You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.238,
ImprovementsSection of the release
What
The diff tool's restricted field now states that withheld hunks are held back by a content-provenance check stricter than read permissions: symlinked and hardlinked files in a worktree are refused here even where reading them is allowed. Statistics for those files stay visible.
Evidence
symlink and hardlinked worktree files are refused here even where read_file serves them
Strings lifted out of the shipped bundle, so the claim above can be checked against them.