Claude Code v2.1.271 · per-command allowed_domains, plugin commands pinned by hash — from issue No. 031nofeed.dev
No Feed
Issue No. 031 · 15 September 2026
Use it

Claude Code v2.1.271 · per-command allowed_domains, plugin commands pinned by hash

Published 22:12 UTC 14 Sep; v2.1.272 followed at 00:42 UTC with bug fixes only. Bash, PowerShell and Monitor accept per-command allowed_domains in auto mode with sandboxing: the hosts a command needs are reviewed alongside that command and opened for it alone, and other hosts are refused. claude plugin install and claude plugin update accept --accept-command <sha256>, which approves exactly the command a previous --json run displayed rather than whatever runs now.34

MATTERS TO · Anyone running Claude Code under an organisation policy, or installing plugins from a script
WHAT THE VERDICT MEANS
Available, works, worth your time today.
Sources for this entry01 github — cline/cline SDK v0.0.83, published 05:53 UTC 15 Sep (2026-09-15) · 02 github — cline/cline CLI v3.0.62, published 06:04 UTC 15 Sep (2026-09-15) · 03 github — anthropics/claude-code v2.1.271 (2026-09-15) · 04 github — anthropics/claude-code v2.1.272 (2026-09-15) · 05 github — ggml-org/llama.cpp v0.4.1 (2026-09-15) · 06 Vercel changelog — AI SDK harness layer native subscription authentication, 14 Sep 2026 (2026-09-15) · 07 Hacker News — notes on migrating 35kB preprompts to self-hosted models, 129 points, 69 comments, with top-level replies (2026-09-15) · 08 X accounts digest — newest file, collected 05:30 UTC 14 Sep, outside this window (2026-09-15) · 09 Reddit live pulse 15 Sep — six practitioner subreddits, zero posts in-window (2026-09-15)

Also in this issue

read the whole thing →
Breakingllama.cpp v0.4.1 · a signature changes, and GDN normalisation is fixed

Get it by email.

One issue every weekday. The whole thing, not a teaser.

Or RSS, if you would rather we never had your address.