Claude Code 2.1.233 drops Todo tools on newer models and closes an NTLM leak

What changed

From 2.1.233, the TaskCreate, TaskGet, TaskUpdate, TaskList and TodoWrite tools are no longer offered on Opus 4.8, Sonnet 5, Fable 5, Mythos 5 or newer; CLAUDE_CODE_ENABLE_TODO_TOOLS=1 brings them back. The release fixes Windows paths using the NT device prefix getting past UNC path checks, which could leak NTLM credentials, and adds CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS to change the WebFetch cache lifetime (15 minutes by default).

Who it affects

Windows users, and anyone whose prompts, hooks or SDK code depend on the Todo tools.

What to do

Windows users should update for the credential-leak fix; set the env var if your tooling reads Todo output.

Source: https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md