Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.308 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.234entry #60

Claude Code v2.1.234 ·

More Slack secret patterns, and the new Slack tag token is kept out of child processes

More Slack tokens and webhook URLs are detected and redacted, and one token is hidden from child processes.

You'll notice Notable No documentation found Improvements
JSON All of v2.1.234
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Secret DetectionArea: what it touches
ImprovementsKind: in v2.1.234,
What probably matters to youSection of the release
What

Two high-confidence detections were added, slack-workflow-token for xwfp- values and slack-webhook-url for hooks.slack.com service, workflow and trigger URLs. Log redaction also gained xapp-, xwfp-, a bot-token form allowing the dotted xoxb.xoxb- shape, and webhook URLs. Separately CLAUDE_CODE_SLACK_TAG_TOKEN is deleted from the environment handed to child processes.

Details
  • The pattern tables are unconditional.
  • The token is also listed among the environment variables Claude Code tracks.
Evidence

slack-workflow-token

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from
Names in the bundleCLAUDE_CODE_SLACK_TAG_TOKEN
How sure we are
One source agreesOne thing we can check says the same as this entry.
The name it cites is new in this buildNew in this build: CLAUDE_CODE_SLACK_TAG_TOKEN

See this entry in the whole of v2.1.234 →

Feedback