@b12k/gitleaks 8.30.1-v.5 → 8.30.1-v.50

package/README.md

@@ -14,6 +14,12 @@ Typically installed as a dev dependency:
 npm install --save-dev @b12k/gitleaks
 ```
 
+Recent npm versions require approving dependency install scripts. Approve this package so its postinstall script can download the gitleaks binary:
+
+```bash
+npm approve-scripts @b12k/gitleaks
+```
+
 ```bash
 pnpm add -D --allow-build=@b12k/gitleaks @b12k/gitleaks
 ```
@@ -27,9 +33,11 @@ yarn add --dev @b12k/gitleaks
 **Global**
 
 ```bash
-npm install -g @b12k/gitleaks
+npm install -g --allow-scripts=@b12k/gitleaks @b12k/gitleaks
 ```
 
+Global npm installs cannot use `npm approve-scripts`; use `--allow-scripts` instead.
+
 ```bash
 pnpm add -g --allow-build=@b12k/gitleaks @b12k/gitleaks
 ```
@@ -42,7 +50,12 @@ yarn global add @b12k/gitleaks
 
 The postinstall script downloads the gitleaks binary for your platform from the official GitHub release.
 
-If you already installed with pnpm 11 and the build was blocked, approve and rebuild it:
+If you already installed with npm or pnpm and the build was blocked, approve and rebuild it:
+
+```bash
+npm approve-scripts @b12k/gitleaks
+npm rebuild @b12k/gitleaks
+```
 
 ```bash
 pnpm approve-builds @b12k/gitleaks
@@ -106,3 +119,9 @@ yarn add --dev @b12k/gitleaks --foreground-scripts
 The npm package version mirrors the gitleaks release version.
 
 To install a different gitleaks release, define it in `.gitleaks-version` as `v1.2.3` or `1.2.3` before installing the package.
+
+If you add or change `.gitleaks-version` after installing, run:
+
+```bash
+gitleaks-install
+```

package/dist/config.js

@@ -7,15 +7,15 @@ const platform = 'win32' === process.platform ? 'windows' : process.platform;
 const isWindows = 'windows' === platform;
 const { arch: architecture } = process;
 const { name: config_name, version: version } = package_0;
-const [defaultVersion = ''] = version.split('-');
+const [defaultVersion = ''] = version.split('-', 1);
 const versionFileName = '.gitleaks-version';
 const versionFilePath = node_path.join(process.env['INIT_CWD'] ?? process.cwd(), versionFileName);
 let versionOverride;
 try {
     const fileContents = await readFile(versionFilePath, 'utf8');
-    versionOverride = fileContents.trim().replace(/^v/, '');
+    versionOverride = fileContents.trim().replace(/^v/u, '');
 } catch (error) {
-    if ('ENOENT' !== error.code) {
+    if (!(error instanceof Error && 'code' in error && 'ENOENT' === error.code)) {
         const message = Error.isError(error) ? error.message : 'Unknown error.';
         throw new Error(`Failed to read ${versionFileName}: ${message}`, {
             cause: error

