Claude Code v2.1.116 brings speed, UX, and security fixes
Claude Code `v2.1.116`, released by ashwin-ant, delivers up to 67% faster `/resume` on large sessions, faster MCP startup, a security fix for sandbox `rm`/`rmdir` path checks, and a wide range of terminal UX and bug fixes.
Score breakdown
Teams running Claude Code on large sessions or multi-server MCP setups should upgrade to `v2.1.116` immediately — both for the meaningful speed gains and the security fix that prevents sandbox auto-allow from bypassing critical directory protections.
- 01`/resume` is up to 67% faster on sessions 40MB or larger and handles dead-fork entries more efficiently
- 02MCP startup is faster with multiple stdio servers; `resources/templates/list` is now deferred to the first `@`-mention
- 03Security fix: sandbox auto-allow no longer bypasses dangerous-path checks for `rm`/`rmdir` targeting `/`, `$HOME`, or other critical directories
Claude Code `v2.1.116`, authored by ashwin-ant, focuses on three broad areas: performance, developer experience, and bug fixes. On the performance side, `/resume` is up to 67% faster on sessions of 40MB or more and now handles sessions with many dead-fork entries more efficiently. MCP startup time is reduced when multiple stdio servers are configured, achieved by deferring `resources/templates/list` to the first `@`-mention rather than eagerly loading it at startup.
The thinking spinner replaces its separate hint row with inline progress text ("still thinking", "thinking more", "almost done thinking").
Several UX improvements ship in this release. The thinking spinner replaces its separate hint row with inline progress text ("still thinking", "thinking more", "almost done thinking"). `/config` search now matches on option values — searching "vim" will surface the Editor mode setting. `/doctor` can be opened while Claude is actively responding without waiting for the current turn to finish. The Bash tool now surfaces a hint when `gh` commands hit GitHub's API rate limit, giving agents a signal to back off rather than retry. Agent frontmatter `hooks:` now fire correctly when running as a main-thread agent via `--agent`, and `/reload-plugins` plus background plugin auto-update now auto-install missing plugin dependencies from previously added marketplaces.
The security fix in this release is significant: sandbox auto-allow no longer bypasses the dangerous-path safety check for `rm`/`rmdir` targeting `/`, `$HOME`, or other critical system directories. On the bug-fix front, the release resolves Devanagari and other Indic script rendering issues in the terminal UI, fixes `Ctrl+-` undo and `Cmd+Left`/`Right` navigation in terminals using the Kitty keyboard protocol (iTerm2, Ghostty, kitty, WezTerm, Windows Terminal, Warp fullscreen), fixes `Ctrl+Z` hanging when Claude Code is launched via a wrapper process such as `npx` or `bun run`, and resolves scrollback duplication in inline mode. Additional fixes address `/branch` rejecting transcripts larger than 50MB, `/resume` silently showing empty conversations on large session files, and an intermittent API 400 error related to cache control TTL ordering.
Key facts
- 01`/resume` is up to 67% faster on sessions 40MB or larger and handles dead-fork entries more efficiently
- 02MCP startup is faster with multiple stdio servers; `resources/templates/list` is now deferred to the first `@`-mention
- 03Security fix: sandbox auto-allow no longer bypasses dangerous-path checks for `rm`/`rmdir` targeting `/`, `$HOME`, or other critical directories
- 04