URLs containing embedded usernames or passwords are now redacted when logged during git clone operations, preventing accidental credential exposure in logs.
Evidence
URL credential redaction function A96() (search for q.username = "***")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
