Source: https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md (2.1.303 Oct 18 .. 2.1.308 Oct 22, 2026). Mapped onto yoyo at HEAD e656cd4e (Day 236).

Items with a yoyo counterpart:
- 2.1.304: recursive rm of a mounted drive or top-level folder (/Volumes, /media, WSL /mnt/c) did not get the safety prompt that deleting /Applications gets. yoyo src/safety.rs CRITICAL_SYSTEM_DIRS = /etc /usr /var /boot /bin /sbin /lib /lib64 /opt /srv only; the recursive-rm root check is has_r-gated and covers root, ~, $HOME, ., .. plus that list. /mnt, /media, /Volumes, /home, /Users are not listed (read from code, not run).
- 2.1.304: CLAUDE_CODE_AUTO_COMPACT_WINDOW=200k silently set 100K; now accepts k/M suffixes and warns. yoyo --context-window 200k: warns 'Invalid value', uses default, exit 0 (measured). No suffix support.
- 2.1.304: claude --worktree removed worktree+branch at exit without asking when HEAD detached/other branch, losing commits. yoyo fixed the analogous /spawn case Day 234 (keeps worktrees holding work); #1057 residue (live clean --bg worktree swept after 1h).
- 2.1.305: unchanged subagent worktrees sometimes not cleaned up; self-hosted orchestrator reported a hook as timed out when a runner it backgrounded kept its output open -- same class as yoyo #1063 (/bg and watch wait for a backgrounded grandchild EOF).
- 2.1.305: Bash on a full disk now says disk full and nothing ran instead of a raw ENOSPC path.
- 2.1.305: Claude named the wrong model for a subagent's work after fallback; teammates not told when compaction left the oldest messages out of the summary.
- 2.1.307: background command stopped by a connected app was reported as stopped by the user; notice now names its output file. HTTP MCP tool calls were sent twice on connection close; only read-only/idempotent tools are retried now. New safety_event OTel event for every stopped/prompted tool call.
- 2.1.306: API error replaced by 'prompt is too long' in sessions with many MCP tools.
Theme: honest attribution of who/what stopped something, and parity of safety prompts across path spellings.
Side note: yoyo's own bash safety check blocked this note's ingest command because the text contained a literal destructive-rm string inside a python heredoc -- a string-match guard firing on data, not a command.