chore(deps): update all dependencies

[gw0-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@anthropic-ai/claude-code	2.1.252 → 2.1.260				patch
@owloops/claude-powerline	1.30.1 → 1.30.3				patch
docker.io/oven/bun	1.4.0-slim → 1.4.1-slim			final	patch
rtk-ai/rtk	0.46.0 → 0.47.0				minor
sickn33/agentic-awesome-skills	16.5.0 → 16.7.0				minor

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.260

Compare Source

• Added a diff panel that opens beside the conversation in fullscreen mode and shows your uncommitted changes as Claude edits; toggle it with /diff
• Added a likely cause for prompt-cache misses (e.g. tool definitions or system prompt changed, idle past the TTL) to /cost and the status line's prompt_cache field
• Added /reload-plugins to headless sessions, so it appears in the Claude Code Desktop and SDK command lists
• Added a text form of /advisor (/advisor, /advisor <model>, /advisor off) for the desktop app, Remote Control, and other headless (-p/Agent SDK) sessions
• Added oidc.scope_on_refresh to the Claude apps gateway for IdPs that return an id_token on refresh only when asked for openid again
• Added Claude apps gateway support for newer Claude Desktop keys in desktop policy blocks, including userPluginMarketplacesEnabled and userPluginUploadsEnabled
• Fixed Edit/Write/Read permission rules whose path contains parentheses being dropped as invalid or ignored by the Bash sandbox, which left "read-only" folders writable
• Fixed one file permission rule with an uncompilable pattern (e.g. an unclosed [) making every file edit fail with Invalid regular expression; such a deny rule now guards the literal path it spells
• Fixed Bash permission checks auto-approving zsh commands that hide a command substitution in a REPORTTIME, REPORTMEMORY or DIRSTACKSIZE assignment; these now prompt for approval
• Fixed Bedrock model discovery, token counting and AWS SSO/STS credential calls failing with "unable to get local issuer certificate" when the corporate root CA is only in the OS certificate store
• Fixed permissions.blockReadsOutsideWorkingDirectories on macOS hiding the user's git config from sandboxed git and hiding a worktree-isolated sub-agent's own checkout
• Fixed managed settings not loading for claude.ai Enterprise/Team users who also had a leftover API key from an earlier /login
• Fixed /status listing a signed-in claude.ai account and a configured API key as if both were in effect; the credential not in use is now marked
• Fixed managed skillOverrides entries keyed on a bundled skill's alias (e.g. checkup for /doctor) not applying, and Skill(name) deny rules not covering a nested skill listed as <dir>:name
• Fixed model: fable agents ignoring the [1m] tag on an ANTHROPIC_DEFAULT_FABLE_MODEL pin and silently running with a 200K context window
• Fixed the /model picker not showing Fable 5.1 for organizations that can use it, which was only accepted when typed as /model claude-fable-5-1
• Fixed prompt caching on Claude Fable 5.1 not covering the context attached after tool results, so it was re-sent as uncached input on every tool-call turn
• Fixed model switching staying blocked for the rest of the session after a plugin hook load failure; each switch now re-checks and the refusal names the cause
• Fixed model switching being blocked for the session when an organization-managed plugin's marketplace could not be loaded
• Fixed SDK-provided MCP servers (e.g. Desktop connectors) sometimes missing from the first turn and only appearing on the next one
• Fixed Claude in Chrome tools failing with "Not connected" mid-task in cloud-hosted claude.ai sessions when a connector was added or removed
• Fixed flags, joined emoji and accented letters splitting across wrapped lines, and stale text staying on screen when a flag or joined emoji falls in the terminal's last two columns (now shown as …)
• Fixed Remote Control accepting a model pick that is not a valid model name; it is now refused with an error instead of failing on the next message
• Fixed /rewind and --rewind-files reporting success when checkpoint backup files were missing and nothing was actually restored
• Fixed /rewind leaving stale file-read tracking from the rewound-away turns, which caused "File unchanged since last read" stubs and full-file re-injection after external edits
• Fixed -p --resume/--continue (as used by the desktop app) failing on every retry once a session's worktree directory lost its git metadata; it now fails once, then resumes without the worktree
• Fixed a subagent that resumed another agent via SendMessage never being woken by that agent's completion (the notification went to the main conversation instead)
• Fixed agent teams: an in-process teammate's transcript losing messages, or going blank, during long API retry waits (e.g. under CLAUDE_CODE_RETRY_WATCHDOG) as retry notices evicted real messages
• Fixed a session that moved to the background appearing twice in ListAgents (once as a phantom "interactive" twin with the same name) and receiving SendMessage deliveries in the viewer
• Fixed intermittent "task output swap refused" errors when many sessions share a project directory
• Fixed Ctrl+Z in fullscreen leaving the shell on the alternate screen, drawn over the paused interface
