What's new in Claude Code v2.1.136

v2.1.136 ships about fifty bullets, mostly bug fixes — but five of them change daily behavior for advanced users. A plan-mode bypass via Edit allow-rules is closed, a new settings.autoMode.hard_deny key gives security teams unconditional blocks, WSL2 image paste from the Windows clipboard works again, plugin.json's skills entry no longer hides the default skills/ directory, and MCP content-block tool results render properly.

Plan mode now blocks file writes despite Edit allow-rules

Why: Plan mode is supposed to be read-only, but Edit allow-rules in your permissions were accidentally bypassing the gate.

What: Plan mode now correctly blocks Edit/Write operations even when an Edit(...) allow-rule matches the path.

How: No action — already-defined plan-mode workflows are now safer by default.

settings.autoMode.hard_deny for unconditional auto-mode blocks

Why: Auto-mode classifier rules can be overridden contextually by the model; some policies need to be unconditional regardless of context.

What: New settings.json key for classifier rules that block without re-evaluation by the model.

How: Add "autoMode": { "hard_deny": [...] } to .claude/settings.json to enforce always-block patterns.

WSL2 image paste from the Windows clipboard

Why: WSL2 users couldn't paste images from the Windows clipboard, blocking screenshot-driven workflows.

What: Image paste now uses a PowerShell fallback to read the Windows clipboard from inside WSL2.

How: Just press Ctrl+V in any WSL2 Claude Code session — works automatically.

plugin.json "skills" no longer hides the default skills/ directory

Why: Plugin authors who added a skills entry to plugin.json lost their default skills/ discovery silently.

What: The skills field now augments, not replaces, the default skills/ directory.

How: No action — both custom paths and skills/ are discovered together.

MCP tool results with content blocks now render

Why: MCP servers returning content blocks (rather than raw text) showed empty results in the conversation.

What: Content-block payloads from MCP servers are now correctly rendered in tool results.

How: No action — works automatically with any MCP server emitting content blocks.

Hosts: Alex Chen & Sarah Kim · Generated from the official Claude Code CHANGELOG.

Full changelog: github.com/anthropics/claude-code/CHANGELOG.md

Claude Code docs: docs.claude.com/en/docs/claude-code

• (00:00) - Plan mode safety fix