You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What
The secret scanner that strips private keys out of text before it leaves the session no longer uses one large regex spanning the whole key block, which could stall on big or malformed input. It now finds BEGIN and END lines separately and splices out what lies between them.
Details
Two case-insensitive global patterns, one for the header and one for the footer, matched in sequence with a minimum 64-character gap between them.
Each matched region is replaced with [REDACTED].
Evidence
PRIVATE KEY(?: BLOCK)?-----
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed a --- horizontal rule in rendered markdown running into the line after it
