Claude Code 2.1.221 → 2.1.222 — from issue No. 002nofeed.dev
No Feed
Issue No. 002 · 5 August 2026
Use it

Claude Code 2.1.221 → 2.1.222

Two stable releases in one day. 2.1.221 adds VS Code Focus view (tool noise collapsed behind a per-turn summary), sandbox credential mode: "mask" on Linux/WSL, and closes Bash/PowerShell permission bypasses.2 2.1.222 closes the one that matters for multi-agent work: worktree-isolated sessions and their subagents could still run destructive git against the main checkout — isolation now covers file edits and Bash in every session type.3

MATTERS TO · anyone running Claude Code with worktrees, subagents, or auto-mode on a shared repo
WHAT THE VERDICT MEANS
Available, works, worth your time today.
Deeper — other fixes worth the upgrade
  • PreToolUse auto-allow hooks no longer bypass tool restrictions inside background agent tasks (summaries, compaction, renames).
  • SendMessage between agent sessions is now classified before dispatch in auto mode.
  • Remote Control can no longer be turned on from repo-local settings — only user-scope /config enables it; local settings can still turn it off.
  • Ultraplan was removed in 2.1.222. If a workflow depended on it, it is gone.
Sources for this entry01 aisi.gov.uk — incident report, 4 Aug 2026 (2026-08-05) · 02 github.com/anthropics/claude-code — v2.1.221 (2026-08-05) · 03 github.com/anthropics/claude-code — v2.1.222 (2026-08-05) · 04 kiro.dev — Introducing Kiro Crew (2026-08-05) · 05 alibabacloud.com — Qwen3.8-Max launch, 3 Aug (2026-08-05) · 06 theregister.com — AISI coverage, 5 Aug (2026-08-05) · 07 docs.claude.com — model deprecations (2026-08-05) · 08 infoworld.com — Kiro Crew, Mesaros on Kiro CLI (2026-08-05)

Also in this issue

read the whole thing →
WaitKiro Crew — open-source agent workspace

Get it by email.

One issue every weekday. The whole thing, not a teaser.

Or RSS, if you would rather we never had your address.