Claude Code

If you installed a date version like 2026.8.31, npm will never offer 2.0.1 as an upgrade. The package manager ranks the new version below the old one.

One CFO says Claude worked through stacks of county, state and federal budgets with under ten minutes of prompting. The same report would have taken his team weeks.

A million skills published, nearly 280 million installed. From now on the standard will be maintained by individuals from Anthropic, Google and OpenAI.

A folder's permission mode is now stored separately for this computer, each SSH host and each WSL distribution. Folders set to 'Bypass permissions' start back in their default mode.

Agent Profiles arrive next month: one profile per agent inside your account, with its purchases listed separately and its own spending cap.

The Browser pane in SSH sessions now keeps sign-ins separate per session and only until you quit the app. Intranet sites at public-looking names it won't open at all.

The attacker's instructions fit into fewer than 100 Chinese characters. A successful break-in cost him about $50 in tokens.

One developer cleaned up his parents' TV over Wi-Fi and put the prompt on GitHub. In the two days that followed, a few thousand people did the same.

You only pay for calls that come back with HTTP 200 and an actual result. Asking for ten hits or fifty costs the same.

Eligible Enterprise organizations can claim at least $10,000 in credits by January 15, and those credits expire 30 days after you claim them. Anthropic runs Code Review on its own pull requests too.

A value the app doesn't recognize, say 'Standard' with a capital S, reads as 'off'. That takes Chat and Cowork both away.

AWS shipped spending limits on September 16, but so far only to a limited number of customers. Google Cloud got there back in July.

The built-in /diff now ships as a mod — switch it off in /plugin, or replace it with your own. Anthropic wants to pull more features out the same way until only a small core remains.

Computer use is gone on macOS 13 and earlier, because the screenshots could never be taken there. Behind a gateway, the default context window now sits at one million tokens instead of 200,000.

Sensitive operations on Anthropic's side need two-person approval, usage exports carry metering data only, and conversation history stays on the agency-managed device.

Messages sent between 14:00 and 14:59 UTC may not have been saved, Anthropic says.

Every submission is validated and safety-scanned the moment you send it. When the plugin goes live is then up to you.

New Code tab sessions now start in Auto mode where the model supports it, unless 'autoModeEnabled' is explicitly set to false.

Admins get two new levers on top: an allowlist for plugin MCP servers and a domain policy for the built-in browser.

Each thread is its own cloud session on its own branch. When two of them touch the same code, it reaches you as an ordinary merge conflict.