Tools
Claude Code 2.1.270 walks back a permission regression the previous day's security release introduced
Claude Code v2.1.270, published 2026-09-12T19:45Z, ships a single change: read-only git commands in Bash stopped honoring their allow rules and started prompting for permission once a session had been running a while, a regression explicitly attributed to 2.1.269. That was the release carrying the two permission-rule escape fixes and the world-readable plugin archive fix. `@anthropic-ai/claude-agent-sdk` v0.3.270 was cut eleven seconds later purely for parity, so SDK users pick up the same fix with no independent changelog.
Source
↳ Follow the thread