• Fixed Workflow tool subagents being restarted as stalled while a long context compaction was still in progress
• Fixed plugins from a URL marketplace failing to install with "marketplace entry path does not stay inside the marketplace directory" when a host app (e.g. Claude Desktop) stores it as a directory
• Fixed an extra browser tab opening when an artifact is published in a session you're driving from claude.ai, the desktop app, or mobile (Remote Control)
• Fixed the Artifact tool's first call failing with an "Invalid tool parameters" validation error in some Cowork sessions
• Fixed IDE line selections being dropped when running a skill or slash command (the "N lines selected" context now reaches Claude)
• Fixed repository detection for GitLab projects in nested subgroups (e.g. gitlab.com/group/subgroup/project)
• Fixed owner/repo#123 issue references in rendered output linking to github.com when working in a GitLab repository; they now link to the gitlab.com issue
• Glob/Grep: Fixed the search path being probed on disk before the permission check; a missing path is now reported after permission is decided, as Read does
• Reverted the 2.1.259 change applying Read() deny rules to Bash arguments; it denied npm run build under a Read(./**/build/**) rule in every mode and made cd … && grep prompt even in auto mode
• Improved structured output: Workflow agent({schema}) rejects a JSON Schema that can never be satisfied up front, and retry-cap errors now include the last validation failure
• Improved deleting a background session whose worktree has unpushed commits: the message now names the branch and commit count, and deleting again discards the worktree
• Improved the Claude apps gateway's refresh-failure log to name the step that failed
• Improved idle CPU usage of non-interactive (-p / SDK) sessions
• Improved the Claude apps gateway on Amazon Bedrock: input tokens for an aborted request are now counted with AWS's free CountTokens API (grant bedrock:CountTokens) instead of a one-token request
• Improved the settings error for rules such as Edit(C:\dir\(name)\**), where \( is read as an escaped parenthesis rather than a path separator, to suggest an unambiguous spelling
• Improved auto-compact for 1M-context models: Opus and Fable sessions now compact shortly before the 1M-token limit, and recovery compaction on very large contexts no longer times out at 10 minutes
• Improved /ultrareview and claude ultrareview to wait up to 45 minutes (previously 30) for long-running cloud reviews
• Improved /effort on Claude Fable 5.1 so changing effort mid-session no longer invalidates the prompt cache
• Updated the bundled claude-api skill so its Go, Java, and C# samples use current-generation model IDs, and clarified that cheaper worker or sub-agent models should be current-generation too
• Changed ctrl+l / cmd+k in fullscreen mode to clear the transcript view like a terminal clear; scroll up to see earlier messages
• Changed permission rules with text after the closing parenthesis (e.g. Bash(ls) x), which never matched anything, to be reported as invalid settings instead of being silently ignored
• Changed server-managed settings so a managed CLAUDE.md (claudeMd) no longer triggers the security approval dialog; hooks, shell-command, sandbox, and unsafe env settings still require approval
• Changed Claude in Chrome to follow your organization's Claude in Chrome admin setting; when an admin turns it off, --chrome, /chrome and the browser tools are unavailable
• Changed Claude apps gateway to send orgPluginSettings in the list form read by Claude Desktop 1.15200.0 and later; older desktops ignore it
• Changed Claude apps gateway to also refuse to start, naming the field, when a desktop policy misspells a field in a nested object of a managedMcpServers or orgPluginSettings entry
• Changed commands typed at the ! bash-mode prompt to run outside the sandbox even when strict sandbox mode (sandbox.allowUnsandboxedCommands: false) is on, like typing into your own terminal
• Changed self-hosted runner --kill-session-after-min to release a session that is only waiting on its user (paused, resumable on the next message) instead of killing it and reporting a failure
• Removed the one-hour time limit on background commands started by subagents; they now run until they exit or are stopped, matching the main session
• [VSCode] Added the selected effort level to the footer model pill, fixed a stale effort level after switching models, and returned the footer pills to their earlier compact size
• [VSCode] Added Open and Closed to the session list's status filter menu
• [VSCode] Fixed the welcome screen disappearing in a new session when Remote Control turns on automatically
• [VSCode] Fixed the session history picker loading a session a second time when it is already open in another tab; it now switches to that tab
• [VSCode] Fixed the session tab's Rename command silently doing nothing while the tab's view was reloading; it now always applies
• [VSCode] Fixed a half-finished message, an empty tool card or an extra "Thought for" line staying on screen after Claude Code retried a dropped response
• [VSCode] Fixed "Enable Remote Control for all sessions" not applying to a session tab that was still starting when the toggle was flipped

