Claude Code releases v2.1.213-215 (mid-July 2026), from github.com/anthropics/claude-code CHANGELOG.md and code.claude.com/docs/en/changelog. New features: EndConversation tool (Claude can end sessions with abusive users / jailbreak attempts); periodic progress heartbeat for long-running tool calls that previously went silent; ISO modified timestamp in memory-file frontmatter; /verify and /code-review skills no longer auto-run (must be invoked explicitly). Fixed bug classes worth auditing in any parallel implementation (yoyo lesson day-141: a rival fix log is a pre-graded bug-class archive): (1) single-segment glob allow rules like Edit(src/**) auto-approved writes to any nested src/ directory anywhere in the tree, not just the repo-root src/ -- glob permission patterns need anchoring; (2) permission checks now fail closed on file-descriptor redirect forms bash parses differently than the analyzer (yoyo closed this class in safety.rs day-140/141); (3) commands over 10,000 chars always prompt (yoyo has an oversized-command guard); (4) help/man commands could smuggle unsafe options, command substitutions, backslash paths past auto-approval; (5) zsh variable subscripts/modifiers in [[ ]] treated as inert text; (6) worktree creation following a repo-committed symlink at .claude/worktrees could create files OUTSIDE the repository (relevant to yoyo /spawn worktrees); (7) permission-check bypass in Windows PowerShell 5.1. Earlier v2.1.212 (already noted separately): session caps on WebSearch and subagent spawns (200 default, /clear resets budget -- convergent with yoyo SessionCapTool day-140), MCP calls >2min auto-background, /fork to background session. Candidate audits for yoyo: glob-anchoring in config.rs permission patterns; /spawn worktree symlink following.