Digest · 2026-07-16

Laptop displaying a security lock icon on a table with a potted plant and clock.

Claude Code v2.1.211: forwarded subagent text and hardened permission-preview rendering

Claude Code v2.1.211 adds a flag to forward subagent text and thinking into stream-json output and strips hidden characters attackers could use to spoof permission-approval prompts.

A young couple sitting together, using a smartphone on a sunny day in the park.

tool

Claude Code v2.1.208 adds screen reader mode and vim insert-mode remaps

Claude Code v2.1.208 introduces an opt-in plain-text screen reader mode and a setting to remap two-key vim insert-mode sequences like jj to Escape.

Close-up of wooden Scrabble tiles spelling SECURITY, symbolizing cybersecurity and protection.

trick

How I tricked Claude into leaking your deepest, darkest secrets

A researcher found a way to exfiltrate a Claude user's stored memories through the web_fetch tool despite its existing anti-exfiltration design, extending the lethal-trifecta attack class.

Close-up of a smartphone wrapped in a chain with a padlock, symbolizing strong security.

tool

xai-org/grok-build now open source after directory-upload backlash

xAI open-sourced its grok-build CLI after users reported it silently uploaded an entire working directory, including SSH keys and password manager databases, to xAI's Google Cloud storage.

View of large industrial pipelines running through a lush forest landscape.

trick

Cache-friendly uvx in GitHub Actions with UV_EXCLUDE_NEWER

Setting UV_EXCLUDE_NEWER to a fixed date and using it in the GitHub Actions cache key makes uvx tool-name resolve to a pinned, reproducible version that caches reliably.

A classic MS-DOS terminal screen displayed on a laptop keyboard with vivid illumination.

tool

Claude Code v2.1.210: worktree isolation bug fix and safer permission-rule warnings

Claude Code 2.1.210 fixes worktree-isolated subagents being able to run git-mutating commands against the main repo checkout instead of their own worktree.

Two workers handle a package in a spacious warehouse surrounded by shelves stocked with boxes and products.

best-practice

Dependabot version updates now default to a 3-day package cooldown

Dependabot now waits at least three days after a new release appears on its registry before opening a version-update pull request, on by default with no configuration.

A woman engineer focuses on software analysis using a laptop indoors.

best-practice

Codex file-deletion bug traced to $HOME override in full-access mode

OpenAI found GPT-5.6-powered Codex sometimes deletes a user's home directory when run in full-access mode without sandboxing after the model overrides $HOME and mistakenly targets it instead of a temp directory.