Which GitLab tokens does Claude Code hide?

Claude Code 2.1.232 redacts nine GitLab token families by prefix: glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft- and glffct-. Routable glpat- and gldt- tokens are removed completely rather than masked. The glab command-line config store also gets the sandbox and credential-path protection that Claude Code already applied to the gh CLI.

Can I install a plugin marketplace from a GitLab repo?

Yes. Claude Code 2.1.232 added GitLab support to plugin marketplaces, so a bare gitlab.com repository URL clones the same way a github.com URL does, including repositories inside nested subgroups. When cloning fails on authentication, the hint Claude Code prints now names your actual git host instead of assuming GitHub.

Why did the todo tools stop working on Opus 4.8 and Sonnet 5?

Claude Code 2.1.233 removed the todo and task-tracking tools (TaskCreate, TaskGet, TaskUpdate, TaskList and TodoWrite) from Opus 4.8, Sonnet 5, Fable 5, Mythos 5 and newer models. Anyone who still wants them can set the environment variable CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to bring the tools back.

How do I stop a runaway build from stalling a Claude Code session?

Claude Code 2.1.233 adds opt-in memory cgroup support for Bash tool commands on Linux through the CLAUDE_CODE_TOOL_MEMORY_LIMIT environment variable. Setting a limit caps how much memory a single Bash command can take, so a build that runs away cannot stall the whole session. The setting is off unless you turn it on.

What security holes did these two releases close?

Claude Code 2.1.233 fixed Windows paths written with the NT \??\ device prefix slipping past UNC path validation, which closed an NTLM credential-leak vector. Version 2.1.232 fixed a PowerShell bypass where parameters could overwrite $PSDefaultParameterValues, a Git Bash symlink bypass on Windows, and nested git repositories inheriting trust from a parent directory.

Anthropic · 2026-08-14 · major

Claude Code 2.1.233 — GitLab merge requests, marketplaces and token redaction

Claude Code 2.1.233 accepts GitLab merge request URLs in the --worktree flag and the agents view. The 2.1.232 release a day earlier added GitLab plugin marketplaces and redaction for nine GitLab token families.

GitHub repository card for anthropics/claude-code, the Claude Code command-line coding agent

GitLab teams get first-class Claude Code support: merge request worktrees, plugin marketplaces and token redaction.

Quick facts

Maker	Anthropic
Version	2.1.233, published August 14, 2026
Git hosts	GitHub, GitHub Enterprise, GitLab, Bitbucket
GitLab secrets redacted	9 token prefixes, plus glpat- and gldt-
Subagent forking	On by default since 2.1.232
New Linux control	CLAUDE_CODE_TOOL_MEMORY_LIMIT
Install	npm install -g @anthropic-ai/claude-code

What is it?

GitLab merge request URLs now work with Claude Code's --worktree flag and its claude agents view, where merge requests appear as !N. That landed in version 2.1.233 on August 14, 2026. Version 2.1.232, published a day earlier, carried the rest of the GitLab work: plugin marketplaces that clone from gitlab.com, and secret redaction for GitLab token families. These paths previously assumed GitHub.

How does it work?

The merge request URL is parsed the same way GitHub and Bitbucket pull request URLs already were, so pointing --worktree at one opens a session on that branch. For marketplaces, a bare gitlab.com repository URL — including nested subgroups — clones like a github.com URL. Redaction works on token prefixes: nine GitLab families are masked in output, and routable glpat- and gldt- tokens are stripped entirely. Anthropic also gave the glab config store the sandbox and credential-path protection that gh already had.

Why does it matter?

A lot of company source code lives on self-managed GitLab, and until now those teams had to work around a coding agent that treated GitHub as the default. The secret handling matters more than the convenience: a GitLab token that shows up in a session is now masked instead of passing through as plain text. Version 2.1.232 also turned subagent forking on by default, so a forked subagent inherits the full conversation and the prompt cache.

Who is it for?

teams on GitLab, enterprise platform engineers

Frequently asked questions

Which GitLab tokens does Claude Code hide?: Claude Code 2.1.232 redacts nine GitLab token families by prefix: glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft- and glffct-. Routable glpat- and gldt- tokens are removed completely rather than masked. The glab command-line config store also gets the sandbox and credential-path protection that Claude Code already applied to the gh CLI.
Can I install a plugin marketplace from a GitLab repo?: Yes. Claude Code 2.1.232 added GitLab support to plugin marketplaces, so a bare gitlab.com repository URL clones the same way a github.com URL does, including repositories inside nested subgroups. When cloning fails on authentication, the hint Claude Code prints now names your actual git host instead of assuming GitHub.
Why did the todo tools stop working on Opus 4.8 and Sonnet 5?: Claude Code 2.1.233 removed the todo and task-tracking tools (TaskCreate, TaskGet, TaskUpdate, TaskList and TodoWrite) from Opus 4.8, Sonnet 5, Fable 5, Mythos 5 and newer models. Anyone who still wants them can set the environment variable CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to bring the tools back.
How do I stop a runaway build from stalling a Claude Code session?: Claude Code 2.1.233 adds opt-in memory cgroup support for Bash tool commands on Linux through the CLAUDE_CODE_TOOL_MEMORY_LIMIT environment variable. Setting a limit caps how much memory a single Bash command can take, so a build that runs away cannot stall the whole session. The setting is off unless you turn it on.
What security holes did these two releases close?: Claude Code 2.1.233 fixed Windows paths written with the NT \??\ device prefix slipping past UNC path validation, which closed an NTLM credential-leak vector. Version 2.1.232 fixed a PowerShell bypass where parameters could overwrite $PSDefaultParameterValues, a Git Bash symlink bypass on Windows, and nested git repositories inheriting trust from a parent directory.

Try it

npm install -g @anthropic-ai/claude-code