You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What
Slack user-token matching widened from xox[pe] to xox[a-z], a new slack-rotation-token rule catches xoxe refresh tokens, and private keys are now found by pairing BEGIN and END markers rather than one regex, so a key block of any length is redacted rather than only bodies long enough to match.
Details
Applies wherever secret redaction runs; no gate.
Evidence
slack-rotation-token
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
