Claude Code v2.1.309

Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command. Fixed macOS sandbox denyWrite glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink. Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with --mcp-config. Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions. Fixed the Bash permission check trusting a variable set by a command whose redirect can fail to open. Fixed Bash permission checks not prompting for some compound commands that change directory before running git when the cd is wrapped or prefixed, as they do for a plain cd.

Published by Claude Code on GitHub. This page is a short excerpt; the full text is theirs.