Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.223 ·

Linux sandbox skips redundant blocking mounts inside read-only denied directories

The Linux sandbox skips pointless blocking mounts, so sandboxed runs start with less overhead.

You'll notice Bug Fixes
JSON All of v2.1.223
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
Bug FixesKind: in v2.1.223,
Bug FixesSection of the release
What

The bubblewrap argument builder now recognises when a non-existent deny path already sits inside a read-only denied directory and stops adding a mount to block it.

Details
  • new bookkeeping tracks write roots and their realpaths, deny directories and their realpaths, and a map of deny paths per allowed root
  • in the redundant case it no longer mounts /dev/null or an empty temp dir to prevent creation, and logs that the path is already uncreatable
  • Linux sandbox only
Evidence

Skipping non-existent deny path inside a read-only denied directory (already uncreatable)

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.223 →

Feedback