From 9c1e0679c8abde984fc2bbc5b5e32467a0c824ed Mon Sep 17 00:00:00 2001 From: Jarek Potiuk Date: Wed, 1 Jul 2026 22:29:16 +0200 Subject: [PATCH] chore(agent-isolation): bump pinned claude-code 2.1.196 -> 2.1.197 2.1.197 makes Claude Sonnet 5 the default model (native 1M-token context, promo pricing through Aug 31). Changelog reviewed against the framework's security surface: no changes to permission-rule semantics, sandbox/network isolation, hooks/PreToolUse, prompt-injection mitigations, settings.json schema, or credential handling. Aged past the tool's 1-day cooldown (released 2026-06-30). Bumps version + released in pinned-versions.toml (including the install.npm / install.brew command strings) and the two @anthropic-ai/claude-code@ pins in docs/setup/secure-agent-setup.md. Generated-by: Claude (Opus 4.8, 1M context) --- docs/setup/secure-agent-setup.md | 4 ++-- tools/agent-isolation/pinned-versions.toml | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/setup/secure-agent-setup.md b/docs/setup/secure-agent-setup.md index f44716bd..4ed2666e 100644 --- a/docs/setup/secure-agent-setup.md +++ b/docs/setup/secure-agent-setup.md @@ -158,7 +158,7 @@ The same flow, condensed to commands you run yourself: # section: "Required tools (pinned versions)" below. sudo apt-get install --no-install-recommends \ bubblewrap=0.11.2-* socat=1.8.1.1-* -npm install -g --no-save @anthropic-ai/claude-code@2.1.196 +npm install -g --no-save @anthropic-ai/claude-code@2.1.197 # 2. Project-scope `.claude/settings.json`. Copy the framework's # sandbox / permissions.deny / permissions.ask / allowedDomains @@ -266,7 +266,7 @@ version, no pin enforced — Homebrew rolls forward, so the ```bash # npm distribution (the only stable channel today) -npm install -g --no-save @anthropic-ai/claude-code@2.1.196 +npm install -g --no-save @anthropic-ai/claude-code@2.1.197 ``` ### Distro-specific shortcut — Linux Mint 22.x / Ubuntu 24.04 Noble diff --git a/tools/agent-isolation/pinned-versions.toml b/tools/agent-isolation/pinned-versions.toml index b1b6626c..abab10da 100644 --- a/tools/agent-isolation/pinned-versions.toml +++ b/tools/agent-isolation/pinned-versions.toml @@ -91,8 +91,8 @@ install.dnf = "dnf install socat-1.8.1.1" install.from_source = "http://www.dest-unreach.org/socat/download/socat-1.8.1.1.tar.gz" [tools.claude-code] -version = "2.1.196" -released = "2026-06-29" +version = "2.1.197" +released = "2026-06-30" # Override the framework-wide 7-day default. Claude Code releases # cadence is high (multiple releases per week) and any regression # that affects the framework's permission-rule semantics, sandbox @@ -118,5 +118,5 @@ upstream_releases = "https://api.github.com/repos/anthropics/claude-code/release # Claude Code is distributed via npm; use `--no-save` so the global # install doesn't drift the local lockfile of any project the user # installs from. -install.npm = "npm install -g --no-save @anthropic-ai/claude-code@2.1.196" -install.brew = "# brew tap anthropics/claude-code; brew install claude-code@2.1.196 (when available)" +install.npm = "npm install -g --no-save @anthropic-ai/claude-code@2.1.197" +install.brew = "# brew tap anthropics/claude-code; brew install claude-code@2.1.197 (when available)"