# Claude Code v2.1.223 - Product: Claude Code (https://whatsnew.fyi/product/claude-code) - Vendor: Anthropic - Date: 2026-08-06 - Version: v2.1.223 - Original notes: https://github.com/anthropics/claude-code/releases/tag/v2.1.223 - Permalink: https://whatsnew.fyi/product/claude-code/releases/v2.1.223 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **added** — Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org - **added** — Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead - **added** — Added a /teleport hint in cloud sessions showing how to continue locally with claude --teleport - **fixed** — Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks - **fixed** — Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog - **fixed** — Fixed workflow scripts being able to use dynamic import() to run code outside the workflow sandbox - **fixed** — Fixed a permission gap where an agent definition's bypassPermissions mode ignored the org bypass-permissions disable policy - **fixed** — Fixed resuming a session after a mid-session /cd coming back empty - **fixed** — Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as vertex_ai/claude-* or bedrock/anthropic.claude-* - **fixed** — Fixed modelOverrides keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented - **fixed** — Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local managed-settings.json or MDM profile; admin env now merges per key - **fixed** — Fixed sandboxed commands failing to start on Linux when sandbox.filesystem.denyWrite covers the working directory - **fixed** — Fixed forked background agents getting stuck "already resuming" for the rest of the session when rebuilding the fork's parent prompt failed during resume - **fixed** — Fixed a resumed session failing every turn, or leaving the interactive app on an unresponsive error screen, when its history held a malformed diagnostics attachment - **fixed** — Fixed a rare hang when parsing unusual git push output - **changed** — Changed CLAUDE_CODE_DISABLE_1M_CONTEXT to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200K - **changed** — Changed auto-compact to keep sessions on unrecognized model IDs within the assumed context window instead of letting them grow past it; set CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1 to restore the previous behavior - **changed** — Changed /review to be an alias of /code-review, which reviews the current diff or a PR (/code-review ); use /code-review ultra for a deep cloud review - **changed** — Changed /code-review with no effort level to reuse the level you typed last; type a level like /code-review high to change it ##### What's changed - Added owner wildcard entries (`"owner/*"`) to the `strictKnownMarketplaces` and `blockedMarketplaces` managed settings for allowing or blocking all marketplace repos under a GitHub org - Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead - Added a `/teleport` hint in cloud sessions showing how to continue locally with `claude --teleport ` - Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks - Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog - Fixed workflow scripts being able to use dynamic `import()` to run code outside the workflow sandbox - Fixed a permission gap where an agent definition's `bypassPermissions` mode ignored the org bypass-permissions disable policy - Fixed resuming a session after a mid-session `/cd` coming back empty - Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as `vertex_ai/claude-*` or `bedrock/anthropic.claude-*` - Fixed `modelOverrides` keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented - Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local `managed-settings.json` or MDM profile; admin env now merges per key - Fixed sandboxed commands failing to start on Linux when `sandbox.filesystem.denyWrite` covers the working directory - Fixed forked background agents getting stuck "already resuming" for the rest of the session when rebuilding the fork's parent prompt failed during resume - Fixed a resumed session failing every turn, or leaving the interactive app on an unresponsive error screen, when its history held a malformed diagnostics attachment - Fixed a rare hang when parsing unusual `git push` output - Changed `CLAUDE_CODE_DISABLE_1M_CONTEXT` to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200K - Changed auto-compact to keep sessions on unrecognized model IDs within the assumed context window instead of letting them grow past it; set `CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1` to restore the previous behavior - Changed `/review` to be an alias of `/code-review`, which reviews the current diff or a PR (`/code-review `); use `/code-review ultra` for a deep cloud review - Changed `/code-review` with no effort level to reuse the level you typed last; type a level like `/code-review high` to change it