chore(deps): Update github-actions by renovate[bot] · Pull Request #5 · arillso/.github

renovate · 2026-03-08T18:15:42Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout (changelog)	action	digest	`8e8c483` → `de0fac2`
actions/setup-go (changelog)	action	digest	`4dc6199` → `4b73464`
actions/setup-python (changelog)	action	digest	`83679a8` → `a309ff8`
aquasecurity/trivy-action	action	minor	`0.33.1` → `0.35.0`
docker/build-push-action (changelog)	action	digest	`4f58ea7` → `10e90e3`
docker/setup-buildx-action (changelog)	action	digest	`70df71c` → `8d2750c`
github/codeql-action (changelog)	action	digest	`5d4e8d1` → `0d579ff`
reviewdog/action-actionlint (changelog)	action	digest	`83e4ed2` → `0d952c5`
reviewdog/action-shellcheck (changelog)	action	digest	`ccaafec` → `4c07458`
trufflesecurity/trufflehog	action	minor	`v3.87.2` → `v3.93.7`

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

`v0.35.0`

Compare Source

What's Changed

chore(deps): Update trivy to v0.69.3 by @aqua-bot in #519

Full Changelog: aquasecurity/trivy-action@0.34.2...0.35.0

`v0.34.2`

Compare Source

What's Changed

feat: add YAML support for trivyignores by @nikpivkin in #508
chore: bump default Trivy version to v0.69.2 by @nick-the-nuke in #513
chore: bump Trivy version to v0.69.2 in test workflow and README by @DmitriyLewen in #515

New Contributors

@nick-the-nuke made their first contribution in #513

Full Changelog: aquasecurity/trivy-action@0.34.1...0.34.2

`v0.34.1`

Compare Source

What's Changed

ci(test): add zizmor security linter for GitHub Actions by @DmitriyLewen in #502

Full Changelog: aquasecurity/trivy-action@0.34.0...0.34.1

`v0.34.0`

Compare Source

What's Changed

ci: use setup-bats in bump-trivy workflow by @nikpivkin in #494
chore: update README by @nikpivkin in #493
ci: install trivy in bump-trivy workflow and update tests by @nikpivkin in #495
chore(deps): Update trivy to v0.68.1 by @aqua-bot in #496
ci: use checks bundle v2 in sync workflow by @nikpivkin in #505
chore(deps): Update trivy to v0.69.1 by @aqua-bot in #506

Full Changelog: aquasecurity/trivy-action@0.33.1...0.34.0

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

`v3.93.7`

Compare Source

What's Changed

[INS-331] Fix the issue causing the tests file system soruce tests to fail on windows by @MuneebUllahKhan222 in #4743
Thread original chunk data through engine pipeline by @dustin-decker in #4780
Added detector for JFrog Artifactory Reference Tokens by @shahzadhaider1 in #4684
Fix JDBC detector regex truncating trailing non-alphanumeric password characters by @amanfcp in #4755

Full Changelog: trufflesecurity/trufflehog@v3.93.6...v3.93.7

`v3.93.6`

Compare Source

What's Changed

GH_TOKEN needed for gh by @bill-rich in #4772
Move verify flag into detectableChunk by @rosecodym in #4558

Full Changelog: trufflesecurity/trufflehog@v3.93.5...v3.93.6

`v3.93.5`

Compare Source

What's Changed

Add workspace_id to Slack Continuous metadata by @mariduv in #4749
fix(release): Disable docker provenance feature by @mariduv in #4752
Base64 decoding depth assessment by @dxa4481 in #4744
[INS-246] Add Google Gemini API key detector by @mustansir14 in #4649
Refactor log package by @mcastorina in #4734
[INS-309]updated google api version to v0.259.0 by @MuneebUllahKhan222 in #4736
fix(ftp): set read deadline on connection to prevent indefinite hang by @dylanTruffle in #4759
added rotation on 403s access_refused, this detector considered them indeterminate failures by @jordanTunstill in #4740
[INS-283] Support following symlinks in filesystem source by @MuneebUllahKhan222 in #4742
Fix typos in comments in json-enumerator source by @bradlarsen in #4764
Fix race condition in release process by @bill-rich in #4766

Full Changelog: trufflesecurity/trufflehog@v3.93.4...v3.93.5

`v3.93.4`

Compare Source

What's Changed

Add a new NDJSON / JSONL input source by @bradlarsen in #4721
Fix typo in CODEOWNERS for pkg/analyzer by @shahzadhaider1 in #4748
Pre-allocate anthropic analyzer bindings slice capacity with zero length by @kashifkhan0771 in #4746
Made indeterminate error for JWT detector determinate by @jordanTunstill in #4745
Optimize the regex pattern in the artifactory access token detector by @shahzadhaider1 in #4685

