You'll notice
Plugin and marketplace git error messages now hide repository URLs instead of showing raw output
What
When a git clone, fetch, or checkout fails while installing a plugin or marketplace, Claude Code used to show the raw error text from git, which can include the full remote repository URL and sometimes embedded credentials. Error messages are now passed through a redaction step that masks the URL before it's shown to the user or written to logs. A related helper produces a safe version of the URL for log lines like git clone: url=....
Why
This prevents credentials or sensitive repository addresses from leaking into error messages or log files when a plugin or marketplace git operation fails.