Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.248 Home All releases ←olderv2.1.247 v2.1.250newer→
Claude Code v2.1.248

Wider secret redaction

You'll notice
Useful4 Signal3
Redaction

Secret redaction now also catches connection strings, cookies, session ids, bearer tokens and passwords.

What

The pattern that hides credentials before text leaves your machine now also matches connection strings, cookies, session ids, bearer tokens, passwords and a family of *_key names, on top of the api key, secret and token forms it already caught.

Details
  • A companion pattern recognises text that is already redacted, so [REDACTED] markers and Bearer/Basic prefixes are not processed twice.
Evidence

connection[_-]?string

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.248 →