What
Some sessions copy your uncommitted changes (edits you have not yet saved into git) to another place so work can carry on there. Before uploading, Claude Code leaves out files that look like credentials, such as files holding passwords or keys. That check used to look at each file path one way only. Now it also:
- works out extra folders to check, starting from your working copy
- leaves out files whose names match a list of known credential file names under those folders
- leaves them out even when the change is the file being deleted
Why
This makes it less likely that secrets are sent along when a remote session starts from your local changes.