Full Changelog: trufflesecurity/trufflehog@v3.93.3...v3.93.4

`v3.93.3`

Compare Source

What's Changed

OpenAI Admin Key Detector by @amanfcp in #4689

Full Changelog: trufflesecurity/trufflehog@v3.93.2...v3.93.3

`v3.93.2`

Compare Source

What's Changed

Fix pre-receive hook hangs and missing logs by flushing logs on signal and using CommandContext for git commands by @jordanTunstill in #4714
[INS-285] Fix custom detectors line number reporting to match the full regex instead of capture group by @mustansir14 in #4697

Full Changelog: trufflesecurity/trufflehog@v3.93.1...v3.93.2

`v3.93.1`

Compare Source

What's Changed

Enhance security reporting guidelines in SECURITY.md by @joeleonjr in #4725
Allow logging of caller info by @rosecodym in #4731

Full Changelog: trufflesecurity/trufflehog@v3.93.0...v3.93.1

`v3.93.0`

Compare Source

What's Changed

Remove ResultWithMetadata.Data by @rosecodym in #4659
Add tests for processResult by @rosecodym in #4674
Switch out default HTTP client use in detectors by @bradlarsen in #4670
[INS-202] Add rate limiting to the Github Analyzer by @mustansir14 in #4617
Fix/issue 4578 path normalization for unix and windows by @Rusted2361 in #4614
Auto-configure TruffleHog for Pre-commit Hooks by @kashifkhan0771 in #4666
Include key info for analyze by @bill-rich in #4686
fix: typos in comments by @NAM-MAN in #4676
Stop using detectableChunk in processResult by @rosecodym in #4691
fix(github): preserve trailing hyphens in repository names by @PascalThuet in #4695
Skip failing Git Engine test by @mustansir14 in #4701
[INS-281] Github Bug fix: UnitErr and UnitOK called for the same repo by @mustansir14 in #4681
[INS-258] Revert includeRepos removal from GitHub source by @mustansir14 in #4673
Re-enable Git Engine Test by @shahzadhaider1 in #4715
Add some false positive tests by @rosecodym in #4703
Unify false positive/overlap tests by @rosecodym in #4699
Unify some false positive logic by @rosecodym in #4720
[INS-249] Updated Gitlab client from v0.129.0 to v1.12.0(latest) by @MuneebUllahKhan222 in #4655
[INS-307] Added unspecified(0.0.0.0) check to DetectorHttpClientWithNoLocalAddresses by @MuneebUllahKhan222 in #4726
Added Analysis info to tableau detector by @MuneebUllahKhan222 in #4717
Remove first-class verification overlap tracker by @rosecodym in #4723
[INS-280] Fix Github "repostories" filter does not respect GHES endpoint by @mustansir14 in #4677
[INS-228] Add ignorePattern configuration support to Postgres and Sqlserver detectors by @mustansir14 in #4612

New Contributors

@Rusted2361 made their first contribution in #4614
@NAM-MAN made their first contribution in #4676
@PascalThuet made their first contribution in #4695

Full Changelog: trufflesecurity/trufflehog@v3.92.5...v3.93.0

`v3.92.5`

Compare Source

What's Changed

[INS-206] Store Gitlab Project ID in secret location metadata by @mustansir14 in #4601
[INS-242] Add more validations to Custom Detector config by @mustansir14 in #4642
Fix syslog test failing due to hardcoded timestamp by @MuneebUllahKhan222 in #4646
[INS-120] Increase code coverage for Postman's source scanItem function by @MuneebUllahKhan222 in #4648
[INS-232] Fix S3 Source "panic: runtime error: index out of range" bug by @mustansir14 in #4610
[INS-170] Unify JDBC URL Parsing Across Detector and Analyzer (Continued) by @mustansir14 in #4606
Add exponential backoff retry logic in Twilio detector by @shahzadhaider1 in #4652
Fix typo in help description for Postman API metric by @shahzadhaider1 in #4656
Rework JWT detector to better block local IPs by @bradlarsen in #4607
Gitlab Source: Backoff from Scan2 which is experimental to legacy pagination API call by @kashifkhan0771 in #4608
fix: git commit date parsing for non-English locales by @GLEF1X in #4653
fix: report accurate line numbers for chunked file scanning (#1876) by @GLEF1X in #4615
Add Postman API monthly request limit metric by @shahzadhaider1 in #4667
[INS-243] Fix jdbc detector detecting incomplete connection string and fixed invalid… by @MuneebUllahKhan222 in #4636

