2026-05-19 · Anthropic

v2.1.145

securityagentsmodels

read at source ↗ github.com

v2.1.145

Source: Anthropic Claude Code Date: 2026-05-19 URL: https://github.com/anthropics/claude-code/releases/tag/v2.1.145

Summary

Claude Code v2.1.145 is a broad quality release shipping on 2026-05-19. Notable additions include claude agents --json for scripting live session lists, agent_id/parent_agent_id fields on OTEL spans with corrected trace parenting for subagent hierarchies, and richer plugin pre-install inspection. A security fix closes a permission-prompt bypass where bare environment-variable assignments in Bash commands were auto-approved without allowlist checks.

Implications

  • Agent orchestration / lifecycle — The OTEL span improvements and agents --json output signal maturing observability infrastructure around multi-agent sessions; tooling that consumes these traces (status bars, session pickers, monitoring dashboards) becomes more reliable.
  • Security posture — The env-var bypass fix is worth tracking: it indicates the permission model is still being hardened as agentic use-cases expose new attack surfaces.
  • Plugin ecosystem — Pre-install command/agent/skill/hook visibility and the claude plugin validate fix for directory vs. file entries suggest the plugin marketplace is tightening its developer contract ahead of broader adoption.

← all signals