Skip to content

chore(deps-dev)(deps-dev): update detect-secrets requirement from <2.0.0,>=1.4.0 to >=1.5.0,<2.0.0#150

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/detect-secrets-gte-1.5.0-and-lt-2.0.0
Closed

chore(deps-dev)(deps-dev): update detect-secrets requirement from <2.0.0,>=1.4.0 to >=1.5.0,<2.0.0#150
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/detect-secrets-gte-1.5.0-and-lt-2.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Updates the requirements on detect-secrets to permit the latest version.

Release notes

Sourced from detect-secrets's releases.

v1.5.0

📰 News

  • We're adding support for Python 3.10, 3.11 and 3.12 and we dropped support for Python 3.6 and 3.7! We hope this won't be too disruptive for you all. Be aware that in a next release, we'll remove support for Python 3.8 too, as it'll reach EOL in October 2024.

📣 Release Highlights

  • Added support for OS-agnostic baseline files (#586)

🎉 New Features

  • Added a detector for IP addresses (#692)
  • Added a detector for GitLab tokens (#782)
  • Added a detector for Telegram tokens (#808)
  • Added a detector for Pypi and TestPypi tokens (#819)
  • Added a detector for OpenAI tokens (#823)
Changelog

Sourced from detect-secrets's changelog.

v1.5.0

May 6th, 2024

We apologise for the extreme delay in publishing a new release for our beloved detect-secrets. We at Yelp appreciate your continued support and your contributions to this valuable project!

📰 News

  • We're adding support for Python 3.10, 3.11 and 3.12 and we dropped support for Python 3.6 and 3.7! We hope this won't be too disruptive for you all. Be aware that in a next release, we'll remove support for Python 3.8 too, as it'll reach EOL in October 2024.

📣 Release Highlights

  • Added support for OS-agnostic baseline files (#586)

🎉 New Features

  • Added a detector for IP addresses (#692)
  • Added a detector for GitLab tokens (#782)
  • Added a detector for Telegram tokens (#808)
  • Added a detector for Pypi and TestPypi tokens (#819)
  • Added a detector for OpenAI tokens (#823)

✨ Usability

  • Added filenames in errors thrown when a plugin file specified in the .secrets.baseline is not found. (#719)
  • Changed the wording of the audit prompt (#738)

🔭 Accuracy

  • Improved DiscordBotTokenDetector to reduce false negatives (#628)
  • Improved KeywordDetector to reduce false positive for Golang (#675)
  • Improved AWSKeyDetector by adding more access key formats (#796)

🐛 Bugfixes

  • Fixed NotImplementedError in StatisticsAggregator (#678)
  • Fixed bug in YAMLTransformer related to parsing YAML files with achors and tags (#679)
  • Fixed IndexError in is_prefixed_with_dollar_sign caused by passing empty strings (#712)

🐍 Miscellaneous

  • Dropped support for Python 3.6 (#672)
  • Dropped support for Python 3.7 (#724)
  • Added support for Python 3.10 (#724)
  • Added support for Python 3.11 (#730)
  • Added support for Python 3.12 (#810)
  • Multiple dependency updates

#586: Yelp/detect-secrets#586 #628: Yelp/detect-secrets#628 #672: Yelp/detect-secrets#672 #675: Yelp/detect-secrets#675 #678: Yelp/detect-secrets#678 #679: Yelp/detect-secrets#679 #692: Yelp/detect-secrets#692 #712: Yelp/detect-secrets#712 #719: Yelp/detect-secrets#719 #724: Yelp/detect-secrets#724

... (truncated)

Commits
  • 01886c8 Bump version: 1.4.0 → 1.5.0
  • cb271be Update changelog v1.5.0 release (#829)
  • 81157d0 Merge pull request #828 from Yelp/dependabot/pip/coverage-7.5.1
  • 7237fda Merge pull request #827 from Yelp/dependabot/pip/packaging-24.0
  • 8f4f823 Bump coverage from 7.4.0 to 7.5.1
  • adfe36f Bump packaging from 23.2 to 24.0
  • 928f03a Revert "Changelog for v1.5.0 release"
  • 98b0e9f Revert "Updated baseline file"
  • 89cdc79 Revert "Fixed version in baseline file"
  • 16e3452 Fixed version in baseline file
  • Additional commits viewable in compare view

Updates the requirements on [detect-secrets](https://github.com/Yelp/detect-secrets) to permit the latest version.
- [Release notes](https://github.com/Yelp/detect-secrets/releases)
- [Changelog](https://github.com/Yelp/detect-secrets/blob/master/CHANGELOG.md)
- [Commits](Yelp/detect-secrets@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: detect-secrets
  dependency-version: 1.5.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/detect-secrets-gte-1.5.0-and-lt-2.0.0 branch from 6192817 to 2193455 Compare April 29, 2026 10:14
@longieirl
Copy link
Copy Markdown
Owner

Superseded by #161 which consolidates all pending Dependabot bumps into a single commit.

@longieirl longieirl closed this Apr 29, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 29, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/pip/detect-secrets-gte-1.5.0-and-lt-2.0.0 branch April 29, 2026 10:16
longieirl added a commit that referenced this pull request Apr 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant