You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PrivacyArea: what it touches
ImprovementsKind: in v2.1.251,
What probably matters to youSection of the release
What
The pattern used to strip credentials out of output and logs was rewritten from a narrow check into one that matches many assignment shapes: passwords, tokens, API keys, JWTs and similar. Fewer secrets leak into what you or the model see.
Details
Explicitly excludes jobserver-auth (a make internal, not a secret) and boolean-like values, to cut false redactions.
Evidence
jobserver-auth
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
