build(deps-dev): bump @anthropic-ai/claude-code from 2.1.259 to 2.1.282

[dependabot]

Bumps @anthropic-ai/claude-code from 2.1.259 to 2.1.282.

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.282

What's changed

• Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width
• Added a startup notice, and /status and claude doctor entries, listing telemetry variables in a project's settings files that were ignored or that turned telemetry off
• Added the allowClaudeInChromeWithManagedMcp managed setting to let claude --chrome run alongside an exclusive managed-mcp.json; the error shown when Chrome is blocked now names it
• Added store.readiness_grace_seconds to the Claude apps gateway so /readyz can stay ready through a short Postgres outage such as a database failover
• Added a scrollbar to the /feedback drafts list in fullscreen mode; it appears while the mouse is over the list
• Fixed every request failing with a 400 error in conversations whose history holds web search results the API cannot decrypt (for example, from a turn answered through a third-party gateway)
• Fixed more cases of continued or resumed sessions (--continue, --resume) re-sending earlier messages in a changed form, which could make the API drop Claude's earlier reasoning
• Fixed earlier extended thinking being dropped when /model, /rename, /artifacts or another immediate slash command was used while Claude was working
• Fixed continued or resumed conversations losing earlier extended thinking when relaunched with a --tools list that leaves out a built-in tool offered earlier in the conversation
• Fixed sessions failing on every turn with an "Invalid data in redacted_thinking block" API error; Claude Code now drops the conversation's thinking blocks and retries once
• Fixed compaction failing when the summarization request is refused; it now retries on a fallback model
• Fixed a failed turn ("Effort 'xhigh' isn't available with thinking turned off") after a safety-related model switch in sessions with thinking off and effort above high
• Fixed an unanswered Fable usage-credits prompt switching models in SDK-hosted sessions such as Claude Desktop; the turn now ends instead, and Remote Control clients now see the model-switch notice
• Fixed /model with a full Fable model id stopping at an API error instead of opening the usage-credits prompt when the plan needs usage credits that aren't turned on yet
• Fixed requests failing for up to a minute with an "another Claude Code process is refreshing it" login error after that other process was closed or killed mid-refresh
• Fixed sessions started while another Claude Code window was refreshing the sign-in (common with several VS Code windows) not retrying their organization policy fetch
• Fixed CLAUDE.md and rules being read at startup through a repository symlink reaching macOS's /Network via .. or a /.vol-style kernel path, or a rules link to macOS's /home being listed
• Fixed Bash permission rules with a mid-pattern :* being skipped in settings files while --allowedTools honored them; they now work from every source, with a startup warning on how they match
• Fixed a command approved on a restored permission prompt running twice when a remote session's worker restarted
• Fixed managed settings ignoring a mistyped value for boolean lock keys such as disableClaudeAiConnectors or allowManagedPermissionRulesOnly; the lock now applies and startup names the key
• Fixed managed permissions, autoMode, worktree and attribution settings being ignored entirely when one nested value was invalid; the rest of the block now still applies
• Fixed repository, user and --add-dir skills, commands and skills-directory plugin manifests pre-approving their own tools via allowed-tools under managed allowManagedPermissionRulesOnly
• Fixed safeguard block messages on Amazon Bedrock and Bedrock Mantle not showing a request ID; block messages now also show the message ID
• Vertex AI: Fixed web search not being offered for models Claude Code doesn't recognize yet, such as newly released ones
• Fixed Bash and PowerShell hiding a full disk quota behind "Exit code 1" and leaving large output files in temp
• Fixed tool input validation errors naming only an unknown, missing or mistyped parameter when other parameters in the same call were also invalid; those are now listed too
• Fixed pasted multi-line text being submitted line by line after the terminal's bracketed paste mode was reset mid-session
• Fixed the prompt's example text flashing and disappearing at startup in projects with a SessionStart hook
• Fixed a blank screen flashing before the first frame when starting in fullscreen mode
• Fixed garbled, misplaced rows in the non-fullscreen renderer after the screen got shorter while still taller than the terminal, e.g. deleting a prompt line while a shell command streams output
• Fixed a stale character left in the last column of a diff when a redrawn line's CJK character or emoji wrapped to the next row
• Fixed the cursor landing before the end of a prompt recalled from history when the prompt contains a tab
• Fixed the send-now hint showing ctrl+enter on terminals that send it as a newline (Windows Terminal before 1.25); it now shows ctrl+x ctrl+s there
• Fixed claude remote-control --debug failing with "Unknown argument: --debug", although Remote Control's own eligibility error says to run with --debug
• Fixed /install-github-app saying "cancelled" and then still pushing the branch and saving the API key secret; leaving now stops the remaining steps and reports what was already done
• Fixed /feedback, /bug and /share on Bedrock, Vertex and other third-party providers still saving the report file after you cancelled during the save
• Fixed plugin uninstall reporting success and deleting the plugin's saved options when its settings file still enabled it or could not be read; it now stops and names the file
• Fixed plugin uninstall deleting a plugin's saved options and secrets when the list of installed plugins could not be read after the removal; they are now kept and the uninstall says so
• Fixed a key typed right after / in /skills moving the skill list instead of reaching the search box
• Fixed the terminal cursor jumping from the /skills search box to the skill list while typing, which could hide the caret and put IME input in the wrong place
• Fixed lists with a scrollbar, such as /skills and /mcp, being two columns narrower outside fullscreen mode, where the scrollbar can never appear
• Fixed the agent panel footer wrapping onto two lines with long rebound keys, and its "Esc to collapse" hint ignoring a rebound collapse key
• Fixed a doubled · separator in the /tasks dialog footer when the stop-all-agents shortcut is unbound in keybindings.json
• Fixed artifact publishes failing when Claude gave the version a label longer than 60 characters; the label is now shortened
• Fixed screen-reader mode, quoted lists and very long lists dropping the blank lines at the top of a code block that opens a list item, directly or inside a quote
• Fixed PDF page-read error messages: paths with accented or non-Latin characters now appear readably, and a folder named like "password" or "invalid" can no longer make the error name the wrong cause
• Fixed vim mode >> indenting empty lines, r with a count longer than the line changing text, 2J joining one line too many, and a count on the last line (2dd, 2>>) shifting or deleting it

