Claude Code pulls built-in todo tools from Opus 4.8 and Sonnet 5
Release 2.1.233 also lands GitLab merge-request support in worktrees, forks subagents by default, and patches an NTLM credential leak on Windows.
Copy markdown
Todo tools are off on the newest models
On Opus 4.8, Sonnet 5 and newer, Claude Code no longer loads the todo/task-tracking tools by default — Anthropic's bet is these models plan well enough internally that the scaffolding just burned tokens. Agent scripts or hooks that call TodoWrite go quiet until you re-enable them.
GitLab gets first-class worktrees
The `--worktree` flag and the `claude agents` view now accept GitLab merge-request URLs, matching the existing GitHub PR flow, so GitLab teams can point an agent straight at an MR. The release also adds opt-in identity forwarding for per-user usage attribution on shared upstreams.
Two security holes closed — update now
2.1.233 fixes an NTLM credential leak triggered by Windows NT device-prefix paths and blocks skill-argument re-expansion that allowed template injection; 2.1.232 had already closed a PowerShell permission bypass. Worth the upgrade if you run Code on Windows or ship custom skills.
Subagent forking is now the default
As of 2.1.232, forked subagents inherit the full conversation and prompt cache, and you can @-mention other Claude sessions to hand off work via SendMessage — cheaper parallel agents without re-priming context each time.
Elsewhere: Grok 4.6 in Copilot, a Codex security plugin
GitHub Copilot added Grok 4.6 to its model picker on Aug 14, and OpenAI shipped a Codex Security Plugin that validates code changes and flags vulnerabilities as part of its new defensive-security push.