[pre-commit] Bumped:

- `lyz-code/yamlfix` to `1.19.1`
- `IBM/detect-secrets` to `0.13.1+ibm.64.dss`
- `pre-commit/pre-commit-hooks` to `v6.0.0`
- `gruntwork-io/pre-commit` to `v0.1.30`
- `igorshubovych/markdownlint-cli` to `v0.47.0`
- `rhysd/actionlint` to `v1.7.11`
- `JohnnyMorganz/StyLua` to `v2.3.1`

Author: missingcharacter

.pre-commit-config.yaml

@@ -1,18 +1,18 @@
 ---
 repos:
   - repo: https://github.com/lyz-code/yamlfix/
-    rev: 1.17.0
+    rev: 1.19.1
     hooks:
       - id: yamlfix
-  - repo: https://github.com/Yelp/detect-secrets
-    rev: v1.5.0
+  - repo: https://github.com/IBM/detect-secrets
+    rev: 0.13.1+ibm.64.dss
     hooks:
       - id: detect-secrets
         args:
           - --baseline
           - .secrets.baseline
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
+    rev: v6.0.0
     hooks:
       - id: trailing-whitespace
       - id: check-added-large-files
@@ -35,19 +35,19 @@ repos:
       - id: requirements-txt-fixer
       - id: mixed-line-ending
   - repo: https://github.com/gruntwork-io/pre-commit
-    rev: v0.1.26
+    rev: v0.1.30
     hooks:
       - id: shellcheck
         exclude: '.*\.sh\.j2'
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.44.0
+    rev: v0.47.0
     hooks:
       - id: markdownlint-fix
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.7.7
+    rev: v1.7.11
     hooks:
       - id: actionlint-system
   - repo: https://github.com/JohnnyMorganz/StyLua
-    rev: v2.0.2
+    rev: v2.3.1
     hooks:
       - id: stylua-system

.secrets.baseline

@@ -1,34 +1,42 @@
 {
-  "version": "1.4.0",
+  "exclude": {
+    "files": "^.secrets.baseline$",
+    "lines": null
+  },
+  "generated_at": "2026-02-25T21:40:20Z",
   "plugins_used": [
     {
-      "name": "ArtifactoryDetector"
+      "name": "AWSKeyDetector"
     },
     {
-      "name": "AWSKeyDetector"
+      "name": "ArtifactoryDetector"
     },
     {
       "name": "AzureStorageKeyDetector"
     },
     {
-      "name": "Base64HighEntropyString",
-      "limit": 4.5
+      "base64_limit": 4.5,
+      "name": "Base64HighEntropyString"
     },
     {
       "name": "BasicAuthDetector"
     },
+    {
+      "name": "BoxDetector"
+    },
     {
       "name": "CloudantDetector"
     },
     {
-      "name": "DiscordBotTokenDetector"
+      "ghe_instance": "github.ibm.com",
+      "name": "GheDetector"
     },
     {
       "name": "GitHubTokenDetector"
     },
     {
-      "name": "HexHighEntropyString",
-      "limit": 3.0
+      "hex_limit": 3,
+      "name": "HexHighEntropyString"
     },
     {
       "name": "IbmCloudIamDetector"
@@ -40,8 +48,8 @@
       "name": "JwtTokenDetector"
     },
     {
-      "name": "KeywordDetector",
-      "keyword_exclude": ""
+      "keyword_exclude": null,
+      "name": "KeywordDetector"
     },
     {
       "name": "MailchimpDetector"
@@ -52,9 +60,6 @@
     {
       "name": "PrivateKeyDetector"
     },
-    {
-      "name": "SendGridDetector"
-    },
     {
       "name": "SlackDetector"
     },
@@ -71,42 +76,10 @@
       "name": "TwilioKeyDetector"
     }
   ],
-  "filters_used": [
-    {
-      "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
-    },
-    {
-      "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
-      "min_level": 2
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_indirect_reference"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_likely_id_string"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_lock_file"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_potential_uuid"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_sequential_string"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_swagger_file"
-    },
-    {
-      "path": "detect_secrets.filters.heuristic.is_templated_secret"
-    }
-  ],
   "results": {},
-  "generated_at": "2023-03-05T20:47:08Z"
+  "version": "0.13.1+ibm.64.dss",
+  "word_list": {
+    "file": null,
+    "hash": null
+  }
 }

bash_aliases

@@ -22,7 +22,7 @@ alias findterragruntcache='find . -type d -name ".terragrunt-cache"'
 alias findterraformcache='find . -type d -name ".terraform"'
 alias clearterragruntcache='find . -type d -name ".terragrunt-cache" -prune -exec rm -rf {} \;'
 alias clearterraformcache='find . -type d -name ".terraform" -prune -exec rm -rf {} \;'
-alias clearawscreds='truncate -s 0 ~/.aws/credentials'
+alias clearawscreds='truncate -s 0 ~/.aws/credentials' # pragma: allowlist secret
 alias getkubeconfig="pulumi stack output -j k8s-controllers | jq -r '.[].iam_kubeconfig'"
 alias kdump='kubectl get all --all-namespaces'
 alias kips='kubectl get nodes -o jsonpath={.items[*].status.addresses[?\(@.type==\"InternalIP\"\)].address}'
@@ -78,7 +78,7 @@ function get_secret() {
   local service_name="${1}"
   local username="${2}"
   local password
-  password="$(keyring get "${service_name}" "${username}")"
+  password="$(keyring get "${service_name}" "${username}")" # pragma: allowlist secret
   if [[ "${#password}" -eq 0 ]]; then
     msg_error "You may need to run: keyring set ${service_name} ${username}" >&2
     return 1