Claude Code 2.1.233: GitLab MR support, memory limits, and security fixes

Claude Code v2.1.233 is out. This release adds GitLab merge request support, opt-in memory limits for Bash commands, and fixes a Windows NTLM credential-leak vector, among other improvements.

Key updates

• GitLab MR support: The --worktree flag and the claude agents view now accept GitLab merge request URLs, displaying MRs as !N.
• Memory cgroup for Bash: On Linux, set CLAUDE_CODE_TOOL_MEMORY_LIMIT to enable memory limits for Bash tool commands, preventing runaway builds from stalling the session.
• WebFetch cache TTL: New env var CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS lets you configure the WebFetch URL cache TTL (default unchanged: 15 minutes).
• Identity forwarding: Opt-in forward_user_identity gateway setting for Anthropic upstreams sends user identity headers for spend attribution.

Fixes and improvements

• Security fix: Fixed Windows paths with \??\ device prefix bypassing UNC path validation, closing an NTLM credential-leak vector.
• Linux idle CPU spin: Fixed idle sessions keeping a CPU core at 100% when sandboxing is enabled.
• MCP v2: Fixed endless reconnection of subscriptions/listen stream against servers with timeouts (e.g., serverless).
• Skill aliases: Bundled aliases like /checkup and /review no longer report "Unknown command" when shadowed by user/project skills.
• Self-hosted runner: Faster session start by avoiding working tree rewrite and reducing round trips.
• Apps gateway errors: 400/413 errors from Vertex, Foundry, and AWS Claude Platform now carry upstream messages, fixing auto-compact issues.

Notable changes

• Todo tools removed on new models: TaskCreate/Get/Update/List and TodoWrite are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer. Set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to re-enable.
• GitHub tip: No longer shown for repos with origin on GitLab or Bitbucket.
• Windows Bash: Fixed auto mode stopping on cd && command (2.1.232 regression). Cygwin symlink and input redirection changes reverted for now.
• Diagnostics: Unrecognized model IDs now print [claude-code:unrecognized_model] to stderr; use modelOverrides to silence.

For the full release notes, see the source.