package/dist/postinstall.js

@@ -1,7 +1,7 @@
+#!/usr/bin/env node
 import { createHash } from "node:crypto";
 import { createWriteStream } from "node:fs";
 import { readFile, rm } from "node:fs/promises";
-import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { architecture, archiveFileName, archiveGithubUrl, archivePath, binaryPath, checksumsGithubUrl, currentDirectory, libraryName, platform, supportedArchitectures, supportedPlatforms } from "./config.js";
 import { extractArchive } from "./extract-archive.js";
@@ -27,7 +27,7 @@ async function downloadArchive() {
         borderColor: 'green',
         title: `${libraryName}:save`
     });
-    await pipeline(Readable.fromWeb(response.body), createWriteStream(archivePath));
+    await pipeline(response.body, createWriteStream(archivePath));
 }
 async function ensureArchiveChecksum() {
     log(checksumsGithubUrl, {
@@ -36,7 +36,7 @@ async function ensureArchiveChecksum() {
     });
     const response = await createFetchResponse(checksumsGithubUrl);
     const checksums = await response.text();
-    const checksum = checksums.split('\n').find((line)=>line.endsWith(` ${archiveFileName}`))?.split(/\s+/, 1)[0];
+    const checksum = checksums.split('\n').find((line)=>line.endsWith(` ${archiveFileName}`))?.split(/\s+/u, 1)[0];
     if (!checksum) throw new Error(`Checksum not found for ${archiveFileName}.`);
     const archive = await readFile(archivePath);
     const actualChecksum = createHash('sha256').update(archive).digest('hex');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@b12k/gitleaks",
-  "version": "8.30.1-v.5",
+  "version": "8.30.1-v.50",
   "description": "The missing NPM wrapper for Gitleaks",
   "keywords": [
     "api-keys",
@@ -21,73 +21,68 @@
     "tokens",
     "wrapper"
   ],
+  "license": "MIT",
+  "author": "Bogdan Kolesnyk",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/b12k/gitleaks.git"
   },
-  "license": "MIT",
-  "author": "Bogdan Kolesnyk",
-  "type": "module",
   "bin": {
-    "gitleaks": "dist/cli.js"
+    "gitleaks": "dist/cli.js",
+    "gitleaks-install": "dist/postinstall.js"
   },
   "files": [
     "dist",
     "scripts"
   ],
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
   "dependencies": {
-    "boxen": "8.0.1",
-    "extract-zip": "2.0.1",
-    "tar": "7.5.19",
+    "boxen": "9.0.0",
+    "tar": "7.5.22",
     "update-notifier": "7.3.1"
   },
   "devDependencies": {
     "@b12k/branch-name-lint": "1.3.0",
-    "@commitlint/config-conventional": "21.2.0",
-    "@eslint/js": "10.0.1",
-    "@release-it/conventional-changelog": "11.0.1",
-    "@rslib/core": "0.23.1",
-    "@types/node": "26.0.1",
-    "@types/semver": "7.7.1",
+    "@commitlint/config-conventional": "21.2.3",
+    "@release-it/conventional-changelog": "12.0.2",
+    "@rslib/core": "1.0.2",
+    "@types/node": "26.6.2",
+    "@types/semver": "7.8.0",
     "@types/update-notifier": "6.0.8",
-    "commitlint": "21.2.0",
-    "eslint": "10.6.0",
-    "eslint-config-airbnb-extended": "3.1.0",
-    "eslint-config-prettier": "10.1.8",
-    "eslint-plugin-perfectionist": "5.9.1",
-    "eslint-plugin-unicorn": "70.0.0",
+    "commitlint": "21.2.3",
+    "eslint-plugin-perfectionist": "5.12.1",
     "husky": "9.1.7",
-    "lint-staged": "17.0.8",
-    "npm-check-updates": "22.2.9",
-    "npm-run-all2": "9.0.2",
-    "prettier": "3.9.4",
-    "release-it": "20.2.1",
+    "lint-staged": "17.5.1",
+    "npm-check-updates": "23.1.0",
+    "npm-run-all2": "9.0.3",
+    "oxfmt": "0.70.0",
+    "oxlint": "1.85.0",
+    "oxlint-tsgolint": "7.0.2003",
+    "release-it": "21.1.0",
     "semver": "7.8.5",
-    "sort-package-json": "4.0.0",
-    "tsx": "4.22.4",
-    "typescript": "6.0.3"
+    "tsx": "4.23.15",
+    "typescript": "7.0.2"
   },
   "engines": {
     "node": ">=24"
   },
-  "publishConfig": {
-    "access": "public"
-  },
   "scripts": {
     "build": "rslib",
     "check": "run-p -l check:*",
-    "check:format": "prettier . --check",
-    "check:package-json": "sort-package-json --check",
-    "check:scripts": "eslint . --cache",
+    "check:format": "oxfmt . --check",
+    "check:scripts": "oxlint",
     "check:types": "tsc --noEmit",
-    "deps:check": "ncu -e 1 -c 7",
-    "deps:update": "ncu -du --doctorTest \"pnpm deps:update:doctor\" -c 7",
+    "deps:check": "ncu -e 2 -c 1",
+    "deps:update": "ncu -du --doctorInstall \"pnpm deps:update:install\" --doctorTest \"pnpm deps:update:doctor\" -c 1",
     "deps:update:doctor": "run-p -l check:types check:scripts build",
+    "deps:update:install": "pnpm i --no-frozen-lockfile",
     "dev": "rslib --watch",
-    "fix": "run-p -l fix:*",
-    "fix:format": "prettier . --write",
-    "fix:package-json": "sort-package-json",
-    "fix:scripts": "eslint . --fix --cache",
+    "fix": "run-s -l fix:*",
+    "fix:format": "oxfmt . --write",
+    "fix:scripts": "oxlint --fix",
     "ga:notify": "tsx .github/notify.ts",
     "ga:update-gitleaks": "tsx .github/update-gitleaks.ts",
     "husky:commit-msg": "commitlint",

package/scripts/postinstall.js

@@ -2,6 +2,6 @@ import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 
 const directory = import.meta.dirname;
-// eslint-disable-next-line n/no-process-exit
+// oxlint-disable-next-line unicorn/no-process-exit
 if (!directory.includes('node_modules')) process.exit(0);
-await import(pathToFileURL(path.join(directory, '../dist/postinstall.js')));
+await import(pathToFileURL(path.join(directory, '../dist/postinstall.js')).href);