[dependabot]

Bumps the javascript-minor-and-patch group with 1 update: @anthropic-ai/claude-code.

Updates @anthropic-ai/claude-code from 2.1.283 to 2.1.288

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.288

What's changed

• Added $.ui.selection() for mods: returns the text you last selected in fullscreen mode and, when the selection lies within one transcript row, that row
• Added a built-in gh api to cloud sessions whose image has no GitHub CLI, and fixed the built-in sending control characters from file names, jq filters or GitHub errors to the terminal
• Added recovery for a prompt cleared with Ctrl+C: pressing Up on the empty prompt brings the draft back, including pasted text and images
• Added a re-authenticate prompt when an MCP server asks for more OAuth scope during a tool call
• Added --max-findings <n>|all to /code-review to report more or fewer findings than the usual limit; the choice is reused until you pass --max-findings default
• Added Ctrl+F to find a session by name and Alt+↑/↓ to jump between groups in the agents view; both, and rename, can be rebound in keybindings.json
• Added a screen reader mode announcement of the new permission mode when you approve a plan, including with Shift+Tab
• Fixed mid-response API timeouts failing the turn: non-interactive sessions and subagents now continue from the partial response, and thinking-only responses are retried
• Fixed long conversations failing with "Prompt is too long" instead of auto-compacting when the last reply reported zero token usage
• Fixed --resume sometimes dropping files and other context that a compaction had just restored
• Fixed a resumed session sometimes not saving the last response of a turn, so that the next --resume showed the prompt unanswered
• Fixed resume occasionally loading a transcript cut short when the same session rewrote the file during the load
• Fixed resuming a conversation started on 2.1.286 or earlier dropping the model's earlier thinking
• Fixed session titles, memory recall and prompt hooks failing on Mantle or behind gateways that reject structured outputs; added CLAUDE_CODE_DISABLE_STRUCTURED_OUTPUTS to turn structured outputs off
• Fixed auto mode denials pointing Claude at a Bash permission rule when the blocked tool was not Bash
• Fixed auto mode on Bedrock and Mantle switching to the local classifier for the rest of the session after a request to an older model, such as a WebFetch summary or a sonnet subagent
• Fixed cloud sessions that restarted on a newly picked model replying with that model after the server refused it
• Fixed Cowork cloud sessions staying marked as waiting for input after a WebFetch permission prompt for an unapproved URL went unanswered for five minutes
• Fixed prompt suggestions not appearing on a phone that joins a Cowork cloud session started on another device
• Fixed a mod's button sometimes running a different button's action when pressed on a view drawn before Claude Code restarted
• Fixed a plugin's pane showing nothing when one Code element held a diff that does not parse; it now draws as plain code
• Fixed plugin LSP servers receiving literal ${user_config.*} and ${CLAUDE_PLUGIN_ROOT} placeholders in initializationOptions and settings instead of substituted values or manifest defaults
• Fixed a plugin's tool.call hook making Bash fail and file searches read the wrong folder in subagents that run in a worktree
• Fixed git-subdir plugin installs failing, or caching an incomplete plugin, on older git (before 2.39, e.g. Ubuntu 22.04's 2.34)
• Fixed plugins loaded with --plugin-dir not showing "Configure options" in /plugin
• Fixed background sessions ending when a plugin was reloaded or disabled while one of its timers or reads was still running
• Fixed sandboxed heredocs with an unquoted delimiter (python3 <<EOF) asking for approval on every run under sandbox auto-allow when the body holds only plain text and simple $VAR references
• Fixed Bash tool permission check to prompt before a BASHPID assignment whose value the shell would evaluate as arithmetic, instead of allowing it silently
• Fixed fullscreen sessions exiting with "unrecoverable interface error" when opening the background tasks dialog while a plugin or mod showed rows above the prompt
• Fixed Claude reporting a message to another session as delivered when that session held it: the notice now says it wasn't delivered and names the session, and in SDK sessions Claude can now learn of it mid-turn
• Fixed OpenTelemetry claude_code.tool.blocked_on_user spans reporting unknown source or decision in -p and SDK sessions and for PreToolUse hook approvals
• Fixed permission asks that ended unanswered, in -p or on an interrupted turn, emitting no tool_decision event
• Fixed Edit and Retry in Cowork cloud sessions refusing a message sent before /compact even though its history was still saved
• Fixed unattended sessions (CLAUDE_CODE_RETRY_WATCHDOG) retrying for hours after a very long response stream failed; Claude Code now streams again, and gives up after three timeouts
• Fixed /loginanthropics/claude-code#73861
• Fixed a Stop during Bedrock credential lookup sometimes moving the session to a fallback model instead of ending the request
• Fixed a second gcpAuthRefresh/awsAuthRefresh browser sign-in opening when a laptop wakes from sleep while another Claude Code process is signing in
• Fixed agent teams: a plugin-defined agent spawned by name now runs with its own prompt, tools, disallowedTools and effort instead of the defaults
• Fixed headless (-p / SDK) sessions occasionally ignoring SIGTERM when a supervisor such as timeout or systemd sends SIGCONT alongside it
• Fixed restarted cloud sessions restoring a model that the organization's enforced model list refuses
• Fixed MCP tool calls sometimes running twice when a remote server's result was over 16 MB or could not be parsed
• Fixed subagents in Claude Desktop's Code tab getting none of the tools of a user-configured MCP server named memory
• Fixed Claude in Chrome asking before every screenshot and page read on a site you allowed when auto mode is unavailable (such as with disableAutoMode or an older model); typing, navigation and JavaScript still ask
• Fixed claude plugin install failing for GitHub-source plugins on macOS and Linux machines with no GitHub SSH key: the clone now falls back to HTTPS and prints a notice
• Fixed sandbox.credentials.files entries on git config files not taking effect while permissions.blockReadsOutsideWorkingDirectories is on
• Fixed Claude leaving out your organization's design systems when starting slides or a design with the Artifact tool on Team and Enterprise plans or machines with managed settings
• Fixed the keyboard not working on Windows after Claude Code restarts itself (first sign-in to a Claude apps gateway, provider setup, /tui)