v2.1.259

Compare Source

• Added managedMcpServers managed setting: organizations can provide HTTP/SSE MCP servers to every user (same entry shape as .mcp.json); entries that name a command to run are skipped
• Added --permission-prompts none for unattended headless hosts: anything that would prompt is denied automatically while the active permission mode (including auto mode) keeps deciding
• Added recognition of glab mr create/merge/close/reopen/note/update so GitLab merge requests show as MR !N in the collapsed tool summary and refresh the footer MR badge
• Added --json to claude plugin validate for a machine-readable validation report
• Fixed concurrent sessions silently reverting each other's ~/.claude.json changes — workspace trust no longer resets and MCP/project state is no longer lost when running many sessions at once
• Fixed a conversation whose thinking was rejected once being rejected again on every later turn
• Fixed Bash Read() deny rules not covering files given as option values (--ignore-revs-file=.env, -f.env, @file), git diff/git grep file operands, or cd DIR && cat FILE compounds; grep -r/cp -r over a directory holding a denied file now asks
• Fixed the prompt cache being invalidated when the OAuth token refreshed in sessions with telemetry disabled
• Fixed fullscreen mode showing a blank conversation after a long turn with hundreds of tool calls
• Fixed auto mode running a turn on a model it doesn't support when a command or skill's frontmatter model: named one; the turn now keeps the session model
• Fixed CLAUDE_CODE_MAX_CONTEXT_TOKENS being ignored for Vertex-style model IDs (@YYYYMMDD suffix) of model versions Claude Code doesn't recognize
• Fixed the live output preview of a running shell command hiding its newest lines when an earlier line wrapped
• Fixed a background GitHub connection check that ran on every launch for claude.ai users; the result is now remembered across launches
• Fixed --resume failing (and --continue opening an empty conversation) when a saved session contains an attachment entry with no payload
• Fixed frontmatter model: on custom commands and skills being ignored in interactive sessions
• Fixed Artifact publishing failing once with an "unexpected parameter note" error in conversations continued from an older version
• Fixed managed forceRemoteSettingsRefresh being ignored at startup when a policy helper configured by MDM or the managed settings file had already run
• Fixed worktree isolation refusing hook-created worktrees on machines where git rev-parse fails with a message other than "not a git repository"
• Fixed OpenTelemetry metrics and events from cloud sessions missing the user.email, organization.id, and user.account_uuid attributes
• Fixed MCP servers that disconnect while their tools are being listed at startup showing as connected with no tools instead of reporting the error
• Fixed the file edit permission dialog sometimes showing a changed line cut short with no indication
• Fixed repository detection dropping a known repo identity after a transient git probe failure
• Fixed managed settings silently going unenforced when the managed-settings file, a drop-in, the MDM plist, or the HKLM value cannot be parsed: Claude Code now refuses to start and names the source
• Fixed Stop not actually stopping background agents and workflows in remote-control sessions: killed tasks now stay visible and re-stoppable until their processes exit
• Fixed resuming a workflow run while its previous stopped run was still exiting, which could run duplicate copies of its agents
• Fixed marketplace repo URLs on github.com with a trailing slash or dangling ?/# producing an unusable .git clone URL
• Fixed blocking Stop hooks causing the turn after a block to lose the model's reasoning from that turn and, on some models, miss the prompt cache
• Fixed remote (claude.ai) sessions taking 60 seconds to start a turn after a browser-hosted MCP server's page had gone away
• Fixed worktree-isolated sessions refusing common Bash loops, xargs pipelines and launcher-wrapped commands that cannot reach the main checkout
• Improved terminal resize and first-render performance for long responses by reusing text measurements
• Improved /workflows agent detail: JSON outcomes are pretty-printed with syntax colors and real line breaks, and long outcomes fold behind an expand toggle
• Improved headless/SDK session start: the first turn begins up to 50 ms sooner when MCP servers finish connecting
• Improved /install-github-app to explain it is GitHub-only and point to the GitLab CI/CD docs when run inside a GitLab repository
• Improved nested background subagent results to be saved in the parent subagent's transcript, so resumed subagents keep them and shared transcripts show the delivery
• Changed allowedMcpServers to govern only servers users add: a literal managed-mcp.json server your allowlist used to filter out now loads on upgrade; use deniedMcpServers to keep it off
• [VSCode] Added an Active quick filter and a status filter menu (Needs input, Working, Completed) to the session list sidebar
• Fixed remote and scheduled sessions doing nothing after a connector-tool permission prompt was approved while the session was paused

v2.1.258

Compare Source

• Fixed Claude Code failing to launch on macOS 12 (Monterey), a regression introduced in 2.1.255
• Fixed remote and scheduled sessions failing with "user messages must have non-empty content" after a re-sent permission approval could not be applied

