Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.232 ·

GitLab tokens are now stripped from logs and error output

GitLab tokens are now masked in logs, and GitHub token matching covers one more prefix.

You'll notice Improvements
JSON All of v2.1.232
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What

The scrubber that replaces secrets with <token> before anything is logged or reported now recognises GitLab tokens, and its GitHub rule was widened to catch one more prefix letter (gh[psour]_, previously gh[psou]_).

Details
  • Covers the glpat, gldt, glrt, glft, glsoat, gloas, glagent, glptt, glcbt, glimt and glffct prefixes, with or without the trailing 9-character checksum.
  • Applies everywhere the sanitiser runs, so pasted GitLab tokens in error text are redacted for everyone.
Evidence

/gl(?:pat|dt|rt|ft|soat|oas|agent|ptt|cbt|imt|ffct)-[A-Za-z0-9_=-]+(?:\.[0-9a-z]{9})?/g

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.232 →

Feedback