v2.1.145
securityagentsmodels
read at source ↗ github.com
v2.1.145
Source: Anthropic Claude Code Date: 2026-05-19 URL: https://github.com/anthropics/claude-code/releases/tag/v2.1.145
Summary
Claude Code v2.1.145 is a broad quality release shipping on 2026-05-19. Notable additions include claude agents --json for scripting live session lists, agent_id/parent_agent_id fields on OTEL spans with corrected trace parenting for subagent hierarchies, and richer plugin pre-install inspection. A security fix closes a permission-prompt bypass where bare environment-variable assignments in Bash commands were auto-approved without allowlist checks.
Implications
- Agent orchestration / lifecycle — The OTEL span improvements and
agents --jsonoutput signal maturing observability infrastructure around multi-agent sessions; tooling that consumes these traces (status bars, session pickers, monitoring dashboards) becomes more reliable. - Security posture — The env-var bypass fix is worth tracking: it indicates the permission model is still being hardened as agentic use-cases expose new attack surfaces.
- Plugin ecosystem — Pre-install command/agent/skill/hook visibility and the
claude plugin validatefix for directory vs. file entries suggest the plugin marketplace is tightening its developer contract ahead of broader adoption.