Follow Discord
Sweep 29 Sep 2026 · 18:10Z Build v2.1.285 506 read Stable v2.1.280 Latest v2.1.285 Next v2.1.285 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.285 ·

Sandbox package registry defaults now come from a shared list

The sandbox's default allowed package registries, such as registry.npmjs.org and pypi.org, now come from a shared list

Under the hood Internal Changes
JSON All of v2.1.285
Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
Internal ChangesKind: in v2.1.285,
Internal ChangesSection of the release
What

The sandbox limits which websites commands run by Claude can reach. Its default allowance for package registries, such as registry.npmjs.org, jsr.io, pypi.org and proxy.golang.org, used to be written out in place. It now comes from a shared list.

Why

The hosts allowed by default may differ from before. If a package install inside the sandbox starts failing to connect, check which registries are allowed.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear which hosts the shared list contains.

See this entry in the whole of v2.1.285 →

Feedback