Changelog changedcowork/changelog
Nearest release: v2.1.323, published 2 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 12 Nov 2026 18:25 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 12 Nov 2026 18:37 UTC.
Upstream edited
Recorded here
Lines+78added
Lines−0removed
From line
2
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits75to this page, all time
The whole hunk
from line 2, old and new numbered
/
This page is larger than the 256 KiB this site keeps, so one side of the diff below stops where the stored text does.
from line 2
22
33> Release notes for Claude Desktop
44
5**v5.11492.0**
6
72026-11-12
8
9Bundled Claude Code version: 2.1.321.
10
11**General**
12
13* Added Developer > Export Configuration Template, which exports ADMX and Profile Manifest policy templates for the settings of standard Claude Desktop, third-party inference, or both.
14* (breaking) Changed the built-in browser and preview panes to send a client certificate only to sites that device management lists in `builtinBrowserClientCertificateHosts`. A site that requires one stops loading there until it is listed. Behind a proxy that asks for one on every site, use `*`.
15* Changed `builtinToolPolicy`: `ask` rules with arguments, such as `Bash(curl *)` in Code or `Read(~/.ssh/**)`, now show the approval prompt on devices with their own Claude Code managed settings, unless those settings set `allowManagedPermissionRulesOnly`.
16* Changed automatic restarts for updates on macOS to wait while the keychain is locked, for up to 72 hours. A locked keychain doesn't delay restarts timed by `autoUpdaterEnforcementHours` or `installedUpdateEnforcementHours`.
17* Fixed a likely cause of brief freezes on Windows when opening a session or answering an approval after its notification had left the screen.
18* Fixed Claude reopening as a blank window on Windows after it was closed while minimized.
19* Fixed Claude Setup on Windows offering people without administrator rights an install that removes their working MSIX install of Claude; it now opens that Claude instead.
20* Fixed Code and Cowork losing a Claude.ai sign-in when a company proxy or gateway answers its background renewal with a JSON error.
21* Fixed edits to an artifact being lost when you left your chats or Cowork tasks within a few seconds of typing.
22* Fixed the app on macOS restarting by itself after ten idle minutes to install an update while the keychain was locked, which left it unable to read its stored secrets until the next restart.
23* Fixed the import from Claude (third-party) leaving out scheduled tasks, projects with no session, and accepted project instructions from a Claude Desktop export that the user confirmed as their own.
24
25**Code**
26
27* Changed Auto mode in local Code sessions: a session that Claude started can now start more sessions for its task with no approval, if Auto's check allows it. The limits are 10 per message you type and 5 at once.
28* Changed local, SSH and WSL Code tab sessions, except scheduled runs, to ask before using a connector tool that the organization limits to "Needs approval" in claude.ai, in every permission mode. Outside Auto and plan mode the prompt can offer "Allow for this session". Not in third-party deployments.
29* Changed SSH sessions on the built-in SSH library, including with `sshTransport` (beta) set to `builtin`: on Mac and Linux hosts, MCP servers from `claude_desktop_config.json` now run under Claude Code on the host, as they do over OpenSSH. They follow the host's MCP rules and stop with the session.
30* Changed which `cleanupPeriodDays` the app follows: one set on the computer in Claude Code's managed settings now counts if server-managed settings set none and the person's own (default 30 days) isn't shorter. Not in third-party deployments.
31* Fixed a rare case on Windows where ending an SSH sign-in could close an unrelated program.
32* Fixed an administrator's `env` values for tool and workflow variables in Claude Code's managed settings being ignored in local sessions when the computer already set the same variable.
33* Fixed local scheduled tasks and Remote Control sessions with no model of their own ignoring the `model` in an organization's Claude Code managed settings. Not in third-party deployments.
34* Fixed most automatic SSH connects over the built-in SSH library sending phone sign-in prompts again and again while nobody is at the computer. These connects now try the SSH key alone, and a host that needs more waits until the person is back.
35* Fixed new sessions starting in Manual when settings make Don't ask the default permission mode.
36* Fixed Rewind saying a code restore had failed, and offering another try, while the first restore could still be changing files.