New Contributors

@GLEF1X made their first contribution in #4653

Full Changelog: trufflesecurity/trufflehog@v3.92.4...v3.92.5

`v3.92.4`

Compare Source

What's Changed

[INS-170] Unify JDBC URL parsing across detectors and analyzers by @mustansir14 in #4574
Pagination and Rate-Limit Handling In Docker Registry Namespace API Calls by @nabeelalam in #4557
[INS-226] Use pinned image for Quay registry Integration test by @mustansir14 in #4602
Update module golang.org/x/crypto to v0.45.0 [SECURITY] by @renovate[bot] in #4562
[INS-207] Add Role-Aware Resumption Support for Legacy S3 Scan by @MuneebUllahKhan222 in #4600
Enable line numbers for GitHub Real-time by @rosecodym in #4611

Full Changelog: trufflesecurity/trufflehog@v3.92.3...v3.92.4

`v3.92.3`

Compare Source

What's Changed

Add proto definitions for Google Drive Domain-Wide Delegation (DWD) by @shahzadhaider1 in #4596
Fix git clone timeout typo by @rosecodym in #4599
Update Azure Repos link format by @amanfcp in #4598

Full Changelog: trufflesecurity/trufflehog@v3.92.2...v3.92.3

`v3.92.2`

Compare Source

What's Changed

[INS-37] Fixed the issue of ftp connection ignoring the detector's co… by @MuneebUllahKhan222 in #4590
Add optional git clone timeout by @rosecodym in #4597

New Contributors

@MuneebUllahKhan222 made their first contribution in #4590

Full Changelog: trufflesecurity/trufflehog@v3.92.1...v3.92.2

`v3.92.1`

Compare Source

What's Changed

Improve Copper Detector verification with stricter status code and email matching by @amanfcp in #4594

Full Changelog: trufflesecurity/trufflehog@v3.92.0...v3.92.1

`v3.92.0`

Compare Source

What's Changed

Added API Call Metrics to Docker Source by @nabeelalam in #4552
Added Additional Metrics and Job ID in the Docker Source by @nabeelalam in #4547
[Fix] Updated the failing Docker Source Quay Registry Test by @nabeelalam in #4580
Add Gitlab V3 Detector by @mustansir14 in #4563
Add Metrics to RetryableHTTPClient by @mustansir14 in #4545
[INS-104] Support units in S3 source by @mustansir14 in #4560
[INS-204] Abort Postman scan if monthly API request limit crosses 80% by @mustansir14 in #4586
Create way to add key-value pairs to new sinks by @rosecodym in #4582
Skip flaky test by @rosecodym in #4595
Add more clone logging by @rosecodym in #4593
Apply configured include/ignore lists to GitLab unit scans by @rosecodym in #4592

Full Changelog: trufflesecurity/trufflehog@v3.91.2...v3.92.0

`v3.91.2`

Compare Source

What's Changed

Make Integrations team codeown source integrations by @rosecodym in #4561
Fix custom regex link in readme.md by @jmcshannon in #4568
Add some engine tests around the Verify flag by @rosecodym in #4566
Addition of Installation Type field in Jira Source Proto [INS-79] by @shahzadhaider1 in #4564
[INS-131] Add response id and response name to Postman metadata by @mustansir14 in #4555
Make Integrations (shared) codeowners of proto/ by @rosecodym in #4576

New Contributors

@jmcshannon made their first contribution in #4568

Full Changelog: trufflesecurity/trufflehog@v3.91.1...v3.91.2

`v3.91.1`

Compare Source

`v3.91.0`

Compare Source

What's Changed

Remove gh-actions approval workflows in favor of new repo setting by @j2fw in #4525
Scan all images under a namespace for Docker remote registries by @kashifkhan0771 in #4514
Added .msg and .doc to skipArchiverMimeTypes by @jordanTunstill in #4544
Fix Github Wiki Page Links by @mustansir14 in #4538
Added tests for new .msg and .doc file types to skipArchiverMimeTypes by @jordanTunstill in #4546
Shadow context when enumerating GitHub by @rosecodym in #4549

