Claude Report — 2026-09-09

🚀 Anthropic Official

Claude Code v2.1.263 (Sep 6)

Ships bug fixes and reliability improvements; the release notes list no itemized changes beyond that summary.

Claude Code v2.1.265 (Sep 8)

A large release covering security, caching, and plugin infrastructure:

• Adds --plugin-dir support for a folder of multiple plugins with automatic child-folder detection.
• Adds a 1GB cap on tool results saved to disk, with truncation notices in conversation previews.
• Adds user.email and user.groups to telemetry from Claude Desktop and Cowork through a Claude apps gateway.
• Fixes prompt-cache breakage for foreground-spawned subagents and for resumed/teammate sessions that moved context out of the prompt prefix.
• Fixes plugin paths with backslashes bypassing symlink-containment checks on macOS and Linux, and plugin directories starting with .. being wrongly refused.
• Fixes MCP servers configured as HTTP with only legacy SSE transport never connecting.
• Fixes /model opusplan[1m] rejection with a false "Model not found" error.
• Improves --worktree startup on large repositories via parallel checkout (git 2.32+).
• VS Code: adds automatic session archiving after 14 idle days.

Claude Code v2.1.266 (Sep 8, hotfix)

Fixes a regression where CLAUDE_CODE_USE_GATEWAY forced Cloud-gateway sign-in even for setups using API keys or custom auth headers, breaking LLM-gateway and proxy configurations shipped the same day in v2.1.265.

Claude Agent SDK TypeScript v0.3.263, v0.3.265, v0.3.266 (Sep 6 / Sep 8 / Sep 8)

Tracks Claude Code parity release-for-release; v0.3.265 additionally adds user_message_uuid/user_message_uuids tracking on synthetic and Claude Code-initiated turns and fixes multi-turn sessions resetting the shell working directory (cd now persists across turns).

The Python Agent SDK remains stalled at v0.2.152 (bundling CLI 2.1.259, Sep 2), with no release in the window. No anthropic.com/news posts, API release notes, or core anthropic-sdk-python/-typescript releases fall inside Sep 6-9; the most recent official news post remains the Sep 1 Fable/Mythos 5.1 launch, and the last core SDK releases were Sep 4.

🔌 Claude Code Plugins

Plugin tracking skipped this run — official marketplace install-count cache unavailable.

🛠️ Skills

tt-a1i/archify

Embeds the viewer font so delivered report pages stay self-contained instead of depending on system fonts (Sep 8), following its already-reported Gitee/local-repo and dsh-adapter work earlier the same day.

Unchanged in window: anthropics/skills (no commits since Sep 3), agentskillexchange/skills (routine sync/regeneration churn only, no material content change), K-Dense-AI/scientific-agent-skills (only an automated security-scan-report commit Sep 7), alirezarezvani/claude-skills (no push since Aug 26).

🤖 Agents & Subagents

anthropics/claude-agent-sdk-typescript

See Anthropic Official above — v0.3.265/266 (Sep 8) add message-UUID tracking and fix shell cwd persistence.

nicobailon/pi-subagents

Lands dozens of unreleased fixes and features Sep 6-9 on top of the already-reported v0.66.0 (still the latest tag) — a bounded model-fallback chain for its watchdog, FleetView agent coloring by stable theme-aware identity, terminal-neutral Inspect plugins, opt-in quiet completion for recurring schedules, and fail-closed handling when detached process-tree descendants remain.

Unchanged in window: VoltAgent/awesome-claude-code-subagents (README-only commit Sep 7, no content change), claude-agent-sdk-python (still v0.2.152), AMAP-ML/LongHorizon-Harness (no push since Aug 20).

🔗 MCPs & Integrations

oraios/serena

Fixes a health-check that reported success even after its reference search had failed (#1998, Sep 8), plus docstring and AGENTS.md/CLAUDE.md documentation improvements the same day, following its already-reported Sep 6-8 type-acquisition and symbol-caching fixes.

DeusData/codebase-memory-mcp

Ships a fresh batch of fixes Sep 8-9 beyond yesterday's report — removes the install directory from the Windows user PATH on uninstall (#2117), stacks every nested .gitignore on a path instead of just the shallowest (#1973), excludes the indexer's own artifact directory from its dirty-watch signature, and fails an over-budget memory-decision whole instead of soft-overshooting.

github/github-mcp-server

Restricts OAuth protected-resource metadata to advertise only default scopes (#3251, Sep 8), following its already-reported Sep 7 fix for missing owner/repo/issue_number parameters in Copilot assignment tools.

upstash/context7

Adds on-premise setup support to the ctx7 CLI and Vercel Marketplace OIDC support in its SDK and MCP server (Sep 8), beyond the already-reported Sep 7 version-packages release.

Unchanged in window: modelcontextprotocol/servers (no commits since Sep 3), modelcontextprotocol/typescript-sdk (no commits since Sep 3), punkpeye/awesome-mcp-servers (routine new-entry list churn only, no core feature change).

💡 Community — Workflows & Ideas

affaan-m/ECC v2.2.1

Ships a security-hardening patch (Sep 8) for its 254k-star cross-harness agent framework — GateGuard now detects destructive PowerShell obfuscation attempts, the installer rejects file collisions with untracked user files, and manual Claude installs register ECC's hooks atomically.

costajohnt/oss-autopilot

Adds an end-to-end open-source contribution manager bundling agents, contributor-focused skills, a dashboard, a CLI, and an MCP server to discover issues, manage cross-repo PRs, and analyze CI failures — added to awesome-claude-code Sep 8.

netresearch/claude-code-marketplace

Publishes a curated Agent Skills collection for enterprise-grade security, quality, and automation standards, portable across Claude Code, Cursor, Copilot, and 30+ other agents — added to awesome-claude-code Sep 8.

cathrynlavery/diagram-design

Ships CJK-face support with a Traditional Chinese labels section, an SVG-export fix for PowerPoint's importer, and a new traceable block-decomposition semantic pattern (Sep 6-8) for its 38-diagram-type skill for Claude Code, Codex, and Pi.

📰 Quick Mentions

• Hackers are stealing Claude tokens from subscribers — TechCrunch reports (Sep 8) compromised session keys let attackers mint unauthorized OAuth tokens and drain subscriber credits; Anthropic suspended accounts and issued partial refunds but declined itemized usage breakdowns.
• NVIDIA/skills — a 3,244-star Agent Skills collection for Physical AI, robotics, simulation, CUDA, and RAG workflows, pushed Sep 8.