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-code's changelog.

2.1.288

• Added $.ui.selection() for mods: returns the text you last selected in fullscreen mode and, when the selection lies within one transcript row, that row
• Added a built-in gh api to cloud sessions whose image has no GitHub CLI, and fixed the built-in sending control characters from file names, jq filters or GitHub errors to the terminal
• Added recovery for a prompt cleared with Ctrl+C: pressing Up on the empty prompt brings the draft back, including pasted text and images
• Added a re-authenticate prompt when an MCP server asks for more OAuth scope during a tool call
• Added --max-findings <n>|all to /code-review to report more or fewer findings than the usual limit; the choice is reused until you pass --max-findings default
• Added Ctrl+F to find a session by name and Alt+↑/↓ to jump between groups in the agents view; both, and rename, can be rebound in keybindings.json
• Added a screen reader mode announcement of the new permission mode when you approve a plan, including with Shift+Tab
• Fixed mid-response API timeouts failing the turn: non-interactive sessions and subagents now continue from the partial response, and thinking-only responses are retried
• Fixed long conversations failing with "Prompt is too long" instead of auto-compacting when the last reply reported zero token usage
• Fixed --resume sometimes dropping files and other context that a compaction had just restored
• Fixed a resumed session sometimes not saving the last response of a turn, so that the next --resume showed the prompt unanswered
• Fixed resume occasionally loading a transcript cut short when the same session rewrote the file during the load
• Fixed resuming a conversation started on 2.1.286 or earlier dropping the model's earlier thinking
• Fixed session titles, memory recall and prompt hooks failing on Mantle or behind gateways that reject structured outputs; added CLAUDE_CODE_DISABLE_STRUCTURED_OUTPUTS to turn structured outputs off
• Fixed auto mode denials pointing Claude at a Bash permission rule when the blocked tool was not Bash
• Fixed auto mode on Bedrock and Mantle switching to the local classifier for the rest of the session after a request to an older model, such as a WebFetch summary or a sonnet subagent
• Fixed cloud sessions that restarted on a newly picked model replying with that model after the server refused it
• Fixed Cowork cloud sessions staying marked as waiting for input after a WebFetch permission prompt for an unapproved URL went unanswered for five minutes
• Fixed prompt suggestions not appearing on a phone that joins a Cowork cloud session started on another device
• Fixed a mod's button sometimes running a different button's action when pressed on a view drawn before Claude Code restarted
• Fixed a plugin's pane showing nothing when one Code element held a diff that does not parse; it now draws as plain code
• Fixed plugin LSP servers receiving literal ${user_config.*} and ${CLAUDE_PLUGIN_ROOT} placeholders in initializationOptions and settings instead of substituted values or manifest defaults
• Fixed a plugin's tool.call hook making Bash fail and file searches read the wrong folder in subagents that run in a worktree
• Fixed git-subdir plugin installs failing, or caching an incomplete plugin, on older git (before 2.39, e.g. Ubuntu 22.04's 2.34)
• Fixed plugins loaded with --plugin-dir not showing "Configure options" in /plugin
• Fixed background sessions ending when a plugin was reloaded or disabled while one of its timers or reads was still running
• Fixed sandboxed heredocs with an unquoted delimiter (python3 <<EOF) asking for approval on every run under sandbox auto-allow when the body holds only plain text and simple $VAR references
• Fixed Bash tool permission check to prompt before a BASHPID assignment whose value the shell would evaluate as arithmetic, instead of allowing it silently
