diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
index b36b483..c3a7def 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yml
@@ -11,6 +11,29 @@ permissions:
   contents: read
 
 jobs:
+  detect-secrets:
+    if: "!contains(github.event.head_commit.message, '[skip ci]')"
+    name: detect-secrets
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Setup Python
+        uses: actions/setup-python@v7
+        with:
+          python-version: 3.15
+
+      - name: Install detect-secrets
+        run: |
+          pip install --upgrade "git+https://github.com/ibm/detect-secrets.git@master#egg=detect-secrets"
+
+      - name: Run detect-secrets
+        run: |
+          detect-secrets scan --update .secrets.baseline
+          detect-secrets -v audit --report --fail-on-unaudited --fail-on-live --fail-on-audited-real .secrets.baseline
+
   build:
     name: build-test (node ${{ matrix.node-version }})
     runs-on: ubuntu-latest
diff --git a/.secrets.baseline b/.secrets.baseline
index c2854ed..c9f5620 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -3,7 +3,7 @@
     "files": "package-lock.json|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2023-09-08T20:51:17Z",
+  "generated_at": "2026-10-26T16:22:33Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -80,7 +80,7 @@
         "hashed_secret": "e413e66147fbba64524c696431c0f4d22d5eea65",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 468,
+        "line_number": 576,
         "type": "Secret Keyword",
         "verified_result": null
       }
@@ -100,7 +100,7 @@
         "hashed_secret": "4711f50a26d6945585138f0b3104b2fd45f15585",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 2,
+        "line_number": 7,
         "type": "Secret Keyword",
         "verified_result": null
       }
@@ -158,7 +158,7 @@
         "hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 1011,
+        "line_number": 1010,
         "type": "Private Key",
         "verified_result": null
       }
@@ -168,7 +168,7 @@
         "hashed_secret": "5dde7ada70036e084f259d9d571d63a8123f74be",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 465,
+        "line_number": 464,
         "type": "Hex High Entropy String",
         "verified_result": null
       },
@@ -176,7 +176,7 @@
         "hashed_secret": "d734568d91468a08d988dc4b2f09ae9c120d0368",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 720,
+        "line_number": 719,
         "type": "Hex High Entropy String",
         "verified_result": null
       }
@@ -186,7 +186,7 @@
         "hashed_secret": "eaf07e046263e59dad24af9b4f5df034aa0bc10c",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 324,
+        "line_number": 323,
         "type": "Hex High Entropy String",
         "verified_result": null
       },
@@ -194,7 +194,7 @@
         "hashed_secret": "0e0185981368730440e3e7e1c2d4aac4318c8808",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 488,
+        "line_number": 487,
         "type": "Hex High Entropy String",
         "verified_result": null
       },
@@ -202,7 +202,7 @@
         "hashed_secret": "66d6a25c558abd33ace6420a8710e1c00e2d8a0e",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 741,
+        "line_number": 740,
         "type": "Hex High Entropy String",
         "verified_result": null
       }
@@ -227,12 +227,22 @@
         "verified_result": null
       }
     ],
+    "test/unit/cis/lists-api.v1.test.js": [
+      {
+        "hashed_secret": "8b925687481f5976edfc3091ec3a146a18af9736",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 683,
+        "type": "Hex High Entropy String",
+        "verified_result": null
+      }
+    ],
     "test/unit/cis/ssl-certificate-api.v1.test.js": [
       {
         "hashed_secret": "5293490d2fcdff1d7481271e4fb549ed36b75140",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 780,
+        "line_number": 923,
         "type": "Hex High Entropy String",
         "verified_result": null
       }
@@ -252,7 +262,7 @@
         "hashed_secret": "90d2eb4a47491c95ddcc59ef7bd96bd14f28a50b",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 352,
+        "line_number": 351,
         "type": "Secret Keyword",
         "verified_result": null
       }
@@ -272,7 +282,7 @@
         "hashed_secret": "c690fcc1554f0eb5b865d7f09c9ceda156df2a80",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 270,
