Claude Code Fixes a Silent Worktree Bug

Claude Code 2.1.153 Fixes Gateway Leak and Tightens MCP

We break down a critical credential leak in custom API gateways, where Claude Code mistakenly sent primary Anthropic OAuth credentials to the wrong place. The episode also covers faster git and GitHub plugin loading with skipLfs, plus new safeguards for subagent MCP configs to prevent privilege escalation.

Claude Code Fixes a 10GB MCP Leak and a Sneaky Resume Bug

This episode digs into the v2.1.132 Claude Code update, including a stdio MCP memory leak that could balloon long sessions past 10GB, plus the practical differences between stdio and HTTP transport. It also covers new session-aware Bash env vars, a terminal escape hatch for alternate screen mode, and a permission-mode bug that could quietly override your intent when resuming plan-mode sessions.

Claude Code 2.1.129 Turns Plugins Into Shareable Artifacts

This episode breaks down how Claude Code v2.1.129 changes plugin loading with URL-based zip installs, moving plugins from local setup to a true distribution model. It also explores the new experimental themes and monitors fields, and the security tradeoffs that come with treating plugins like packaged software.

Claude Code Fixes a Silent Worktree Bug

This episode breaks down a subtle Git behavior in Claude Code v2.1.128 where new worktrees now branch from local HEAD instead of origin/default-branch, preventing unpushed commits from being skipped. It also covers related reliability improvements, including OTEL isolation for subprocesses and better handling of parallel tool calls.

Claude Ultrareview Turns AI Feedback Into a Merge Gate

This episode explores how Claude Code’s `ultrareview` command uses exit codes, streamed output, and PR targeting to make AI review behave like a real CI check. It also digs into the multi-agent verification model, cost tradeoffs, and the network constraints teams need to consider before wiring it into GitHub Actions.