[dependabot]

Bumps @anthropic-ai/claude-code from 2.1.259 to 2.1.304.

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.304

What's changed

• Added a transcript line when a plugin that runs first skips one of your mod's hooks, naming the event and the plugin
• Added decider: "person" to a mod's tool.check answer: only the permission dialog or a host's callback can approve the ask, and it is refused with the mod's reason where nobody can be asked
• Added e.isReadOnly to a mod's tool.check event, set when the tool call is read-only
• Added /auto-mode-setup: a guided setup that reads your project and recent sessions to teach auto mode about your environment, now also available on Bedrock, Vertex, Foundry, Claude apps gateway and telemetry-disabled sessions
• Added /claude-api managed-agents-secure, which compares a Managed Agents agent's settings with Anthropic's published security guide, without changing anything
• Added the names of the tools called earlier to the compaction summary in the transcript view (Ctrl+O)
• Added a warning on Pro and Max plans when resuming an inactive conversation would use a noticeable share of your 5-hour usage limit: resume anyway, or start a new conversation and Claude can look up the previous one if you refer to it
• Fixed the organization policy not refreshing until the hourly check after approving an ANTHROPIC_API_KEY at startup or switching "Use custom API key" in /config
• Fixed sandboxed commands failing to start on Linux when a sandbox.filesystem.denyRead glob contains brackets that are not a character class, such as a [user-id] route folder
• Fixed rm -r of a mounted drive or a folder at its top level (/Volumes, /media, WSL's /mnt/c) not getting the safety prompt that rm -rf /Applications gets
• Fixed CLAUDE_CODE_TRANSCRIPT_LOCAL_GC dropping messages from the saved transcript when the disk filled up while the file was being trimmed
• Fixed a plugin keeping a headless run going past --max-turns, Stop, or ended input by spawning subagents or re-running a finished one
• Fixed a failed mod reload removing the tools and commands of the version that stays loaded, and its messages being wrong or silent about whether the previous version is still loaded
• Fixed a click on a mod's button being lost when buttons with the same label and no key were redrawn unchanged
• Fixed mod sharing in the built-in plugin-authoring skill stopping at the secret scan on machines with managed settings and on Team and Enterprise plans
• Fixed scheduled Cowork cloud sessions waiting five minutes again for each subagent whose WebFetch needed a URL approval that nobody was there to give
• Fixed Write results and rejected edits showing a file outside the working directory as ../../…; they now show ~/… or the full path
• Fixed a claude.ai Directory plugin's skills not running as commands when picked from the "/" menu in Cowork cloud sessions
• Fixed Remote Control permanently withholding a desktop conversation's history when a different account was signed in to the terminal
• Fixed Remote Control failing to start from Claude Desktop when DISABLE_TELEMETRY or DO_NOT_TRACK is set on a paid plan
• Fixed model switches, messages and interrupts waiting behind a context usage check in SDK and desktop sessions
• Fixed context_management: Extra inputs are not permitted errors behind LLM gateways; Claude Code now resends the request without that field
• Fixed OpenTelemetry settings delivered through server-managed settings being ignored for the whole session after signing in during first-run setup or the first start after /logout
• Fixed unsandboxed Bash commands in Claude Desktop Code tab sessions on macOS and Linux not seeing environment variables exported in shell startup files such as ~/.zshrc
• Fixed the Consumer Terms notice being skipped for a day or longer after a server error
• Fixed /privacy-settings offering choices that may not apply to you after a network or server error
• Fixed a "Context limit reached" or "Prompt is too long" error after stopping a turn while Claude Code was compacting a conversation the API had rejected as too long
• Fixed subagents sometimes forgetting their most recent work when they were messaged or resumed right after finishing
• Fixed claude --help text for --tools, --resume, --debug, --json-schema, --disable-slash-commands, --system-prompt-snapshot and claude update to match actual behavior
• Fixed claude --worktree removing the worktree and its branch without asking at exit when HEAD was detached or on another branch, which could lose commits
• Fixed resumed and cloud sessions sending Claude the whole skill list again each time plugins reloaded at startup
• Fixed an interrupt not ending a Read that waits on an idle pipe or device named like an image
• Fixed /effort status, /effort ultracode and the prompt's effort indicator showing a guessed effort level when CLAUDE_CODE_EFFORT_LEVEL is auto or unset and no level is sent
• Fixed a PreToolUse hook's deny reason being replaced by a timeout error when an Agent SDK callback hook on the same tool call timed out
• Fixed Bash and PowerShell deleting a large command's output file when it could not be copied to the session's tool-results folder, unless the disk is full
• anthropics/claude-code#82768
• Fixed self-paced /loop wakeups scheduled at the 1-hour maximum firing just after the 1-hour prompt cache expired, so those wakeups no longer re-read the conversation uncached
• Fixed agent teams: approving a shutdown request from the main session no longer exits the whole CLI
• Fixed a skill's once hook also removing another skill's identical hook after it ran
• Fixed transcript mode's { and } landing the prompt on an inconsistent row, or off screen, instead of the transcript's first row
• Fixed CLAUDE_CODE_AUTO_COMPACT_WINDOW=200k silently setting a 100K window: the variable now accepts k and M suffixes like --autocompact, and warns when a value is out of range or ignored
• Fixed Ctrl+C in the agents view clearing a text selection without copying it when pressed before the mouse button was released
• Improved /usage to say when a rate limit on usage data ends instead of "try again in a moment"
• Improved the lines shown when a mod written in the session loads, reloads or fails to load
• Improved artifacts with several views: when you ask for links to them, Claude now writes out each view's link and explains that the address bar stays the same as you switch views
• Improved cloud sessions: a new conversation's first turn no longer waits for the local (stdio) MCP servers of plugins synced from claude.ai, unless a server sets alwaysLoad: true
• Improved how a remote session recovers its status when the server refuses a status update that carried other session data

... (truncated)

Commits

• 772c6be chore: Update CHANGELOG.md and feed.xml
• ef7bfdc chore: Update CHANGELOG.md and feed.xml
• dd6bee3 chore: Update mods/
• 8a8dff6 chore: Update mods/
• c017428 chore: Update CHANGELOG.md and feed.xml
• 03b5892 chore: Update CHANGELOG.md and feed.xml
• 94506ff chore: Update CHANGELOG.md and feed.xml
• 19eb095 chore: Update mods/
• 9b4f0d6 chore: Update mods/
• db93774 chore: Update CHANGELOG.md and feed.xml
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/claude-code since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Routine devDependency bump — @anthropic-ai/claude-code 2.1.259 → 2.1.304 in package.json and package-lock.json only. No application code, prompts, or workflows are touched; version numbers and integrity hashes are consistent across the package and all its optional per-platform variants. Nothing to flag.

[github-actions]

🗜️ Headroom context compression

Metric	Value
Requests proxied	8
Tokens saved	31745
Aggregate savings	4.6% of all tokens sent
Average per-request compression	6%

[dependabot]

Superseded by #156.