clauding.de
DE

Claude Code

Claude Desktop v4.29.0: Skip All Approvals Now Follows Your Organization's Cowork Setting

3 min read AI-generated

Outside Auto and Skip all approvals, a scheduled task may now only fetch URLs named in its own instructions or found by a search. Background computer use on Mac had four bugs at once.

Featured image for "Claude Desktop v4.29.0: Skip All Approvals Now Follows Your Organization's Cowork Setting"

Claude Desktop jumped to v4.29.0 on October 27, up from v3.6556. It ships Claude Code 2.1.309. The major version bump comes without an explanation, but the changelog itself is unusually heavy.

Two changes to approvals

Skip all approvals now follows your organization’s Cowork setting instead of its Claude Code settings. A device’s own managed Claude Code settings still apply. When an admin turns Skip all approvals or Auto off, tasks running in that mode drop one level lower at their next start or next message. This does not apply in third-party deployments.

The second change is a guard against addresses that arrive from outside. Outside Auto and Skip all approvals, web fetch in a scheduled task now needs a URL that appears in the task’s instructions, or that came from a search or an earlier fetch. If you built a routine that lets a page tell it where to go next, that route is closed.

Computer use and SSH

Background computer use had four bugs at once on Mac: it replaced all the text in a field when the app was slow to respond, left a field you were typing in selected so one keystroke wiped it, pushed clicks aimed outside a window to that window’s edge, and got stuck at Finder’s Go to Folder. All four are fixed. On top of that, shell commands no longer keep running, or start at all, after you press Stop.

For SSH and WSL, which environment variables come from your own machine has changed. Switches, numbers and most settings still travel; longer text such as a cloud provider’s key or base URL only goes if it is saved under Environment variables. Also fixed: the app resending an SSH password after the server had refused it, which could lock the account.

For admins

  • behavesAs in inferenceModels names the Claude model behind a gateway alias, so that model’s effort levels and limits apply. Once any entry sets it, sessions ignore modelPicker in people’s own settings.
  • defaultState: off in managedMcpServers ships a connector that stays hidden until someone turns it on. Added later, it switches the connector off for everyone who has not enabled it.
  • oauth.omitResource for identity providers that reject the OAuth resource parameter, as Microsoft Entra ID can with AADSTS9010010.
  • platformOverrides gives a server different commands, arguments or environment per operating system. An invalid value under any one of them drops the server on every device.
  • toolTimeoutSec sets 5 to 3,600 seconds per server in place of mcpToolTimeoutSec.
  • At 75% of the limit set with inferenceMaxTokensPerWindow, Claude warns; adjust with inferenceTokenWarningPercent.
  • pull_request_review_write on the GitHub server now asks before every call, comment-only reviews included, even when toolPolicy allows it.

November 10 is in the changelog now

An unset desktopHome will open Unified Claude at launches after 12:00 PM PT on November 10, 2026, and with Cowork on it also turns on Chat and Advanced file analysis. I wrote about Chat and Cowork merging on October 9; until now that was an announcement. It is a line in a release note with a clock time attached. If you want to hold the interface still in your organization, set desktopHome before then. That is the reason not to skim past this one.

Sources

Claude DesktopCoworkReleaseMCP