Skip to content

chore(deps): update secretlint monorepo to v11 (major) #55

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update secretlint monorepo to v11 (major) #55

wants to merge 1 commit into from
+299 −226

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 25, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@secretlint/secretlint-rule-preset-recommend (source) ^7.0.7 -> ^11.0.0 age confidence
secretlint (source) ^7.0.7 -> ^11.0.0 age confidence

Release Notes

secretlint/secretlint (@​secretlint/secretlint-rule-preset-recommend)

v11.2.0

Compare Source

What's Changed
Features
Bug Fixes
  • Add support for Makefile variable pattern $(VARIABLE) in database-connection-string rule by @​Copilot in #​1191
Dependency Updates
New Contributors

Full Changelog: secretlint/secretlint@v11.1.0...v11.2.0

v11.1.0

Compare Source

What's Changed
Features

You can use filePathGlobs to match against file paths using glob patterns:

{
  "rules": [
    {
      "id": "@​secretlint/secretlint-rule-pattern",
      "options": {
        "patterns": [
          {
            "name": "env files",
            "filePathGlobs": ["**/.env", "**/.env.*"]
          },
          {
            "name": "AWS credentials in env files",
            "filePathGlobs": ["**/.env*"],
            "pattern": "/aws_access_key_id|aws_secret_access_key/i"
          },
          {
            "name": "private keys",
            "filePathGlobs": ["**/*.pem", "**/*.key"],
            "pattern": "/BEGIN (RSA |EC )?PRIVATE KEY/"
          }
        ]
      }
    }
  ]
}
  • When only filePathGlobs is specified, the rule reports if the file path matches any of the glob patterns
  • When only pattern is specified, the rule reports if the file content matches the regex pattern
  • When both are specified, the rule reports only if both the file path matches the glob AND the content matches the pattern
Refactoring
  • refactor(types): migrate from tsd to vitest for type testing by @​azu in #​1169
Testing
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v11.0.2...v11.1.0

v11.0.2

Compare Source

What's Changed
Bug Fixes
  • fix(binary): resolve --version issue in Bun compiled binaries by @​azu in #​1164
Documentation
  • docs(contributing): add pre-release documentation checklist by @​azu in #​1162
  • docs(readme): add missing rules from preset-recommend by @​azu in #​1163
Testing
  • test: update valid test snapshots for database connection string rule by @​azu in #​1160
Dependency Updates

Full Changelog: secretlint/secretlint@v11.0.1...v11.0.2

v11.0.1

Compare Source

New Recommended Rules
  • Add @secretlint/secretlint-rule-anthropic to detect Claude API keys (pattern: sk-ant-api0\d-[A-Za-z0-9_-]{90,128}AA)
  • Add @secretlint/secretlint-rule-database-connection-string to detect database credentials like mongodb://user:[email protected]/myd
What's Changed
Breaking Changes
  • feat: add Anthropic and Database Connection String rules to recommended preset by @​azu in #​1154
Bug Fixes
  • fix: use workspace:* references for internal dependencies in examples by @​azu in #​1157
Documentation
Refactoring
Maintenance
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v10.2.2...v11.0.1

v11.0.0

Compare Source

See v11.0.1

v10.2.2

Compare Source

What's Changed
Bug Fixes
Maintenance
  • fix(turbo): fix turbo.json configuration to match actual file structure by @​azu in #​1123
Dependency Updates

Full Changelog: secretlint/secretlint@v10.2.1...v10.2.2

v10.2.1

Compare Source

What's Changed
Bug Fixes
  • fix(database-connection-string): improve password detection to avoid false negatives by @​azu in #​1118
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v10.2.0...v10.2.1

v10.2.0

Compare Source

What's Changed
Features
  • feat: add database connection string detection rule by @​azu in #​1099

