[Release] anthropics/claude-code v2.1.222: v2.1.222

Claude Code v2.1.222 is a maintenance release focused on security hardening, bug fixes, and stability improvements. Key fixes address worktree isolation for destructive git commands, tool restriction bypasses in background tasks, proxy connectivity issues, and usage attribution accuracy. The release also improves auto mode safety, refines model selection precedence, and removes the ultraplan feature.

Key Points

• •Strengthened worktree isolation to prevent destructive git commands in subagents and background sessions
• •Fixed PreToolUse auto-allow hooks that were bypassing tool restrictions in background agent tasks (summaries, compaction, renames)
• •Resolved proxy connectivity issues in startup checks by using proxy-aware transport with clear timeout messaging
• •Corrected usage attribution for MCP servers to reflect only requests that consumed tool results, not every turn after any call
• •Fixed session-to-PR linking for branches pushed via GitHub REST API and other methods
• •Improved auto mode safety by evaluating SendMessage dispatches through the permission classifier before sending
• •Fixed model family alias stepping for org-restricted models to use newest org-allowed model instead of parent fallback
• •Resolved stream idle timeout issues on custom ANTHROPIC_BASE_URL gateways despite server keep-alive pings
• •Enhanced diff views (Remote Control, web sessions) to use raw git blob content, ignoring workspace-configured diff drivers
• •Restricted Remote Control auto-start from being enabled by repo-local settings for improved security posture

Workflow Diagram

Concepts