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-code's changelog.

2.1.282

• Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width
• Added a startup notice, and /status and claude doctor entries, listing telemetry variables in a project's settings files that were ignored or that turned telemetry off
• Added the allowClaudeInChromeWithManagedMcp managed setting to let claude --chrome run alongside an exclusive managed-mcp.json; the error shown when Chrome is blocked now names it
• Added store.readiness_grace_seconds to the Claude apps gateway so /readyz can stay ready through a short Postgres outage such as a database failover
• Added a scrollbar to the /feedback drafts list in fullscreen mode; it appears while the mouse is over the list
• Fixed every request failing with a 400 error in conversations whose history holds web search results the API cannot decrypt (for example, from a turn answered through a third-party gateway)
• Fixed more cases of continued or resumed sessions (--continue, --resume) re-sending earlier messages in a changed form, which could make the API drop Claude's earlier reasoning
• Fixed earlier extended thinking being dropped when /model, /rename, /artifacts or another immediate slash command was used while Claude was working
• Fixed continued or resumed conversations losing earlier extended thinking when relaunched with a --tools list that leaves out a built-in tool offered earlier in the conversation
• Fixed sessions failing on every turn with an "Invalid data in redacted_thinking block" API error; Claude Code now drops the conversation's thinking blocks and retries once
• Fixed compaction failing when the summarization request is refused; it now retries on a fallback model
• Fixed a failed turn ("Effort 'xhigh' isn't available with thinking turned off") after a safety-related model switch in sessions with thinking off and effort above high
• Fixed an unanswered Fable usage-credits prompt switching models in SDK-hosted sessions such as Claude Desktop; the turn now ends instead, and Remote Control clients now see the model-switch notice
• Fixed /model with a full Fable model id stopping at an API error instead of opening the usage-credits prompt when the plan needs usage credits that aren't turned on yet
• Fixed requests failing for up to a minute with an "another Claude Code process is refreshing it" login error after that other process was closed or killed mid-refresh
• Fixed sessions started while another Claude Code window was refreshing the sign-in (common with several VS Code windows) not retrying their organization policy fetch
• Fixed CLAUDE.md and rules being read at startup through a repository symlink reaching macOS's /Network via .. or a /.vol-style kernel path, or a rules link to macOS's /home being listed
• Fixed Bash permission rules with a mid-pattern :* being skipped in settings files while --allowedTools honored them; they now work from every source, with a startup warning on how they match
• Fixed a command approved on a restored permission prompt running twice when a remote session's worker restarted
• Fixed managed settings ignoring a mistyped value for boolean lock keys such as disableClaudeAiConnectors or allowManagedPermissionRulesOnly; the lock now applies and startup names the key
• Fixed managed permissions, autoMode, worktree and attribution settings being ignored entirely when one nested value was invalid; the rest of the block now still applies
• Fixed repository, user and --add-dir skills, commands and skills-directory plugin manifests pre-approving their own tools via allowed-tools under managed allowManagedPermissionRulesOnly
• Fixed safeguard block messages on Amazon Bedrock and Bedrock Mantle not showing a request ID; block messages now also show the message ID
• Vertex AI: Fixed web search not being offered for models Claude Code doesn't recognize yet, such as newly released ones
• Fixed Bash and PowerShell hiding a full disk quota behind "Exit code 1" and leaving large output files in temp
• Fixed tool input validation errors naming only an unknown, missing or mistyped parameter when other parameters in the same call were also invalid; those are now listed too
• Fixed pasted multi-line text being submitted line by line after the terminal's bracketed paste mode was reset mid-session
• Fixed the prompt's example text flashing and disappearing at startup in projects with a SessionStart hook
• Fixed a blank screen flashing before the first frame when starting in fullscreen mode
• Fixed garbled, misplaced rows in the non-fullscreen renderer after the screen got shorter while still taller than the terminal, e.g. deleting a prompt line while a shell command streams output
• Fixed a stale character left in the last column of a diff when a redrawn line's CJK character or emoji wrapped to the next row
• Fixed the cursor landing before the end of a prompt recalled from history when the prompt contains a tab
• Fixed the send-now hint showing ctrl+enter on terminals that send it as a newline (Windows Terminal before 1.25); it now shows ctrl+x ctrl+s there
• Fixed claude remote-control --debug failing with "Unknown argument: --debug", although Remote Control's own eligibility error says to run with --debug
• Fixed /install-github-app saying "cancelled" and then still pushing the branch and saving the API key secret; leaving now stops the remaining steps and reports what was already done
• Fixed /feedback, /bug and /share on Bedrock, Vertex and other third-party providers still saving the report file after you cancelled during the save
• Fixed plugin uninstall reporting success and deleting the plugin's saved options when its settings file still enabled it or could not be read; it now stops and names the file
• Fixed plugin uninstall deleting a plugin's saved options and secrets when the list of installed plugins could not be read after the removal; they are now kept and the uninstall says so
• Fixed a key typed right after / in /skills moving the skill list instead of reaching the search box
• Fixed the terminal cursor jumping from the /skills search box to the skill list while typing, which could hide the caret and put IME input in the wrong place
• Fixed lists with a scrollbar, such as /skills and /mcp, being two columns narrower outside fullscreen mode, where the scrollbar can never appear
• Fixed the agent panel footer wrapping onto two lines with long rebound keys, and its "Esc to collapse" hint ignoring a rebound collapse key
• Fixed a doubled · separator in the /tasks dialog footer when the stop-all-agents shortcut is unbound in keybindings.json
• Fixed artifact publishes failing when Claude gave the version a label longer than 60 characters; the label is now shortened
• Fixed screen-reader mode, quoted lists and very long lists dropping the blank lines at the top of a code block that opens a list item, directly or inside a quote
• Fixed PDF page-read error messages: paths with accented or non-Latin characters now appear readably, and a folder named like "password" or "invalid" can no longer make the error name the wrong cause
• Fixed vim mode >> indenting empty lines, r with a count longer than the line changing text, 2J joining one line too many, and a count on the last line (2dd, 2>>) shifting or deleting it
• Fixed vim mode cursor placement: after dd, dj, dG or a whole-line p/P it lands on the first non-blank, yy no longer moves it, and Esc after an emoji no longer leaves it inside the emoji