v2.1.257

Compare Source

• Added Claude Fable 5.1 (claude-fable-5-1), now the default Fable model — 1M context, $10/$50 per Mtok with $0.25/Mtok cache reads
• Added "Time format" (timeFormat) and timeZone settings: 12-hour, 24-hour, 24-hour UTC, or a strftime pattern for the turn-end clock and transcript-view timestamps
• Added a Containment Escape rule to auto mode so cloud metadata-credential fetches, egress evasion, and cross-tenant reach are no longer auto-approved unless your environment marks them expected
• Added CLAUDE_CODE_SUBAGENT_MODEL_FORCE to apply CLAUDE_CODE_SUBAGENT_MODEL (or the main model) to every subagent, ignoring per-spawn and agent-definition model overrides
• Added s in /effort to change effort for the current session only, matching /model
• Added a /doctor warning for stale sandbox mask files left by a killed session
• Added a one-time prompt in auto mode before the first file read outside the working directories, with the option to block such reads (permissions.blockReadsOutsideWorkingDirectories)
• Added support for a gateway-supplied description on discovered /model picker entries (CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY); entries without one still read "From gateway"
• Fixed settings in a .claude/ folder created after startup not being picked up until restart
• Fixed sessions dispatched from an agent view opened with ← always starting in the original session's permission mode, overriding the target directory's defaultMode and the agent's permissionMode
• Fixed keybindings.json rebinds of Ctrl+G being ignored in claude agents; its Ctrl+S / Ctrl+T are now rebindable via the new Agents context
• Fixed background sessions failing to start on macOS npm installs during a self-update, and on Windows when a stale daemon lock file pointed at a reused process id
• Fixed the working spinner stopping while a response streams behind a slash-command panel
• Fixed a background session's state.json detail repeating its own dispatch prompt after a scheduled wake-up
• Fixed claude agents keeping a background session you re-prompted buried in Completed after it finished again; Completed now orders by the latest finish
• Fixed claude --bg from a directory that was just deleted reporting "backgrounded" and leaving a crashed session row; it now prints the reason and exits 1
• Fixed Remote Control connecting mid-session re-sending the Bash tool definition, causing a prompt-cache miss
• Fixed a doubly-listed custom Authorization header overriding the configured credential on Bedrock, Mantle, Vertex, and WIF, and the Vertex setup wizard picking up a leftover Anthropic profile from ~/.config/anthropic
• Fixed Claude apps gateway sending stray host Authorization or profile headers to Foundry, Vertex, and Bedrock, and Foundry Entra ID upstreams not starting when ANTHROPIC_FOUNDRY_API_KEY is set
• Fixed a leftover Anthropic API key or auth token being sent alongside your Foundry subscription key in API-key mode
• Fixed /schedule routines whose prompt was saved without a message role and then ran with nothing to do
• Fixed claude agents not saying that a background session is waiting for you to approve a message from another session, or who sent it
• Fixed a prompt stashed with Ctrl+S inside an opened background session being lost when the session went idle or was stopped and then reopened
• Fixed telemetry (OTEL) settings pushed through server-managed settings being ignored on warm starts, including desktop-app Code sessions
• Fixed a teammate permission request being answered twice when the leader's mailbox write was briefly locked
• Fixed a phantom duplicate slash-command row rendering below the in-flight turn while a command's auto-continued response streamed
• Fixed policyHelper timeoutMs and refreshIntervalMs values above the timer maximum (2147483) causing failures or re-runs every millisecond; they are now clamped
• Fixed the token counter freezing or crawling after switching to another subagent's transcript, and made background subagents' and teammates' counters update live while a response streams
• Fixed sandbox network hosts written with a trailing dot (example.com.): a deniedDomains entry didn't block the host inside the sandbox, and "don't ask again" for such a host kept prompting
• Fixed dismissing the Remote Control consent prompt (Esc, or n at claude remote-control) counting as consent, so the next request connected without asking
• Fixed /mcp reconnect and enable still connecting a settings-file MCP server that a managed MCP allow/deny list or strictPluginOnlyCustomization loaded after startup should block
• Fixed claude mcp remove leaving a remote server's stored OAuth credentials behind when strictPluginOnlyCustomization locks MCP to plugin-only servers
• Fixed Remote Control (claude remote-control) sessions started from the Claude app ignoring the selected model and running on the machine's default instead
• Fixed --disallowedTools and session deny rules being dropped after the first settings reload when allowManagedPermissionRulesOnly is enabled
• Fixed --resume listing a backgrounded conversation twice and --continue reopening its stalled pre-background copy; --continue now also opens finished background sessions
• Fixed fullscreen mode not letting you click ! shell command output to expand it
• Fixed background sessions left running an older Claude Code binary piling up across auto-updates instead of being retired
• Fixed claude agents --json briefly switching the terminal to raw mode and undoing another program's terminal settings on exit
• Fixed Proactive output style sessions busy-looping with filler messages and repeated log reads instead of idling while a background command or Monitor they started is still running
• Fixed subagents stopping when a response was cut off mid-stream by a computer sleep, dropped connection, or server error; they now automatically continue instead of ending with an incomplete response
• Fixed ← doing nothing in the /btw panel inside a claude agents session: it now returns to the agents list (even mid-answer), and the panel comes back when you reopen the session
• Fixed sessions with an advisor model set missing the prompt cache on background requests (compaction, /recap, prompt suggestions) and re-sending the full conversation uncached each time
• Fixed claude -p exiting about 5 seconds after its final result while a Monitor the model armed was still running; it now waits for the watch to fire or time out
• Fixed a permissions.ask rule being skipped in auto mode when the matching command ran inside a compound command or subshell, letting it run without the confirmation prompt
• Fixed plugins being able to read files outside their own directory through a declared command, agent, skill, hooks or other component path that is a symlink; such paths are now refused with an error
• Fixed /add-dir rejecting a directory inside the current working directory; it now loads that directory's skills, commands, and agents like --add-dir does at startup
• Fixed the main agent not being told when you resume a subagent you had stopped from its transcript view
• Fixed a crash when pasting ANSI-colored text (e.g. a CI log) into dialogs like /feedback
• Fixed claude mcp add/remove hanging or exhausting memory when the project's .mcp.json is a FIFO or a device-file symlink; it now fails fast with an actionable message
• Fixed unbounded memory growth when non-JSONL data is piped into claude -p --input-format stream-json; it now fails fast with a clear error
• Fixed backgrounding a turn (← or Ctrl+B) while a subagent or other tool was running occasionally making the background session treat that tool as rejected instead of re-running it
• Fixed Bash Read()/Edit() deny rules not applying to < file redirects and reader commands like tac and egrep; a deny rule on any argument or redirect target now refuses the command
• Fixed resuming or messaging a subagent whose transcript had grown past 5 MB (for example after reading many images) failing with "No transcript found"
