Closes NTLM credential-leak vector on Windows NT paths
Claude releases update with Windows NT path credential leak fix, GitLab merge request support, and resource management features.
What's changed Added GitLab merge request URL support to the `--worktree` flag and the `claude agents` view (where MRs display as `!N`) Added an opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user Added opt-in memory cgroup support for Bash tool commands on Linux (`CLAUDE_CODE_TOOL_MEMORY_LIMIT`) so a runaway build can't stall the session Added `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes) Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g.
serverless hosts) Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled Fixed bundled skill aliases like `/checkup` and `/review` reporting "Unknown…
- github.comClaude Code v2.1.233primary