CATCH #2254
DETECTED OCT 22, 2026 23:19 UTC
THE CATCHscore 5/10
EXHIBIT 2254
Oct 22, 2026 23:19 UTC
github_releases+pages
https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md
Claude Code (v2.1.309) receives numerous bug fixes, especially around sandboxing, shell commands, and git integrations.
READY TO POST:
looks like claude code got a big bug fix release (v2.1.309)! lots of fixes around sandboxing and shell command execution.
claude code update (v2.1.309) seems to address several git-related and session management issues. good to see those stability bumps.
EVIDENCE — the receipts
[MERGED across 2 sources: github_releases, pages]
shared signal: claude-api, claude-code
--- github_releases :: anthropics/claude-code ---
anthropics/claude-code release: v2.1.309
name: v2.1.309
published: 2026-10-22T22:18:57Z
url: https://github.com/anthropics/claude-code/releases/tag/v2.1.309
## What's changed
- Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command
- Fixed macOS sandbox `denyWrite` glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink
- Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with `--mcp-config`
- Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions
- Fixed the Bash permission check trusting a variable set by a command whose redirect can fail to open
- Fixed Bash permission checks not prompting for some compound commands that change directory before running git when the `cd` is wrapped or prefixed, as they do for a plain `cd`
- Fixed an `Edit(path)` deny rule not blocking a Bash redirect to that path in some commands that also held a subshell
- Fixed worktree-isolated sessions accepting some locale-prefixed commands the isolation guard should refuse
- Fixed worktree-isolated sessions on zsh accepting some arithmetic commands that the isolation guard should refuse
- Fixed worktrees and branch checkouts that Claude Code creates so they ignore git replace refs, as its other git operations already do
- Fixed profile store write protection not applying when the config directory is reached through a symlink
- Fixed sessions compacting repeatedly after reading files under a very large nested CLAUDE.md; a nested CLAUDE.md over the size limit now loads only its start
- Fixed ctrl+enter (send now) only queuing a message when pressed before the response had started, and restarting a prompt's hooks while leaving the message queued w
caught by the 20-minute sweep ·
the live wire · all receipts