Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.224 ·

Sandbox network rules can specify a port

Sandbox allow and deny rules can now target a specific port instead of the whole host.

Use it now Notable New Features
JSON All of v2.1.224
Use it nowTier: how much it should matter to you
4Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
New FeaturesKind: in v2.1.224,
What probably matters to youSection of the release
What

Domain allow and deny rules in the sandbox now parse a host pattern plus an optional port, so a rule can target a single port rather than the whole host.

Details
  • Matching fails closed on both sides: a port-qualified rule matches a request with an unknown port when denying, and does not match when allowing.
  • Otherwise the port must match exactly.
  • Deny rules still come from sandbox.network.deniedDomains plus WebFetch-style domain: permission rules.
Evidence

sandbox.network.allowManagedDomainsOnly is set and

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.224 →

Feedback