37* Fixed SSH and WSL tasks staying interrupted when Claude Code was lost while an automatic message was waiting, and messages to an SSH task running while the app was closed waiting 30 seconds or longer; in most cases they now reach Claude at once.
38* Fixed SSH sessions getting no worktree, and working in the real checkout, on hosts where Git is only on the login shell's PATH (nix, conda, Homebrew on Linux).
39* Fixed SSH sessions getting stuck, asking for approval again, or running a connector's tool twice or late after the app quit, updated or lost its connection while the tool was being called.
40* Fixed SSH sessions whose key stops being accepted redialling so often that the server blocked the computer's address, and sessions behind a proxy command or jump host that is slow after a wake staying on "Reconnecting" instead of reconnecting by themselves once you are back (Mac, Linux).
41* Fixed the model menu offering models outside an administrator's managed-settings `availableModels` list when a user or project settings file listed others. Not in third-party deployments that set `inferenceModels`.
42* Fixed Try again in SSH and WSL sessions sending the words "Try again" instead of your message, after Claude Code stopped before reading it.
43
44**Cowork**
45
46* Added Download to the menu of files from tasks that run on your computer, so you can save a copy wherever you choose.
47* Changed connecting a folder by its path to a task that runs on your computer: Claude now refuses a path that goes through a link inside a folder such a task uses, if the link leads outside that folder. Choose the folder where it really is, not a link to it.
48* Changed GitHub access in tasks with restricted network access to clone and fetch only. In these tasks, `git push`, Git LFS and SSH remotes no longer work. Deployments that use the organization's own model provider see no change.
49* Changed what commands Claude runs can do on `registry.npmjs.org`, `registry.yarnpkg.com` and `crates.io`: downloads and `npm audit` still work, but publish, login and other requests are refused. Not affected: tasks whose Domain allowlist is "All domains", and third-party deployments.
50* Improved ejecting external drives on macOS: Claude now tries to release a drive shortly after a command on it ends, so that you can eject the drive while Claude is open.
51* Fixed a connected folder that you renamed, moved or deleted coming back as an empty folder the next time Claude ran a shell command.
52* Fixed a Cowork task or third-party chat staying blank, with no reply or notice, after safeguards flagged a message.
53* Fixed a task that kept asking before each web search after the administrator lifted an `ask` on web search.
54* Fixed attached files missing from new copies of Cowork and Chat sessions from an earlier organization or another Claude profile, and file cards and files from earlier turns not opening in copies. Also fixed new imports from an export file failing at every message behind some inference gateways.
55* Fixed Cowork tasks going missing on Windows 11 and later after Claude switched back to an earlier copy of its data. Third-party deployments are not affected.
56
57**3P**
58
59* Added `autoModeClassifierModel`, which chooses the model for Auto mode's built-in safety check in Code and Cowork. Actions your provider reviews itself don't use it. If unset, Claude Code chooses the model. A device's `CLAUDE_CODE_AUTO_MODE_MODEL` environment variable no longer counts in Code.
60* Added `builtinBrowserClientCertificateHosts`: the sites that get a client certificate in the built-in browser and preview panes. Behind a proxy that asks on every site, use `*`. Only machine-wide device management can set it. On Linux, or as a Windows policy's only key, add it after updating.
61* Added `deploymentLogo`, which shows your organization's logo beside the organization announcement. Paste a PNG image as a base64 `data:` URI. Update all devices before you put it in a device profile.
62* Added `enforceConsoleSignInOrgList` (device profile only): when on with `forceLoginOrgUUID` set, only listed organizations can use Claude Console sign-in, so add your Console organization's ID first. Off or unset, others still work with a log warning. The block announced earlier now needs this key.
63* Added `remoteFileDownloads` (beta), which controls which files users can download from an SSH host or WSL in Code sessions. When it is unset, users can download documents, images and small text files. Read its help before you set it in an MDM profile: devices can lose settings or WSL sessions.
64* Added `sensitivityLabels` to the configuration reference. On the built-in Microsoft 365 entry of `managedMcpServers`, it blocks OneDrive and SharePoint files and Outlook email that carry the Microsoft Purview labels you list. Update first: versions before 5.1231.0 block only files, or nothing.
