@wrongstack/telegram 0.316.1 → 0.317.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +2 -2
- package/package.json +4 -4
package/dist/index.js
CHANGED
|
@@ -1019,12 +1019,12 @@ var SENSITIVE_FLAG_PATTERNS = [
|
|
|
1019
1019
|
// `curl -tSECRET` is extremely rare; a user typing `clang -target=...`
|
|
1020
1020
|
// is daily. The lookbehind `(?<![-\w])` rejects `-t` inside `--token`
|
|
1021
1021
|
// where the preceding char is another `-`.
|
|
1022
|
-
/(?<![-\w])-t(?:[\s=][^\s,]+)
|
|
1022
|
+
/(?<![-\w])-t(?:[\s=][^\s,]+)/g,
|
|
1023
1023
|
/(?<![-\w])-(?:p|password)(?:[\s=][^\s,]+)/gi,
|
|
1024
1024
|
// env-var style: TOKEN=x, API_KEY=y, DATABASE_URL=z, …
|
|
1025
1025
|
/(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD|DATABASE_URL|CONNECTION_STRING)\s*[=:][^\s,]+/gi,
|
|
1026
1026
|
// Generic high-entropy look — only when preceded by a flag name.
|
|
1027
|
-
/--\w*(?:token|key|secret|password|passwd|auth|credential)\w*[=\s,][A-Za-z0-9+/=]{32,}/
|
|
1027
|
+
/--\w*(?:token|key|secret|password|passwd|auth|credential)\w*[=\s,][A-Za-z0-9+/=]{32,}/g
|
|
1028
1028
|
];
|
|
1029
1029
|
function redactSecrets(text) {
|
|
1030
1030
|
let result = text;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@wrongstack/telegram",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.317.0",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"description": "WrongStack plugin — Telegram bridge: send messages, receive prompts, get notified.",
|
|
6
6
|
"repository": {
|
|
@@ -26,12 +26,12 @@
|
|
|
26
26
|
"!dist/**/*.map"
|
|
27
27
|
],
|
|
28
28
|
"peerDependencies": {
|
|
29
|
-
"@wrongstack/core": "0.
|
|
29
|
+
"@wrongstack/core": "0.317.0"
|
|
30
30
|
},
|
|
31
31
|
"devDependencies": {
|
|
32
32
|
"@types/node": "^26.2.0",
|
|
33
|
-
"
|
|
34
|
-
"
|
|
33
|
+
"@wrongstack/core": "0.317.0",
|
|
34
|
+
"typescript": "^7.0.2"
|
|
35
35
|
},
|
|
36
36
|
"publishConfig": {
|
|
37
37
|
"access": "public"
|