--- title: "Claude Code v2.1.233 Released: Adds GitLab MR Support and Multiple Security Fixes" source: "Claude Code：GitHub Releases（RSS）" source_tier: "t1_5" url: "https://github.com/anthropics/claude-code/releases/tag/v2.1.233" permalink: "https://feed.astralor.com/items/itm_1eef94356f8fd5362b19d5e9" published: "2026-08-14T22:20:57.000Z" score: 81 channel: "ai" tags: ["AI Coding Tools","Anthropic","Claude Code","MCP"] --- # Claude Code v2.1.233 Released: Adds GitLab MR Support and Multiple Security Fixes ## AI commentary > What stands out to me is that newer models no longer enable Todo tools by default, hinting at Anthropic's tightening of built-in tooling. The Windows credential leak patch should also push enterprise users to upgrade quickly. For teams running proxies behind upstreams, forward_user_identity is a handy observability addition. ## At a glance Claude Code v2.1.233 has been released with several new capabilities and fixes. It adds GitLab merge request URL support to the --worktree flag and agents view, an opt-in forward_user_identity setting for Anthropic upstreams to attribute spend per user, optional memory cgroup support for Bash tool commands on Linux, and a new environment variable to configure WebFetch cache TTL. The release also fixes MCP v2 stream reconnection issues, notification hooks for permission prompts, high CPU idle usage on Linux, and a Windows NTLM credential leak vector. In addition, self-hosted runner startup is faster, and Todo tools are no longer available by default on newer models such as Opus 4.8 and Sonnet 5, but can be re-enabled via an environment variable. ## Key points - Adds GitLab merge request support and an opt-in forward_user_identity setting to attribute spend per user - Adds optional memory cgroup support for Bash tools on Linux and a WebFetch cache TTL configuration - Fixes MCP v2 connection issues, missing notification hooks, Windows NTLM leak vector, and improves self-hosted runner startup - Disables Todo tools by default on newer models (e.g., Opus 4.8, Sonnet 5), with an environment variable to re-enable ## Full text What's changed Added GitLab merge request URL support to the --worktree flag and the claude agents view (where MRs display as !N) Added an opt-in forward_user_identity apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user Added opt-in memory cgroup support for Bash tool commands on Linux (CLAUDE_CODE_TOOL_MEMORY_LIMIT) so a runaway build can't stall the session Added CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes) Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts) Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled Fixed bundled skill aliases like /checkup and /review reporting "Unknown command" in -p mode or with plugins/MCP loaded when a user or project skill shadows the bundled skill Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers Fixed Windows paths spelled with the NT \??\ device prefix bypassing UNC path validation, closing an NTLM credential-leak vector Improved claude self-hosted-runner session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launch Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway Improved claude plugin validate to check a bare .claude/skills directory, reporting SKILL.md files whose frontmatter fails to parse Improved screen reader mode: the /effort selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped Improved print mode diagnostics: a [claude-code:unrecognized_model] line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with modelOverrides to silence Changed the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts Todo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to bring them back Windows: fixed auto mode repeatedly stopping for manual approval on ordinary cd && > file Bash commands (a 2.1.232 regression) Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (< file); a narrower version will return in a later release --- Verify against the original before citing; curated by Astral Feed: https://feed.astralor.com/items/itm_1eef94356f8fd5362b19d5e9