Release v16.19.3
Security
- The .NET client no longer writes the connection string's credentials to the log. Connecting logged the full connection string at
Informationlevel — including the OAuth client secret, and on every watchdog reconnect — so the secret reached any log pipeline the client was configured with.
Added
ChronicleConnectionString.RedactedandChronicleConnectionStringBuilder.BuildRedacted()render a connection string with every credential masked (chronicle://clientId:***@host:35000), keeping scheme, host, port and the non-sensitive options. Use these anywhere a connection string is logged or reported;ToString()still renders it in full.
🤖 Generated with Claude Code