Claude Code v2.1.223 ·
Credentials stripped from the git remote URL sent to the bridge
Your git remote's embedded username and password are now redacted before being sent anywhere.
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
PrivacyArea: what it touches
Bug FixesKind: in v2.1.223,
What probably matters to youSection of the release
What
A remote URL containing an embedded username and password is no longer uploaded verbatim during bridge registration.
Details
git_repo_url in the request body now passes through the same redaction helper previously used only for the debug log- the helper rewrites
://user:pass@ into ://***@ - previously the raw URL was uploaded and only the log line was sanitized
Evidence
git_repo_url: z9e(a.gitRepoUrl)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.223 →