Full Changelog: trufflesecurity/trufflehog@v3.90.13...v3.91.0

`v3.90.13`

Compare Source

What's Changed

Require product eng approval for PRs by @dustin-decker in #4478
pr approval workflow: use pull_request_target by @j2fw in #4522
Switch to an outside action for pr approval by @j2fw in #4523
pr-approval-check: use separate workflow to check approvals by @j2fw in #4530
test multi-workflow pr approval check by @j2fw in #4531
Implemented Graphql requests for Github PR's, Issues and comments scanning by @kashifkhan0771 in #4431
chore: fix feature support to append user agent suffix by @dmdhrumilmistry in #4520
Updated GDrive proto to support On-Prem Scanning by @kashifkhan0771 in #4539
Track chunk size by source type by @rosecodym in #4543

New Contributors

@dmdhrumilmistry made their first contribution in #4520

Full Changelog: trufflesecurity/trufflehog@v3.90.12...v3.90.13

`v3.90.12`

Compare Source

What's Changed

Updated Docker source with new test cases and README by @kashifkhan0771 in #4481
Comment out broken CircleCI integration test by @trufflesteeeve in #4505
Fix "skipping binary file" logging to show actual file name by @mariduv in #4509
Refactored circleci source test cases by @kashifkhan0771 in #4506
added ability to run github-experimental against private repos by @joeleonjr in #4508
explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @jordanTunstill in #4507
Remove include repos by @jordanTunstill in #4469
Remove depaware by @rosecodym in #4515

Full Changelog: trufflesecurity/trufflehog@v3.90.11...v3.90.12

`v3.90.11`

Compare Source

What's Changed

bump rardecode by @rosecodym in #4503

Full Changelog: trufflesecurity/trufflehog@v3.90.10...v3.90.11

`v3.90.10`

Compare Source

What's Changed

Local Git Config Sanitization by @joeleonjr in #4502

Full Changelog: trufflesecurity/trufflehog@v3.90.9...v3.90.10

`v3.90.9`

Compare Source

What's Changed

Return non-zero exit code if an error occurs during a scan. by @mplzik in #4476
Fix: SonarCloud Verification Logic by @shahzadhaider1 in #4482
Clarify what 'unknown' means by @dustin-decker in #4477
Proto update to support scanning confluence comments by @mustansir14 in #4484
Fix SSH schema error executing git clone by @shahzadhaider1 in #4488
Detect Organization ID to pass into AnalysisInfo for Atlassian Detector by @mustansir14 in #4480
Add support for Account API Token verification in Postmark Detector by @mustansir14 in #4495
refactor: use b.Loop() to simplify the code and improve performance by @dulanting in #4497
Fix wrong line number in private key detector (#4485) by @kmgv in #4486
Reduce GitHub V1 Detector False Positives by @shahzadhaider1 in #4494
Bump github.com/nwaples/rardecode/v2 from 2.0.0-beta.4.0.20241112120701-034e449c6e78 to 2.2.0 by @dependabot[bot] in #4501

New Contributors

@mplzik made their first contribution in #4476
@mustansir14 made their first contribution in #4484
@dulanting made their first contribution in #4497
@kmgv made their first contribution in #4486

Full Changelog: trufflesecurity/trufflehog@v3.90.8...v3.90.9

`v3.90.8`

Compare Source

What's Changed

Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @trufflesteeeve in #4468

Full Changelog: trufflesecurity/trufflehog@v3.90.7...v3.90.8

`v3.90.7`

Compare Source

What's Changed

Fix nondeterminism in custom detectors by @bradlarsen in #4446
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4433
fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @renovate[bot] in #4455
fix(deps): update module google.golang.org/protobuf to v1.36.9 by @renovate[bot] in #4456
fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @renovate[bot] in #4457
[Feature] Fixed And Updated FlightLabs API Detector by @nabeelalam in #4393
Revert "Improved and fixed copper detector (#4394)" by @camgunz in #4470
Add metrics to SaneHTTPClient by @amanfcp in #4471

