https://github.com/jenkinsci/envinject-plugin/blob/f72ef372efdef8791a175f1c121e067c10da40a6/src/main/java/org/jenkinsci/plugins/envinject/EnvInjectPasswordWrapper.java#L197 should be switched to use the new API from https://github.com/jenkinsci/credentials-binding-plugin/pull/139.