[Release] anthropics/claude-code v2.1.233: v2.1.233

Claude Code v2.1.233 introduces GitLab merge request support, optional user identity forwarding for spend attribution, memory limits for Bash tools on Linux, and WebFetch cache configuration. The release includes multiple bug fixes for cloud sessions, MCP v2 connections, permission prompts, CPU usage, skill command handling, and Windows path validation. Several improvements enhance performance, error handling, and accessibility across different platforms and deployment scenarios.

Key Points

• •Added GitLab merge request URL support to `--worktree` flag and `claude agents` view (displays as `!N`)
• •Implemented opt-in `forward_user_identity` apps gateway setting for per-user spend attribution via signed-in user headers
• •Added optional memory cgroup support for Bash tools on Linux via `CLAUDE_CODE_TOOL_MEMORY_LIMIT` to prevent runaway builds
• •Introduced `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable for WebFetch session URL cache configuration (default: 15 minutes)
• •Fixed cloud sessions incorrectly marked as lost during environment shutdown while waiting on permission prompts
• •Resolved MCP v2 connection issue with endless subscription stream reopening on serverless hosts with fixed timeouts
• •Fixed permission prompt notification hooks not firing in Claude Desktop or VS Code environments
• •Eliminated idle session CPU core maxing on Linux with sandboxing enabled
• •Corrected skill/command argument substitution to prevent re-expansion as template markers
• •Closed Windows NTLM credential-leak vulnerability by validating NT device prefix paths against UNC restrictions

Workflow Diagram

Concepts

Artifacts (3)

CLAUDE_CODE_TOOL_MEMORY_LIMIT=<value>

CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS=900000

CLAUDE_CODE_ENABLE_TODO_TOOLS=1