Frontier AI
Bash deny and ask rules now hold under sandbox auto-allow with variable prefixes, and Read deny rules now cover files reached through IDE symlinks.
Why it matters. Upgrade if your team relies on permission rules to block commands or files, since earlier versions could let some of them through.
Source: Claude Code v2.1.289 release
HTTP client transports on the 1.x line now follow a redirect only within the same scheme, host and port, unless you set redirectPolicy to follow.
Why it matters. Clients whose server endpoint redirects to another host or port fail after upgrading, so point them at the final URL or set the option.
The proxy now refuses to start when its master key is unset, empty or a publicly known value.
Why it matters. Set a unique, private master key before upgrading, or a deployment that still uses a sample key will not come back up.
Source: LiteLLM v1.104.0 release
The release adds Opus 5.5, GPT-6 Sol and GPT-6 Luna, a Meta Muse Code provider, and a lean Goose binary that speaks only ACP.
Why it matters. Goose users can switch to the newest models now, and editors that host agents over ACP get a smaller binary to ship.
Source: Goose v1.53.0 release