------------ CONVERTERS -------------------- */\r\n@@ -81,8 +82,8 @@ const exportVaultToSpecifiedLocation = async (vault: Vault, rawExportPath: strin\n errorOnExist: false, // overwrite by default\r\n force: true, // overwrite read-only files if needed\r\n filter: (srcPath) => {\r\n- // Skip .obsidian folder\r\n- return path.basename(srcPath) !== \".obsidian\";\r\n+ // Skip . files like .obsidian or .git\r\n+ return !isUnixHiddenPath(path.basename(srcPath));\r\n },\r\n });\r\n \r\n","securityAnnotations":[]},{"path":"src/utils.ts","hunks":"@@ -12,4 +12,17 @@ export function isHomePageSelectedAndValid(plugin: GitLabWikiConverterPlugin): b\n \t} else {\n \t\treturn false;\n \t}\n-}\n\\ No newline at end of file\n+}\n+\n+// Source - https://stackoverflow.com/a\n+// Posted by Shamasis Bhattacharya, modified by community. See post 'Timeline' for change history\n+// Retrieved 2025-11-09, License - CC BY-SA 3.0\n+\n+/**\n+ * Checks whether a path starts with or contains a hidden file or a folder.\n+ * @param {string} source - The path of the file that needs to be validated.\n+ * returns {boolean} - `true` if the source is blacklisted and otherwise `false`.\n+ */\n+export function isUnixHiddenPath (path: string): boolean {\n+ return (/(^|\\/)\\.[^\\/\\.]/g).test(path);\n+};\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.2.2","initialDiffTo":"1.2.3","summary":"This plugin reads all files in your Obsidian vault and reformats them to be compatible with GitLab Wiki syntax, then exports the converted content to a local directory you specify. It accesses your entire vault file system without filtering, meaning every note is scanned for conversion. There is no network activity—the plugin performs all operations locally and does not communicate with GitLab or any external service. The security posture depends entirely on file system permissions for the export directory, as all vault content becomes accessible in the export location.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":"<3.14.2","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRange":"<3.14.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://githu

Gitlab Wiki Exporter