• Fixed worktree-isolated sessions refusing Bash loops, $VAR reads, "$(…)" and heredocs that never touch git as "too complex to verify that it stays inside the worktree"
• Fixed /model and /effort showing a prompt-cache warning after rewinding a conversation back to empty
• Fixed prompt-cache misses on every turn in long screenshot-heavy sessions once images exceeded the per-request size cap
• Fixed the Edit permission prompt's diff view rendering emoji and multi-code-point characters with incorrect widths
• Fixed WebSocket MCP server connection failures being logged as "[object ErrorEvent]" instead of the underlying error
• Fixed background sessions failing to open with "Couldn't start the background service" while another Claude Code process was downloading an npm update; the start now waits for it
• Fixed background commands that detach from their shell (for example under timeout or setsid) surviving a task stop or Claude Code exit
• Fixed Claude not being told when you stop a background command from the tasks panel or a connected client
• Fixed stopping a background subagent leaving its monitors running
• Fixed sandboxed git commands in a linked worktree losing write access to the repository's common .git directory after cd into a subdirectory
• Fixed Bedrock and Bedrock Mantle requests going silent during long hidden-thinking phases on Opus 4.7 and later, which let idle timeouts cut the connection; the stream now carries progress events
• Fixed launching Claude Code after a Claude apps gateway expired or revoked your session: it now says the session ended and offers /login instead of reporting a network error
• Fixed cloud sessions losing git/GitHub credentials for the rest of the session when the session's network proxy failed to start at launch; it now retries in the background and recovers
• Fixed leftover cc-daemon-* folders in the system temp directory after an interrupted background daemon start; the cleanupPeriodDays retention sweep now removes them
• Fixed Bash permission checks auto-approving certain [[ ]] conditionals that zsh parses differently from bash; these commands now prompt for approval
• Fixed the managed-settings approval prompt showing the generic warning instead of its telemetry wording when the settings also turn detailed tracing or raw API body logging off, or trace export on
• Fixed agent-team teammates in tmux/iTerm2 panes sometimes staying open after acknowledging a shutdown request
• Fixed the keyless Console sign-in ("Sign in with your Console account") not applying your organization's server-managed settings, and /status not showing the Organization for that sign-in
• Improved rendering performance: less re-render work per turn in long conversations, streaming no longer slows down as the reply grows, and background-agent updates no longer re-render the whole screen
• Improved prompt input responsiveness by reducing per-keystroke rendering work
• Improved policy helper diagnostics — refresh failures now show in /status, declining the managed-settings dialog prints why Claude Code exited, and helper timeouts are reported as timeouts
• Improved /code-review --comment to post findings on GitLab merge requests via glab mr note instead of reporting the target as unsupported
• Improved notifications: an MCP elicitation or permission ask queued under another dialog now sends its idle desktop notification at the same delay as a visible ask
• Improved verbose/transcript output: async hook completion notices that arrive together now appear on one line instead of one line per hook
• Improved claude self-hosted-runner --configure-git to also enable git push negotiation, so the first push of a new branch from a stale clone uploads only the new commits instead of the whole tree
• Improved liveness reporting to SDK hosts while a response is held open by gateway keep-alives, so long waits under a raised CLAUDE_STREAM_IDLE_TIMEOUT_MS are not mistaken for a hung session
• Improved MCP connection and OAuth debug/error logs so credentials carried in a server's URL or request headers are redacted
• Improved /fork to keep the original conversation's prompt cache in the new background session: its worktree briefing now arrives as a message instead of a system-prompt change
• Improved emoji autocomplete to accept the remaining GitHub/Slack shortcode aliases (:satisfied:, :telephone:, :collision:, …)
• Changed --effort to lift a new model's default-effort hold for that session only rather than permanently; an effort picked on claude.ai for a Remote Control session now applies during the hold
• Changed a policyHelper in MDM or managed-settings.json shadowed at launch by cached server-managed settings to run (or exit) as soon as the fetch reports them removed, not at the next launch
• Changed managedSourcesBehavior: "merge" to take sandbox.credentials.awsPairs and sandbox.ripgrep whole from the highest managed source that sets them instead of combining the sources' values
• Changed gateway model discovery (CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY=1) to run even when CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC is set, since it only queries your gateway
• Changed claude --resume <session-id> --bg to continue that session under its own ID when nothing is running it, instead of silently starting a copy; a copy is now announced
• Changed /btw history browsing from ←/→ to Shift+←/Shift+→ (or [/]), stepping through your recent side questions and back to the live answer
• Changed defaultMode: "bypassPermissions" in .claude/settings.json or .claude/settings.local.json to be ignored, like "auto"; set it in user or managed settings, or pass --permission-mode
• Changed fable and best in Claude apps gateway sessions to keep resolving to Fable 5 for now, since gateways not yet configured for Fable 5.1 reject it; pick Fable 5.1 in /model to use it
• Changed --add-dir, /add-dir, and additionalDirectories to refuse network paths (UNC shares, /net/<host> automounts) with a message before touching them; on Windows use a mapped drive letter
• Changed Claude apps gateway sign-in and token refresh requests to verify the gateway's pinned TLS certificate, as the managed settings fetch already does
• Changed Cowork and claude.ai cloud sessions: reading an artifact that isn't yours now always asks you first, even in auto mode
• Removed the Ctrl+E command explanation on Bash and PowerShell permission prompts
• [VSCode] Added collapsible ACCOUNT & USAGE and SESSION MANAGER section headers to the session list panel, with the account email, the usage meter, and a View details link opening the usage dialog
• [VSCode] Added a model pill to the input footer that shows the current model and opens the model picker, with an Effort row and a "More models" page
• [VSCode] Added a collapse toggle to the Ungrouped section of the session list
• [VSCode] Added output style selection to the command menu, including custom styles
• [VSCode] Fixed third-party provider deployments (Bedrock, Vertex, and others) still showing claude.ai-only features (remote sessions, dictation, usage) and calling claude.ai with a leftover login
• [VSCode] Fixed the session list panel's usage meter staying blank after the panel loads; it now shows the last known usage immediately
• [VSCode] Fixed the "Enable Remote Control for all sessions" toggle so turning it on or off applies to sessions that are already open, not only to new ones
• [VSCode] Fixed screen reader announcements: a control character before a fence or heading no longer drops visible lines from speech, and bold markers spanning a heading are no longer mis-paired
• [VSCode] Changed the action menu to list slash commands in a filterable "Slash commands" dialog instead of inline; picking one runs it; the MCP servers dialog gained the same filter box
• [VSCode] Changed "Delete session" to "Archive session": archived sessions move to a collapsible "Archived sessions" group at the bottom of the list with an Unarchive action

