Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
Internal ChangesKind: in v2.1.287,
Internal ChangesSection of the release
What
Claude Code has a redactor that finds secrets such as keys and passwords and hides them from output. Its rules have changed:
Each secret pattern can now be marked redactOnly and can carry a prefilter, a quick regular expression (a text-matching pattern) checked before the full rule runs.
The methods that redact text in context take a flag that switches the redactOnly rules on, and a new redactOnlyRules method exists.
Before this release, all low-confidence rules always ran and there was no prefilter.
Why
This can change which secrets get hidden in a given place, because some rules now run only when asked for. The prefilters let the scrubber skip rules that cannot match, which may make scrubbing faster.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear which rules are marked redact-only, so it is not clear which secrets are affected.