v3.95.1 (2025-03-20)
Important
Secrets (as visible to the agent in environment variables) are now redacted from annotations, meta-data values, and step updates, similar to how secrets are redacted from job logs.
If needed, this can be disabled by passing the flag --redacted-vars='' to the annotate, meta-data set, or step update command.
Security
- Fix incomplete processing in newly-redacted operations #3246 (@DrJosh9000)
- Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (resolves CVE-2025-30204) #3247 (@dependabot[bot])