Claude Report — 2026-09-30
- <a href="https://github.com/anthropics/claude-code/releases/tag/v2.1.285">Claude Code v2.1.285</a> ships Sep 29 with `claude --desktop`, `claude plugin configure`, and `allowedProviders` managed setting.
- Both Agent SDKs (<a href="https://github.com/anthropics/claude-agent-sdk-python/releases">Python 0.2.162</a>, <a href="https://github.com/anthropics/claude-agent-sdk-typescript/releases">TypeScript 0.3.285</a>) sync same-day for CLI parity; TS SDK adds Artifact and startup-failure fields.
- <a href="https://github.com/anthropics/claude-plugins-official/commit/2a8ad9f74633d10e3d9bb0660a03bfc6e50584b1">claude-plugins-official</a> repoints the Postman and AWS Startup Advisor plugins to their upstream partner repos (Sep 29).
- <a href="https://github.com/anthropics/claude-code-action/commit/a8cb0db4d8c2baea0bf33aac6db34a3ce00b4014">claude-code-action</a> adds CI security hardening for GitHub Actions workflows that call Claude (Sep 30).
- <a href="https://github.com/nicobailon/pi-subagents/commits/main">pi-subagents</a> ships a dozen+ fixes/features (Sep 28-30); <a href="https://github.com/kharmanskyi/open-steps/releases/tag/v0.4.6">open-steps v0.4.6</a> patches a session-ID security bug (Sep 30).
🚀 Anthropic Official
Claude Code v2.1.285 (Sep 29)
Adds CLAUDE_CODE_DISABLE_WEB_FETCH, claude --desktop (opens the desktop app on the current directory), claude plugin configure <plugin>, an allowedProviders managed setting to restrict API providers, and CLAUDE_CODE_NONSTREAMING_TIMEOUT_RETRIES. Fixes SSH plugin/marketplace installs, cloud-session updates after compaction, MCP server switching in SDK/-p sessions, and permission handling in background subagents; caps background Bash/PowerShell commands at a default 30-minute (max 2h) time limit.
claude-agent-sdk-python v0.2.162 (Sep 29)
Bumps the bundled Claude CLI to v2.1.285; published to PyPI as claude-agent-sdk==0.2.162.
claude-agent-sdk-typescript v0.3.285 (Sep 29)
Adds read.title to the Artifact tool and provider_not_allowed to startup_failure_reason, fixes subagent Agent calls, improves getSessionMessages(), and updates background-command timeout handling; CLI parity bump to 2.1.285.
claude-plugins-official — partner-plugin repoints (Sep 29)
Repoints the postman plugin from Postman-Devrel/postman-claude-code-plugin to postmanlabs/postman-plugin (rewriting its description toward CI governance checks and Postman Flows), and repoints aws-startup-advisor to aws/agent-toolkit-for-aws, both moving ownership to the partners' own repos.
claude-code-action — CI security hardening (Sep 30)
Hardens GitHub Actions workflows that invoke Claude (#1867); the day before (Sep 29) the action also bumped its bundled Claude Code to 2.1.285 and Agent SDK to 0.3.285.
🔌 Claude Code Plugins
Plugin install-count tracking skipped this run (official marketplace cache unavailable), per instructions. The only in-window plugin-directory activity found is the postman/aws-startup-advisor repoint under Anthropic Official above (Sep 29) — neither plugin's install rank is known without the cache, so it isn't scored here.
Sem cache disponível para checar os 10 rastreados nesta execução.
🛠️ Skills
kharmanskyi/open-steps
Ships v0.4.6 (Sep 30): fixes a session-ID handling security bug in hooks, improves Codex CLI activation tracking, and expands documentation across six translations for four tools (Claude Code, Codex, Cursor, Gemini CLI).
Unchanged in window: anthropics/skills (claude-api update already reported Sep 29 in yesterday's run, no new commits since), addyosmani/agent-skills (last commit Sep 26), cloudflare/security-audit-skill (last commit Sep 14), K-Dense-AI/scientific-agent-skills (no substantive change since Sep 13).
🤖 Agents & Subagents
nicobailon/pi-subagents
Lands a dense run of fixes and features across Sep 28-30: lets users disable individual subagent features, adds a scoped allow-token for Pi's scoped models, supports Pi's built-in MCP for mcp: tool selections, fixes workflow-stop/parent-trust propagation for child sessions, and corrects TUI agent-counting and lane display in the async/Fleet views.
davila7/claude-code-templates
Enhances the customer-support agent template (#1024) and keeps its automated trending-data/component refresh running through Sep 29-30, continuing the Sep 26-28 Vercel-sandbox and "Jev" mod work.
wshobson/agents
Ships a follow-up gardener fix (#743, Sep 29) removing dangling Reference lines it missed in the prior pass, continuing the skill-link validation work already reported yesterday.
Unchanged in window: VoltAgent/awesome-claude-code-subagents (last commit Sep 21), anthropics/commerce-agents (last activity Sep 11).
🔗 MCPs & Integrations
ChromeDevTools/chrome-devtools-mcp
Fixes tool calls that hung after a dead browser connection to now fail fast, rejects unrestricted filesystem paths without an explicit workspace (Sep 29), and refactors tool registration/config parsing into per-mode classes (Sep 30).
Unchanged in window: upstash/context7 (only a low-value test removal Sep 29, no functional change), DeusData/codebase-memory-mcp (no commits since Sep 28), graygnatconsole/mcp-audit-tool (no commits since its Sep 26 launch), oraios/serena (a single doc-comment commit Sep 29).
💡 Community — Workflows & Ideas
DmitriyYukhanov/claude-plugins
Ships a five-plugin release wave (Sep 29-30): reroutes codex-collaboration Codex reviews through a companion script instead of the Skill tool and consolidates timeout handling (v1.13.0); makes python-dev and typescript-dev reviewers assess general code quality in a single pass instead of flagging style nits (v1.3.0); and fixes a Unity test runner that could prematurely exit via a stray -quit flag (v1.8.0).
Pi.dev: You Said No MCP
Argues that pairing MCP with a "Codemode" (code-execution) layer resolves MCP's traditional integration pain points; HN thread (38 points, Sep 30) pushes back with comparisons to OpenAPI and debates whether bash/shell already subsumes what MCP offers.
📰 Quick Mentions
- skill-of-skills — quality-ranked directory indexing 1,400+ AI coding skills across Claude Code, Cursor, Codex and more, data snapshot dated 2026-09-30.
- claude-plugins release-2026-09-29 —
issue-to-prv9.4.1 makes its second-model review strictly report-only (no mid-run edits or prompts).