Update secretlint monorepo to v10 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@secretlint/secretlint-rule-preset-recommend (source)	^9.3.4 -> ^10.0.0
secretlint (source)	^9.3.4 -> ^10.0.0

---

Release Notes

secretlint/secretlint (@​secretlint/secretlint-rule-preset-recommend)

v10.0.0

Compare Source

What's Changed

Breaking Changes

• 🚨 BREAKING CHANGE: Drop Node.js 18 support, add Node.js 20-22 support by @​azu in https://github.com/secretlint/secretlint/pull/1070
  • Docker Image use Node.js 22
• 🚨 BREAKING CHANGE: Make --maskSecrets the default behavior and add --no-maskSecrets flag by @​azu in https://github.com/secretlint/secretlint/pull/1068

Mask secrets in lint error message (Default behavior)

Secretlint v10+ masks secrets in lint error messages by default. This is useful to prevent accidental secret exposure in CI logs, terminal output, or when using AI agent tools.

##### Secrets are masked by default
$ secretlint "**/*"

To show actual secret values in the output, use --no-maskSecrets:

$ secretlint --no-maskSecrets "**/*"

Refactoring

• fix: use replaceAll instead of split().join() in maskWithValues by @​devin-ai-integration in https://github.com/secretlint/secretlint/pull/1066

Testing

• Add test cases for bracket character escaping in file paths by @​devin-ai-integration in https://github.com/secretlint/secretlint/pull/1056

CI

• chore(deps): update github/codeql-action action to v3.28.19 by @​renovate in https://github.com/secretlint/secretlint/pull/1062

Dependency Updates

• chore(deps): update dependency @​types/node to ^20.17.52 by @​renovate in https://github.com/secretlint/secretlint/pull/1060
• chore(deps): update dependency @​types/node to ^20.17.57 by @​renovate in https://github.com/secretlint/secretlint/pull/1061
• chore(deps): update dependency @​types/node to ^20.17.58 by @​renovate in https://github.com/secretlint/secretlint/pull/1063
• fix(deps): update minor updates (minor) by @​renovate in https://github.com/secretlint/secretlint/pull/1064
• chore(deps): update dependency @​types/node to ^20.19.0 by @​renovate in https://github.com/secretlint/secretlint/pull/1065

Other Changes

• chore(deps): update dependency bun to v1.2.15 by @​renovate in https://github.com/secretlint/secretlint/pull/1020

Full Changelog: secretlint/secretlint@v9.3.4...v10.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.