Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.248 ·

Wider secret redaction

Secret redaction now also catches connection strings, cookies, session ids, bearer tokens and passwords.

You'll notice Improvements
JSON All of v2.1.248
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
RedactionArea: what it touches
ImprovementsKind: in v2.1.248,
What probably matters to youSection of the release
What

The pattern that hides credentials before text leaves your machine now also matches connection strings, cookies, session ids, bearer tokens, passwords and a family of *_key names, on top of the api key, secret and token forms it already caught.

Details
  • A companion pattern recognises text that is already redacted, so [REDACTED] markers and Bearer/Basic prefixes are not processed twice.
Evidence

connection[_-]?string

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.248 →

Feedback