Owloops/claude-powerline (@​owloops/claude-powerline)

v1.30.3

Compare Source

Bug Fixes

• cache: remove unused getFileModificationDate import (0ecb4b3)

v1.30.2

Compare Source

Bug Fixes

• context: model current_usage as nullable in hook payload (4f1ef1d)
• context: use Claude Code's context_window_size when current_usage is absent (808ff7b)
• pricing: price 1h cache writes at the cache_write_1h rate (19875b7), closes #​104
• session: deduplicate transcript entries when summing session usage (f7a107c), closes #​103 #​106
• tui: honor session costSource in TUI renderers (10dd03a), closes #​105

oven-sh/bun (docker.io/oven/bun)

v1.4.1: Bun v1.4.1

To install Bun v1.4.1

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.1:

bun upgrade

Read Bun v1.4.1's release notes on Bun's blog

Thanks to 7 contributors!

• @​alii
• @​dylan-conway
• @​jarred-sumner
• @​jvitormelo
• @​marshallofsound
• @​robobun
• @​sosukesuzuki

rtk-ai/rtk (rtk-ai/rtk)

v0.47.0

Compare Source

Features

• ctest: add compact output filter (c75522e)
• ls: cap listing with tee tail hint and standard dotfile semantics (aa40853)
• mvn: add rtk mvnd support for Maven Daemon (774465e)
• phpt: add PHP .phpt filter for php-src run-tests.php (-99%) (e8541d1)

