This means just removing a secret from the next commit does not remove the credential from the repo.
We recommend treating every credential committed in public as a compromised credential and rotating it as soon as possible.
Read more about removing a commit from your git history.