You'll notice
Useful3 Signal2
More GitLab token formats get redacted, and the glab config file is flagged as sensitive.
What's wrong with this entry?
Anonymous. No account, no email.
What
Secret redaction now catches more GitLab personal access token shapes, and the GitLab CLI config file joins GitHub's hosts.yml in the list of sensitive paths that command safety checks flag.
Details
- The token pattern now allows
=in the body and an optional nine-character dotted suffix:[A-Za-z0-9_=-]{20,}(?:\.[0-9a-z]{9})?. - The sensitive-path pattern now also matches
.config/glab-cli/config.yml, alongside.config/gh/hosts.yml.
Evidence
\.config\/glab-cli\/config\.yml\b
Strings lifted out of the shipped bundle, so the claim above can be checked against them.