Fixed
- Pass the repository's
.gitleaks.tomlto gitleaks with--configso allowlists and custom rules are honored instead of silently ignored (gitleaks only auto-discovers the config when--sourceis a directory, but qlty scans one file per invocation). Also add.gitleaksignoreto the plugin's cache key so edits to it invalidate cached results, and drop the unrecognized.gitleaks.configconfig file name (#2919) - Parse
noteas a level inqlty.tomltriage and ignore config.level_from_strpreviously returnedLevel::Unspecifiedfornote, so[[triage]] set.level = "note"left issues with no level, andmatch.levels = ["note"](and[[ignore]] levels = ["note"]) failed to match note-level issues (#2922)