... (truncated)

Commits

• ddcb43a chore: Update CHANGELOG.md and feed.xml
• 32251d1 diff: the shared diff arguments' doc says what --no-color pins
• 4536209 fix(diff): preserve hunks when Git forces colored output
• cbab6f4 telemetry: rows carry the engine's version, base version and build time from ...
• 6c6915e diff: a shell command the tool held read-only fetches nothing, as the built-i...
• 384e28e diff: the command.run hook names its command by the literal the engine's scan...
• d78be94 chore: Update CHANGELOG.md and feed.xml
• 56f3653 chore: Update CHANGELOG.md and feed.xml
• b486776 Merge pull request #95932 from anthropics/add-github-connection-issue-template
• 411c240 Add issue template for GitHub connection problems on claude.ai
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Nothing to flag. This is a routine Dependabot devDependency bump of @anthropic-ai/claude-code from 2.1.259 to 2.1.282 (package.json/package-lock.json only, no other files touched).

This is the npm-ecosystem CLI package, not the anthropics/claude-code-action SHA pinned in action.yml — dependabot.yml's own classify step correctly treats this as non-upstream, so the investigate job was skipped and this went straight to review, as intended. No other file in the repo references the old pinned version, so there's nothing left inconsistent. build(deps-dev): is the correct conventional-commit type here per [[CLAUDE.md's versioning section]] since there's no change in what Claude is told.

No prior reviews or comments existed on this PR, so there was nothing to reconcile or clean up.

[github-actions]

🗜️ Headroom context compression

Metric	Value
Requests proxied	15
Tokens saved	70604
Aggregate savings	6.1% of all tokens sent
Average per-request compression	8.3%

[dependabot]

Superseded by #121.