build(deps-dev): bump @anthropic-ai/claude-code from 2.1.268 to 2.1.272 in the npm-minor-patch group across 1 directory

[dependabot]

Bumps the npm-minor-patch group with 1 update in the / directory: @anthropic-ai/claude-code.

Updates @anthropic-ai/claude-code from 2.1.268 to 2.1.272

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.272

What's changed

• Bug fixes and reliability improvements

v2.1.271

What's changed

• Added fast mode in Claude Code Remote sessions (cloud and self-hosted runners): the host's fast-mode setting or /fast typed in the session applies where your organization allows it
• Added mouse support to the /config panel in fullscreen mode: the wheel scrolls the settings list, a click on a setting's value changes it, and the row under the pointer is highlighted
• Added claude self-hosted-runner --drain-marker-file <path>: when that file exists at a SIGTERM drain, the runner reports its exit to the server as a host drain (telemetry only)
• Added per-command allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing: the hosts a command needs are reviewed with it and opened for it alone; other hosts are refused
• Added omitClaudeMd to agent frontmatter and --agents JSON, letting custom and plugin subagents run without user, project and local CLAUDE.md files; managed policy files still load
• Added --accept-command <sha256> to claude plugin install and claude plugin update to accept exactly the command a previous --json run displayed, instead of -y
• Added support for a multiplier above 1, up to 10, in the modelPricing managed setting and the Claude apps gateway pricing block, for marked-up internal chargeback rates
• Added a spinner tip pointing Bedrock, Vertex AI, Foundry and LLM gateway users to the Claude desktop app; the claude.ai desktop app tip now suggests /desktop, which offers to download the app
• Fixed a cached organization policy being reused after switching accounts, organizations, or API keys, and the policy not refreshing until the hourly check when the credential changes mid-session
• Fixed the tool and command lists not updating when the organization policy finishes loading after startup or changes mid-session
• Fixed an enterprise managed-mcp.json that can't be read or parsed being ignored: it now keeps exclusive MCP control (user, project and plugin servers don't load) and warns at startup
• Fixed org policy being fetched through, and rejected by, third-party local proxies set via ANTHROPIC_UNIX_SOCKET; they are again treated like other custom gateways, including for Remote Control
• Fixed cloud sessions rejecting every subagent tool call ("updatedInput … failed schema validation") when a workflow or agent approval was applied after the session's worker restarted
• Fixed /fast off answering "Fast mode unavailable" instead of turning fast mode off when the organization has fast mode disabled
• Fixed sessions started with CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK re-sending fast requests every turn after the API rejected fast mode; the rejection now stands and its reason is shown
• Fixed fast mode under CLAUDE_CODE_RETRY_WATCHDOG failing the turn on a usage-credits limit, or retrying an overload at fast speed, instead of falling back to standard speed
• Fixed Bash permission checks missing the file that fmt, column and similar commands read when it follows an option the checker doesn't recognize
• Fixed Bash permission checks skipping files a wildcard expands to when the wildcard sits in a command's pattern or option value (for example grep -v dir/* file)
• Fixed Bash permission checks so that shell variable declaration flags cannot misrepresent the command being run
• Fixed Bash commands with two directory changes, a subshell, or a cd+git chain skipping the prompt under permissions.blockReadsOutsideWorkingDirectories in bypass and auto mode
• Fixed a stale .git/config.lock breaking git checkout -b, git push -u and git config for the rest of a session after a sandboxed command failed to start (Linux)
• Fixed settings file changes made outside the session going unnoticed on macOS machines whose system file-event service is saturated; the watcher now falls back to polling
• Fixed resumed claude -p sessions whose tools all come from MCP servers failing with "At least one tool must have defer_loading=false"
• Fixed turns failing with "API returned an empty or malformed response" when an LLM gateway returns the non-streaming reply as text/plain
• Fixed sustained high CPU usage and repeated tool-list requests when an MCP server sends list_changed notifications in a tight loop
• Fixed MCP OAuth mishandling client registrations: denying consent forced a new one, one for another redirect URI was reused, and a concurrent write could delete a valid one or keep a mismatched one
• Fixed tool search returning no match when Claude selects an MCP tool by its bare name instead of its full mcp__server__tool name
• Fixed Ctrl+O cancelling pending MCP server reconnects, and /mcp sent from Remote Control failing while the transcript view is open
• Fixed the Claude in Chrome prompt telling the model to load tools through ToolSearch when ToolSearch is unavailable
• Fixed cross-session messages held by the receiving session's permission-mode policy leaving no trace: headless senders now get a delivery notice, and SendMessage results no longer imply it was read
• Fixed Claude starting a second copy of a background command (such as a watch task or dev server) that was still running after the conversation was compacted
• Fixed /model warning about losing the conversation cache when switching back to the model the conversation actually ran on
• Fixed /reload-skills reporting a skill count that disagreed with the slash menu after /cd
• Fixed /resume and /continue showing only 1-2 sessions in fullscreen mode on short terminals
• Fixed /resume and /teleport keeping the previous conversation's file-read tracking, so Claude could edit files the resumed conversation had never read
• Fixed --resume dropping the 1M context window ([1m]) when the resumed session's model family differs from the configured default model
• Fixed artifacts attached with /artifacts disappearing from the session after --resume
• Fixed background sessions (claude --bg, claude agents) not watching the artifacts they publish for republishes made elsewhere
• Fixed custom agents, slash commands and output styles beyond the first not loading from a virtual drive that reports inode 0, such as an encrypted vault mounted as a Windows drive
• Fixed self-hosted runner sessions silently losing all host config (settings, skills, plugins, MCP servers) when the host config directory exceeds 64 MiB; added --host-config-snapshot disk|memory
• Fixed skills synced from claude.ai staying on disk indefinitely after signing out; copies not refreshed within cleanupPeriodDays now move to the recoverable trash at the next launch
• Fixed spinner tips suggesting commands that aren't available for your account type or are disabled in your session

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-code's changelog.

2.1.272

• Bug fixes and reliability improvements

2.1.271

• Added fast mode in Claude Code Remote sessions (cloud and self-hosted runners): the host's fast-mode setting or /fast typed in the session applies where your organization allows it
• Added mouse support to the /config panel in fullscreen mode: the wheel scrolls the settings list, a click on a setting's value changes it, and the row under the pointer is highlighted
• Added claude self-hosted-runner --drain-marker-file <path>: when that file exists at a SIGTERM drain, the runner reports its exit to the server as a host drain (telemetry only)
• Added per-command allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing: the hosts a command needs are reviewed with it and opened for it alone; other hosts are refused
• Added omitClaudeMd to agent frontmatter and --agents JSON, letting custom and plugin subagents run without user, project and local CLAUDE.md files; managed policy files still load
• Added --accept-command <sha256> to claude plugin install and claude plugin update to accept exactly the command a previous --json run displayed, instead of -y
• Added support for a multiplier above 1, up to 10, in the modelPricing managed setting and the Claude apps gateway pricing block, for marked-up internal chargeback rates
• Added a spinner tip pointing Bedrock, Vertex AI, Foundry and LLM gateway users to the Claude desktop app; the claude.ai desktop app tip now suggests /desktop, which offers to download the app
• Fixed a cached organization policy being reused after switching accounts, organizations, or API keys, and the policy not refreshing until the hourly check when the credential changes mid-session
• Fixed the tool and command lists not updating when the organization policy finishes loading after startup or changes mid-session
• Fixed an enterprise managed-mcp.json that can't be read or parsed being ignored: it now keeps exclusive MCP control (user, project and plugin servers don't load) and warns at startup
• Fixed org policy being fetched through, and rejected by, third-party local proxies set via ANTHROPIC_UNIX_SOCKET; they are again treated like other custom gateways, including for Remote Control
• Fixed cloud sessions rejecting every subagent tool call ("updatedInput … failed schema validation") when a workflow or agent approval was applied after the session's worker restarted
• Fixed /fast off answering "Fast mode unavailable" instead of turning fast mode off when the organization has fast mode disabled
• Fixed sessions started with CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK re-sending fast requests every turn after the API rejected fast mode; the rejection now stands and its reason is shown
• Fixed fast mode under CLAUDE_CODE_RETRY_WATCHDOG failing the turn on a usage-credits limit, or retrying an overload at fast speed, instead of falling back to standard speed
• Fixed Bash permission checks missing the file that fmt, column and similar commands read when it follows an option the checker doesn't recognize
• Fixed Bash permission checks skipping files a wildcard expands to when the wildcard sits in a command's pattern or option value (for example grep -v dir/* file)
• Fixed Bash permission checks so that shell variable declaration flags cannot misrepresent the command being run
• Fixed Bash commands with two directory changes, a subshell, or a cd+git chain skipping the prompt under permissions.blockReadsOutsideWorkingDirectories in bypass and auto mode
• Fixed a stale .git/config.lock breaking git checkout -b, git push -u and git config for the rest of a session after a sandboxed command failed to start (Linux)
• Fixed settings file changes made outside the session going unnoticed on macOS machines whose system file-event service is saturated; the watcher now falls back to polling
