Claude Code 2.1.310, Codex 0.164 and Copilot in Teams: October 25 Roundup

Since the last roundup, Claude Code went from 2.1.308 to 2.1.310 according to its GitHub releases page, with two releases that matter for sandboxing and enterprise setups. Codex finally tagged a stable 0.164.0 on its releases page, and GitHub shipped two Copilot changelog entries on October 23.

Claude Code 2.1.309: a security-focused release

Version 2.1.309 (October 22) is mostly about tightening the sandbox and permission model:

• Sandboxed Bash on macOS and Linux no longer runs shell startup files outside the sandbox.
• Sandboxed commands and auto-accepted edits can no longer modify the --mcp-config file.
• sed -i now goes through the standard Bash permission prompt and is no longer restored by /rewind.
• claude ultrareview now requires workspace trust.
• In bypass-permissions mode, the Desktop and VS Code apps deny dangerous rm and rmdir commands immediately and suggest a rewrite.
• Windows: PowerShell hooks that exit with code 2 now block, and PreToolUse and PermissionRequest hooks no longer fail open when Git for Windows is missing.

If you rely on hooks as a policy layer, the Windows fix is the important one: a missing dependency used to let tool calls through silently. Version 2.1.308 the same day lists only general bug fixes.

Claude Code 2.1.310: cloud providers and enterprise roles

Version 2.1.310 (October 23) is aimed at teams running Claude Code behind gateways or cloud providers:

• The Monitor tool and plugin monitors now work on Amazon Bedrock, Google Vertex and Foundry.
• Requests behind some gateways no longer fail on the effort-2025-11-24 beta value or on mid-conversation system messages. Claude Code retries without them.
• Compaction after a "Prompt is too long" error keeps less dense text such as base64 or SVG, so the next request is less likely to fail again.
• Cloud sessions and Remote Control permissions can now be set through Enterprise custom roles.

Codex 0.164.0 goes stable

After days of alpha builds, the Codex 0.164.0 release (October 23) is now marked Latest. It adds:

• Saved prompt presets in ten /presets slots, plus inline arguments for /model and /permissions.
• Image previews in the fullscreen transcript.
• Enterprise MCP authentication and credential masking for remote commands.
• The Amazon Bedrock setup wizard is on by default.
• Fixes for failed compaction, session resume, Windows proxy authentication and sandbox checks.

A 0.165.0-alpha.1 build also appeared the same day, with no release notes yet.

OpenCode 1.19.4

The OpenCode releases page shows v1.19.4 (October 22), which upgrades the bundled Bun runtime to 1.4.4 with security fixes and updated root certificates. Earlier in the 1.19 line, OpenCode discontinued session sharing and made the move to 2.x an explicit choice through opencode upgrade --major.

GitHub Copilot: OpenCode usage metrics and Copilot in Teams

The most interesting entry is that the Copilot usage metrics API now counts usage from tools like OpenCode. A new totals_by_client array appears in the enterprise, organization and user reports, with request count, session count, token usage and a per-model breakdown for each client. Named clients include OpenCode, Claude Code, Codex, Zed, Copilot CLI, VS Code and JetBrains. Because clients are inferred from an integration ID, treat the grouping as best-effort. The change is additive, and it needs the Copilot usage metrics policy to be enabled.

The second entry, Turn notifications into code with GitHub Copilot in Teams, merges the GitHub notifications app and Copilot into one Teams app. You can mention GitHub on an issue notification and have Copilot investigate, fix and open a pull request. The older app becomes "GitHub (deprecated)" and is retired on November 16, so existing users need to install the consolidated app before then.

What to do this week

• Update Claude Code to 2.1.310, especially if you use sandboxed Bash, Windows hooks or a Bedrock or Vertex gateway.
• Move from Codex alphas to stable 0.164.0 and try the new presets.
• Copilot admins: check the new totals_by_client data to see which external tools consume your model quota.
• Teams users: install the consolidated GitHub app before November 16.

References

Claude Code releases · Codex releases · OpenCode releases · GitHub changelog