Skip to content

fix(deps): update root major dependencies (major)#1607

Merged
yamadashy merged 1 commit into
mainfrom
renovate/major-root-major-dependencies
May 30, 2026
Merged

fix(deps): update root major dependencies (major)#1607
yamadashy merged 1 commit into
mainfrom
renovate/major-root-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented May 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@secretlint/core (source) ^11.7.1^13.0.2 age confidence
@secretlint/secretlint-rule-preset-recommend (source) ^11.7.1^13.0.2 age confidence
@secretlint/types (source) ^11.7.1^13.0.2 age confidence
secretlint (source) ^11.7.1^13.0.2 age confidence
typescript (source) ^5.9.3^6.0.3 age confidence

Release Notes

secretlint/secretlint (@​secretlint/core)

v13.0.2

What's Changed

📝 v13.0.1 published as v13.0.2

Bug Fixes
  • Fix secp256k1 private key detection to avoid false positives by @​azu in #​1564
CI
Dependency Updates
Other Changes
  • Reorganize CLI options and update glob syntax documentation by @​azu in #​1540

Full Changelog: secretlint/secretlint@v13.0.0...v13.0.2

v13.0.0

Compare Source

Highlights

v13 changes how files are discovered on disk and adds three credential detection rules.

.gitignore is respected by default

Nested .gitignore files now apply to file discovery with ripgrep semantics: rules from each directory cascade into its subtree, and a negation rule in a deeper file can flip an earlier verdict.

Files excluded by any .gitignore on the path are no longer scanned. Repositories that previously relied on Secretlint scanning ignored files (such as dist/ or generated artefacts) will see fewer files in the output. .secretlintignore is unchanged and continues to apply alongside .gitignore.

To restore the v12 behaviour:

secretlint --no-gitignore "**/*"

If a file is matched by a .gitignore rule but still appears in Secretlint's output, please open an issue at https://github.com/secretlint/secretlint/issues.

Glob-shaped paths that exist on disk are treated literally

--no-glob and "globs by default" both existed in v12. What changed in v13 is the fallback for inputs that contain glob metacharacters but resolve to a real file or directory.

In v12, an input like src/(group)/page.tsx was always parsed as a glob, so SvelteKit / Next.js routes whose names contain (), [], {}, or ? required --no-glob. v13 runs a single stat per glob-shaped input: if it exists, the input is treated literally; otherwise it stays a glob.

Pattern On disk v12 default v13 default
src/(group)/page.tsx exists parsed as glob, no match matched literally
src/(missing)/page.tsx absent parsed as glob parsed as glob
src/[a-z]ormal.tsx normal.tsx exists matched via glob matched via glob

Pass --no-glob to skip the probe and force literal interpretation.

New and promoted rules

Added to preset-recommend:

Rule Detects
@secretlint/secretlint-rule-tailscale Tailscale API keys (new package)
@secretlint/secretlint-rule-stripe Stripe API keys (new package)
@secretlint/secretlint-rule-cloudflare Cloudflare API tokens (promoted from preset-canary)

What's Changed

Breaking Changes
Features
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v12.3.1...v13.0.0

v12.3.1

Compare Source

What's Changed
CI
  • Pin QEMU binfmt image version in Docker release workflow by @​azu in #​1523

Full Changelog: secretlint/secretlint@v12.3.0...v12.3.1

v12.3.0

Compare Source

What's Changed
Features
CI
Dependency Updates

Full Changelog: secretlint/secretlint@v12.2.0...v12.3.0

v12.2.0

Compare Source

What's Changed
Features
Documentation
New Contributors

Full Changelog: secretlint/secretlint@v12.1.0...v12.2.0

v12.1.0

Compare Source

What's Changed
Features
  • Add per-pattern allows configuration for secretlint-rule-pattern by @​azu in #​1504

