Claude Code v2.1.136 closes a plan-mode write-bypass via Edit allow-rules, adds settings.autoMode.hard_deny for unconditional auto-mode blocks, fixes WSL2 image paste, plugin.json skills discovery, and MCP content-block rendering.
v2.1.136 ships about fifty bullets, mostly bug fixes — but five of them change daily behavior for advanced users. A plan-mode bypass via Edit allow-rules is closed, a new settings.autoMode.hard_deny key gives security teams unconditional blocks, WSL2 image paste from the Windows clipboard works again, plugin.json's skills entry no longer hides the default skills/ directory, and MCP content-block tool results render properly.
Why: Plan mode is supposed to be read-only, but Edit allow-rules in your permissions were accidentally bypassing the gate.
What: Plan mode now correctly blocks Edit/Write operations even when an Edit(...) allow-rule matches the path.
How: No action — already-defined plan-mode workflows are now safer by default.
Why: Auto-mode classifier rules can be overridden contextually by the model; some policies need to be unconditional regardless of context.
What: New settings.json key for classifier rules that block without re-evaluation by the model.
How: Add "autoMode": { "hard_deny": [...] } to .claude/settings.json to enforce always-block patterns.
Why: WSL2 users couldn't paste images from the Windows clipboard, blocking screenshot-driven workflows.
What: Image paste now uses a PowerShell fallback to read the Windows clipboard from inside WSL2.
How: Just press Ctrl+V in any WSL2 Claude Code session — works automatically.
Why: Plugin authors who added a skills entry to plugin.json lost their default skills/ discovery silently.
What: The skills field now augments, not replaces, the default skills/ directory.
How: No action — both custom paths and skills/ are discovered together.
Why: MCP servers returning content blocks (rather than raw text) showed empty results in the conversation.
What: Content-block payloads from MCP servers are now correctly rendered in tool results.
How: No action — works automatically with any MCP server emitting content blocks.
Hosts: Alex Chen & Sarah Kim · Generated from the official Claude Code CHANGELOG.
Full changelog: github.com/anthropics/claude-code/CHANGELOG.md
Claude Code docs: docs.claude.com/en/docs/claude-code
Each episode breaks down the latest release notes from AI frontier labs, so you know exactly what changed and why it matters for your workflow.
NOTE: This podcast is AI-generated, both in terms of content and in terms of voice over. AI can make mistakes. Please double-check content before any decisions based on this content.