Bug Fixes

• bom: degrade gracefully on unparseable Gemini settings, strip BOM on claude/gemini hook stdin and rtk json fallback (b6f354c)
• diff: keep +/- markers at column 0 in condense_unified_diff (cf6d99d)
• diff: measure savings against the classic diff, not a dump of both files (8495176)
• diff: remove misleading overflow indicator from condense_unified_diff (947467e)
• emit classic hunk headers in the diff fallback (1246ce3)
• filters: tighten overly broad spring-boot/liquibase/ssh matching (0de9610)
• git-diff: count one truncated line as singular (75dda6c)
• git-diff: decode quoted paths, and read the header kind before splitting (7409cb5)
• git-diff: emit hunk lines at column 0 so ^- anchors again (b166396)
• git-diff: end hunks at their declared length, keep context adjacent (844d6fa)
• git-diff: pass word diffs through, and stop guessing at path pairs (e59276e)
• git-diff: reset hunk state on combined diffs, exempt leading context (5d4b549)
• git-diff: slice markers as bytes, and bound a combined hunk by every parent (eac9b99)
• git-diff: stop dropping hunk content that starts with ++ or -- (60ec79f)
• grep: free -m for GNU --max-count instead of rtk --max (d9a5893)
• grep: stop -l and -t shadowing native grep flags (16228b7)
• grep: stop -l/-t shadowing native grep flags (4ea0555)
• hooks,json: hermetic gemini BOM test, restore serde diagnostics, honest init summary, zero-copy fallback (ed8b0eb)
• hooks: honor CLAUDE_CONFIG_DIR when loading permission rules (196780d)
• hooks: honour exclude_commands for head and tail (7dc503d)
• hooks: keep exclude_commands honoured under routable wrappers (2eed6de)
• hooks: match exclude_commands against the peeled command form (e533c40)
• hooks: strip the BOM on Mistral Vibe hook stdin too (ac3389a)
• init,utils: propagate Gemini settings parse errors, add from_json_str wrapper (dd867b2)
• json,deps: tolerate UTF-8 BOM at the remaining JSON parse sites (7e7be16)
• json,deps: tolerate UTF-8 BOM at the three remaining JSON parse sites (a39a872)
• ls: avoid underflow in verbose reduction stat (2f75c7a)
• ls: record dot noise dirs under -A and track real args (a7e7329)
• render a real diff instead of dumping both files for modified lines (e4b9705)
• tsc: count global diagnostics and keep the failure head (6232c37)
• tsc: handle pretty diagnostics (a93d63b)
• tsc: strip escapes before the blank filter and bound the failure dump (1906cb2)
• grep: rtk grep --file-type and its -t short are removed. The option never reached the engine, so it was a silent no-op; -t now flows through, which means rtk rg -t rust filters by type while rtk grep -t rust returns grep's own invalid option -- 't'. -l and -m under rtk grep are likewise the native grep flags now rather than rtk's --max-len and --max.

Performance Improvements

• hook: avoid Pi package barrel import (322db4d)

Miscellaneous Chores

• release 0.47.0 (fde8b79)

Code Refactoring

• grep: trim comments and align the siblings of the flag change (eb3f814)

sickn33/agentic-awesome-skills (sickn33/agentic-awesome-skills)

v16.7.0: "Replayable Agents and Grounded Engineering Knowledge"

Compare Source

[16.7.0] - 2026-09-04 - "Replayable Agents and Grounded Engineering Knowledge"

Added agent-run forensics, an embodied-AI knowledge compiler, and a focused
Laravel repair workflow; resolved the current fast-uri and qs advisories.
The published catalog contains 2,111 skills.

This release helps Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and
related AI coding assistants investigate recorded agent behavior, compile
evidence-backed embodied-AI knowledge, and repair Laravel applications with
explicit safety and verification boundaries.

Start here:

• Install: npx agentic-awesome-skills
• orca-replay for reading model, shell, file-change,
  and MCP traces before explaining or replaying a past agent run.
• entropy-box for querying and compiling a live
  embodied-AI knowledge graph with provenance and confidence preserved.
• laravel-development-workflow for
  root-cause-oriented Laravel maintenance and regression testing.
• Choose your tool
• Best skills by tool
• Bundles
• Workflows

Added

• Added orca-replay for evidence-first diagnosis of
  recorded coding-agent runs, including model traffic, shell results,
  per-turn filesystem changes, MCP calls, replay, and bounded multi-model
  comparison (#​1330).
• Added entropy-box for searching and consulting a
  hosted embodied-AI knowledge graph, preserving source identity, confidence,
  temporal scope, and the distinction between retrieved evidence and optional
  LLM synthesis (#​1331).
• Added laravel-development-workflow
  for diagnosing Laravel and PHP defects at the root cause, matching the
  existing application architecture, adding regression coverage, and running
  proportionate verification
  (#​1327).

Changed

• Updated the web catalog from highlight.js 11.11.2 to 11.12.0
  (#​1332).
• Updated artifact upload and download steps to the Node 24-based v7 and v8
  GitHub Actions, removing the runner deprecation warnings from protected
  validation and failing downloads closed on digest mismatch.
• Kept the protected npm advisory gate fail-closed while disabling its
  redundant install-time request and adding three bounded attempts for
  transient registry timeouts and 503 responses.
• Regenerated ephemeral canonical data in the Workbench preview before its
  tests and build so source-only pull requests are evaluated against their
  exact skill catalog rather than the previous canonical snapshot.
• Disabled redundant install-time advisory requests in pull-request validation
  and preview jobs; dependency review and the protected fail-closed npm audit
  remain mandatory.
• Regenerated the canonical catalog, offline AAS Core data, tracked web assets,
  marketplaces, editorial bundles, compatibility reports, and Codex/Claude
  plugin distributions for 2,111 skills.

Fixed

• Raised the root fast-uri floor and refreshed its lockfile to resolve the
  host-confusion and repeated-hostname-decoding SSRF advisories
  (#​1328).
• Raised the Loki example backend's qs override to 6.16.0 and synchronized
  its lockfiles, resolving the bracket-key comma parsing array-limit advisory
  in both canonical and mirrored package trees
  (#​1328).

