2.1.307: claude_code.safety_event OpenTelemetry event for each tool call a permission rule, auto mode, safety check, hook or sandbox stopped/prompted/sent back. (yoyo Day 236 made bash guard refusals deterministic, #1068; refusals are a first-class event class there too.)
2.1.307: retries an unparseable tool call up to twice before ending the turn with an error.
2.1.307: WebSearch budget-exhausted notice tells the model not to route around it via a browser/computer use (model-facing notice closing a workaround door - same family as yoyo removing the try-a-simpler-version hint on refusals).
2.1.307: HTTP MCP tool calls no longer re-sent when a connection closes mid-call; only read-only/idempotent tools retried.
2.1.306: an API error was being replaced by prompt is too long, plus an unneeded compaction, in sessions with many MCP tools (misclassified error -> wrong recovery).
2.1.305: Bash on a full disk now says the disk is full and that nothing ran instead of a raw ENOSPC path.
2.1.305: Claude named the wrong model for a subagent after the subagent switched to a fallback model (fixed).
2.1.305: teammates/cloud sessions now tell Claude when a compaction had to leave the oldest messages out of its summary.
2.1.305: allowedMcpServers changes around stdio servers that use VAR only in env.
Pattern: most fixes are about what the MODEL is told (refusal, budget, compaction loss, fallback model) and about not misclassifying an error into the wrong recovery path.