• Fixed fullscreen sessions exiting with "unrecoverable interface error" when opening the background tasks dialog while a plugin or mod showed rows above the prompt
• Fixed Claude reporting a message to another session as delivered when that session held it: the notice now says it wasn't delivered and names the session, and in SDK sessions Claude can now learn of it mid-turn
• Fixed OpenTelemetry claude_code.tool.blocked_on_user spans reporting unknown source or decision in -p and SDK sessions and for PreToolUse hook approvals
• Fixed permission asks that ended unanswered, in -p or on an interrupted turn, emitting no tool_decision event
• Fixed Edit and Retry in Cowork cloud sessions refusing a message sent before /compact even though its history was still saved
• Fixed unattended sessions (CLAUDE_CODE_RETRY_WATCHDOG) retrying for hours after a very long response stream failed; Claude Code now streams again, and gives up after three timeouts
• Fixed /loginanthropics/claude-code#73861
• Fixed a Stop during Bedrock credential lookup sometimes moving the session to a fallback model instead of ending the request
• Fixed a second gcpAuthRefresh/awsAuthRefresh browser sign-in opening when a laptop wakes from sleep while another Claude Code process is signing in
• Fixed agent teams: a plugin-defined agent spawned by name now runs with its own prompt, tools, disallowedTools and effort instead of the defaults
• Fixed headless (-p / SDK) sessions occasionally ignoring SIGTERM when a supervisor such as timeout or systemd sends SIGCONT alongside it
• Fixed restarted cloud sessions restoring a model that the organization's enforced model list refuses
• Fixed MCP tool calls sometimes running twice when a remote server's result was over 16 MB or could not be parsed
• Fixed subagents in Claude Desktop's Code tab getting none of the tools of a user-configured MCP server named memory
• Fixed Claude in Chrome asking before every screenshot and page read on a site you allowed when auto mode is unavailable (such as with disableAutoMode or an older model); typing, navigation and JavaScript still ask
• Fixed claude plugin install failing for GitHub-source plugins on macOS and Linux machines with no GitHub SSH key: the clone now falls back to HTTPS and prints a notice
• Fixed sandbox.credentials.files entries on git config files not taking effect while permissions.blockReadsOutsideWorkingDirectories is on
• Fixed Claude leaving out your organization's design systems when starting slides or a design with the Artifact tool on Team and Enterprise plans or machines with managed settings
• Fixed the keyboard not working on Windows after Claude Code restarts itself (first sign-in to a Claude apps gateway, provider setup, /tui)
• Fixed a stall when launching an agent whose tools: lists very many Agent(...) entries

... (truncated)

Commits

• 1c229fc chore: Update CHANGELOG.md and feed.xml
• 52c7644 chore: Update CHANGELOG.md and feed.xml
• 816ec21 chore: Update CHANGELOG.md and feed.xml
• 6160717 diff: the dialog opens every file it lists, and says nothing when closed (#98...
• 525d3b3 diff: the pane notices a finished merge by itself, and stays quiet on an unus...
• 292c5b8 diff: the pane reads every file's hunks with one git process, where it starte...
• 9778ad7 diff: the pane reads the diff again after a rebase that finished (#98374)
• f5f6025 chore: Update CHANGELOG.md and feed.xml
• 732e167 Merge pull request #97952 from anthropics/security-hardening-gh-actions
• 89c73ce Remove a compiled Python file committed by mistake
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/claude-code since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: rheos/coderabbit/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 474cdcb3-5577-4306-8986-3b83ee570f4d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Looks like @anthropic-ai/claude-code is updatable in another way, so this is no longer needed.