Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 16, 2025

Bumps the dev-dependency group with 7 updates in the / directory:

Package From To
@secretlint/secretlint-rule-preset-recommend 9.3.4 10.2.0
lefthook 1.11.13 1.12.2
prettier 3.5.3 3.6.2
secretlint 9.3.4 10.2.0
textlint 14.8.0 15.2.0
textlint-rule-preset-smarthr 1.35.0 1.35.1
zenn-cli 0.1.161 0.2.1

Updates @secretlint/secretlint-rule-preset-recommend from 9.3.4 to 10.2.0

Release notes

Sourced from @​secretlint/secretlint-rule-preset-recommend's releases.

v10.2.0

What's Changed

Features

@secretlint/secretlint-rule-database-connection-string detects following secrets

  • MongoDB detection: Standard URI (mongodb://) and SRV format (mongodb+srv://)
  • MySQL detection: Standard URI (mysql://), JDBC format (jdbc:mysql://), and X DevAPI (mysqlx://)
  • PostgreSQL detection: Standard URI (postgresql://) and alternative format (postgres://)
const uri = "mongodb://user:[email protected]/mydb";
const mysql = "jdbc:mysql://admin:[email protected]:3306/app";
const pg = "postgres://user:[email protected]:5432/mydb";

Fixes

CI

Dependency Updates

Other Changes

Full Changelog: secretlint/secretlint@v10.1.1...v10.2.0

v10.1.1

What's Changed

Bug Fixes

CI

Dependency Updates

... (truncated)

Commits
  • ae27ac1 chore(release): v10.2.0 (#1104)
  • e87646f chore(deps): update dependency @​types/node to ^20.19.2 (#1103)
  • 294254a chore(deps): update github/codeql-action action to v3.29.1 (#1102)
  • 59d0682 fix(basicauth): limit protocol detection to HTTP/HTTPS/FTP to avoid overlap w...
  • 10672f8 feat: add database connection string detection rule (#1099)
  • 5635e8e feat(ci): merge-gatekeeperワークフローを追加 (#1097)
  • c6ce8fc chore(deps): update dependencies (#1095)
  • 1dae4a7 chore(deps): update dependency bun to v1.2.17 (#1093)
  • 5706ac4 chore: update read-pkg from v8 to v9 (#1094)
  • 97d8208 chore(deps): update docker/setup-buildx-action action to v3.11.1 (#1092)
  • Additional commits viewable in compare view

Updates lefthook from 1.11.13 to 1.12.2

Release notes

Sourced from lefthook's releases.

v1.12.2

Changelog

  • 9f0534f50e652b9d5ce11c89dc0985f518ad8cf0 feat: add implicit template lefthook_job_name (#1074)
  • 47ba9db09706b1c41c0274e2295bdee62d7ee091 feat: allow overriding config path using LEFTHOOK_CONFIG env (#1072)
  • bd847e24601e2c3051ca9c86cf0979923a8708ac refactor: loading configs logic

v1.12.1

Changelog

  • af4149a9cf175ae4d4d3409149b3b0c6f1597d8b chore: only check if local configs exist
  • 2cdfa8750439343e7462caffa77f45b9a43d3ed9 feat: add check-install command (#1064)
  • 4fd484df1ac8e909a68f3aa022d296adc17c390f feat: allow using local config only (#1071)

v1.12.0

Changelog

  • eff9fd7df2c46d1a2e4984a4ef022465e65cdea4 feat: allow installing only specific hooks (#1069)
  • 1cea54f81b680bc45bb7eeae79354ca69829147a refactor!: restructure files and folders, remove deprecated options (#1067)

v1.11.16

Changelog

  • bfc70bab6d4cb7d1b79ab808f97e45a12b7df60d fix: race condition on repo state (#1066)

