Claude Code 2.1.233: GitLab MR support, memory limits, and security fixes
Claude Code v2.1.233 is out. This release adds GitLab merge request support, opt-in memory limits for Bash commands, and fixes a Windows NTLM credential-leak vector, among other improvements.
Key updates
- GitLab MR support: The
--worktreeflag and theclaude agentsview now accept GitLab merge request URLs, displaying MRs as!N. - Memory cgroup for Bash: On Linux, set
CLAUDE_CODE_TOOL_MEMORY_LIMITto enable memory limits for Bash tool commands, preventing runaway builds from stalling the session. - WebFetch cache TTL: New env var
CLAUDE_CODE_WEBFETCH_CACHE_TTL_MSlets you configure the WebFetch URL cache TTL (default unchanged: 15 minutes). - Identity forwarding: Opt-in
forward_user_identitygateway setting for Anthropic upstreams sends user identity headers for spend attribution.
Fixes and improvements
- Security fix: Fixed Windows paths with
\??\device prefix bypassing UNC path validation, closing an NTLM credential-leak vector. - Linux idle CPU spin: Fixed idle sessions keeping a CPU core at 100% when sandboxing is enabled.
- MCP v2: Fixed endless reconnection of subscriptions/listen stream against servers with timeouts (e.g., serverless).
- Skill aliases: Bundled aliases like
/checkupand/reviewno longer report "Unknown command" when shadowed by user/project skills. - Self-hosted runner: Faster session start by avoiding working tree rewrite and reducing round trips.
- Apps gateway errors: 400/413 errors from Vertex, Foundry, and AWS Claude Platform now carry upstream messages, fixing auto-compact issues.
Notable changes
- Todo tools removed on new models:
TaskCreate/Get/Update/ListandTodoWriteare no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer. SetCLAUDE_CODE_ENABLE_TODO_TOOLS=1to re-enable. - GitHub tip: No longer shown for repos with origin on GitLab or Bitbucket.
- Windows Bash: Fixed auto mode stopping on
cd && command(2.1.232 regression). Cygwin symlink and input redirection changes reverted for now. - Diagnostics: Unrecognized model IDs now print
[claude-code:unrecognized_model]to stderr; usemodelOverridesto silence.
For the full release notes, see the source.
📖 Read the full source: GitHub Claude-Code
👀 See Also
Meta Pauses Internal AI Training Program After Employee Keystroke Data Leak
Meta pauses MCI program tracking employee keystrokes after SEV 2 leak exposed private conversations, performance data, and transcriptions company-wide.
Chrome's Gemini Nano AI Model Consumes 4GB of Disk Space
Google Chrome automatically downloads a 4GB weights.bin file for the Gemini Nano on-device AI model, which may bloat storage without clear user notification. Disabling the On-Device AI toggle in settings removes the file and prevents re-download.
Anthropic Drops Key Safety Pledge from Responsible Scaling Policy
Anthropic has removed the central commitment from its Responsible Scaling Policy that required guaranteeing adequate safety measures before training AI systems, citing competitive pressure and the need to continue development.
IDP Leaderboard benchmark shows Claude Sonnet 4.6 matches Opus 4.6 for document AI tasks
The IDP Leaderboard tested 16 AI models on 9,000+ documents across OCR, table extraction, key extraction, visual QA, handwriting, and long documents. Claude Sonnet 4.6 scored 80.8 overall, essentially matching Opus 4.6 at 80.3, while Haiku 4.5 scored 69.6.