You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
Secret redaction now catches more GitLab personal access token shapes, and the GitLab CLI config file joins GitHub's hosts.yml in the list of sensitive paths that command safety checks flag.
Details
The token pattern now allows = in the body and an optional nine-character dotted suffix: [A-Za-z0-9_=-]{20,}(?:\.[0-9a-z]{9})?.
The sensitive-path pattern now also matches .config/glab-cli/config.yml, alongside .config/gh/hosts.yml.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeAdded /config rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)
