build(deps-dev): bump @anthropic-ai/claude-code from 2.1.259 to 2.1.270

[dependabot]

Bumps @anthropic-ai/claude-code from 2.1.259 to 2.1.270.

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.270

What's changed

• Fixed read-only git commands in Bash unexpectedly asking for permission after a session had been running for a while (regression in 2.1.269)

v2.1.269

What's changed

• Added claude plugin eval: run a plugin's eval suite against Claude Code and get scored, reproducible results (JSON + HTML report); see claude plugin eval --help
• Added /output-style [name] to list and switch output styles, including over Remote Control and in cloud and other headless sessions
• Added a diff of the files a Bash command changed to the Bash tool result when the Bash tool handles file edits (setting bashEditDiffEnabled)
• Added OTEL_METRICS_INCLUDE_REPOSITORY to tag OpenTelemetry metrics and events with vcs.* repository attributes; commit events get vcs.ref.head.* with OTEL_LOG_TOOL_DETAILS
• Added CLAUDE_CODE_GATEWAY_MODEL_DISCOVERY_TIMEOUT_MS to extend the LLM gateway /v1/models discovery timeout (default 3s)
• Added a spinner tip suggesting /focus for a view with just your prompt, a one-line work summary, and the response
• Added CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS (1–256) to raise the Workflow tool's per-run concurrent agent limit for inference-bound fan-outs
• Fixed the prompt cache being partially invalidated on the turn after a response was cut off at the output-token limit and automatically resumed
• Fixed a case where resuming a session after interrupting Claude mid-thought could change how earlier context was re-sent, hurting prompt-cache reuse
• Fixed F1/F2/F4 not working in kitty-protocol terminals and Delete in st, Alt+arrows acting as Escape in rxvt-unicode, and Shift+punctuation typing the unshifted key in WezTerm (regression in 2.1.247)
• Fixed remote and headless sessions reporting "waiting for your input" while background agents were still running (set CLAUDE_CODE_BG_TASKS_REPORT_RUNNING=0 to restore the old behavior)
• Fixed the terminal's replies to capability queries (^[[?1;2c) appearing as stray text at startup in some terminals
• Fixed rows at the top or bottom of the transcript going blank in fullscreen after resizing the terminal
• Fixed a deny or ask permission rule starting with ! applying beyond the settings source that wrote it; such a rule now applies only within its own source, and a bare ! negation is ignored
• Fixed the git status Claude is told after a compaction: it is now the current status, not the one from the start of the session
• Fixed synced plugin MCP servers not connecting when a remote session resumes
• Fixed resumed headless sessions losing a turn's replies when the model was switched or a request was retried mid-turn
• Fixed terminal escape codes, line breaks and oversized text from a background task's on-disk record reaching the task list and task notifications when work is resumed
• Fixed CMYK JPEG images failing to attach with "cannot decode"; they are now converted and resized like other JPEGs
• Fixed the managed settings approval dialog not naming the collector for a gRPC telemetry endpoint set without a scheme
• Fixed plugin headersHelper consent prompts showing a URL path that could be misread as a different host
• Fixed plugin errors showing [redacted URL] in place of a relative Windows path with a folder name that starts with @
• Fixed missing cursor in the permission-rule, auto-mode-rule, add-directory, session-rename and feedback-review text fields when the terminal's native cursor is enabled
• Fixed repeated clicks on a /fork receipt, each under a second apart, never backgrounding the session right away while it waited for the current tool to finish
• Fixed plugin LSP servers that reject shutdown params (e.g. rust-analyzer) being left running at session end; exit is now sent even if shutdown fails
• Fixed the attribution reminder overriding a CLAUDE.md or memory rule against commit and pull request attribution; lines set by managed settings still apply
• Fixed prompt suggestions being dropped for text in Japanese, Chinese, Thai and other languages written without spaces between words
• Fixed synchronized output being assumed from the terminal's name in GNOME Terminal and Konsole versions that do not support it
• Fixed permission_denials in --output-format stream-json results omitting Read, Edit and Write calls blocked by a path-scoped deny rule
• Fixed sessions run through the SDK or the desktop app showing an unknown status in other sessions' agent list
• Fixed /insights failing on Bedrock, Vertex, Foundry, and gateway deployments whose account can't reach the default Opus model by using the session model there instead
• Fixed organization policy limits not loading for the session when another Claude Code process refreshed the login at the same moment
• Fixed Claude Desktop sessions using Bedrock, Vertex, or a gateway not getting the contextual "what Claude needs" turn-end notification text
• Fixed MCP servers reconnecting when an updated config only changed the order of the server URL's query parameters
• Fixed the prompt box's top border splitting into extra lines when viewing a background agent whose name or description has line breaks or is wider than the terminal
• Fixed sessions getting permanently stuck on "Prompt is too long" when auto-compaction had no complete earlier exchange to summarize (mostly Agent SDK sessions with very large prompts)
• Fixed /goal runs silently stalling after API errors, network drops, or token limits: the goal now retries with backoff, or pauses and says why, including until a usage limit resets
• Fixed prompt cache misses in cloud sessions by waiting briefly for server configuration before the first request
• Fixed /btw answers that contained made-up tool calls and output: the side question is now told not to write them, and any that appear are flagged as not executed
• Fixed CLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that had failed with an API error over 6 hours earlier, or longer ago than CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS when set
• Fixed organization plugins enabled through managed settings not loading in headless sessions and on Claude Desktop (once Desktop bundles this CLI version); they load from the next session
• Fixed plugin archives extracted for a session being readable by other local users, extracted files keeping world-writable bits from the archive, and stale files surviving re-extraction

