What changed
Anthropic released Claude Code 2.1.288 with recovery for interrupted prompt drafts, mid-response timeouts and compacted sessions; MCP OAuth scope re-authentication; configurable code-review finding limits; and fixes across plugins, cloud sessions and telemetry. Security-sensitive fixes add prompts for evaluated Bash assignments, block hooks when matching or serialization fails, and stop some MCP calls from running twice.
Why it matters
The release closes paths where resumed work could lose context and where shell, hook or MCP behavior could exceed the operator's expected boundary. It also changes several failure and recovery branches at once, making regression testing as important as taking the fixes.
What to do
Pin 2.1.288 in a disposable repository. Interrupt and resume a compacted session, force an API timeout, request a new MCP OAuth scope, deny a Bash expression, fail a PreToolUse hook deliberately, and verify that a large MCP response executes once before fleet promotion.
Caveat
This is an immutable first-party release, not an independent security audit. The broad fix set spans terminal, plugins, cloud and session storage, and environment-specific gateways, policies and older sessions can still expose regressions.