Claude Code 2.1.233: GitLab MR support, memory limits, and security fixes
Claude Code v2.1.233 is out. This release adds GitLab merge request support, opt-in memory limits for Bash commands, and fixes a Windows NTLM credential-leak vector, among other improvements.
Key updates
- GitLab MR support: The
--worktreeflag and theclaude agentsview now accept GitLab merge request URLs, displaying MRs as!N. - Memory cgroup for Bash: On Linux, set
CLAUDE_CODE_TOOL_MEMORY_LIMITto enable memory limits for Bash tool commands, preventing runaway builds from stalling the session. - WebFetch cache TTL: New env var
CLAUDE_CODE_WEBFETCH_CACHE_TTL_MSlets you configure the WebFetch URL cache TTL (default unchanged: 15 minutes). - Identity forwarding: Opt-in
forward_user_identitygateway setting for Anthropic upstreams sends user identity headers for spend attribution.
Fixes and improvements
- Security fix: Fixed Windows paths with
\??\device prefix bypassing UNC path validation, closing an NTLM credential-leak vector. - Linux idle CPU spin: Fixed idle sessions keeping a CPU core at 100% when sandboxing is enabled.
- MCP v2: Fixed endless reconnection of subscriptions/listen stream against servers with timeouts (e.g., serverless).
- Skill aliases: Bundled aliases like
/checkupand/reviewno longer report "Unknown command" when shadowed by user/project skills. - Self-hosted runner: Faster session start by avoiding working tree rewrite and reducing round trips.
- Apps gateway errors: 400/413 errors from Vertex, Foundry, and AWS Claude Platform now carry upstream messages, fixing auto-compact issues.
Notable changes
- Todo tools removed on new models:
TaskCreate/Get/Update/ListandTodoWriteare no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer. SetCLAUDE_CODE_ENABLE_TODO_TOOLS=1to re-enable. - GitHub tip: No longer shown for repos with origin on GitLab or Bitbucket.
- Windows Bash: Fixed auto mode stopping on
cd && command(2.1.232 regression). Cygwin symlink and input redirection changes reverted for now. - Diagnostics: Unrecognized model IDs now print
[claude-code:unrecognized_model]to stderr; usemodelOverridesto silence.
For the full release notes, see the source.
📖 Read the full source: GitHub Claude-Code
👀 See Also
Claude Cowork Now Available on Windows with Local File Access and Task Scheduling
Claude Cowork, previously exclusive to macOS, is now accessible on Windows devices. The desktop application requires a paid Claude plan, handles larger tasks with direct local file access, and allows scheduling tasks to run automatically.
Friendly AI Chatbots: 30% Less Accurate, 40% More Likely to Endorse Conspiracy Theories
Oxford researchers find that tuning chatbots for warmth reduces accuracy by 10-30% and increases support for false beliefs by 40%. Tested on GPT-4o and Llama.
AI Engineers Aren't Safe From Being Replaced by AI
As foundation models like Meta's DINO become general-purpose, tailored AI engineering roles face cannibalization. The author argues that most AI engineering jobs will be replaced sooner than other developer roles.
SwitchBot's AI Hub Set to Integrate OpenClaw for Enhanced Smart Home Automation
SwitchBot's AI Hub is about to get a significant upgrade with the integration of OpenClaw. This move promises enhanced automation and smarter home management capabilities.