Git remote URLs containing credentials are now automatically redacted in logs and debug output, preventing accidental exposure of authentication tokens.
Evidence
Credential redaction (search for "redactGitRemoteCredentials")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