65* Added Mermaid diagrams for `mermaid` code blocks in replies and Markdown file previews in Chat, Cowork, and the Code tab.
66* Added Web search and Web fetch under Connectors in the + menu and in Customize > Connectors. Each person can set either one to Always ask or Blocked, but can't loosen `builtinToolPolicy` or `disabledBuiltinTools`. On Bedrock, only Web fetch is listed.
67* (breaking) Changed the built-in browser and preview panes to send a client certificate only to sites in `builtinBrowserClientCertificateHosts`. With `builtinBrowserEnabled` on, a site that requires one stops loading there until you list it. Gateway and connector connections are not affected.
68* Changed `allowedWorkspaceFolders` on Windows SSH hosts: sessions and Claude's file tools now refuse a junction or folder link in an allowed folder that leads outside the list. To keep using it, add the folder it leads to.
69* Changed `autoUpdaterEnforcementHours` and `installedUpdateEnforcementHours`: with no number set, the restart on macOS now waits while the keychain is locked, for up to 72 hours, so that a saved provider API key still opens afterwards. With a number set, a locked keychain doesn't delay it.
70* Changed `claudeAiImport.automatic3pImport`: most Cowork and Chat sessions it copies from this version on now continue at the user's first message, with no "Continue this conversation?" prompt. Code sessions and sessions copied by earlier versions still ask.
71* Changed a connector tool set to `blocked` through device management to take effect without a restart. At the app's next configuration check (every 10 minutes by default), open sessions refuse it. This covers connectors that the app itself connects to.
72* Changed connectors on a Claude apps gateway: some people need to reconnect theirs once after this update. This can happen on a computer login that several people share, or on one that used another sign-in method before the gateway.
73* Changed connectors that the app itself connects to: in Auto and bypass modes, a tool set to `ask` now shows the approval prompt whether the policy names the connector by name or by URL. In an unattended scheduled run, the tool does not run unless a person approves it.
74* Changed the Code tab's model menu when `inferenceModels` is set: an `availableModels` list in a Claude Code settings file, managed or not, no longer greys out models, unless Claude Code's managed settings name a policy helper.
75* Removed the in-app deprecation warning about `coworkTabEnabled`, `chatTabEnabled` and `chatAdvancedFileAnalysisEnabled`. Versions 4.16336.0 to 5.1231.2 can still show it from November 17, 2026. From 4.16336.0 on, the app stops reading these settings at 12:00 PM PT on December 17, 2026.
76* Updated the help for `orgPluginSettings` and `managedMcpServers`: write a plugin server's name exactly as the plugin declares it, capitals included.
77* Fixed `claudeAiImport.automatic3pImport` dropping Auto mode from scheduled tasks. From this version on, a copied task on Auto or Skip all approvals arrives on Auto. If the task was switched on, it runs in Auto. Cowork tasks need `autoModeEnabled` set to `true`. Code tasks need it unset or `true`.
78* Fixed `claudeAiImport.automatic3pImport` leaving behind sessions imported from a file or folder, and projects and scheduled tasks brought from another computer with "Import as my own". Computers that already ran the copy get those projects and tasks at their next launch, with the tasks turned off.
79* Fixed scheduled tasks copied by `claudeAiImport.automatic3pImport`: History now lists their earlier runs, and a Cowork task can open its own task folder when its prompt gives the full path. Tasks copied by earlier versions do not change.
80* Fixed sessions stuck on "Authentication failed" after a slow sign-in refresh. Claude now asks you to try again in a moment and keeps your message.
81* Fixed the Setup window showing Unified Claude on for a configuration that leaves only Code on. Until December 17, 2026, saving, exporting or importing such a configuration in Setup writes `desktopHome` as `off`.
82
583**v5.1231.2**
684
7852026-11-10
from line 2409
23312409
23322410**General**
23332411
2334* Fixed an issue where permission prompts and in-session questions could silently stop appearing after an input-handling error — if Claude asked a question or requested permission and the prompt never showed up, this release fixes that. (Updates the bundled Claude Code CLI to 2.1.209.)
