organization's managed settings set allowManagedPermissionRulesOnly/artifacts delete confirmation to take 1 or Enter to keep, 2 to delete, and Esc to cancel; y and n no longer answer it