confdiff: Semantic config diff with secret redaction

confdiff is a semantic diff tool for config files that parses JSON, YAML, TOML, INI,.env,.properties, CSV, and XML into data models, ignoring cosmetic changes. Its --redact flag masks secret values as stable fingerprints, preventing password and token leaks in PRs or CI logs.