← Blog · 2026-10-25

This Week in Claude Code: Oct 20-26, 2026 (6 releases, Agent Skills goes to the Linux Foundation, 16 posts)

Six Claude Code releases shipped this week (2.1.305 to 2.1.310), most of them tightening the sandbox and permission checks and making MCP servers less flaky. Anthropic also handed the Agent Skills standard, the SKILL.md format, to the Agentic AI Foundation under the Linux Foundation. Below are the changes that matter if you use Claude Code for your own or client work, then the community posts worth your time. Every item links to its source. This covers Oct 20 through Sunday afternoon, Oct 25.

Releases: the changes worth knowing

Full notes are on the official changelog and the GitHub releases page. These are the ones that change day-to-day use.

2.1.305 (Oct 20):

• sandbox.allowNestedUserNamespaces lets sandboxed commands on Linux create user namespaces, for things like Chromium or rootless podman. The release notes are clear that this also lets those commands get around the sandbox's file protections, so only turn it on where you need it.
• Tool search regression fixed. 2.1.304 made every request fail on Vertex, Bedrock and gateways that reject tool search. Claude Code now retries without it.
• /effort and /autocompact now apply when your model name differs from a modelOverrides value only by letter case or a [1m] tag.
• /usage warnings are now one-line fixes that name their source, and pressing f applies them.
• Full disk errors are readable. A Bash command on a full disk now says the disk is full and that nothing ran, instead of a raw ENOSPC path.

2.1.306 (Oct 20, late evening ET) fixed a real API error being replaced by "prompt is too long" in sessions with many MCP tools.

2.1.307 (Oct 21):

• MCP is steadier. Servers no longer get stuck as timed out when your laptop sleeps while they connect, HTTP MCP tool calls are no longer sent twice when a connection drops mid-call (only read-only or idempotent tools are retried), and a locked macOS keychain now explains itself instead of showing "needs authentication" in claude -p.
• Fewer "Autocompact is thrashing" errors in turns that read many PDF pages, images or other large results.
• /permissions > Recently denied now shows the shell command that was denied, and approving a row names the command.
• New claude_code.safety_event OpenTelemetry event for each tool call a permission rule, auto mode, hook or the sandbox stopped or prompted.

2.1.309 (Oct 22), the security-heavy one:

• Sandboxed Bash no longer runs your shell startup files outside the sandbox before each command (macOS and Linux).
• Several permission holes closed: an Edit(path) deny rule now also blocks a Bash redirect to that path in commands with a subshell, wrapped cd ... && git commands prompt like a plain cd, and sandboxed commands can no longer edit the file passed with --mcp-config.
• Large nested CLAUDE.md files no longer cause repeated compaction; one over the size limit now loads only its start.
• /rewind now shows code changes made through /code-review turns.

2.1.310 (Oct 23):

• The Monitor tool and plugin monitors now work on Bedrock, Vertex and Foundry, and when telemetry or nonessential traffic is off.
• Gateway fix. Requests behind gateways that reject the effort-2025-11-24 beta value or mid-conversation system messages now retry without them.
• Windows hook fix. PreToolUse and PermissionRequest hooks no longer let a tool call through when Git Bash is missing and the hook command is only a quoted path. If you rely on a hook to block things on Windows, update.
• cleanupPeriodDays set very high no longer lets background cleanup delete recent files like pasted images.

(2.1.308 was listed only as bug fixes and reliability improvements.)

Agent Skills now has a neutral home

On Oct 22 Anthropic donated Agent Skills to the Agentic AI Foundation, the Linux Foundation project that already hosts MCP. The name, logo, GitHub organization and the agentskills.io domain move over, and engineers from Anthropic, Google, OpenAI and others will maintain the spec. Anthropic says more than 70 agent platforms have integrated skills and about 1 million have been published. The proposed roadmap covers versioned releases, a formal proposal process and security guidance for people who write and install skills.

What it means for you: a SKILL.md you write for Claude Code is a format with a long life, not a Claude-only trick. If you want to check one before you share it, our free SKILL.md validator and description tester run in the browser.

Community: running many sessions at once

• Show HN: Lights-on software factory boilerplate for Claude Code. Open-source boilerplate based on the setup behind Votito; the author says its orchestrator cut token cost by around 80% versus a bare-bones setup.
• AIPass is feature-complete by @aipass. The open-source framework that turns Claude Code sessions into a team of persistent agents is now fixes-only, with a phone app for watching them.
• hivemux: a tmux sidebar that tells me which Claude Code session needs me by @esteban-eg-kim. Shows each session as running, waiting or done and jumps to the one that has waited longest.
• I kept missing Claude Code's permission prompts, so I built a desktop around it by @fxdgif. VibeDesk, a Windows desktop that turns permission prompts into one-click cards.
• Multirun: A Multi-Agent Run Framework by @kubeden. Runs one task through ten isolated agents, each in its own worktree, then diffs where they agree and split.

Community: cost, limits and tokens

• How Claude Code and Codex tell you your limits by @pikori. Why counting tokens from local logs drifts from what /usage reports.
• What did that Claude Code session actually cost? by @bargan. ccdeck shows quota, per-session cost and monthly spend in one page.
• Sending text as images cut my Claude tokens by up to 81%. It also started inventing numbers. by @jaehyun_cho_0dff271e0d2e5. An honest test of the trade-off.
• caveman vs ponytail vs Chisle by @jaypokale. Compares answer length across three brevity rulesets on the same prompts (written by Chisle's author).
• I made Coco, a little friend for Claude Code by @ninon. A status-bar character that reacts locally and shows your 5-hour and weekly limits.

Community: skills, memory and MCP

• Show HN: Skillstore. A library of engineering skills behind an MCP server that Claude Code can search and load as it works.
• Open-source, cross-harness memory for AI agents. Beacon captures session telemetry from 20+ harnesses and turns it into reusable skills.
• I built a Claude skill that flags scope creep before you reply to a client by @kitwisestudio. Splits a client message into asks, checks each against scope and drafts a priced change order. Useful if you freelance.
• Build a hotel rate-parity watcher with Claude Desktop and SQLite by @huynhtanan. A Google Hotels MCP server plus a small logger (the author notes it calls paid Apify actors).

Community: building with it

• Running Claude Code with Ollama and Local Models by @mohammed_sebaa_2610. Install, IntelliJ setup and a local model through Ollama, tested on a small Java project.
• AI videos with Claude Code for beginners: 11 prompts, $0.62 by @hiper2d. From an empty folder to a narrated 101-second video with skills and FFmpeg, all prompts shared.

My takeaway this week

Update to 2.1.309 or later if you lean on the sandbox or deny rules; the fixes this week closed real gaps, and on Windows 2.1.310 fixes hooks that could fail open. And if you've been putting off writing your own skills, the move to the Linux Foundation is a good reason to start: the same SKILL.md now works across many agents.

Release facts on this page come from Anthropic's Claude Code changelog, the GitHub releases and Anthropic's announcement. Community summaries are mine; all credit to the authors. This page isn't affiliated with Anthropic.

The full, searchable list of Claude Code write-ups (292 posts, sorted by category, refreshed daily) is at solostackkits.netlify.app, and the free browser tools are here.