Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.232 ·

GitLab token detection grows from 2 patterns to 11

Nine more GitLab token types are now redacted, and the older patterns catch modern longer tokens.

You'll notice New Features
JSON All of v2.1.232
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
New FeaturesKind: in v2.1.232,
What probably matters to youSection of the release
What

Secret redaction now recognises nine more GitLab credential types, and the two existing rules were rewritten to accept longer tokens. Previously only exactly-20-character glpat- and deploy tokens matched; the shared pattern now accepts 20 or more characters plus an optional 9-character checksum suffix, so current GitLab tokens are caught.

Details
  • New detectors: runner authentication (glrt-), OAuth app secret (gloas-), pipeline trigger (glptt-), Kubernetes agent (glagent-), incoming mail (glimt-), SCIM OAuth (glsoat-), CI build (glcbt-), feed (glft-) and feature flag client (glffct-) tokens.
  • All eleven are marked high confidence, and the list is built unconditionally at startup, so this is live for everyone on this build.
  • The name prettifier learned ci: "CI" and scim: "SCIM" so rule names render correctly.
Evidence

gitlab-scim-oauth-token, [\\w=-]{20,}(?:\\.[0-9a-z]{9})?

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeAdded secret redaction for GitLab token families (glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft-, glffct-) and full…

See this entry in the whole of v2.1.232 →

Feedback