v2.1.229

Source: Anthropic Claude Code Date: 2026-08-12 URL: https://github.com/anthropics/claude-code/releases/tag/v2.1.229

Summary

Claude Code v2.1.229 is a maintenance release: Remote Control session-resume documentation, SSE keepalive pings for Vertex/Bedrock gateway streaming, VSCode session groups and resizable side panels, plus a long tail of crash and streaming-duplication fixes. Two entries carry more weight than the rest — /commit-push-pr no longer auto-approves dangerous git flags (--force, --amend, --no-verify), and Windows self-hosted runners now require an explicit --base-dir with no default checkout directory.

Implications

Both security-relevant changes are small, concrete instances of the agent-execution hardening thread this landscape has been tracking since early August: the tool narrows its own default authority rather than adding an opt-in guard. /commit-push-pr refusing to auto-approve --force/--no-verify is the same shape as hk’s --safe blast-radius classification and Gemini CLI’s sandbox-escape guards from the same week — an agent tool declining to take a destructive or ambiguous-effect action by default. The runner --base-dir requirement is narrower (no silent default checkout path to write into) but the same instinct. Neither is a headline move on its own; together with the rest of that week’s releases it’s another data point that fail-closed defaults are becoming routine maintenance-release material, not a special hardening push.