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-code's changelog.

2.1.270

• Fixed read-only git commands in Bash unexpectedly asking for permission after a session had been running for a while (regression in 2.1.269)

2.1.269

• Added claude plugin eval: run a plugin's eval suite against Claude Code and get scored, reproducible results (JSON + HTML report); see claude plugin eval --help
• Added /output-style [name] to list and switch output styles, including over Remote Control and in cloud and other headless sessions
• Added a diff of the files a Bash command changed to the Bash tool result when the Bash tool handles file edits (setting bashEditDiffEnabled)
• Added OTEL_METRICS_INCLUDE_REPOSITORY to tag OpenTelemetry metrics and events with vcs.* repository attributes; commit events get vcs.ref.head.* with OTEL_LOG_TOOL_DETAILS
• Added CLAUDE_CODE_GATEWAY_MODEL_DISCOVERY_TIMEOUT_MS to extend the LLM gateway /v1/models discovery timeout (default 3s)
• Added a spinner tip suggesting /focus for a view with just your prompt, a one-line work summary, and the response
• Added CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS (1–256) to raise the Workflow tool's per-run concurrent agent limit for inference-bound fan-outs
• Fixed the prompt cache being partially invalidated on the turn after a response was cut off at the output-token limit and automatically resumed
• Fixed a case where resuming a session after interrupting Claude mid-thought could change how earlier context was re-sent, hurting prompt-cache reuse
• Fixed F1/F2/F4 not working in kitty-protocol terminals and Delete in st, Alt+arrows acting as Escape in rxvt-unicode, and Shift+punctuation typing the unshifted key in WezTerm (regression in 2.1.247)
• Fixed remote and headless sessions reporting "waiting for your input" while background agents were still running (set CLAUDE_CODE_BG_TASKS_REPORT_RUNNING=0 to restore the old behavior)
• Fixed the terminal's replies to capability queries (^[[?1;2c) appearing as stray text at startup in some terminals
• Fixed rows at the top or bottom of the transcript going blank in fullscreen after resizing the terminal
• Fixed a deny or ask permission rule starting with ! applying beyond the settings source that wrote it; such a rule now applies only within its own source, and a bare ! negation is ignored
• Fixed the git status Claude is told after a compaction: it is now the current status, not the one from the start of the session
• Fixed synced plugin MCP servers not connecting when a remote session resumes
• Fixed resumed headless sessions losing a turn's replies when the model was switched or a request was retried mid-turn
• Fixed terminal escape codes, line breaks and oversized text from a background task's on-disk record reaching the task list and task notifications when work is resumed
• Fixed CMYK JPEG images failing to attach with "cannot decode"; they are now converted and resized like other JPEGs
• Fixed the managed settings approval dialog not naming the collector for a gRPC telemetry endpoint set without a scheme
• Fixed plugin headersHelper consent prompts showing a URL path that could be misread as a different host
• Fixed plugin errors showing [redacted URL] in place of a relative Windows path with a folder name that starts with @
• Fixed missing cursor in the permission-rule, auto-mode-rule, add-directory, session-rename and feedback-review text fields when the terminal's native cursor is enabled
• Fixed repeated clicks on a /fork receipt, each under a second apart, never backgrounding the session right away while it waited for the current tool to finish
• Fixed plugin LSP servers that reject shutdown params (e.g. rust-analyzer) being left running at session end; exit is now sent even if shutdown fails
• Fixed the attribution reminder overriding a CLAUDE.md or memory rule against commit and pull request attribution; lines set by managed settings still apply
• Fixed prompt suggestions being dropped for text in Japanese, Chinese, Thai and other languages written without spaces between words
• Fixed synchronized output being assumed from the terminal's name in GNOME Terminal and Konsole versions that do not support it
• Fixed permission_denials in --output-format stream-json results omitting Read, Edit and Write calls blocked by a path-scoped deny rule
• Fixed sessions run through the SDK or the desktop app showing an unknown status in other sessions' agent list
• Fixed /insights failing on Bedrock, Vertex, Foundry, and gateway deployments whose account can't reach the default Opus model by using the session model there instead
• Fixed organization policy limits not loading for the session when another Claude Code process refreshed the login at the same moment
• Fixed Claude Desktop sessions using Bedrock, Vertex, or a gateway not getting the contextual "what Claude needs" turn-end notification text
• Fixed MCP servers reconnecting when an updated config only changed the order of the server URL's query parameters
• Fixed the prompt box's top border splitting into extra lines when viewing a background agent whose name or description has line breaks or is wider than the terminal
• Fixed sessions getting permanently stuck on "Prompt is too long" when auto-compaction had no complete earlier exchange to summarize (mostly Agent SDK sessions with very large prompts)
• Fixed /goal runs silently stalling after API errors, network drops, or token limits: the goal now retries with backoff, or pauses and says why, including until a usage limit resets
• Fixed prompt cache misses in cloud sessions by waiting briefly for server configuration before the first request
• Fixed /btw answers that contained made-up tool calls and output: the side question is now told not to write them, and any that appear are flagged as not executed
• Fixed CLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that had failed with an API error over 6 hours earlier, or longer ago than CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS when set
• Fixed organization plugins enabled through managed settings not loading in headless sessions and on Claude Desktop (once Desktop bundles this CLI version); they load from the next session
• Fixed plugin archives extracted for a session being readable by other local users, extracted files keeping world-writable bits from the archive, and stale files surviving re-extraction
• Fixed Edit() deny rules and the write-path check not applying to the file a Bash tee command writes; a Bash(tee:*) allow rule no longer covers destinations outside the working directories
• Fixed stray characters like 22c, or a terminal's color or version reply, being typed into the prompt at startup over slow connections (ssh, browser terminals)

... (truncated)

Commits

• 2b40e76 chore: Update CHANGELOG.md and feed.xml
• df52d04 chore: Update CHANGELOG.md and feed.xml
• 536a2e2 chore: Update CHANGELOG.md and feed.xml
• fb63c4a Merge pull request #93244 from anthropics/poteat/mods-telemetry-fixes
• 1297731 mods/diff: backgrounds summary in two lines, as the internal copy has it
• 573ada6 mods/diff: context lines draw on no background, not the cyan background-task ...
• 8939dec mods/diff: the backend probes comment names where a host adds backends
• 2142ece mods/diff: a backend seam, git as the built-in backend
• 1a7c76e mods: API renames in diff, telemetry rows queue and third-party providers sen...
• e62465d Merge pull request #93215 from anthropics/poteat/mods
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependabot bump of @anthropic-ai/claude-code (2.1.259 → 2.1.270), package.json + package-lock.json only. Every version reference is updated consistently except one: the allowScripts version-pinned allowlist entry at package.json:43 still names 2.1.259, out of step with the bump this PR makes. One inline Should-fix finding with a suggested fix below — otherwise nothing to raise.

[github-actions]

Routine Dependabot bump of @anthropic-ai/claude-code (2.1.259 → 2.1.270), touching only package.json and package-lock.json. Every version reference is updated consistently — the devDependency entry, and every platform-specific package-lock.json entry (darwin-arm64/x64, linux-arm64/arm64-musl/x64/x64-musl, win32-arm64/x64) with matching integrity hashes — except one.

🟠 Should fix [policy] — package.json:43's allowScripts entry is still pinned to @anthropic-ai/claude-code@2.1.259, out of step with the bump everywhere else. This is a version-scoped allowlist entry (name@version), and the lockfile confirms this package still carries "hasInstallScript": true, so leaving the old version pinned means the bumped package's install script is no longer covered by this entry post-merge. Suggested fix inline.

This confirms the same finding already raised in the existing review on this identical head commit (96c7a34), whose own inline comment appears not to have posted — no new issues found beyond it.

[github-actions]

🗜️ Headroom context compression

Metric	Value
Requests proxied	35
Tokens saved	330266
Aggregate savings	6.9% of all tokens sent
Average per-request compression	8.6%

[dependabot]

Superseded by #91.