2335
2336**v1.20186.0**
2337
23382026-07-09
2339
2340**General**
2341
2342* Fixed `claude://` deep links being ignored when opening one launched the app from a closed state, including on Windows and Linux.
2343* Fixed device attestation failing on Windows when sending several messages at once.
2344* Fixed garbled tool summaries in the transcript: descriptions that don't start with a recognized verb (for example "Final verification") now appear as written instead of being mis-conjugated.
2345* Fixed skill proposal and skill-file cards failing to save with "Couldn't save this skill" when a skill of that name already exists; they now offer "Update skill" and a replace confirmation.
2346* Fixed the app forgetting your last-used tab (for example Code) after an update or re-login.
2347* Fixed the menu bar usage menu showing an empty progress bar for extra usage when the spend cap is unlimited.
2348
2349**Code**
2350
2351* Added a Troubleshooting option to import Claude Code CLI sessions found on this computer into the session list.
2352* Fixed a typed `<channel-message>` turn rendering as a spoofable "Message from `{server}`" card instead of as your own text.
2353* Fixed cross-session messages going missing in the transcript: messages from another session no longer disappear when they arrive in the same turn as other content or when their envelope can't be fully parsed.
2354* Fixed file links to files outside the working directory, including reports Claude writes to its scratchpad, showing "This file is outside the working directory" instead of opening.
2355* Fixed the context window indicator and token count staying at the pre-compaction value after compacting a conversation.
2356
2357**Cowork**
2358
2359* Fixed admin-configured plugin marketplace sync failing behind corporate proxies on macOS.
2360* Fixed plugin connectors sometimes missing from the Connectors list and tool permission prompts when they were slow to start.
2361* Fixed skills saved in a remote session sometimes still returning "Unknown command" right after saving.
2362* Fixed the "Run this task while your Mac sleeps" setting turning itself off after an app update.
2363
2364**3P**
2365
2366* Added `*` wildcard matching for managed MCP `toolPolicy` keys; partial wildcard keys such as `"outlook_*"` in existing configurations now take effect, including any `allow` wildcards, which pre-approve the tools they match. Exact keys and the standalone `"*"` key behave as before.
2367* Added support for exporting Cowork task telemetry over `otlpProtocol: grpc` on macOS and Linux when no network proxy is configured.
2368* Fixed Azure AI Foundry sessions failing with an authentication error on every message after interactive Microsoft Entra ID sign-in.
2369* Fixed gateway-SSO bootstrap dropping cross-origin `managedMcpServers` entries, so admin-provisioned third-party connectors reach the app under device-code sign-in.
2370* Fixed MCP connectors failing to connect through gateways that optionally request a TLS client certificate, even though the connection test passed.
2371* Fixed sign-in timing out with identity providers (such as PingFederate) that redirect via a rendered page after authentication.
2372* Fixed third-party settings ignoring managed configuration: the Claude Code pane now follows `isClaudeCodeForDesktopEnabled`, the Developer tab hides when `isLocalDevMcpEnabled` is off, and the Capabilities and Voice settings no longer appear.
2373
2374**v1.19367.0**
2375
23762026-07-07
2377
2378**General**
2379
2380* Added automatic updates on Linux through the Anthropic apt repository, so new versions arrive with `apt upgrade` (and unattended upgrades where enabled).
2381* Added the ability to archive or delete the current chat, project, task, or coding session directly from the command palette (`⌘K`, or `Ctrl+K` on Windows and Linux).
2382* Fixed bank payment-verification (3DS) pages not loading during checkout.
2383* Fixed MCP connectors in artifacts being silently dropped; approving a connector now reliably grants its tools to the artifact, and a previously stuck approval heals itself the next time you approve.
2384* Fixed repeated crashes on Linux caused by unstable graphics acceleration; the app now turns acceleration off automatically and tells you.
2385* Fixed the app becoming unresponsive when a session folder is on a slow or disconnected network drive.
2386
2387**Code**
2388
2389* Added descriptive branch names for local Code sessions, derived from your first message, in place of the random adjective-noun names.
2390* Changed the default transcript and composer width to a narrower, more readable column; a width you already chose in Settings → Appearance is preserved.