v1.11.15

Changelog

  • b6ccea34eaba761d21050c0d75f307720947d6e2 chore(deps): bump github.com/go-viper/mapstructure/v2
  • 35da657a27bf0d29a87bbdd50584908774f8e2f7 chore: regexp use improvements (#1034)
  • d1eb3be2522a2afa0da6cfa255d7843935af6812 chore: upgrade golangci-lint to v2, address findings (#1027)
  • a62f614fba033dcc4c02e952818ce7ad078dd23e chore: use CODEOWNERS
  • 975f9d68fd4cfb90edf97f7280e9e1758fbfecba ci: update GoReleaser configurations (#1040)
  • 5f4ebede243bb3c87b18ccec7bf1c9b2623a3625 deps: bump github.com/kaptinlin/jsonschema from 0.2.3 to 0.2.4 (#1028)
  • 48f20d024929e60638985fbf3fe3b7a92ae2e6f1 deps: bump github.com/kaptinlin/jsonschema from 0.2.4 to 0.4.1 (#1036)
  • bba90797713af6241f7034f31c284fb9a995e8b4 deps: bump github.com/kaptinlin/jsonschema from 0.4.1 to 0.4.2 (#1042)
  • aacadf24f9db1a0c893d7f8bdb18c2170a4ef1a8 deps: bump github.com/kaptinlin/jsonschema from 0.4.2 to 0.4.3
  • 6db1f861db2f600cae018165a6783742990c99e5 deps: bump github.com/kaptinlin/jsonschema from 0.4.3 to 0.4.5
  • 6fad8d2689b24cc3361427d41cd55c4e192ebe27 deps: bump github.com/knadh/koanf/parsers/yaml from 1.0.0 to 1.1.0
  • 4a71900084e7c4c470639aad05e757ea9a38a647 deps: bump github.com/knadh/koanf/v2 from 2.2.0 to 2.2.1 (#1043)
  • 8dd854422cc64dc82b501abb51d9e1d889e75054 feat: add exclude arg (#1063)
  • f37db1824ce4867f17527f80b0f61639b0242fd6 feat: inherit group envs (#1061)
  • 01fafb89b57f952f4b61d330ee401af89f2c8878 feat: show time for jobs (#1044)
  • e8dca0cfcb2671d53d480020ec30973e9c84ccd5 feat: support devbox (#1031)
  • 4075145817d6fe50aa68dc540c947e20e03b0b2b fix: apply implicit staged files filter to all files when all files arg given (#1062)
  • 612ab19e538f5eca0a99fd377e7b1f0d9ece9c33 fix: bump goreleaser
  • e3f5b2dc586d3742984231b9d7530a65c83b2a6f fix: friendlier updater error message
  • 12430c52bd89b55054b53b7d864aa2f3ef2f50fb v1.11.14

v1.11.14

Changelog

  • 35da657a27bf0d29a87bbdd50584908774f8e2f7 chore: regexp use improvements (#1034)
  • d1eb3be2522a2afa0da6cfa255d7843935af6812 chore: upgrade golangci-lint to v2, address findings (#1027)
  • 975f9d68fd4cfb90edf97f7280e9e1758fbfecba ci: update GoReleaser configurations (#1040)
  • 01fafb89b57f952f4b61d330ee401af89f2c8878 feat: show time for jobs (#1044)

... (truncated)

Changelog

Sourced from lefthook's changelog.

1.12.2 (2025-07-11)

1.12.1 (2025-07-09)

1.12.0 (2025-07-08)

  • feat: allow installing only specific hooks (#1069)
  • refactor: [breaking] restructure files and folders, remove deprecated options (#1067)

1.11.16 (2025-07-03)

  • fix: race condition on repo state (#1066)

1.11.15 (2025-07-03)

  • feat: add exclude arg (#1063)
  • feat: inherit group envs (#1061)
  • fix: apply implicit staged files filter to all files when all files arg given (#1062)
  • deps: bump github.com/kaptinlin/jsonschema to 0.4.5
  • deps: bump github.com/knadh/koanf/parsers/yaml to 1.1.0
  • deps: bump github.com/knadh/koanf/v2 to 2.2.1 (#1043)
  • fix: friendlier updater error message
  • fix: bump goreleaser

1.11.14 (2025-06-16)

Commits
  • 5e5cad7 1.12.2: support override LEFTHOOK_CONFIG env
  • 9f0534f feat: add implicit template lefthook_job_name (#1074)
  • 4f6a9d2 docs: restructure documentation (#1075)
  • bd847e2 refactor: loading configs logic
  • 47ba9db feat: allow overriding config path using LEFTHOOK_CONFIG env (#1072)
  • ae8c42a 1.12.1: allow no main config, add check-install command
  • 2cdfa87 feat: add check-install command (#1064)
  • af4149a chore: only check if local configs exist
  • 4fd484d feat: allow using local config only (#1071)
  • aa9a41e 1.12.0: drop deprecated fields, allow installing specific hooks
  • Additional commits viewable in compare view

Updates prettier from 3.5.3 to 3.6.2

Release notes

Sourced from prettier's releases.

3.6.2

What's Changed

🔗 Changelog

3.6.1

  • Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

3.6.0

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

Changelog

Sourced from prettier's changelog.

