Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.234entry #144

Claude Code v2.1.234 ·

Slack workflow tokens and webhook URLs are scrubbed

Slack workflow tokens and webhook URLs are now scrubbed from text before it leaves your machine.

You'll notice Improvements
JSON All of v2.1.234
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What

The credential scrubber applied to text before it leaves the client now catches Slack workflow tokens beginning xwfp- and Slack webhook URLs under hooks.slack.com/services, /workflows and /triggers, replacing them with a placeholder instead of letting them through.

Details
  • Tokens are replaced with [REDACTED-PAT]; webhook URLs are replaced with their own placeholder.
  • Both patterns were added to every scrubber in the build, including the token table that already handled bearer and Basic headers, sk-ant- keys, GitHub and GitLab tokens and Slack xoxb- tokens.
Evidence

hooks.slack.com/<redacted>, [REDACTED-PAT]

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.234 →

Feedback