chore(deps): update all non-major dependencies #436

renovate · 2025-09-08T03:23:31Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v4.3.0` -> `v4.3.1`
trufflesecurity/trufflehog	action	minor	`v3.90.5` -> `v3.91.2`

Release Notes

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

What's Changed

Remove gh-actions approval workflows in favor of new repo setting by @j2fw in #4525
Scan all images under a namespace for Docker remote registries by @kashifkhan0771 in #4514
Added .msg and .doc to skipArchiverMimeTypes by @jordanTunstill in #4544
Fix Github Wiki Page Links by @mustansir14 in #4538
Added tests for new .msg and .doc file types to skipArchiverMimeTypes by @jordanTunstill in #4546
Shadow context when enumerating GitHub by @rosecodym in #4549

Full Changelog: trufflesecurity/trufflehog@v3.90.13...v3.91.0

`v3.90.13`

Compare Source

What's Changed

Require product eng approval for PRs by @dustin-decker in #4478
pr approval workflow: use pull_request_target by @j2fw in #4522
Switch to an outside action for pr approval by @j2fw in #4523
pr-approval-check: use separate workflow to check approvals by @j2fw in #4530
test multi-workflow pr approval check by @j2fw in #4531
Implemented Graphql requests for Github PR's, Issues and comments scanning by @kashifkhan0771 in #4431
chore: fix feature support to append user agent suffix by @dmdhrumilmistry in #4520
Updated GDrive proto to support On-Prem Scanning by @kashifkhan0771 in #4539
Track chunk size by source type by @rosecodym in #4543

New Contributors

@dmdhrumilmistry made their first contribution in #4520

Full Changelog: trufflesecurity/trufflehog@v3.90.12...v3.90.13

`v3.90.12`

Compare Source

What's Changed

Updated Docker source with new test cases and README by @kashifkhan0771 in #4481
Comment out broken CircleCI integration test by @trufflesteeeve in #4505
Fix "skipping binary file" logging to show actual file name by @mariduv in #4509
Refactored circleci source test cases by @kashifkhan0771 in #4506
added ability to run github-experimental against private repos by @joeleonjr in #4508
explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @jordanTunstill in #4507
Remove include repos by @jordanTunstill in #4469
Remove depaware by @rosecodym in #4515

Full Changelog: trufflesecurity/trufflehog@v3.90.11...v3.90.12

`v3.90.11`

Compare Source

What's Changed

bump rardecode by @rosecodym in #4503

Full Changelog: trufflesecurity/trufflehog@v3.90.10...v3.90.11

`v3.90.10`

Compare Source

What's Changed

Local Git Config Sanitization by @joeleonjr in #4502

Full Changelog: trufflesecurity/trufflehog@v3.90.9...v3.90.10

`v3.90.9`

Compare Source

What's Changed

Return non-zero exit code if an error occurs during a scan. by @mplzik in #4476
Fix: SonarCloud Verification Logic by @shahzadhaider1 in #4482
Clarify what 'unknown' means by @dustin-decker in #4477
Proto update to support scanning confluence comments by @mustansir14 in #4484
Fix SSH schema error executing git clone by @shahzadhaider1 in #4488
Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @mustansir14 in #4480
Add support for Account API Token verification in Postmark Detector by @mustansir14 in #4495
refactor: use b.Loop() to simplify the code and improve performance by @dulanting in #4497
Fix wrong line number in private key detector (#4485) by @kmgv in #4486
Reduce GitHub V1 Detector False Positives by @shahzadhaider1 in #4494
Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @dependabot[bot] in #4501

New Contributors

@mplzik made their first contribution in #4476
@mustansir14 made their first contribution in #4484
@dulanting made their first contribution in #4497
@kmgv made their first contribution in #4486

Full Changelog: trufflesecurity/trufflehog@v3.90.8...v3.90.9

`v3.90.8`

Compare Source

What's Changed

Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @trufflesteeeve in #4468

Full Changelog: trufflesecurity/trufflehog@v3.90.7...v3.90.8

`v3.90.7`

Compare Source

What's Changed

Fix nondeterminism in custom detectors by @bradlarsen in #4446
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4433
fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @renovate[bot] in #4455
fix(deps): update module google.golang.org/protobuf to v1.36.9 by @renovate[bot] in #4456
fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @renovate[bot] in #4457
[Feature] Fixed And Updated FlightLabs API Detector by @nabeelalam in #4393
Revert "Improved and fixed copper detector (#4394)" by @camgunz in #4470
Add metrics to SaneHTTPClient by @amanfcp in #4471

