Claude Code v2.1.219 ·
Credentials scrubbed from summarized error text
Tokens and passwords caught in error text are now redacted before you or your logs see them.
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
Error HandlingArea: what it touches
ImprovementsKind: in v2.1.219,
What probably matters to youSection of the release
What
Short error and detail summaries are run through a redactor before display, so tokens pasted into error strings do not leak into output or logs.
Details
- Rewrites bearer and basic values, and token/key/secret/password/authorization/credential assignments of 8 or more characters, to "[redacted]".
- Runs after a byte-safe truncation of the summary.
- Unconditional; no gate.
Evidence
/\b(bearer|basic)[\s:=\uFF1A\uFF1D]+([A-Za-z0-9._~+/=%-]{8,})/gi
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.219 →
