[brunoagatao]

Bumps @secretlint/core and @secretlint/secretlint-rule-preset-recommend together to 13.0.5.

Both packages are used only by Kilo session-export scrubbing, and they must share a major version. This replaces the preset-only Dependabot PR #14562, which would have left core on 10.x.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​secretlint/​core@​13.0.5
	npm/​@​secretlint/​secretlint-rule-preset-recommend@​13.0.5

View full report

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

This PR is a mechanical dependency bump: @secretlint/core and @secretlint/secretlint-rule-preset-recommend are moved from 10.2.2 to 13.0.5 in packages/opencode/package.json, with the matching bun.lock updates. Both packages are only consumed by the session-export scrubber (packages/opencode/src/kilocode/session-export/worker/scrub.ts), and no other package declares them.

I verified the resolved dependency graph is internally consistent:

• @secretlint/core@13.0.5 resolves its pinned @secretlint/profiler and @secretlint/types to 13.0.5 at top level, and debug is satisfied by the existing top-level debug@4.4.3.
• The 10.2.2 consumers (@secretlint/node, config-loader, formatter, source-creator, the secretlint CLI, and @vscode/vsce) correctly receive nested 10.2.2 copies rather than a broken mixed major, so the dev-only toolchain is unaffected.

The real lintSource/creator code path is exercised by packages/opencode/test/kilocode/session-export/worker/scrub.test.ts, so any API incompatibility would surface in CI. No changeset is expected here (prior dependency bumps in this repo, e.g. #14562, shipped without one), and the PR description explains the "must share a major version" rationale clearly.

Files Reviewed (2 files)

• bun.lock
• packages/opencode/package.json

---

_{Reviewed by deepseek-v4.1-flash · Input: 0 · Output: 0 · Cached: 0}

_{Review guidance: REVIEW.md from base branch main}