Skip to content

chore(deps): update secretlint monorepo to v13 - #248

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-secretlint-monorepo
Open

chore(deps): update secretlint monorepo to v13#248
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-secretlint-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jun 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@secretlint/secretlint-rule-preset-recommend (source) ^11.7.1 → ^13.0.7 age confidence
secretlint (source) ^11.7.1 → ^13.0.7 age confidence

Release Notes

secretlint/secretlint (@​secretlint/secretlint-rule-preset-recommend)

v13.0.7

Compare Source

What's Changed
Bug Fixes
  • fix(binary): respect --cwd and existing config in --init by @​azu in #​1709
  • fix(config-loader): keep package name as is when baseDirectory is empty by @​azu in #​1710
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v13.0.6...v13.0.7

v13.0.6

Compare Source

What's Changed
Bug Fixes
  • fix(secretlint): do not follow symlinks while searching files by @​azu in #​1694
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v13.0.5...v13.0.6

v13.0.5

Compare Source

What's Changed
Performance
  • fix(profiler): enable profiling only when --profile is specified by @​azu in #​1673

It will fix linting performance problems #​1653 #​1633

CI
Dependency Updates

Full Changelog: secretlint/secretlint@v13.0.4...v13.0.5

v13.0.4

Compare Source

What's Changed
CI
Fixes

Full Changelog: secretlint/secretlint@v13.0.3...v13.0.4

v13.0.3

Compare Source

What's Changed
Bug Fixes
  • fix(database-connection): Ignore database connection strings with identical example credentials by @​azu in #​1631
Refactoring
  • Configure TypeScript module output to NodeNext in rollup configs by @​azu in #​1567
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v13.0.2...v13.0.3

v13.0.2

Compare Source

What's Changed

📝 v13.0.1 published as v13.0.2

Bug Fixes
  • Fix secp256k1 private key detection to avoid false positives by @​azu in #​1564
CI
Dependency Updates
Other Changes
  • Reorganize CLI options and update glob syntax documentation by @​azu in #​1540

Full Changelog: secretlint/secretlint@v13.0.0...v13.0.2

v13.0.0

Compare Source

Highlights

v13 changes how files are discovered on disk and adds three credential detection rules.

.gitignore is respected by default

Nested .gitignore files now apply to file discovery with ripgrep semantics: rules from each directory cascade into its subtree, and a negation rule in a deeper file can flip an earlier verdict.

Files excluded by any .gitignore on the path are no longer scanned. Repositories that previously relied on Secretlint scanning ignored files (such as dist/ or generated artefacts) will see fewer files in the output. .secretlintignore is unchanged and continues to apply alongside .gitignore.

To restore the v12 behaviour:

secretlint --no-gitignore "**/*"

If a file is matched by a .gitignore rule but still appears in Secretlint's output, please open an issue at https://github.com/secretlint/secretlint/issues.

Glob-shaped paths that exist on disk are treated literally

--no-glob and "globs by default" both existed in v12. What changed in v13 is the fallback for inputs that contain glob metacharacters but resolve to a real file or directory.

In v12, an input like src/(group)/page.tsx was always parsed as a glob, so SvelteKit / Next.js routes whose names contain (), [], {}, or ? required --no-glob. v13 runs a single stat per glob-shaped input: if it exists, the input is treated literally; otherwise it stays a glob.

Pattern On disk v12 default v13 default
src/(group)/page.tsx exists parsed as glob, no match matched literally
src/(missing)/page.tsx absent parsed as glob parsed as glob
src/[a-z]ormal.tsx normal.tsx exists matched via glob matched via glob

Pass --no-glob to skip the probe and force literal interpretation.

New and promoted rules

Added to preset-recommend:

Rule Detects
@secretlint/secretlint-rule-tailscale Tailscale API keys (new package)
@secretlint/secretlint-rule-stripe Stripe API keys (new package)
@secretlint/secretlint-rule-cloudflare Cloudflare API tokens (promoted from preset-canary)
What's Changed
Breaking Changes
Features
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v12.3.1...v13.0.0

v12.3.1

Compare Source

What's Changed
CI
  • Pin QEMU binfmt image version in Docker release workflow by @​azu in #​1523

Full Changelog: secretlint/secretlint@v12.3.0...v12.3.1

v12.3.0

Compare Source

What's Changed
Features
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v12.2.0...v12.3.0

v12.2.0

Compare Source

What's Changed
Features
Documentation
New Contributors

Full Changelog: secretlint/secretlint@v12.1.0...v12.2.0

v12.1.0

Compare Source

What's Changed
Features
  • Add per-pattern allows configuration for secretlint-rule-pattern by @​azu in #​1504

Full Changelog: secretlint/secretlint@v12.0.1...v12.1.0

v12.0.1

Compare Source

What's Changed
Documentation
  • Add macOS SecureClipboard application to documentation by @​azu in #​1500
Refactoring
  • Bump minimum Node.js version requirement to 22 by @​azu in #​1502
  • secretelint v12 requires Node.js 22+
CI

Full Changelog: secretlint/secretlint@v12.0.0...v12.0.1

v12.0.0

Compare Source

What's Changed
New rules added to recommend

Secretlint v12.0.0 includes the following new rules in the @​secretlint/secretlint-rule-preset-recommend preset:

Breaking Changes
  • Require Node.js 22+
  • Remove CommonJS build output and dual-package support by @​azu in #​1495
  • feat(preset-recommend)!: sync canary rules into recommend preset by @​azu in #​1498
Refactoring
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v11.7.1...v12.0.0

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@pkg-pr-new

pkg-pr-new Bot commented Jun 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/spanner-assert@248

commit: eb8d885

@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch from 670894f to 2e8740f Compare July 12, 2026 17:10
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch 3 times, most recently from 61da32e to 44a3cc1 Compare July 29, 2026 02:03
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch 2 times, most recently from e585dab to ae9b1ae Compare August 14, 2026 19:03
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch 2 times, most recently from 0cfe27d to fea5309 Compare August 27, 2026 08:01
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch 7 times, most recently from 4ed733a to 2d8800a Compare September 9, 2026 21:17
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch from 2d8800a to 3baff7d Compare September 15, 2026 17:17
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch 3 times, most recently from 5382b75 to 3ec68a6 Compare October 1, 2026 03:28
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch 3 times, most recently from 434e41c to 9c4e46a Compare October 5, 2026 16:18
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch from 9c4e46a to e9d1946 Compare October 10, 2026 04:44
@renovate
renovate Bot force-pushed the renovate/major-secretlint-monorepo branch from e9d1946 to eb8d885 Compare October 13, 2026 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants