Under the hood
Plugin config summaries now exclude options marked sensitive
What
When Claude Code builds a summary of a plugin's configuration options, a new filtering step keeps only the options that are declared in the plugin's manifest under userConfig and that are not marked sensitive. That filtered, sorted list is then turned into a JSON summary.
Why
This keeps sensitive plugin configuration values out of the serialized config summary, reducing the chance they get exposed somewhere they shouldn't be.