@edcalderon/versioning 1.5.6 → 1.5.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +13 -0
- package/README.md +2 -2
- package/dist/extensions/secrets-check/index.js +4 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,7 +1,20 @@
|
|
|
1
|
+
## [1.5.7](https://github.com/edcalderon/my-second-brain/compare/versioning-v1.5.6...versioning-v1.5.7) (2026-03-23)
|
|
2
|
+
|
|
3
|
+
### Bug Fixes
|
|
4
|
+
|
|
5
|
+
* **secrets-check:** extend allowlist with regex character-class patterns to prevent false positives on example code in documentation
|
|
6
|
+
|
|
7
|
+
|
|
8
|
+
|
|
1
9
|
## [1.5.6](https://github.com/edcalderon/my-second-brain/compare/versioning-v1.5.5...versioning-v1.5.6) (2026-03-23)
|
|
2
10
|
|
|
11
|
+
### Features
|
|
12
|
+
|
|
13
|
+
* **secrets-check:** harden extension to v1.1.1 — detect colon-syntax credential leaks (`KEY: value`) in Markdown docs with negative-lookahead allowlist for safe placeholders
|
|
3
14
|
|
|
15
|
+
### Bug Fixes
|
|
4
16
|
|
|
17
|
+
* **secrets-check:** add regression tests for colon-style password detection and placeholder allowlist (`[YOUR_IMAP_PASSWORD]`)
|
|
5
18
|
|
|
6
19
|
|
|
7
20
|
## [1.5.5](https://github.com/edcalderon/my-second-brain/compare/versioning-v1.5.4...versioning-v1.5.5) (2026-03-22)
|
package/README.md
CHANGED
|
@@ -8,11 +8,11 @@ A comprehensive versioning and changelog management tool designed for monorepos
|
|
|
8
8
|
|
|
9
9
|
---
|
|
10
10
|
|
|
11
|
-
## 📋 Latest Changes (v1.5.
|
|
11
|
+
## 📋 Latest Changes (v1.5.7)
|
|
12
12
|
|
|
13
13
|
### Bug Fixes
|
|
14
14
|
|
|
15
|
-
* **
|
|
15
|
+
* **secrets-check:** extend allowlist with regex character-class patterns to prevent false positives on example code in documentation
|
|
16
16
|
|
|
17
17
|
For full version history, see [CHANGELOG.md](./CHANGELOG.md) and [GitHub releases](https://github.com/edcalderon/my-second-brain/releases)
|
|
18
18
|
|
|
@@ -81,6 +81,10 @@ const DEFAULT_ALLOWLIST = [
|
|
|
81
81
|
"check-secrets",
|
|
82
82
|
"secretPatterns", // Regex pattern definitions in code
|
|
83
83
|
"BEGIN PRIVATE KEY", // Regex string matching
|
|
84
|
+
"[0-9a-f]", // Regex character class in docs/examples
|
|
85
|
+
"[0-9a-fA-F]", // Hex regex character class in docs/examples
|
|
86
|
+
"[a-f0-9]", // Hex regex character class in docs/examples
|
|
87
|
+
"CUSTOM_API_KEY=", // Documentation example key name
|
|
84
88
|
];
|
|
85
89
|
function checkContentForSecrets(content, patterns, allowlist, filename) {
|
|
86
90
|
const results = [];
|