chore(deps): update secretlint monorepo to v13 (major)#385
Merged
Conversation
BREAKING CHANGE: updated dependencies to major versions
renovate
Bot
added
the
c: dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
prisis
pushed a commit
that referenced
this pull request
May 8, 2026
…2026-05-08) ### ⚠ BREAKING CHANGES * **deps:** updated dependencies to major versions Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> ### Bug Fixes * **deps:** update dependency undici@<6.24.0 to >=8.2.0 ([#383](#383)) ([b8167df](b8167df)) ### Miscellaneous Chores * **deps:** update secretlint monorepo to v13 ([#385](#385)) ([a6331a3](a6331a3))
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^12.3.1→^13.0.012.3.1→13.0.0Release Notes
secretlint/secretlint (@secretlint/secretlint-rule-preset-recommend)
v13.0.0Compare Source
Highlights
v13 changes how files are discovered on disk and adds three credential detection rules.
.gitignoreis respected by defaultNested
.gitignorefiles now apply to file discovery with ripgrep semantics: rules from each directory cascade into its subtree, and a negation rule in a deeper file can flip an earlier verdict.Files excluded by any
.gitignoreon the path are no longer scanned. Repositories that previously relied on Secretlint scanning ignored files (such asdist/or generated artefacts) will see fewer files in the output..secretlintignoreis unchanged and continues to apply alongside.gitignore.To restore the v12 behaviour:
secretlint --no-gitignore "**/*"If a file is matched by a
.gitignorerule but still appears in Secretlint's output, please open an issue at https://github.com/secretlint/secretlint/issues.Glob-shaped paths that exist on disk are treated literally
--no-globand "globs by default" both existed in v12. What changed in v13 is the fallback for inputs that contain glob metacharacters but resolve to a real file or directory.In v12, an input like
src/(group)/page.tsxwas always parsed as a glob, so SvelteKit / Next.js routes whose names contain(),[],{}, or?required--no-glob. v13 runs a singlestatper glob-shaped input: if it exists, the input is treated literally; otherwise it stays a glob.src/(group)/page.tsxsrc/(missing)/page.tsxsrc/[a-z]ormal.tsxnormal.tsxexistsPass
--no-globto skip the probe and force literal interpretation.New and promoted rules
Added to
preset-recommend:@secretlint/secretlint-rule-tailscale@secretlint/secretlint-rule-stripe@secretlint/secretlint-rule-cloudflarepreset-canary)What's Changed
Breaking Changes
Features
CI
Dependency Updates
Other Changes
Full Changelog: secretlint/secretlint@v12.3.1...v13.0.0
Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.