+        "line_number": 339,
         "type": "Hex High Entropy String",
         "verified_result": null
       }
@@ -282,7 +292,7 @@
         "hashed_secret": "d67a00cdeec75b04602db35a89c15bb6ee53c877",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 747,
+        "line_number": 734,
         "type": "Hex High Entropy String",
         "verified_result": null
       }
@@ -292,7 +302,7 @@
         "hashed_secret": "d67a00cdeec75b04602db35a89c15bb6ee53c877",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 202,
+        "line_number": 274,
         "type": "Hex High Entropy String",
         "verified_result": null
       },
@@ -300,13 +310,13 @@
         "hashed_secret": "eb74ff42e2e8dfbaf3e4f64a02cdadc8bedda8c3",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 754,
+        "line_number": 957,
         "type": "Hex High Entropy String",
         "verified_result": null
       }
     ]
   },
-  "version": "0.13.1+ibm.61.dss",
+  "version": "0.13.1+ibm.64.dss",
   "word_list": {
     "file": null,
     "hash": null
diff --git a/package-lock.json b/package-lock.json
index 45ee621..6480d35 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -133,7 +133,6 @@
       "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.29.7",
         "@babel/generator": "^7.29.7",
@@ -2017,7 +2016,6 @@
       "integrity": "sha512-L7y8eYc+AwxGr2PWI4WFt1VG4TiJ66c26BD16mXpYIlXxG0SMigM1+m4aTSlYyBr5BlQsGAlz8uDCoZN4SEMcg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@octokit/auth-token": "^6.0.0",
         "@octokit/graphql": "^9.0.5",
@@ -3473,7 +3471,6 @@
       "integrity": "sha512-aTtmZjp/x3gsGHkDs04/1I8kNogBJkpQaeGaN0PfiG43NzDEmW2n+OP5im9wfsvyX0yP1UZWBrAGtDBfH9jEVw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@typescript-eslint/scope-manager": "8.71.2",
         "@typescript-eslint/types": "8.71.2",
@@ -4022,7 +4019,6 @@
       "integrity": "sha512-oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -4214,7 +4210,6 @@
       "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz",
       "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "follow-redirects": "^1.16.0",
         "form-data": "^4.0.6",
@@ -4437,7 +4432,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.11.26",
         "caniuse-lite": "^1.0.30001813",
@@ -5516,7 +5510,6 @@
       "integrity": "sha512-UohDjD4zSzEwhf58M3O7vc/ycc8O1I7dNlhtD0WxE8Px8EHNJKtUwzBqrzeGhisRuv2ag4sAYswszCJRgKXYUg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "workspaces": [
         "packages/*"
       ],
@@ -5605,7 +5598,6 @@
       "integrity": "sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "bin": {
         "eslint-config-prettier": "bin/cli.js"
       },
@@ -8498,7 +8490,6 @@
       "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@keyv/serialize": "^1.1.1"
       }
@@ -8813,7 +8804,6 @@
       "integrity": "sha512-8dD6FusOQSrpv9Z1rdNMdlSgQOIP880DHqnohobOmYLElGEqAL/JvxvuxZO16r4HtjTlfPRDC1hbvxC9dPN2nA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "bin": {
         "marked": "bin/marked.js"
       },
@@ -11098,7 +11088,6 @@
       "dev": true,
       "inBundle": true,
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=12"
       },
@@ -11768,7 +11757,6 @@
       "integrity": "sha512-skGHTH1Yb9QvaTC4hWnRTzEYtCpApF0UMBPz+t/0ZPzP8ihefo/btKd+QA7pUE0fEwA1SbS/NmhyEcstdXOIdA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "bin": {
         "prettier": "bin/prettier.cjs"
       },
@@ -12296,7 +12284,6 @@
       "integrity": "sha512-bxve7csK0/Txr++CkfrmV+X1r4jqiSOw2WsSad9E2S68R+ZfLBwDn8IceM8WfiOmKQIHgsQc1cNA8Dzg7U75pg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@semantic-release/commit-analyzer": "^13.0.1",
         "@semantic-release/error": "^4.0.0",
@@ -13722,7 +13709,6 @@
       "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
       "dev": true,
       "license": "Apache-2.0",
-      "peer": true,
       "bin": {
         "tsc": "bin/tsc",
         "tsserver": "bin/tsserver"
diff --git a/package.json b/package.json
index 4e7e0a9..0dde9a4 100644
--- a/package.json
+++ b/package.json
@@ -79,7 +79,7 @@
     "braces": "^3.0.3",
     "expect": "^30.5.0",
     "postcss-selector-parser": "^7.1.6",
-    "ip-address": "^10.7.1",
+    "ip-address": "^10.7.3",
     "brace-expansion": "^5.0.12",
     "http-cache-semantics": "^4.3.0",
     "typedoc": {