@secretlint/secretlint-rule-database-connection-string detects following secrets

  • MongoDB detection: Standard URI (mongodb://) and SRV format (mongodb+srv://)
  • MySQL detection: Standard URI (mysql://), JDBC format (jdbc:mysql://), and X DevAPI (mysqlx://)
  • PostgreSQL detection: Standard URI (postgresql://) and alternative format (postgres://)
const uri = "mongodb://user:[email protected]/mydb";
const mysql = "jdbc:mysql://admin:[email protected]:3306/app";
const pg = "postgres://user:[email protected]:5432/mydb";
Fixes
  • fix(basicauth): limit protocol detection to HTTP/HTTPS/FTP to avoid overlap with database rules by @​azu in #​1101
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v10.1.1...v10.2.0

v10.1.1

Compare Source

What's Changed
Bug Fixes
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v10.1.0...v10.1.1

v10.1.0

Compare Source

What's Changed
Other Changes

Full Changelog: secretlint/secretlint@v10.0.0...v10.1.0

v10.0.0

Compare Source

What's Changed
Breaking Changes
  • 🚨 BREAKING CHANGE: Drop Node.js 18 support, add Node.js 20-22 support by @​azu in #​1070
    • Docker Image use Node.js 22
  • 🚨 BREAKING CHANGE: Make --maskSecrets the default behavior and add --no-maskSecrets flag by @​azu in #​1068
Mask secrets in lint error message (Default behavior)

Secretlint v10+ masks secrets in lint error messages by default. This is useful to prevent accidental secret exposure in CI logs, terminal output, or when using AI agent tools.

##### Secrets are masked by default
$ secretlint "**/*"

To show actual secret values in the output, use --no-maskSecrets:

$ secretlint --no-maskSecrets "**/*"
Refactoring
Testing
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v9.3.4...v10.0.0

v9.3.4

Compare Source

What's Changed

Bug Fixes
Documentation
Refactoring
CI
Dependency Updates

New Contributors

Full Changelog: secretlint/secretlint@v9.3.3...v9.3.4

v9.3.3

Compare Source

What's Changed
Bug Fixes
Refactoring
CI
Dependency Updates
New Contributors

Full Changelog: secretlint/secretlint@v9.3.2...v9.3.3

v9.3.2

Compare Source

What's Changed
Maintenance
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v9.3.1...v9.3.2

v9.3.1

Compare Source

What's Changed
Bug Fixes
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v9.3.0...v9.3.1

v9.3.0

Compare Source

What's Changed
Features
Testing
CI
New Contributors

Full Changelog: secretlint/secretlint@v9.2.1...v9.3.0

v9.2.1

Compare Source

What's Changed
Refactoring
CI
Dependency Updates
Other Changes
New Contributors

Full Changelog: secretlint/secretlint@v9.2.0...v9.2.1

v9.2.0

Compare Source

What's Changed
Features
  • feat(cli): support --stdinFileName=dummy.txt for linting STDIN by @​azu in #​968
$ echo "SECRET CONTENT" | secretlint --stdinFileName=secret.txt

Example:

cat ~/.zsh_history| ./bin/secretlint --stdinFileName=dummy.txt --format=mask-result
Refactoring
  • refactor(index): use fs/promises for async file reading in createRawSource by @​azu in #​967

Full Changelog: secretlint/secretlint@v9.1.0...v9.2.0

v9.1.0

Compare Source

What's Changed
Features
Documentation
Dependency Updates

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency Includes dependency fixes label Feb 25, 2024
@renovate renovate bot force-pushed the renovate/major-secretlint-monorepo branch from 894f580 to c26b5f0 Compare October 14, 2024 09:11
@renovate renovate bot changed the title chore(deps): update secretlint monorepo to v8 (major) chore(deps): update secretlint monorepo to v9 (major) Oct 14, 2024
@renovate renovate bot force-pushed the renovate/major-secretlint-monorepo branch from c26b5f0 to f647422 Compare June 14, 2025 17:47
@renovate renovate bot changed the title chore(deps): update secretlint monorepo to v9 (major) chore(deps): update secretlint monorepo to v10 (major) Jun 14, 2025
@renovate renovate bot force-pushed the renovate/major-secretlint-monorepo branch 3 times, most recently from c2c31e0 to ac912d8 Compare August 10, 2025 17:19
@renovate renovate bot changed the title chore(deps): update secretlint monorepo to v10 (major) chore(deps): update secretlint monorepo to v11 (major) Aug 10, 2025
@renovate renovate bot force-pushed the renovate/major-secretlint-monorepo branch 2 times, most recently from cbf2330 to dcd0ed0 Compare August 13, 2025 16:12
@renovate renovate bot force-pushed the renovate/major-secretlint-monorepo branch 3 times, most recently from b903d92 to 1bebf9c Compare August 25, 2025 17:23
@renovate renovate bot force-pushed the renovate/major-secretlint-monorepo branch from 1bebf9c to aa89a19 Compare August 31, 2025 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependency Includes dependency fixes
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants