You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
CredentialsArea: what it touches
ImprovementsKind: in v2.1.236,
ImprovementsSection of the release
What
The plaintext credentials file (.credentials.json in the credential store directory) is now opened with O_NOFOLLOW and non-blocking mode, reports a distinct refused-symlink result when the path is a link, treats directories and files above a size cap as corrupt, and is written with mode 0600.
Details
A probe returns a version string built from device, inode, size and modification time in nanoseconds, so callers can detect changes without re-reading.
A strict read variant treats permission errors as "file absent" only on non-Windows platforms.
The store handle is handed out only when the secure-storage check passes.
Evidence
refused-symlink
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