Full Changelog: trufflesecurity/trufflehog@v3.90.6...v3.90.7

`v3.90.6`

Compare Source

What's Changed

Added support for indeterminate verification for letter Q detectors by @patidartanay in #4398
[Detector] rippling detector for phrase api tokens by @SyedAliHamad in #4348
Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @casey-tran in #4403
[Feature] Updated Dotmailer Detector To Dotdigital by @nabeelalam in #4331
Add support for AWS account allow and deny lists by @dustin-decker in #4407
Enable cloning repository to a specified location with retention option by @kashifkhan0771 in #4408
fix(deps): update module google.golang.org/protobuf to v1.36.8 by @renovate[bot] in #4397
fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @renovate[bot] in #4412
added flyio detector by @lonmarsDev in #2381
Added a dedicated optional flag to ignore gists during scan by @kashifkhan0771 in #4423
Fix git tests if run with global commit.gpgsign=true by @mariduv in #4415
Recover logger if wrapped by a non-logging context implementation by @mcastorina in #4406
fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in #4422
fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @renovate[bot] in #4424
[GitHub] Add a GraphQL client to the connector by @rgmz in #3837
Added support for additional validation rules in custom detector by @kashifkhan0771 in #4413
Ignore known common prefix matches for Github V1 detector by @kashifkhan0771 in #4379
Fix error propagation and a typo in verification logic by @bradlarsen in #4427
[Feature] Added Detector for the Photoroom API by @nabeelalam in #4414
Scan Github Private Repositories With Token by @kashifkhan0771 in #4426
fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @renovate[bot] in #4425
fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @renovate[bot] in #4396
Fix legacy json flag for Github and Gitlab private repos by @shahzadhaider1 in #4386
Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @jordanTunstill in #4430
pkg: fix some typos in comment by @vetclippy in #4440
Added feature flag to configure projects per page in gitlab enumeration by @kashifkhan0771 in #4437

New Contributors

@patidartanay made their first contribution in #4398
@bradlarsen made their first contribution in #4427
@vetclippy made their first contribution in #4440

Full Changelog: trufflesecurity/trufflehog@v3.90.5...v3.90.6

`v3.90.5`

Compare Source

What's Changed

Fixed and improved currentsapi detector by @kashifkhan0771 in #4391
Improved and fixed copper detector by @kashifkhan0771 in #4394
fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 by @renovate[bot] in #4342
fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible by @renovate[bot] in #4232
Utf16 bom support by @joeleonjr in #4326
Add additional unicode escape support by @jltrfl in #4296
Update PreCommit.md with audit mode details by @joeleonjr in #4280
Update proto definitions for custom bitbucket oauth by @casey-tran in #4390

New Contributors

@jltrfl made their first contribution in #4296

Full Changelog: trufflesecurity/trufflehog@v3.90.4...v3.90.5

`v3.90.4`

Compare Source

What's Changed

Disabled besnappy detector by @kashifkhan0771 in #4363
Expanded test coverage for binary content by @kashifkhan0771 in #4332
Fixed syslog source panic on invalid or chunked input by @kashifkhan0771 in #4366
Improve Bitfinex Detector - Implemented API-Based Secret Validation by @shahzadhaider1 in #4368
[SCAN-81] Report ChunkUnit Panics by @mariduv in #4367
Oss 133 new detector vault approle auth for hashicorp by @SyedAliHamad in #4362
fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 by @renovate[bot] in #4345
Add private key id to GCP metadata by @dustin-decker in #4361
fixed minor grammatical and punctuation issues by @shahzadhaider1 in #4369
Refactored caflou detector by @kashifkhan0771 in #4372
Add option to skip binary files during filesystem source scanning by @dustin-decker in #4376
Improved and fixed couchbase detector by @kashifkhan0771 in #4383
Fixed and improved Clickhelp detector by @kashifkhan0771 in #4384
Fix error-wrapping for callback in common.RecoverWithHandler by @mariduv in #4380
Fixed gitlab detector by @kashifkhan0771 in #4371
[Feature] Fixed And Updated Fibery Detecor by @nabeelalam in #4385
added User to proto by @jordanTunstill in #4378

New Contributors

@mariduv made their first contribution in #4367

Full Changelog: trufflesecurity/trufflehog@v3.90.3...v3.90.4

`v3.90.3`

Compare Source

What's Changed

Refactored Gitlab Detectors by @kashifkhan0771 in #4323
Support sub-unit resumption in filesystem scans by [@mcastorina](https

Configuration

📅 Schedule: Branch creation - "before 6am on Monday" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot requested a review from sbaerlocher as a code owner March 8, 2026 18:15

renovate bot added the dependencies label Mar 8, 2026

renovate bot assigned sbaerlocher Mar 8, 2026

chore(deps): Update github-actions

754d95a

renovate bot force-pushed the renovate/github-actions branch from 5b67562 to 754d95a Compare March 8, 2026 18:17

sbaerlocher approved these changes Mar 8, 2026

View reviewed changes

sbaerlocher merged commit 3fcc50c into main Mar 8, 2026
1 check was pending

renovate bot deleted the renovate/github-actions branch March 8, 2026 18:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Update github-actions#5

chore(deps): Update github-actions#5
sbaerlocher merged 1 commit intomainfrom
renovate/github-actions

renovate bot commented Mar 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Mar 8, 2026

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant