Warn your team and tell them to re-clone the repo (to avoid old secrets locally).?

Example:

You pushed .env with a production API key. Even after deletion, it’s still in the Git history —

so you must clean and rotate keys right away.