3.6.2

diff

Markdown: Add missing blank line around code block (#17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block
---
foo: bar


Another
List

<!-- Prettier 3.6.1 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List



<!-- Prettier 3.6.2 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List

3.6.1

diff

TypeScript: Allow const without initializer (#17650, #17654 by @​fisker)

// Input
</tr></table> 

... (truncated)

Commits
  • 7a8b05f Release 3.6.2
  • 46526b4 Add missing blank line around code block (#17675)
  • a04ec11 chore(deps): update babel to v7.27.7 (#17684)
  • 32be5b6 chore(deps): update dependency flow-parser to v0.274.1 (#17676)
  • b55e777 Update docs about "TypeScript Configuration Files" (#17677)
  • b197c99 chore(deps): update dependency @​vitejs/plugin-react to v4.6.0 (#17674)
  • 1185f83 chore(deps): update dependency @​angular/compiler to v20.0.5 (#17680)
  • aa1316f chore(deps): update dependency browserslist to v4.25.1 (#17671)
  • c468d33 chore(deps): update dependency oxc-parser to v0.75.0 (#17672)
  • 3f46d91 chore(deps): update dependency vite to v7 (#17673)
  • Additional commits viewable in compare view

Updates secretlint from 9.3.4 to 10.2.0

Release notes

Sourced from secretlint's releases.

v10.2.0

What's Changed

Features

@secretlint/secretlint-rule-database-connection-string detects following secrets

  • MongoDB detection: Standard URI (mongodb://) and SRV format (mongodb+srv://)
  • MySQL detection: Standard URI (mysql://), JDBC format (jdbc:mysql://), and X DevAPI (mysqlx://)
  • PostgreSQL detection: Standard URI (postgresql://) and alternative format (postgres://)
const uri = "mongodb://user:[email protected]/mydb";
const mysql = "jdbc:mysql://admin:[email protected]:3306/app";
const pg = "postgres://user:[email protected]:5432/mydb";

Fixes

CI

Dependency Updates

Other Changes

Full Changelog: secretlint/secretlint@v10.1.1...v10.2.0

v10.1.1

What's Changed

Bug Fixes

CI

Dependency Updates

... (truncated)

Commits
  • ae27ac1 chore(release): v10.2.0 (#1104)
  • e87646f chore(deps): update dependency @​types/node to ^20.19.2 (#1103)
  • 294254a chore(deps): update github/codeql-action action to v3.29.1 (#1102)
  • 59d0682 fix(basicauth): limit protocol detection to HTTP/HTTPS/FTP to avoid overlap w...
  • 10672f8 feat: add database connection string detection rule (#1099)
  • 5635e8e feat(ci): merge-gatekeeperワークフローを追加 (#1097)
  • c6ce8fc chore(deps): update dependencies (#1095)
  • 1dae4a7 chore(deps): update dependency bun to v1.2.17 (#1093)
  • 5706ac4 chore: update read-pkg from v8 to v9 (#1094)
  • 97d8208 chore(deps): update docker/setup-buildx-action action to v3.11.1 (#1092)
  • Additional commits viewable in compare view

Updates textlint from 14.8.0 to 15.2.0

Commits
  • fa214af chore(release): v15.2.0 (#1635)
  • 3e8a474 feat(mcp): support CLI flags with --mcp option (#1634)
  • 7a0baf0 test(mcp): add comprehensive tests for createStructuredErrorResponse (#1633)
  • c3ddad1 refactor(mcp): improve test structure and add configuration options (#1630)
  • 407ead4 chore(deps): update patch updates (#1631)
  • b45ed53 chore(deps): update dependency @​eslint/js to ^9.30.0 (#1629)
  • b0b16ec chore(deps): update github/codeql-action action to v3.29.1 (#1628)
  • 4d834f6 fix(deps): update dependency @​babel/core to ^7.27.7 (#1627)
  • 73c5800 fix(deps): update patch updates (#1626)
  • 1b3a571 chore(release): v15.1.1 (#1624)
  • Additional commits viewable in compare view

Updates textlint-rule-preset-smarthr from 1.35.0 to 1.35.1

Release notes

Sourced from textlint-rule-preset-smarthr's releases.

v1.35.1

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

1.35.1 (2025-07-15)

Bug Fixes

Changelog

Sourced from textlint-rule-preset-smarthr's changelog.

