AddedmanagedMcpServers managed setting: organizations can provide HTTP/SSE MCP servers to every user (same entry shape as `.mcp.json`); entries that name a command to run are skipped
Added--permission-prompts none for unattended headless hosts: anything that would prompt is denied automatically while the active permission mode (including auto mode) keeps deciding
Added recognition of glab mr create/merge/close/reopen/note/update so GitLab merge requests show as `MR !N` in the collapsed tool summary and refresh the footer MR badge
Added--json to `claude plugin validate` for a machine-readable validation report
VSCodeAdded an Active quick filter and a status filter menu (Needs input, Working, Completed) to the session list sidebar
~changed 1
ChangedallowedMcpServers to govern only servers users add: a literal `managed-mcp.json` server your allowlist used to filter out now loads on upgrade; use `deniedMcpServers` to keep it off
↑improved 5
Improved terminal resize and first-render performance for long responses by reusing text measurements
Improved/workflows agent detail: JSON outcomes are pretty-printed with syntax colors and real line breaks, and long outcomes fold behind an expand toggle
Improved headless/SDK session start: the first turn begins up to 50 ms sooner when MCP servers finish connecting
Improved/install-github-app to explain it is GitHub-only and point to the GitLab CI/CD docs when run inside a GitLab repository
Improved nested background subagent results to be saved in the parent subagent's transcript, so resumed subagents keep them and shared transcripts show the delivery
✓fixed 26
Fixed concurrent sessions silently reverting each other's `~/.claude.json` changes — workspace trust no longer resets and MCP/project state is no longer lost when running many sessions at once
Fixed a conversation whose thinking was rejected once being rejected again on every later turn
Fixed Bash Read() deny rules not covering files given as option values (`--ignore-revs-file=.env`, `-f.env`, `@file`), `git diff`/`git grep` file operands, or `cd DIR && cat FILE` compounds; `grep -r`/`cp -r` over a directory holding a denied file now asks
Fixed the prompt cache being invalidated when the OAuth token refreshed in sessions with telemetry disabled
Fixed fullscreen mode showing a blank conversation after a long turn with hundreds of tool calls
Fixed auto mode running a turn on a model it doesn't support when a command or skill's frontmatter `model:` named one; the turn now keeps the session model
FixedCLAUDE_CODE_MAX_CONTEXT_TOKENS being ignored for Vertex-style model IDs (`@YYYYMMDD` suffix) of model versions Claude Code doesn't recognize
Fixed the live output preview of a running shell command hiding its newest lines when an earlier line wrapped
Fixed a background GitHub connection check that ran on every launch for claude.ai users; the result is now remembered across launches
Fixed--resume failing (and `--continue` opening an empty conversation) when a saved session contains an attachment entry with no payload
Fixed frontmatter model: on custom commands and skills being ignored in interactive sessions
Fixed Artifact publishing failing once with an "unexpected parameter `note`" error in conversations continued from an older version
Fixed managed forceRemoteSettingsRefresh being ignored at startup when a policy helper configured by MDM or the managed settings file had already run
Fixed worktree isolation refusing hook-created worktrees on machines where `git rev-parse` fails with a message other than "not a git repository"
Fixed OpenTelemetry metrics and events from cloud sessions missing the `user.email`, `organization.id`, and `user.account_uuid` attributes
Fixed MCP servers that disconnect while their tools are being listed at startup showing as connected with no tools instead of reporting the error
Fixed the file edit permission dialog sometimes showing a changed line cut short with no indication
Fixed repository detection dropping a known repo identity after a transient git probe failure
Fixed managed settings silently going unenforced when the managed-settings file, a drop-in, the MDM plist, or the HKLM value cannot be parsed: Claude Code now refuses to start and names the source
Fixed Stop not actually stopping background agents and workflows in remote-control sessions: killed tasks now stay visible and re-stoppable until their processes exit
Fixed resuming a workflow run while its previous stopped run was still exiting, which could run duplicate copies of its agents
Fixed marketplace repo URLs on github.com with a trailing slash or dangling `?`/`#` producing an unusable `.git` clone URL
Fixed blocking Stop hooks causing the turn after a block to lose the model's reasoning from that turn and, on some models, miss the prompt cache
Fixed remote (claude.ai) sessions taking 60 seconds to start a turn after a browser-hosted MCP server's page had gone away
Fixed worktree-isolated sessions refusing common Bash loops, xargs pipelines and launcher-wrapped commands that cannot reach the main checkout
Fixed remote and scheduled sessions doing nothing after a connector-tool permission prompt was approved while the session was paused
