The credential-file mask-sweep eligibility check, previously limited to Linux and WSL, now also runs on macOS when the sandbox mode is set to relaxed, so masked credential files get swept for glob-pattern matches in that case too.
Sandbox mask sweep now gated by macOS 'relaxed' sandbox mode too
Credential-file mask sweep now also runs on macOS in relaxed sandbox mode.
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.260,
ImprovementsSection of the release