Auto mode is now available without `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in on Bedrock, Vertex AI, and Foundry; disable via `disableAutoMode` in settings
ChangedBedrock, Vertex, and Claude Platform on AWS to default to Claude Opus 4.8
Changed auto mode to no longer read `autoMode` from `.claude/settings.local.json` (repo-resident); use `~/.claude/settings.json` instead
Plugin hooks/monitors/MCP headersHelper: `${user_config.*}` in shell-form commands is now rejected (shell-injection fix). Hooks: use exec form (`args` array) or `$CLAUDE_PLUGIN_OPTION_<KEY>`; monitors and headersHelper: read the value inside the script (config file or the server's `env` block).
Plugin option values (pluginConfigs) are no longer read from project-level `.claude/settings.json`; only user, `--settings`, and managed settings are honored
↑improved 2
Improvedagent view: pasting the same text again now expands the collapsed `[Pasted text #N]` placeholder instead of adding a second one
Improvedagent view: blocked session peeks now lead with the question and show a worded staleness clock (`waiting 3m`) instead of the same timestamp twice
✓fixed 17
Fixed the terminal freezing and keystrokes lagging while streaming responses containing very long lists, tables, paragraphs, or code blocks
Fixed remote managed settings from a non-interactive run (`claude -p`, the SDK) being permanently recorded as consented without ever showing the security consent dialog
Fixed spurious prompt-injection warnings triggered by benign system-generated conversation updates
Fixed the auto-updater overwriting a custom launcher script or symlink at `~/.local/bin/claude` on every release; `/doctor` now reports an externally managed launcher
Fixed compound commands with cd prompting for permission when the only output redirect was to `/dev/null`
Fixed the transcript jumping above the start of the answer when a response finishes streaming
Fixedextensions.worktreeConfig being left in the repo's `.git/config` (breaking go-git tools like `tea`) after the last `worktree.sparsePaths` worktree was removed
Fixed malformed bracket patterns in rules globs, skill paths, `.ignore`, and `.worktreeinclude` breaking file reads, file suggestions, and worktree creation
Fixed a crash loop in agent teams where a malformed teammate mailbox message caused repeated errors every second until the mailbox file was manually deleted
Fixed background sessions auto-named by accepting a plan not showing that name on their agent-view row
Fixed background sessions that entered a git worktree resuming blank after a cold reopen from the agent list
FixedRemote Control task status updates being lost when the connection recovered from a network interruption or credential refresh
FixedRemote Control sessions hosted by the desktop app not showing background agent and workflow progress on mobile and web
Fixed Deep research runs labeling every Fetch-phase agent "unknown" — chips now show the source hostname
Fixed Bedrock repeatedly requesting fresh AWS SSO credentials from IAM Identity Center on every API request
Fixed an indefinite hang on Windows when AWS credential resolution stalls (e.g. a stuck `credential_process`): the 60-second stall guard now fires instead of waiting forever.
Fixed/usage-credits amount inputs silently stripping malformed values (e.g. a pasted timestamp) to digits; malformed amounts are now rejected with an error, and amounts over $1,000 require a typed confirmation