Security and Reliability

• Treats OrcaReplay trace content as untrusted evidence rather than agent
  instructions, requires approval before worktree mutation, and makes the
  network and token cost of multi-model comparison explicit.
• Treats Entropy Box responses as untrusted hosted data, preserves citations
  and confidence markers, and distinguishes the default non-synthesizing
  consult response from the optional integrated LLM path.
• Keeps Laravel diagnosis bounded to the repository's real architecture and
  existing approval, secret, data-mutation, and deployment policies.
• Verified zero known npm vulnerabilities in the root package, web app, and
  repaired Loki example backend after the dependency updates.

Who should care

• Teams debugging why an agent changed a file, invoked a tool, or produced a
  particular answer during a recorded run.
• Robotics and embodied-AI researchers who need a cited knowledge map rather
  than uncited synthesis presented as established fact.
• Laravel maintainers who want a disciplined repair loop that preserves local
  conventions and proves the regression is covered.
• Catalog users who depend on the web application and its dependency chain.

Validation

• Passed validation for 2,111 canonical skills, reference validation,
  documentation-security checks, warning-budget enforcement, strict catalog
  audit and security scan, plugin and bundle convergence, repository tests,
  web-app tests and coverage, production build, npm audits, and protected
  exact-head merge gates.
• Release publication additionally verifies clean final main, tag and npm
  parity, CI, CodeQL, release-only Pages, current and legacy public surfaces,
  and every already-configured local AAS MCP host.

Limitations

• OrcaReplay can only explain events present in a captured trace; replay and
  multi-model comparison can mutate a worktree, reach external services, and
  incur cost when explicitly enabled.
• Entropy Box coverage and freshness depend on its hosted graph and declared
  sources; low-confidence and proposed capabilities still require primary
  source verification.
• The Laravel workflow cannot infer undocumented business requirements or
  replace framework-specific tests, production review, and deployment gates.
• Dependency audits cover known advisories in resolved package graphs and are
  not an independent security audit of every skill or upstream service.

Credits

• @​xizhuomengcontin for
  orca-replay in
  #​1330.
• @​chenli-yy for entropy-box in
  #​1331.
• @​Junaid-PK for
  laravel-development-workflow in
  #​1327.

v16.6.0: "Evidence-First Instructions and Safer Dependencies"

Compare Source

[16.6.0] - 2026-09-02 - "Evidence-First Instructions and Safer Dependencies"

Added focused email cleanup, made AGENTS.md maintenance evidence-first, and
removed the web catalog's known Browserslist advisories. The published
catalog contains 2,108 skills.

This release helps Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and
related AI coding assistants maintain repository instructions without erasing
project policy, polish email drafts without sending them, and use a catalog
whose current npm dependency audit is clean.

Start here:

• Install: npx agentic-awesome-skills
• email-issue-fixer for proofreading and optional
  tracking-parameter cleanup without changing the sender's voice.
• agents-md for repository-evidence-first agent
  instructions and scoped monorepo guidance.
• Choose your tool
• Best skills by tool
• Bundles
• Workflows

Added

• Added email-issue-fixer for typo, grammar,
  clarity, and optional link-tracking cleanup while preserving intent, voice,
  placeholders, and the boundary that the skill never sends the message
  (#​1318).
• Added a curated full-library overview that maps capability areas, risk
  labels, discovery paths, and distribution surfaces across the catalog
  (#​1319).

Changed

• Reworked agents-md around bounded repository evidence,
  preservation of maintainer intent, nested scope, exact commands, and
  proportionate validation instead of universal symlink, attribution, section,
  or line-count mandates
  (#​1315).
• Updated @supabase/supabase-js from 2.112.2 to 2.112.3 and highlight.js
  from 11.11.1 to 11.11.2
  (#​1316,
  #​1317).
• Regenerated the canonical catalog, offline AAS Core data, tracked web assets,
  marketplaces, editorial bundles, compatibility reports, and Codex/Claude
  plugin distributions for 2,108 skills.

Fixed

• Updated the web app lockfile from browserslist 4.28.4 to 4.28.8, resolving
  the known unbounded-memory-growth and malformed-custom-stats crash/prototype
  write advisories while keeping the dependency change lockfile-scoped
  (#​1322).

Security and Reliability

• Kept agents-md repository edits behind diff review and preserved existing
  approval gates, secrets boundaries, and tool-specific instruction files.
• Required email-issue-fixer to redact token values, preserve placeholders,
  avoid external transmission, and return edited text without sending it.
• Verified zero known npm vulnerabilities in both the root package and web app
  after the dependency updates.

Who should care

• Maintainers who need AGENTS.md guidance grounded in the actual checkout rather
  than generic conventions that can overwrite repository policy.
• Teams using Claude Code, Cursor, Codex CLI, Gemini CLI, or Antigravity that
  want a clearer entry point into the complete skill library.
• Users who want conservative email proofreading and privacy-aware link cleanup
  without handing over message delivery.
• Catalog users who depend on the web application and its syntax-highlighting
  and browser-compatibility d

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.