2391* Fixed "Open in Finder", "Open in editor", and "Attach to chat" doing nothing, or using the wrong path, for files in the diff panel when the session folder differs from the repo folder.
2392* Fixed freezes and stalls: while restoring a large number of sessions at startup, while builds or file syncs churned files inside a watched folder, and while the diff panel refreshed during a response.
2393* Fixed newly trusted folders sometimes failing to start a session with a "workspace is not trusted" error.
2394* Fixed security-key and phone sign-ins not completing in preview tabs.
2395
2396**Cowork**
2397
2398* Added a copyright-access notice in the session timeline when Claude in Chrome first operates on certain news publisher sites.
2399* Added keyboard access to the preview pane: Tab reaches a "Preview page" control, Enter moves focus into the loaded page, and `F6` (or `Ctrl+F6`) moves it back out.
2400* Fixed Cowork offering terminal access, and showing an impossible fix suggestion, on devices whose operating system cannot provide the virtualization its isolated environment needs (such as ChromeOS), where every command immediately failed.
2401
2402**3P**
2403
2404* Added `inferenceFoundryAuthFlow` to choose how interactive Microsoft Entra ID sign-in for Azure AI Foundry runs: `device-code` (the default, which shows a code to enter at `microsoft.com/devicelogin`) or `browser`, which opens the system browser for an authorization-code (PKCE) sign-in.
2405* Added `microsoftAuthBroker`; set it to `disabled` to force browser-based Microsoft 365 sign-in instead of the native Company Portal or Windows account broker.
2406* Added a "session expires soon" warning for Bedrock SSO and AWS-profile sign-in so you can re-authenticate before hitting an error.
2407* Added a `startupTimeoutSec` option for managed local (stdio) MCP servers and raised the default startup timeout from 10 to 120 seconds, fixing connection failures when a server command downloads packages on first run (for example `uvx` or `npx`).
2408* Added support for background agents: long-running tasks now stay signed in after your identity provider's access token expires.
2409* Added the ability for administrators to grant Microsoft 365 write scopes (send mail; edit calendars and files; send Teams chat; mailbox settings) through managed configuration.
2410* (breaking) Changed the default for Desktop Extensions (`.dxt` and `.mcpb`): they no longer load unless you set `isDesktopExtensionEnabled` to `true` in managed configuration. Previously they loaded by default and only the install UI was blocked.
2411* Updated `allowedPluginMarketplaces` (beta) so it can be delivered per-user through the bootstrap server; a response that omits the key leaves MDM-provisioned marketplaces in place.
2412* Fixed a one-time loss of sign-ins on some managed Windows machines after app data moved to a new location.
2413* Fixed AWS credentials not reaching the Code tab's terminal for Amazon Bedrock configurations that use IAM Identity Center.
2414* Fixed bundled Microsoft 365 and other MCP connectors failing to connect on networks with corporate TLS inspection (custom root CA).
2415* Fixed connection tests reporting false failures: the test now runs MCP helper scripts and checks managed configurations exactly as saved, and uses the same Azure AI Foundry endpoint that sessions use.
2416* Fixed managed MCP connectors failing with a credential-storage error when the server allows anonymous access.
2417* Fixed the Microsoft 365 connector failing to sign in on Macs enrolled with Microsoft Company Portal.
2418* Fixed the setup form incorrectly showing "Blocked address" for internal MCP or OAuth servers on IPv6 enterprise networks.
2419
2420**v1.18286.2**
2421
24222026-07-07
2423
2424**General**
2425
2426* Updated the embedded Claude Code engine to the latest version.
2427
2428**Code**
2429
2430* No user-facing changes.
2431
2432**Cowork**
2433
2434* No user-facing changes.
2435
2436**3P**
2437
2438* No user-facing changes.
2439
2440**v1.18286.0**
2441
24422026-07-02
2443
2444**General**
2445
2446* Fixed `apt update` failing on Linux after uninstalling a Claude that was installed from the apt repository.
2447* Fixed being asked to sign in repeatedly after a session expired while you were using the app; your in-progress message draft now returns when you sign back in within 10 minutes, and signing out still clears it.
2448* Fixed being unable to disable, delete, or uninstall plugins from GitHub-connected marketplaces, or to remove those marketplaces.
