Cline Redacts Credentials Embedded in Git Remote URLs Before Sending Workspace Info to the Model

GitHub·high signalXBlueskyLinkedInCopy link

Cline v4.1.16 and SDK v0.0.80, both published 2026-08-26, strip credentials embedded in git remote URLs from the workspace information included in the system prompt. If your remote is https://user:token@host/repo, that token was previously going to the model on every task. The same releases also fix hooks resolving their workspace from shared global state in ~/.cline rather than the VS Code window, which meant a second window on another project never discovered its own .clinerules/hooks scripts and resolved hook cwd against whatever project some other Cline instance last recorded.