Your git remote's embedded username and password are now redacted before being sent anywhere.
What's wrong with this entry?
A remote URL containing an embedded username and password is no longer uploaded verbatim during bridge registration.
git_repo_urlin the request body now passes through the same redaction helper previously used only for the debug log- the helper rewrites
://user:pass@into://***@ - previously the raw URL was uploaded and only the log line was sanitized
git_repo_url: z9e(a.gitRepoUrl)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.