1.35.1 (2025-07-15)

Bug Fixes

Commits
  • 5d6e826 chore(release): 1.35.1
  • 5236d11 Merge branch 'refs/heads/main' into HEAD
  • 61a5132 fix: 「前後で」を許容する (#675)
  • 2249bdb chore: update textlint family to ^14.8.4 (#679)
  • 1cafb5f chore: update pnpm to v10.13.1 (#671)
  • fcf1721 chore: update dependency @​types/node to ^22.16.3 (#686)
  • 407de45 chore: update dependency @​types/node to ^22.15.35 (#684)
  • 9c10754 chore: update dependency prettier to ^3.6.2 (#681)
  • 45582ca chore: update dependency @​types/node to ^22.15.34 (#680)
  • 75bc330 chore: update dependency @​types/node to ^22.15.31 (#678)
  • Additional commits viewable in compare view

Updates zenn-cli from 0.1.161 to 0.2.1

Release notes

Sourced from zenn-cli's releases.

0.2.1

🚀 Features

  • markdown-itで変換したimgタグにclassとlazyを追加します @​cm-igarashi-ryosuke (#539)
    • ⚠️ [Breaking Change] 以前のバージョンでzenn-markdown-htmlで変換されたHTMLにはclass属性がないため、zenn-content-cssでimgへのスタイルが適用されません。imgへのスタイルを適用するにはzenn-markdown-htmlでHTMLを再生成する必要があります。

🧰 Maintenance

0.1.163-alpha.0

🚀 Features

0.1.162

✨ Enhancements

🐛 Bug Fixes

🧰 Maintenance

0.1.162-alpha.3

✨ Enhancements

🐛 Bug Fixes

🧰 Maintenance

0.1.162-alpha.2

✨ Enhancements

🧰 Maintenance

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 16, 2025

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 29, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

…th 7 updates

Bumps the dev-dependency group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@secretlint/secretlint-rule-preset-recommend](https://github.com/secretlint/secretlint) | `9.3.4` | `10.2.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `1.11.13` | `1.12.2` |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.6.2` |
| [secretlint](https://github.com/secretlint/secretlint) | `9.3.4` | `10.2.0` |
| [textlint](https://github.com/textlint/textlint) | `14.8.0` | `15.2.0` |
| [textlint-rule-preset-smarthr](https://github.com/kufu/textlint-rule-preset-smarthr) | `1.35.0` | `1.35.1` |
| [zenn-cli](https://github.com/zenn-dev/zenn-editor/tree/HEAD/packages/zenn-cli) | `0.1.161` | `0.2.1` |



Updates `@secretlint/secretlint-rule-preset-recommend` from 9.3.4 to 10.2.0
- [Release notes](https://github.com/secretlint/secretlint/releases)
- [Commits](secretlint/secretlint@v9.3.4...v10.2.0)

Updates `lefthook` from 1.11.13 to 1.12.2
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v1.11.13...v1.12.2)

Updates `prettier` from 3.5.3 to 3.6.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.5.3...3.6.2)

Updates `secretlint` from 9.3.4 to 10.2.0
- [Release notes](https://github.com/secretlint/secretlint/releases)
- [Commits](secretlint/secretlint@v9.3.4...v10.2.0)

Updates `textlint` from 14.8.0 to 15.2.0
- [Release notes](https://github.com/textlint/textlint/releases)
- [Commits](textlint/textlint@v14.8.0...v15.2.0)

Updates `textlint-rule-preset-smarthr` from 1.35.0 to 1.35.1
- [Release notes](https://github.com/kufu/textlint-rule-preset-smarthr/releases)
- [Changelog](https://github.com/kufu/textlint-rule-preset-smarthr/blob/main/CHANGELOG.md)
- [Commits](kufu/textlint-rule-preset-smarthr@v1.35.0...v1.35.1)

Updates `zenn-cli` from 0.1.161 to 0.2.1
- [Release notes](https://github.com/zenn-dev/zenn-editor/releases)
- [Commits](https://github.com/zenn-dev/zenn-editor/commits/0.2.1/packages/zenn-cli)

---
updated-dependencies:
- dependency-name: "@secretlint/secretlint-rule-preset-recommend"
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependency
- dependency-name: lefthook
  dependency-version: 1.12.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependency
- dependency-name: prettier
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependency
- dependency-name: secretlint
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependency
- dependency-name: textlint
  dependency-version: 15.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependency
- dependency-name: textlint-rule-preset-smarthr
  dependency-version: 1.35.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependency
- dependency-name: zenn-cli
  dependency-version: 0.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependency
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dev-dependency-d56689c863 branch from bc1a7be to 5dc3ba0 Compare July 30, 2025 01:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants