Claude Code changelog

 
 Run `claude --version` to check your installed version.
 
+<Update label="2.1.233" description="August 14, 2026">
+  * Added GitLab merge request URL support to the `--worktree` flag and the `claude agents` view (where MRs display as `!N`)
+  * Added an opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user
+  * Added opt-in memory cgroup support for Bash tool commands on Linux (`CLAUDE_CODE_TOOL_MEMORY_LIMIT`) so a runaway build can't stall the session
+  * Added `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes)
+  * Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt
+  * Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts)
+  * Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code
+  * Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled
+  * Fixed bundled skill aliases like `/checkup` and `/review` reporting "Unknown command" in `-p` mode or with plugins/MCP loaded when a user or project skill shadows the bundled skill
+  * Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers
+  * Fixed Windows paths spelled with the NT `\??\` device prefix bypassing UNC path validation, closing an NTLM credential-leak vector
+  * Improved `claude self-hosted-runner` session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launch
+  * Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway
+  * Improved `claude plugin validate` to check a bare `.claude/skills` directory, reporting SKILL.md files whose frontmatter fails to parse
+  * Improved screen reader mode: the `/effort` selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped
+  * Improved print mode diagnostics: a `[claude-code:unrecognized_model]` line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with `modelOverrides` to silence
+  * Changed the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts
+  * Todo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to bring them back
+  * Windows: fixed auto mode repeatedly stopping for manual approval on ordinary `cd <dir> && <command> > file` Bash commands (a 2.1.232 regression)
+  * Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (`< file`); a narrower version will return in a later release
+</Update>
+
 <Update label="2.1.232" description="August 13, 2026">
   * Subagent forking is now on by default: a `subagent_type: "fork"` subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default
   * Type `@` in the prompt to mention another Claude session by name; Claude then uses `SendMessage` to reach that session directly

   * `/terminal-setup` now enables iTerm2's "Applications in terminal may access clipboard" setting so `/copy` works, including from tmux
   * MCP servers that hit a transient error during startup now auto-retry up to 3 times instead of staying disconnected
   * The terminal tab session title is now generated in your configured `language` setting
-  * Claude.ai connectors with the same upstream URL are now deduplicated instead of appearing as duplicates
-  * Vertex AI: support X.509 certificate-based Workload Identity Federation (mTLS ADC)
-  * Faster startup after upgrading: removed the Recent Activity panel from the release-notes splash
-  * LSP diagnostic summaries now expand on click/ctrl+o and show the expand hint
-  * SDK: `mcp_authenticate` now supports `redirectUri` for custom scheme completion and claude.ai connectors
-  * OpenTelemetry: added `stop_reason`, `gen_ai.response.finish_reasons`, and `user_system_prompt` (gated behind `OTEL_LOG_USER_PROMPTS`) to LLM request spans
-  * \[VSCode] Voice dictation now respects the `accessibility.voice.speechLanguage` setting when no Claude Code language is configured
-  * \[VSCode] `/context` now opens a native token usage dialog
-  * Fixed unbounded memory growth (multi-GB RSS) when processing many images in a session
-  * Fixed `/usage` leaking up to \~2GB of memory on machines with large transcript histories
-  * Fixed memory leak when long-running tools fail to emit a clear progress event
-  * Fixed Bash tool becoming permanently unusable when the directory Claude was started in is deleted or moved mid-session
-  * Fixed `--resume` crashing on startup in external builds
-  * Fixed `--resume` failing on large sessions when a transcript line was corrupted by an unclean shutdown — the corrupt line is now skipped
-  * Fixed `thinking.type.enabled is not supported` error when using Bedrock application inference profile ARNs
-  * Fixed Microsoft 365 MCP OAuth failing with duplicate or unsupported `prompt` parameter
-  * Fixed scrollback duplication when pressing Ctrl+L or triggering a redraw in non-fullscreen mode on tmux, GNOME Terminal, Windows Terminal, and Konsole
-  * Fixed claude.ai MCP connectors silently disappearing when the connector-list fetch hits a transient auth error at startup
-  * Fixed "Always allow" rules for built-in tools in remote sessions not surviving worker restarts
-  * Fixed `NO_PROXY` not being respected for all HTTP clients when set via `managed-settings.json` under the native build
-  * Fixed managed settings approval prompt exiting the session even when accepted — now applies settings and continues
-  * Fixed `/usage` returning "rate limited" after a stale OAuth token — now refreshes automatically
-  * Fixed invalid legacy enum values in `settings.json` invalidating the entire settings file
-  * Fixed `/usage` dialog content being clipped when no-flicker mode is off
-  * Fixed `/focus` showing "Unknown command" when the fullscreen renderer is off — now explains how to enable it
-  * Fixed embedded grep/find/rg shell wrappers failing when the running binary is deleted mid-session — now falls back to installed tools
-  * Reduced peak file descriptor usage during `find` in the Bash tool on large directory trees
-</Update>
-
-<Update label="2.1.120" description="April 28, 2026">
-  * Windows: Git for Windows (Git Bash) is no longer required — when absent, Claude Code uses PowerShell as the shell tool
-  * Added `claude ultrareview [target]` subcommand to run `/ultrareview` non-interactively from CI or scripts — prints findings to stdout (`--json` for raw output) and exits 0 on completion or 1 on failure
-  * Skills
+  * Claude.a