[dependabot]

Bumps @anthropic-ai/claude-code from 2.1.259 to 2.1.310.

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.310

What's changed

• Added the Monitor tool and plugin monitors on Bedrock, Vertex, and Foundry, and when telemetry or nonessential traffic is disabled; long foreground sleeps are now blocked there too
• Fixed requests failing behind some gateways and compatible servers that reject the effort-2025-11-24 beta value or mid-conversation system messages; Claude Code now retries without them
• Fixed background cleanup deleting some recent files, such as pasted images, when cleanupPeriodDays is set to a very large value
• Fixed compaction after a "Prompt is too long" error keeping too much of a conversation with dense text, such as base64 or SVG, so the next request could fail again
• Fixed file read permission prompts not showing where a symbolic link leads
• Fixed a question's auto-continue timeout firing the moment the external editor closed after a long edit
• Windows: Fixed PreToolUse and PermissionRequest hooks letting a tool call through when Git Bash is missing and the hook's command is only quoted strings, such as a quoted path
• Improved auto mode's prompt before the first read outside the working directories: it now says when blocking those reads makes shell commands ask for permission
• Improved memory use of non-interactive sessions (-p, Agent SDK) during compaction when the transcript file is very large
• Improved a mod's Image to draw inside tmux with allow-passthrough and focus-events on, in kitty, Ghostty, and iTerm2 3.5+ with fullscreen rendering, where it showed only its alt text
• Linux: Improved /sandbox and the sandbox startup warning to name Ubuntu's AppArmor restriction on user namespaces, and how to lift it, when it keeps bubblewrap from starting the sandbox
• Changed the error for an MCP tool call that times out in a non-interactive session while the server's elicitation is unanswered: it now tells Claude that no answer came and not to repeat the call
• [VSCode] Fixed pressing Enter on the plan review card's "Send feedback and keep planning" button approving the plan instead of sending your comments back
• [VSCode] Fixed the panel showing "Something went wrong" after "Switch branch & continue" on a cloud session opened from Session history's Web tab
• [Cloud sessions] Added Claude Code cloud sessions and Remote Control permissions to Enterprise custom roles, so Owners can control access to each by role
• [Cloud sessions] Added a Choose file button to load a cloud environment's setup script from a file
• [Cloud sessions] Fixed failed saves and archives in the cloud environment edit dialog showing no error inside the dialog
• [Cloud sessions] Fixed failed routine API token actions showing only a toast; the error now appears in the routine edit dialog
• [Cloud sessions] Improved the session start checklist to show a cloud environment's setup script output in a scrolling box
• [Cloud sessions] Changed turning on Cloud sessions or Remote Control in admin settings to ask for confirmation and list the custom roles that have that permission
• [Cloud sessions] Changed the cloud environment dialog to open network access, setup script and environment variables from rows instead of listing every editor at once
• [Claude Tag] Fixed Claude Tag treating ! commands such as !restart and !help as ordinary messages when sent in bold, italic or strikethrough
• [Claude Tag] Fixed Claude Tag admin channel and workspace pages being replaced by a load error when a background refresh of the bundle list fails
• [Claude Tag] Fixed Claude Tag's spend limits page in admin settings reporting that no channels match a filter while channel names are still loading
• [Code Review] Fixed the Code Review admin section hiding its repositories and switches after a failed refresh of the repository list
• [Code Review] Improved the Code Review admin section to retry the first load and show one Try again banner when it still fails

v2.1.309

What's changed

• Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command
• Fixed macOS sandbox denyWrite glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink
• Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with --mcp-config
• Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions
• Fixed the Bash permission check trusting a variable set by a command whose redirect can fail to open
• Fixed Bash permission checks not prompting for some compound commands that change directory before running git when the cd is wrapped or prefixed, as they do for a plain cd
• Fixed an Edit(path) deny rule not blocking a Bash redirect to that path in some commands that also held a subshell
• Fixed worktree-isolated sessions accepting some locale-prefixed commands the isolation guard should refuse
• Fixed worktree-isolated sessions on zsh accepting some arithmetic commands that the isolation guard should refuse
• Fixed worktrees and branch checkouts that Claude Code creates so they ignore git replace refs, as its other git operations already do
• Fixed profile store write protection not applying when the config directory is reached through a symlink
• Fixed sessions compacting repeatedly after reading files under a very large nested CLAUDE.md; a nested CLAUDE.md over the size limit now loads only its start
• Fixed ctrl+enter (send now) only queuing a message when pressed before the response had started, and restarting a prompt's hooks while leaving the message queued when pressed while those hooks were running
• Fixed key-bound slash commands running in the shell from ! mode
• Fixed ctrl+o not showing messages from other agents and sessions that are still waiting to be delivered; they now appear in full under the transcript, marked as waiting
• Fixed long tool output previews being cut through an emoji, leaving session transcripts that jq could not parse
• Fixed Read reporting "File does not exist" for PDF page ranges in Linux sandboxes that share the parent's /proc

... (truncated)

Commits

• b70dc41 chore: Update CHANGELOG.md and feed.xml
• 30fa83c chore: Update mods/
• 65823ec chore: Update CHANGELOG.md and feed.xml
• 5ed799e chore: Update CHANGELOG.md and feed.xml
• 1132b8a chore: Update CHANGELOG.md and feed.xml
• d014fc0 chore: Update CHANGELOG.md and feed.xml
• 49b8c35 chore: Update CHANGELOG.md and feed.xml
• 5a2676e chore: Update mods/
• a6e289a chore: Update mods/
• 772c6be chore: Update CHANGELOG.md and feed.xml
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/claude-code since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Nothing blocking. This is a mechanical devDependency bump of @anthropic-ai/claude-code (2.1.259 → 2.1.310), touching only package.json and package-lock.json, with consistent versions and integrity hashes across every package entry. No prompts, workflows, or application code are touched.

This bump is correctly isolated from the anthropics/claude-code-action upstream pin per .github/dependabot.yml's own npm-ecosystem grouping [policy], and the commit type build(deps-dev) maps to a patch release under CLAUDE.md's versioning rules, which is right here since there's no behavioural/prompt change [policy].

Title and description are Dependabot's own standard, complete content (what changed, release notes, compare link), so no update was needed there.

[github-actions]

🗜️ Headroom context compression

Metric	Value
Requests proxied	11
Tokens saved	39814
Aggregate savings	4.1% of all tokens sent
Average per-request compression	5.3%

[dependabot]

Superseded by #164.