Vertex, Bedrock and gateways
Claude Code works again on Vertex, Bedrock and gateways that reject tool search
- Broke
- every request, when the endpoint or a gateway rejected tool search
- Also hit
- gateways with ToolSearch disallowed or left out of --tools
- Now
- Claude Code retries without tool search
If every Claude Code request started failing on Vertex, Bedrock or behind a gateway after the last update, this release fixes it. When the endpoint refuses tool search, Claude Code now retries without it.
Linux sandbox namespaces
>Sandboxed commands on Linux can now create user namespaces
- Setting
- sandbox.allowNestedUserNamespaces
- Runs
- Chromium and rootless podman inside the sandbox
- Trade-off
- those commands can get around the sandbox’s file protections
On Linux, Claude Code's sandbox gains a setting that lets commands create nested user namespaces, so Chromium and rootless podman can run inside it. Turning it on also lets those commands get around the sandbox's file protections.
/usage applies its own fixes
>/usage turns each warning into a one-line fix you apply with f
- Each warning
- names its source and the fix
- Press f
- to apply the fixes
- Also in
- VS Code and /doctor
The /usage screen now turns each warning into a one-line fix that names where the warning came from. Press F and Claude Code applies the fixes. The same fixes show up in VS Code and in /doctor.
Managed MCP servers
>allowedMcpServers stops filtering some managed MCP servers, so one may load on upgrade
- Affects
- managed-mcp.json stdio servers that use ${VAR} only in env
- On upgrade
- a server your allowlist left out now loads
- To keep it off
- deniedMcpServers
For admins who manage MCP servers, the allowlist no longer filters managed servers that run as a local command with variables only in their environment. One your allowlist left out now loads after the upgrade, unless you deny it.
Fixes you may have hit
>Fixed: full-disk errors, worktrees in bare repositories, /effort with modelOverrides
- Full disk
- Bash says the disk is full and nothing ran, instead of a raw ENOSPC path
- Bare repositories
- new worktrees start from the default branch, not local HEAD
- /effort and /autocompact
- apply when the model name differs from modelOverrides by letter case or a 1m tag
On a full disk, a Bash command now says the disk is full and that nothing ran. New worktrees in a bare repository start from the default branch. And /effort settings apply when the model name differs only by letter case.
The full changelog
Every change is in the Claude Code changelog
https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
Do you run Chromium or podman inside Claude Code’s sandbox?
The Claude Code changelog has the rest, including Claude Tag routines in Slack and Code Review fixes. So, do you run Chromium or podman inside Claude Code's sandbox?
