v0.13.1

Patch release: calibrates the new ai-slop/hidden-fallback rule, points Dependabot at develop, and pulls in routine dependency and CI-action updates.

Install

npx aislop@0.13.1 scan .
# or globally:
npm i -g aislop@0.13.1

Fixed

• ai-slop/hidden-fallback false positives — no longer flags error-message defaults (err?.message || "Failed to load"), empty-string normalizers (?? ""), or optional env-var defaults. String fallbacks count as masked only for status/success tokens ("ok", "success", …).
• Comment masker regex literals — regex literals containing /* inside character classes no longer break comment masking through end-of-file.

Changed

• Dependabot targets develop instead of main.
• Dependency & CI-action bumps — oxlint, Biome, expo-doctor, tar, and GitHub Actions (actions/checkout, actions/setup-node, pnpm/action-setup). Knip 5→6 reverted (parser not ready for v6 unused-files format).

Numbers

• 1365 tests passing
• Self-scan: 100/100

Full notes in CHANGELOG.md.