Claude Code v2.1.225 ·
Secret-redaction patterns factored into shared lists
Secret-scrubbing rules live in one shared list so more paths can strip credentials consistently.
Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
TelemetryArea: what it touches
Internal ChangesKind: in v2.1.225,
Internal ChangesSection of the release
What
The credential-scrubbing regex table was split into two reusable arrays so more than one code path can apply the same rules.
Details
- One array covers Bearer, Basic, sk-ant, sk-, AKIA and ASIA forms.
- The other covers gh_ tokens, xox- tokens and JWTs.
- The existing transcript redactor splices both lists in.
- A new standalone helper applies all of them to any string, and is what the SDK error paths use for file paths.
Evidence
/\bey[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.225 →
