Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.234 Home All releases ←olderv2.1.233 v2.1.235newer→
Claude Code v2.1.234

More Slack secret patterns, and the new Slack tag token is kept out of child processes

You'll notice
Useful3 Signal3
Secret Detection Notable not in their notes

More Slack tokens and webhook URLs are detected and redacted, and one token is hidden from child processes.

CLAUDE_CODE_SLACK_TAG_TOKEN
What

Two high-confidence detections were added, slack-workflow-token for xwfp- values and slack-webhook-url for hooks.slack.com service, workflow and trigger URLs. Log redaction also gained xapp-, xwfp-, a bot-token form allowing the dotted xoxb.xoxb- shape, and webhook URLs. Separately CLAUDE_CODE_SLACK_TAG_TOKEN is deleted from the environment handed to child processes.

Details
  • The pattern tables are unconditional.
  • The token is also listed among the environment variables Claude Code tracks.
Evidence

slack-workflow-token

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.234 →