Claude Code v2.1.75 Released - Security Fixes and VS Code Integration Improvements

Anthropic released Claude Code v2.1.75 on March 13, 2026. This version includes security fixes for managed policy, improvements to VS Code integration, and various performance optimizations and bug fixes.

Key Changes

Managed Policy Security Fix

Fixed managed policy ask rules being bypassed by user allow rules or skill allowed-tools. Security policies are now properly enforced.

Full Model ID Support Enhanced

Fixed full model IDs (e.g., claude-opus-4-5) being silently ignored in agent frontmatter model field and —agents JSON config. Agents now accept the same model values as —model.

SessionEnd Hooks Timeout Configuration

Fixed SessionEnd hooks being killed after 1.5 seconds on exit regardless of hook.timeout. Now configurable via CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS environment variable.

/plugin Install Fix

Fixed /plugin install failing inside the REPL for marketplace plugins with local sources.

Marketplace Update Git Submodules Fix

Fixed marketplace update not syncing git submodules. Plugin sources in submodules no longer break after update.

Unknown Slash Commands Warning

Fixed unknown slash commands with arguments silently dropping input. Now shows a warning with your input.

RTL Text Rendering Fix

Fixed Hebrew, Arabic, and other RTL text not rendering correctly in Windows Terminal, conhost, and VS Code integrated terminal.

LSP Servers Windows Fix

Fixed LSP servers not working on Windows due to malformed file URIs.

—plugin-dir Local Dev Override

Changed —plugin-dir so local dev copies now override installed marketplace plugins with the same name (unless that plugin is force-enabled by managed settings).

VS Code Integration Improvements

• Untitled Sessions Delete Button: Fixed delete button not working for Untitled sessions
• Scroll Wheel Responsiveness: Improved with terminal-aware acceleration

Other Improvements

• /context Command: Added actionable suggestions identifying context-heavy tools, memory bloat, and capacity warnings with specific optimization tips
• autoMemoryDirectory Setting: Added to configure custom directory for auto-memory storage
• Memory Leak Fix: Fixed streaming API response buffers not being released when generator terminated early
• MCP OAuth: Fixed authentication hanging when callback port is already in use
• MCP OAuth Refresh: Fixed re-authentication prompts not appearing after refresh token expires (for OAuth servers like Slack that return HTTP 200 errors)
• Voice Mode: Fixed silently failing on macOS native binary when terminal had never been granted microphone permission

How to Update

Claude Code updates automatically. To manually update, run:

claude update

Or download the latest version from the Claude Code website (claude.com/claude-code).