You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
The secret scrubber that already masked GitHub, Slack and JWT credentials now also matches GitLab tokens (glpat-, gldt-, glsoat-, agent tokens and the rest of the family) and replaces them with <token>. Sandbox setup separately denies .git/glab-cli and .config/glab-cli, matching the hardening already applied to the GitHub CLI.
Details
The denial covers the repository, its superproject and worktrees.
.config/glab-cli/config.yml is also listed in the sensitive-path pattern.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeAdded /config rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)
