Attributed metadata history

v13.0.0

Highlights v13 changes how files are discovered on disk and adds three credential detection rules. .gitignore is respected by default Nested .gitignore files now apply to file discovery with ripgrep semantics: rules from each directory cascade into its subtree, and a negation rule in a deeper file can flip an earlier verdict. Files excluded by any .gitignore on the path are no longer scanned. Repositories that previously relied on Secretlint scanning ignored files (such as dist/ or generated artefacts) will see fewer files in the output. .secretlintignore is unchanged and continues to apply alongside .gitignore. To restore the v12 behaviour: secretlint --no-gitignore "**/*" If a file is matched by a .gitignore rule but still appears in Secretlint's output, please open an issue at https://github.com/secretlint/secretlint/issues. Glob-shaped paths that exist on disk are treated literally --no-glob and "globs by default" both existed in v12. What changed in v13 is the fallback for inputs that contain glob metacharacters but resolve to a real file or directory. In v12, an input like src/(group)/page.tsx was always parsed as a glob, so SvelteKit / Next.js routes whose names contain (), [], {}, or ? required --no-glob. v13 runs a single stat per glob-shaped input: if it exists, the input is treated literally; otherwise it stays a glob. Pattern On disk v12 default v13 default src/(group)/page.tsx exists parsed as glob, no match matched literally src/(missing)/page.tsx absent parsed as glob parsed as glob src/[a-z]ormal.tsx normal.tsx exists matched via glob matched via glob Pass --no-glob to skip the probe and force literal interpretation. New and promoted rules Added to preset-recommend: Rule Detects @secretlint/secretlint-rule-tailscale Tailscale API keys (new package) @secretlint/secretlint-rule-stripe Stripe API keys (new package) @secretlint/secretlint-rule-cloudflare Cloudflare API tokens (promoted from preset-canary) What's Changed Breaking Changes feat!: respect .gitignore by default via @secretlint/walker by @azu in #1530 feat(secretlint-rule-preset-recommend): promote cloudflare, stripe, tailscale from canary by @azu in #1538 Features Add Tailscale API key detection rule by @azu in #1536 feat(secretlint-rule-stripe): add Stripe API key detection rule by @azu in #1537 CI Update actions/setup-node action to v6.4.0 by @renovate[bot] in #1527 Dependency Updates Update pnpm to v10.33.2 by @renovate[bot] in #1525 Update dependency ajv to ^8.20.0 by @renovate[bot] in #1528 Update textlint to ^15.6.0 (minor) by @renovate[bot] in #1529 Update dependency picomatch to ^4.0.4 by @renovate[bot] in #1534 Update dependency turbo to ^2.9.7 by @renovate[bot] in #1535 Other Changes Update Node.js to v24.15.0 by @renovate[bot] in #1514 Update dependency Bun to v1.3.13 by @renovate[bot] in #1526 Full Changelog: v12.3.1...v13.0.0

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.