v3.133.0

What's Changed

🔒 Security

• [A-1469] Re-exec agent start to hide the registration token from proc inspection by @moskyb in #4046
• Redact Go-escaped needles by @DrJosh9000 in #4091

✨ Added

• Set Partial Clone flags on sparse-checkout by @lizrabuya in #4044

🐛 Fixed

• [A-1515] Improve job log URL and deduplicate url computation by @isaacsu in #4083

🏠 Internal

• fix: check for --ensure_minimum when refreshExpiry by @ss1909 in #4085
• fix: remove archiveInfo.ArchivePath after upload by @ss1909 in #4086
• fix: Map expired artifact to ErrBlobNotFound by @ss1909 in #4087
• Suggestions for #4044 by @isaacsu in #4067
• Bump gh cli in release script to 2.96.0 by @DrJosh9000 in #4077
• Improve log URL to point to specific job by @mitchhentgesspotify in #4076
• build(deps): dependency bumps by @dependabot[bot] in #4078, #4079, #4080, #4081, #4082
• Constant-time token comparison by @DrJosh9000 in #4084
• Add TestSecretsIntegration_ConfigVarSecretNotLoggedByEnvChange by @DrJosh9000 in #4092
• Reduce Windows flakes in TestSetMetaDataBatch? by @DrJosh9000 in #4093

New Contributors

• @mitchhentgesspotify made their first contribution in #4076

Full Changelog: v3.132.0...v3.133.0