Full Changelog: secretlint/secretlint@v12.0.1...v12.1.0

v12.0.1

Compare Source

What's Changed
Documentation
  • Add macOS SecureClipboard application to documentation by @​azu in #​1500
Refactoring
  • Bump minimum Node.js version requirement to 22 by @​azu in #​1502
  • secretelint v12 requires Node.js 22+
CI

Full Changelog: secretlint/secretlint@v12.0.0...v12.0.1

v12.0.0

Compare Source

What's Changed
New rules added to recommend

Secretlint v12.0.0 includes the following new rules in the @​secretlint/secretlint-rule-preset-recommend preset:

Breaking Changes
  • Require Node.js 22+
  • Remove CommonJS build output and dual-package support by @​azu in #​1495
  • feat(preset-recommend)!: sync canary rules into recommend preset by @​azu in #​1498
Refactoring
CI
Dependency Updates
Other Changes

Full Changelog: secretlint/secretlint@v11.7.1...v12.0.0

microsoft/TypeScript (typescript)

v6.0.3

Compare Source

v6.0.2

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on saturday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from yamadashy as a code owner May 30, 2026 04:28
@renovate renovate Bot added dependencies Dependencies updates renovate Renovate labels May 30, 2026
@github-actions

github-actions Bot commented May 30, 2026

Copy link
Copy Markdown
Contributor

⚡ Performance Benchmark

Latest commit:2990e56 fix(deps): update root major dependencies
Status:✅ Benchmark complete!
Ubuntu:0.67s (±0.02s) → 0.74s (±0.02s) · +0.07s (+10.1%)
macOS:0.48s (±0.10s) → 0.54s (±0.07s) · +0.06s (+11.4%)
Windows:1.08s (±0.15s) → 1.19s (±0.17s) · +0.10s (+9.2%)
Details
  • Packing the repomix repository with node bin/repomix.cjs
  • Warmup: 2 runs (discarded), interleaved execution
  • Measurement: 20 runs / 30 on macOS (median ± IQR)
  • Workflow run
History

1e7ea25 fix(deps): update root major dependencies

ed36164 fix(deps): update root major dependencies

44d7b8a fix(deps): update root major dependencies

@codecov

codecov Bot commented May 30, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.86%. Comparing base (416d042) to head (2990e56).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1607   +/-   ##
=======================================
  Coverage   90.86%   90.86%           
=======================================
  Files         121      121           
  Lines        4698     4698           
  Branches     1096     1096           
=======================================
  Hits         4269     4269           
  Misses        429      429           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 30, 2026

Copy link
Copy Markdown

Deploying repomix with  Cloudflare Pages  Cloudflare Pages

Latest commit: 2990e56
Status: ✅  Deploy successful!
Preview URL: https://f96416bc.repomix.pages.dev
Branch Preview URL: https://renovate-major-root-major-de.repomix.pages.dev

View logs

@renovate renovate Bot force-pushed the renovate/major-root-major-dependencies branch 2 times, most recently from ed36164 to 1e7ea25 Compare May 30, 2026 05:19
@renovate renovate Bot force-pushed the renovate/major-root-major-dependencies branch from 1e7ea25 to 2990e56 Compare May 30, 2026 05:53
pull Bot pushed a commit to kp-forks/repomix that referenced this pull request May 30, 2026
intent(renovate): defer @clack/prompts v1 — the root major deps update (PR yamadashy#1607) is fully red because v1 changed the text() validate callback arg to `string | undefined`, breaking the tsc build at src/cli/actions/initAction.ts:97 (TS18048); since build runs via the prepare hook, every npm ci fails and all CI jobs cascade-fail
decision(renovate): ignore only @clack/prompts, leaving typescript 6.0 and @secretlint/* 13 in the major group so CI can still evaluate them once clack is out of the batch

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@yamadashy yamadashy merged commit ae7a9c3 into main May 30, 2026
54 checks passed
@yamadashy yamadashy deleted the renovate/major-root-major-dependencies branch May 30, 2026 09:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependencies updates renovate Renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant