Skip to main content
Releases v2.1.214 → v2.1.2193 features · July 20–24
Claude Opus 5new model

Claude Opus 5 is the new default Opus model in Claude Code. It’s the default on Max, Team Premium, Enterprise pay-as-you-go, and the Anthropic API, and on Claude Platform on AWS, Amazon Bedrock, and Google Cloud’s Agent Platform. On the Anthropic API and on Max, Team, and Enterprise plans, Opus 5 runs with a 1M-token context window; on Amazon Bedrock and Google Cloud’s Agent Platform, select the 1M model variant. Fast mode moves to Opus 5 at $10/$50 per MTok. Requires v2.1.219 or later.

Switch to Opus 5 by name, or pick it from the model picker:

Claude Code
Model configuration
iOS Simulator in Claude Code DesktopDesktop

Claude Code Desktop on macOS gets an iOS Simulator pane, in public beta on Pro, Max, and Team plans. When Claude builds, launches, or checks your app in a simulator, the pane opens next to the conversation and streams the device screen live, so you can watch Claude tap through the app to verify its changes or drive the device yourself. Requires Xcode with the iOS platform installed, and Claude Desktop v1.24012.0 or later.

Claude Code Desktop with the iOS Simulator pane showing an iPhone app next to the conversation

Ask Claude to run or test your app, and the pane opens when the app launches:

Claude Code
Test iOS apps in the simulator
Claude Security pluginplugin

The Claude Security plugin runs a multi-agent vulnerability scan of your codebase inside a Claude Code session: agents map your architecture, build a threat model, hunt for vulnerabilities, and independently review every finding before writing the report to a CLAUDE-SECURITY-<timestamp>/ directory. Scan a whole repository or only a branch’s diff, a pull request, or a single commit, then turn the findings you choose into reviewed patches that you apply yourself.

Install the plugin from the official Anthropic marketplace, run /reload-plugins, then start a scan with /claude-security:

Claude Code
Scan and fix your codebase

Other wins

/code-review now runs as a background subagent with its own context window, so review work stays out of your conversation and the findings arrive when it completes
/verify, /code-review, and /deep-research run only when you invoke them; Claude no longer launches them on its own
Emoji shortcodes autocomplete in the prompt input: type :heart: to insert an emoji, or two or more characters after : for suggestions; turn it off with emojiCompletionEnabled
Skills with context: fork run in the background by default, and background: false in the skill’s frontmatter waits for the result in the same turn
A session runs up to 20 subagents concurrently by default; change the limit with CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS
--max-budget-usd now enforces the cap on subagents: once spend reaches it, Claude can’t start more and running background subagents stop
New sandbox.filesystem.disabled setting skips filesystem isolation while keeping network egress control
In auto mode, the checks for dangerous rm commands, background jobs, and suspicious Windows paths no longer open permission dialogs; the auto-mode classifier adjudicates them instead
Bash permission checks fail closed on more shell forms, including file-descriptor redirects, Zsh variable subscripts in [[ ]] comparisons, help and man invocations that could run unsafe options, and commands over 10,000 characters
Fast mode no longer supports Opus 4.7: /fast now applies to Opus 5 and Opus 4.8
Long-running tool calls emit a periodic progress heartbeat instead of going silent
Full changelog for v2.1.214–v2.1.219 →