Far fewer credentials leak into logs and output now.
What's wrong with this entry?
The pattern used to strip credentials out of output and logs was rewritten from a narrow check into one that matches many assignment shapes: passwords, tokens, API keys, JWTs and similar. Fewer secrets leak into what you or the model see.
- Explicitly excludes
jobserver-auth(a make internal, not a secret) and boolean-like values, to cut false redactions.
jobserver-auth
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.223
Credentials stripped from the git remote URL sent to the bridge
Both mention privacy