Fix: Error objects bypass redaction

[Copilot]

When an Error is passed to the logger, formatItem returned error.stack || error.message directly without redacting, leaking secrets embedded in error messages/stack traces.

Changes

• src/format.ts: Wrap the Error stack/message in config.redact() before returning
• tests/index.test.ts: Add test asserting secrets in Error messages are redacted

Example

// Before fix — secret appears in output
console.error(
  "This will be redacted 78a2fca7a36abb167ecff613ce75cde8b4c04ef4579651f182a8cef9c86b00b5",
  new Error("this will NOT be redacted 78a2fca7a36abb167ecff613ce75cde8b4c04ef4579651f182a8cef9c86b00b5"),
);
// → "This will be redacted [REDACTED] Error: this will NOT be redacted 78a2fca7a36abb167ecff613ce75cde8b4c04ef4579651f182a8cef9c86b00b5"

// After fix
// → "This will be redacted [REDACTED] Error: this will be redacted [REDACTED]"

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.