v2.1.214

Source: Anthropic Claude Code Date: 2026-07-18 URL: https://github.com/anthropics/claude-code/releases/tag/v2.1.214

Summary

v2.1.214 is a security-and-reliability patch release: it closes several permission-check bypasses (nested dir/** allow-rule scope, Windows PowerShell 5.1 checks, Bash file-descriptor redirects, oversized commands, zsh subscript parsing) and adds an EndConversation tool for abusive/jailbreak sessions, plus fixes across background sessions, OpenTelemetry attribution, and Windows PowerShell tooling.

Implications

• Dev tooling consolidation thread: another release in the steady weekly-ish Claude Code cadence, this one leaning hard into permission-model hardening rather than features — several of the fixed bugs were genuine auto-approval bypasses (agents running Bash/Docker/help commands they shouldn’t have been able to).
• Security/hardening thread: worth flagging for the loop’s own tooling posture — the dir/** scope bug and Bash redirect-parsing bypass are exactly the class of issue that matters for any agent running with broad file/Bash permissions.