2449* Fixed pressing Enter not sending your message when an @mention had no matching results.
2450* Fixed remote SSH sessions getting stuck in a reconnect loop on very large messages, being lost when the computer woke from sleep mid-reconnect, and occasionally sending the same input twice after reconnecting.
2451* Fixed setup on Windows getting stuck retrying a download when the download folder was locked or inaccessible.
2452* Fixed the file-open spinner on Linux staying up after the download completed.
2453
2454**Code**
2455
2456* Added a "Choose folder" option to recover a session whose working folder is missing: the conversation forks into the folder you pick and the stuck session is archived.
2457* Added a "Switch organization" option on the "session not found" page so you can reopen a session link under the right organization.
2458* Added drag-to-reorder for queued messages, and Steer now works for messages that include images.
2459* Improved the Code tab's live preview: it now reports honest connection and loading status (including when a page arrives but never finishes loading, or a server overloads itself with requests), adds browser-style Back, Forward, and Reload/Stop controls, and lets you close other preview tabs.
2460* Fixed background tasks and workflows continuing to show as running after they finished, the session restarted, or the session was stopped.
2461* Fixed Remote Control sessions spinning forever with no error after you sent a message when the hosting computer was no longer connected.
2462* Fixed the sidebar project + button opening an empty prompt (or pointing at github.com) for GitHub Enterprise repositories.
2463
2464**Cowork**
2465
2466* Added click-to-zoom and drag-to-pan to the fullscreen image viewer.
2467* Fixed Computer Use teach mode where the Next and Exit buttons sometimes stopped responding until you switched apps and back, and cleared up teach-mode visuals so the screen-edge glow no longer flickers and the status indicator no longer sticks after you exit a guide.
2468* Fixed dictation dropping back to the text box when started from the mic button in existing sessions.
2469* Fixed document tools in cloud sessions acting on your local files instead of the session's files.
2470
2471**3P**
2472
2473* Added a usage breakdown by model family, source attribution, and usage tips to the `/usage` card.
2474* Removed automatic addition of Anthropic's default plugin marketplace on third-party deployments, and removed the `disableDefaultPlugins` managed configuration key (which had no effect there). Provision marketplaces via `allowedPluginMarketplaces` (beta).
2475
2476**v1.17377.2**
2477
24782026-07-01
2479
2480**General**
2481
2482* No user-facing changes.
2483
2484**Code**
2485
2486* No user-facing changes.
2487
2488**Cowork**
2489
2490* No user-facing changes.
2491
2492**3P**
2493
2494* Added Claude Fable 5 to the model picker for organizations with access.
2495
2496**v1.17377.1**
2497
24982026-06-30
2499
2500**General**
2501
2502* Added Linux support: Claude Desktop is now available for Debian and Ubuntu on x64 and arm64, installable as a .deb package.
2503* Updated the plugin Directory to show admin-configured marketplaces under the Organization tab and refresh them automatically when the source repository updates.
2504* Fixed plugin and skill downloads stalling for several minutes on a dead connection before retrying; stalled downloads now retry sooner.
2505* Fixed prompt and tool-detail content missing from OpenTelemetry exports for standard deployments that have not set an explicit content-capture policy; third-party deployments are unchanged.
2506* Changed zoom in and out to use smaller steps for finer control.
2507
2508**Code**
2509
2510* Added an integrated terminal pane and inline image previews in the transcript for SSH sessions.
2511* Added step-by-step progress and a Stop button while a session's worktree is being set up, so a long checkout on a large repository can be cancelled.
2512* Added a right-click menu in the Terminal pane with Copy, Paste, and Attach selection as context.
2513* Updated the transcript to mask API keys and tokens by default; click the eye icon to reveal them.
2514* Fixed folder access and cross-session requests being rejected after you approved them when permission mode was Auto or Bypass permissions.
2515* Fixed failed mid-turn message sends (for example, while offline) dropping your text instead of r
2412* Fixed an issue where permission prompts and in-session questions could silently stop appearing after an input-handling error — if Claude asked a question or requested permission and the prompt never showed up, this release fixes that. (Upd
No line in this hunk matches that.