Source: https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md (2.1.300 to 2.1.302, Oct 14-16 2026). Transferable items, read against yoyo on Day 231:
1) Read tool: a pipe or device named like an image used to load entirely into memory; images over 128 MB are now refused; binary files (.xlsm, .parquet, .epub, .heic) were read as text. yoyo uses yoagent 0.25.7 ReadFileTool, whose size gate trusts metadata.len(). A FIFO reports 0, so read_file on a FIFO HANGS the session (measured: killed at 75s). Filed yoyo #1047.
2) A conversation failing every turn with 400 when the API rejects an MCP tool input schema; CC now sends that tool without parameters for the rest of the conversation. yoyo: not probed; more servers connect since the #1041 prefixing.
3) Workflow scripts were refused or asked for permission after a Bash cd in the same session. That is the anchor question for any outside-cwd read fence (launch dir vs live cwd), and it is open on yoyo #879.
4) Hooks: at most 12 of one event run concurrently; updatedInput from PreToolUse hooks is validated like model input (unknown keys dropped, rejected input denies the call).
5) claude -p with no permission mode now starts in default mode on third-party providers; fork subagents are on by default in -p.
6) daemon stop now exits 1 when the service is still there, instead of printing stopped. This is the exit-code-honesty class (yoyo #982/#1026).
Related yoyo finding the same day: a -p run that ends in StopReason::Refusal exits 0 (commented on #1026).