• Fixed resumed claude -p sessions whose tools all come from MCP servers failing with "At least one tool must have defer_loading=false"
• Fixed turns failing with "API returned an empty or malformed response" when an LLM gateway returns the non-streaming reply as text/plain
• Fixed sustained high CPU usage and repeated tool-list requests when an MCP server sends list_changed notifications in a tight loop
• Fixed MCP OAuth mishandling client registrations: denying consent forced a new one, one for another redirect URI was reused, and a concurrent write could delete a valid one or keep a mismatched one
• Fixed tool search returning no match when Claude selects an MCP tool by its bare name instead of its full mcp__server__tool name
• Fixed Ctrl+O cancelling pending MCP server reconnects, and /mcp sent from Remote Control failing while the transcript view is open
• Fixed the Claude in Chrome prompt telling the model to load tools through ToolSearch when ToolSearch is unavailable
• Fixed cross-session messages held by the receiving session's permission-mode policy leaving no trace: headless senders now get a delivery notice, and SendMessage results no longer imply it was read
• Fixed Claude starting a second copy of a background command (such as a watch task or dev server) that was still running after the conversation was compacted
• Fixed /model warning about losing the conversation cache when switching back to the model the conversation actually ran on
• Fixed /reload-skills reporting a skill count that disagreed with the slash menu after /cd
• Fixed /resume and /continue showing only 1-2 sessions in fullscreen mode on short terminals
• Fixed /resume and /teleport keeping the previous conversation's file-read tracking, so Claude could edit files the resumed conversation had never read
• Fixed --resume dropping the 1M context window ([1m]) when the resumed session's model family differs from the configured default model
• Fixed artifacts attached with /artifacts disappearing from the session after --resume
• Fixed background sessions (claude --bg, claude agents) not watching the artifacts they publish for republishes made elsewhere
• Fixed custom agents, slash commands and output styles beyond the first not loading from a virtual drive that reports inode 0, such as an encrypted vault mounted as a Windows drive
• Fixed self-hosted runner sessions silently losing all host config (settings, skills, plugins, MCP servers) when the host config directory exceeds 64 MiB; added --host-config-snapshot disk|memory
• Fixed skills synced from claude.ai staying on disk indefinitely after signing out; copies not refreshed within cleanupPeriodDays now move to the recoverable trash at the next launch
• Fixed spinner tips suggesting commands that aren't available for your account type or are disabled in your session
• Fixed the /add-dir path input: the left and right arrow keys now move the cursor, and Enter adds only the typed path instead of also adding the highlighted completion
• Fixed text fields outside the main prompt moving a leading ! to the end of what you typed (!foo came out as foo!)

... (truncated)

Commits

• f96c3b4 chore: Update CHANGELOG.md and feed.xml
• f2ccbe2 chore: Update CHANGELOG.md and feed.xml
• f4ceeec Merge pull request #94184 from anthropics/poteat/diff-parity-2
• 7d4f947 diff: the docked window's hunks are made printable and split under a leaf's c...
• 9d302a8 Merge remote-tracking branch 'origin/main' into poteat/diff-parity-2
• 18be13b mods: the diff, sec-default and telemetry tests move next to the mods (#93951)
• 0fdc7b2 diff tests: the walk stops at the last file
• 17db2e1 diff: the dialog's walk stops at the first and last file as the built-in's do...
• 78c94ce diff: the rows' widths and reserves live under limits, sparing six of the fil...
• 01e6ae4 diff tests and README: the walk selects and the window follows
• Additional commits viewable in compare view