You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
The scrubber that replaces secrets with <token> before anything is logged or reported now recognises GitLab tokens, and its GitHub rule was widened to catch one more prefix letter (gh[psour]_, previously gh[psou]_).
Details
Covers the glpat, gldt, glrt, glft, glsoat, gloas, glagent, glptt, glcbt, glimt and glffct prefixes, with or without the trailing 9-character checksum.
Applies everywhere the sanitiser runs, so pasted GitLab tokens in error text are redacted for everyone.