--- title: "Claude Code v2.1.233 发布：新增 GitLab MR 支持与多项安全修复" source: "Claude Code：GitHub Releases（RSS）" source_tier: "t1_5" url: "https://github.com/anthropics/claude-code/releases/tag/v2.1.233" permalink: "https://feed.astralor.com/items/itm_1eef94356f8fd5362b19d5e9" published: "2026-08-14T22:20:57.000Z" score: 81 channel: "ai" tags: ["AI 编程工具","Anthropic","Claude Code","MCP"] --- # Claude Code v2.1.233 发布：新增 GitLab MR 支持与多项安全修复 ## AI 点评 > 这次更新最让我关注的是新模型默认收起 Todo 工具，这暗示 Anthropic 正在收窄内置工具范围；同时 Windows 凭据泄漏修复应促使企业用户尽快升级。对于维护多后端代理的团队，forward_user_identity 是实用的可观测性补充。 ## 速览 Claude Code 发布 2.1.233 版，新增 GitLab 合并请求支持、用户身份转发配置、Linux 下 Bash 内存限制及 WebFetch 缓存 TTL 设置。修复 MCP 连接、通知钩子、Windows 路径校验等多项问题，并加快自托管运行器启动。新模型默认禁用待办工具，可用环境变量恢复。 ## 关键点 - 新增 GitLab 合并请求支持，并在 upstream 上提供用户身份转发以按用户归属支出 - 为 Linux Bash 工具加入可选内存限制，新增 WebFetch 缓存 TTL 配置 - 修复 MCP v2 连接、通知钩子、Windows 凭据泄漏等多个问题，并提升自托管运行器启动速度 - 新模型（如 Opus 4.8、Sonnet 5）默认禁用 Todo 工具，可用环境变量恢复 ## 全文 What's changed Added GitLab merge request URL support to the --worktree flag and the claude agents view (where MRs display as !N) Added an opt-in forward_user_identity apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user Added opt-in memory cgroup support for Bash tool commands on Linux (CLAUDE_CODE_TOOL_MEMORY_LIMIT) so a runaway build can't stall the session Added CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes) Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts) Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled Fixed bundled skill aliases like /checkup and /review reporting "Unknown command" in -p mode or with plugins/MCP loaded when a user or project skill shadows the bundled skill Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers Fixed Windows paths spelled with the NT \??\ device prefix bypassing UNC path validation, closing an NTLM credential-leak vector Improved claude self-hosted-runner session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launch Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway Improved claude plugin validate to check a bare .claude/skills directory, reporting SKILL.md files whose frontmatter fails to parse Improved screen reader mode: the /effort selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped Improved print mode diagnostics: a [claude-code:unrecognized_model] line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with modelOverrides to silence Changed the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts Todo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to bring them back Windows: fixed auto mode repeatedly stopping for manual approval on ordinary cd && > file Bash commands (a 2.1.232 regression) Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (< file); a narrower version will return in a later release --- 引用前请核对原文;本文由星际流动整理:https://feed.astralor.com/items/itm_1eef94356f8fd5362b19d5e9