Full Changelog: trufflesecurity/trufflehog@v3.90.6...v3.90.7

`v3.90.6`

Compare Source

What's Changed

Added support for indeterminate verification for letter Q detectors by @patidartanay in #4398
[Detector] rippling detector for phrase api tokens by @SyedAliHamad in #4348
Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @casey-tran in #4403
[Feature] Updated Dotmailer Detector To Dotdigital by @nabeelalam in #4331
Add support for AWS account allow and deny lists by @dustin-decker in #4407
Enable cloning repository to a specified location with retention option by @kashifkhan0771 in #4408
fix(deps): update module google.golang.org/protobuf to v1.36.8 by @renovate[bot] in #4397
fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @renovate[bot] in #4412
added flyio detector by @lonmarsDev in #2381
Added a dedicated optional flag to ignore gists during scan by @kashifkhan0771 in #4423
Fix git tests if run with global commit.gpgsign=true by @mariduv in #4415
Recover logger if wrapped by a non-logging context implementation by @mcastorina in #4406
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4422
fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @renovate[bot] in #4424
[GitHub] Add a GraphQL client to the connector by @rgmz in #3837
Added support for additional validation rules in custom detector by @kashifkhan0771 in #4413
Ignore known common prefix matches for Github V1 detector by @kashifkhan0771 in #4379
Fix error propagation and a typo in verification logic by @bradlarsen in #4427
[Feature] Added Detector for the Photoroom API by @nabeelalam in #4414
Scan Github Private Repositories With Token by @kashifkhan0771 in #4426
fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @renovate[bot] in #4425
fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @renovate[bot] in #4396
Fix legacy json flag for Github and Gitlab private repos by @shahzadhaider1 in #4386
Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @jordanTunstill in #4430
pkg: fix some typos in comment by @vetclippy in #4440
Added feature flag to configure projects per page in gitlab enumeration by @kashifkhan0771 in #4437

New Contributors

@patidartanay made their first contribution in #4398
@bradlarsen made their first contribution in #4427
@vetclippy made their first contribution in #4440

Full Changelog: trufflesecurity/trufflehog@v3.90.5...v3.90.6

Configuration

📅 Schedule: Branch creation - "before 5am on monday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-09-08T03:30:51Z

Visit the preview URL for this PR (updated for commit 1f824f2):

https://zksync-docs-staging-5eb09--pr436-renovate-all-minor-p-d38tcvyk.web.app

_{(expires Tue, 09 Dec 2025 15:56:06 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: bfaafba5fa82d4f63473aaa76a21fabf1fbb3a11}

renovate bot requested a review from a team as a code owner September 8, 2025 03:23

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from bb9a6af to 7716d2f Compare September 15, 2025 14:43

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.90.6~~ chore(deps): update trufflesecurity/trufflehog action to v3.90.8 Sep 18, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f9be0e8 to 9093d44 Compare September 22, 2025 17:01

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 153b5eb to c1a65e4 Compare October 3, 2025 19:03

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 7166a4a to 8d5a5a4 Compare October 15, 2025 19:36

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.90.8~~ chore(deps): update trufflesecurity/trufflehog action to v3.90.10 Oct 15, 2025

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.90.10~~ chore(deps): update trufflesecurity/trufflehog action to v3.90.11 Oct 15, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 0142d6d to 08009ec Compare October 22, 2025 18:50

renovate bot force-pushed the renovate/all-minor-patch branch from 08009ec to 5e168a7 Compare October 27, 2025 16:55

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.90.11~~ chore(deps): update trufflesecurity/trufflehog action to v3.90.12 Oct 28, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from da36f93 to ecb9fee Compare October 29, 2025 09:59

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from a85227f to ede3215 Compare November 4, 2025 11:27

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.90.12~~ chore(deps): update trufflesecurity/trufflehog action to v3.90.13 Nov 5, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from c2836bb to e02364b Compare November 6, 2025 16:29

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.90.13~~ chore(deps): update trufflesecurity/trufflehog action to v3.91.0 Nov 12, 2025

renovate bot force-pushed the renovate/all-minor-patch branch from e02364b to 93c1b02 Compare November 12, 2025 23:13

renovate bot changed the title ~~chore(deps): update trufflesecurity/trufflehog action to v3.91.0~~ chore(deps): update all non-major dependencies Nov 18, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 580ae83 to 76a18ee Compare November 20, 2025 18:51

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3549042 to be20ab2 Compare November 27, 2025 00:35

chore(deps): update all non-major dependencies

1f824f2

renovate bot force-pushed the renovate/all-minor-patch branch from be20ab2 to 1f824f2 Compare December 2, 2025 15:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #436

chore(deps): update all non-major dependencies #436

Uh oh!

renovate bot commented Sep 8, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Sep 8, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): update all non-major dependencies #436

Are you sure you want to change the base?

chore(deps): update all non-major dependencies #436

Uh oh!

Conversation

renovate bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

github-actions bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Sep 8, 2025 •

edited

Loading

github-actions bot commented Sep 8, 2025 •

edited

Loading