[dependabot]

Bumps @anthropic-ai/claude-code from 2.1.259 to 2.1.306.

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.306

What's changed

• Fixed claude -p inside cloud sessions reporting "Not logged in" when started without the session's environment variables
• Fixed an API error being replaced by "prompt is too long", and an unneeded compaction, in sessions with many MCP tools

v2.1.305

What's changed

• Added sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces (Chromium, rootless podman); this lets them get around the sandbox's file protections
• Added CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS so unattended retry mode (CLAUDE_CODE_RETRY_WATCHDOG) notices a usage limit that was lifted before its reset
• Fixed every request failing on Vertex, Bedrock and other providers when the endpoint or a gateway rejects tool search, and behind gateways with ToolSearch disallowed or left out of --tools (a 2.1.304 regression): Claude Code now retries without it
• Fixed /effort and /autocompact settings not applying when the model name differed from a modelOverrides value by letter case or a [1m] tag
• Fixed new worktrees in a bare repository sometimes starting from local HEAD instead of the default branch, and unchanged subagent worktrees sometimes not being cleaned up
• Fixed Bash commands on a full disk failing with a raw ENOSPC file path: the error now says the disk is full and that nothing ran
• Fixed an MCP server passed by a cloud session or by the SDK's setMcpServers being replaced later in the session by a same-named server from your own settings
• Fixed Claude naming the wrong model for a subagent's work after the subagent switched to a fallback model
• Fixed cloud sessions and teammates not telling Claude when a compaction had to leave the oldest messages out of its summary to fit
• Fixed more cases of scheduled Cowork cloud sessions waiting five minutes for each subagent whose WebFetch needed a URL approval that nobody was there to give
• Fixed Workflow resume re-running already-completed pipeline() and parallel() agents instead of serving them from the run's journal
• Fixed Remote Control leaving empty "(session)" entries in /resume after switching conversations with /resume
• Fixed /usage rows being cut off in narrow terminals
• Fixed startup warnings printing as raw text above the logo: they now go to the debug log, and permission rules that restrict nothing show as warning rows under the banner
• Fixed screen reader mode: search boxes now say "Search:" instead of a symbol VoiceOver read as "telephone recorder", and highlighted prompt text, such as Ctrl+R search matches and "ultrathink", no longer has spaces inside words
• Self-hosted runner: Fixed a start script that shares only its stdout with the runner or orchestrator failing with Resource temporarily unavailable when TERM is set (a 2.1.300 regression)
• Self-hosted runner: Fixed repository access failing since 2.1.296 when a git credential helper or askpass program reads its settings through GIT_CONFIG
• Self-hosted runner: Fixed the orchestrator reporting a spawn-runner hook as timed out when a runner it started in the background kept its output open
• Improved /usage: each warning is now a one-line fix that names its source, and f applies the fixes; the same fixes appear in VS Code and /doctor
• Improved MCP consent dialogs so an Enter meant for the prompt is less likely to be taken as Accept
• Improved a mod's Image to draw its picture in iTerm2 3.5 and later with fullscreen rendering, where it showed only its alt text
• Remote Control: Improved the spawn-mode messages: pressing w now says the new mode is saved for the folder, and a later claude remote-control start that uses the saved mode says where it came from
• Changed allowedMcpServers to stop filtering managed-mcp.json stdio servers that use ${VAR} only in env: one your allowlist left out now loads on upgrade; use deniedMcpServers to keep it off
• Changed plugins that Claude Desktop mounts by path to no longer keep their allowed-tools when your organization's managed settings set allowManagedPermissionRulesOnly
• Changed the /artifacts delete confirmation to take 1 or Enter to keep, 2 to delete, and Esc to cancel; y and n no longer answer it
• Changed a mod's docked pane to stay within 45% of the terminal's width, including a width kept from a wider terminal
• [VSCode] Added a "Running start-up hooks" spinner status, with a screen reader announcement, while SessionStart or Setup hooks run
• [VSCode] Fixed the spinner cutting off "Compacting..." when your spinnerVerbs setting replaces the built-in verbs with short ones
• [VSCode] Changed the message shown when a session does not start in time and no hook is running: it now leads with the output logs and lists causes instead of pointing to sign-in and network first
• [Cloud sessions] Fixed the Cloud environments admin page wrongly refusing to save an existing environment with an "installs packages" error
• [Cloud sessions] Improved deleting a self-hosted environment so the dialog and error messages say what blocks the delete and what it will affect
• [Claude Tag] Added public Slack channels Claude hasn't joined to the Claude Tag admin Add place search, so admins can set one up from there
• [Claude Tag] Fixed Claude Tag access bundles so a repository that moved to another GitHub account can be added again
• [Claude Tag] Fixed a routine set up in a Slack DM thread no longer posting after another routine in that thread restarted the conversation; both now keep posting there
• [Claude Tag] Fixed routines set up in a Slack thread reporting success without posting after the conversation ended; those runs are now skipped and the creator is told
• [Claude Tag] Improved Claude Tag admin pages in large organizations so plugin, skill and bundle edits work while the channel list is still loading
• [Code Review] Fixed Code Review sometimes not reviewing the newest commit when several pushes landed on a pull request during a review
• [Code Review] Changed Code Review re-reviews so they no longer open with LGTM while earlier blocking findings are still open

v2.1.304

What's changed

... (truncated)

Commits

• d014fc0 chore: Update CHANGELOG.md and feed.xml
• 49b8c35 chore: Update CHANGELOG.md and feed.xml
• 5a2676e chore: Update mods/
• a6e289a chore: Update mods/
• 772c6be chore: Update CHANGELOG.md and feed.xml
• ef7bfdc chore: Update CHANGELOG.md and feed.xml
• dd6bee3 chore: Update mods/
• 8a8dff6 chore: Update mods/
• c017428 chore: Update CHANGELOG.md and feed.xml
• 03b5892 chore: Update CHANGELOG.md and feed.xml
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/claude-code since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Nothing to flag. This is a mechanical devDependency bump of @anthropic-ai/claude-code (2.1.259 → 2.1.306) in package.json/package-lock.json only — no production code, prompts, or workflow files touched.

Checked:

• No other file in the repo pins this CLI's version outside the two lockfile/manifest entries (it's invoked via npx in .github/workflows/dependabot.yml's "Investigate upstream bump" step, which resolves from package.json), so there's nothing else to update in step with this bump.
• "Investigate upstream bump" correctly shows SKIPPED on this PR's own check run — per .github/dependabot.yml's comment, this npm-ecosystem CLI bump is isolated from the anthropics/claude-code-action upstream SHA bump, and the two are never proposed in the same PR.
• The bumped package's own engines requirement (>=22.0.0) is still satisfied by this repo's package.json engines field (>=22.22.1 <23.0.0 || >=23.6.0).
• All CI checks (Typecheck, Lint, Format, Test, Actionlint, Commitlint, Required Checks) pass.

Title and description are dependabot's own standard auto-generated content and are already complete, so I left them untouched. No prior review exists on this PR to clean up.

[github-actions]

🗜️ Headroom context compression

Metric	Value
Requests proxied	11
Tokens saved	43510
Aggregate savings	4.5% of all tokens sent
Average per-request compression	5.8%