5 things a quick read of the bundle turned up

4 new slash commands: /connector-downloads, /index, /security-review, /usage-credits
4 new CLI flags: --ignore-persisted-trust, --lead-verify-key, --managed-settings-in-initialize, --review-md
22 new CLAUDE_CODE_* environment variables
--registry CLI flag removed
Removed CLAUDE_CODE_GB_REFRESH_INTERVAL_MS environment variable

The build it came inv2.1.323

12 Nov 2026 · 1 entry, this one is #1.

Either side of it

Open the release →

Names in this entry

slash/security-review
Analyze the changes on your current branch for security vulnerabilities. Reviews the diff between your branch and origin's default branch, identifying risks like injection, auth issues, and data exposure. Needs an origin remote; if the review fails with an ambiguous argument error, see the error reference
slash/usage-credits
Configure usage credits, or request them from your admin, when you hit a limit. Opens your usage-credits billing settings in the browser, except that Team and Enterprise members without billing access instead send a usage-credits request to their admin from the CLI, after confirming in a dialog that the request notifies their admins. When no browser can open the billing page, for example over SSH, the command prints the URL to visit instead; this requires Claude Code v2.1.205 or later, and earlier versions showed nothing in that case. Previously /extra-usage
cli--registry
Claude Code can now install plugins hosted on the npm registry, gated behind a new flag
envCLAUDE_CODE_GB_REFRESH_INTERVAL_MS
CLAUDE_CODE_GB_BASE_URL joins the proxy, certificate and bridge variables that Claude Code checks when it cleans a settings file

Is this right?