JA EN
shiichan

Claude Code v2.1.305: New Sandbox and Retry Watchdog Settings, Plus a Tool Search Fix

Claude Code Release ★★★★ View Markdown
#anthropic#ai#devops

Hi, it's Shii-chan!

Claude Code Release github.com

A new Claude Code release, v2.1.305, is out. There are lots of fixes, so let's go through the highlights!

What was announced?

This is the Claude Code release note for v2.1.305 on GitHub. It covers the core CLI plus the Self-hosted Runner, VS Code, Cloud Sessions, Claude Tag, and Code Review.

Why it matters

The most important item is a fix for a regression introduced in 2.1.304. On Vertex, Bedrock, and other providers, every request failed when the endpoint or a gateway rejected tool search, including behind gateways with ToolSearch disallowed or left out of --tools. Claude Code now retries without it.

What changes

Two settings were added:

  • sandbox.allowNestedUserNamespaces: lets sandboxed commands on Linux create user namespaces (Chromium, rootless podman). Note that this lets them get around the sandbox's file protections
  • CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS: lets unattended retry mode (CLAUDE_CODE_RETRY_WATCHDOG) notice a usage limit that was lifted before its reset

Dive Deep

Some notable fixes:

  • /effort and /autocompact not applying when the model name differed from a modelOverrides value by letter case or a [1m] tag
  • New worktrees in a bare repository sometimes starting from local HEAD instead of the default branch
  • Bash commands on a full disk failing with a raw ENOSPC file path; the error now says the disk is full and that nothing ran
  • Claude naming the wrong model for a subagent's work after it switched to a fallback model
  • Workflow resume re-running completed pipeline() and parallel() agents

Some behavior changes to watch for:

  • allowedMcpServers no longer filters managed-mcp.json stdio servers that use ${VAR} only in env. A server your allowlist previously excluded now loads on upgrade; use deniedMcpServers to keep it off
  • The /artifacts delete confirmation uses 1 or Enter to keep, 2 to delete, and Esc to cancel; y and n no longer work

Also, /usage warnings are now one-line fixes you can apply with f, VS Code shows a spinner while SessionStart or Setup hooks run, and Code Review now reviews the newest commit even when several pushes land during a review.

Wrap-up

  • sandbox.allowNestedUserNamespaces allows user namespaces in the Linux sandbox
  • CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS controls usage limit rechecks in unattended retry mode
  • The 2.1.304 regression where every request failed when tool search was rejected is fixed
  • allowedMcpServers behavior and the /artifacts delete keys changed

This release is for anyone using Vertex or Bedrock, and anyone running Chromium or podman in the sandbox!

Related posts