chore(deps): update dependencies

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.2.2 -> v4.3.0
trufflesecurity/trufflehog	action	minor	v3.89.0 -> v3.90.8

---

Release Notes

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in https://github.com/actions/checkout/pull/1971
• Add internal repos for checking out multiple repositories by @​mouismail in https://github.com/actions/checkout/pull/1977
• Documentation update - add recommended permissions to Readme by @​benwells in https://github.com/actions/checkout/pull/2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in https://github.com/actions/checkout/pull/2044
• Update README.md by @​nebuk89 in https://github.com/actions/checkout/pull/2194
• Update CODEOWNERS for actions by @​TingluoHuang in https://github.com/actions/checkout/pull/2224
• Update package dependencies by @​salmanmkc in https://github.com/actions/checkout/pull/2236
• Prepare release v4.3.0 by @​salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

• @​motss made their first contribution in https://github.com/actions/checkout/pull/1971
• @​mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
• @​benwells made their first contribution in https://github.com/actions/checkout/pull/2043
• @​nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
• @​salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.90.8

Compare Source

What's Changed

• Pre-filter GitHub v1 findings to prevent large numbers of validation requests by @​trufflesteeeve in #​4468

Full Changelog: trufflesecurity/trufflehog@v3.90.7...v3.90.8

v3.90.7

Compare Source

What's Changed

• Fix nondeterminism in custom detectors by @​bradlarsen in #​4446
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4433
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 by @​renovate[bot] in #​4455
• fix(deps): update module google.golang.org/protobuf to v1.36.9 by @​renovate[bot] in #​4456
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 by @​renovate[bot] in #​4457
• [Feature] Fixed And Updated FlightLabs API Detector by @​nabeelalam in #​4393
• Revert "Improved and fixed copper detector (#​4394)" by @​camgunz in #​4470
• Add metrics to SaneHTTPClient by @​amanfcp in #​4471

Full Changelog: trufflesecurity/trufflehog@v3.90.6...v3.90.7

v3.90.6

Compare Source

What's Changed

• Added support for indeterminate verification for letter Q detectors by @​patidartanay in #​4398
• [Detector] rippling detector for phrase api tokens by @​SyedAliHamad in #​4348
• Added explicit secrets manager write flag to Bitbucket source proto and generate new files by @​casey-tran in #​4403
• [Feature] Updated Dotmailer Detector To Dotdigital by @​nabeelalam in #​4331
• Add support for AWS account allow and deny lists by @​dustin-decker in #​4407
• Enable cloning repository to a specified location with retention option by @​kashifkhan0771 in #​4408
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @​renovate[bot] in #​4397
• fix(deps): update module cloud.google.com/go/storage to v1.56.1 by @​renovate[bot] in #​4412
• added flyio detector by @​lonmarsDev in #​2381
• Added a dedicated optional flag to ignore gists during scan by @​kashifkhan0771 in #​4423
• Fix git tests if run with global commit.gpgsign=true by @​mariduv in #​4415
• Recover logger if wrapped by a non-logging context implementation by @​mcastorina in #​4406
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4422
• fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.10 by @​renovate[bot] in #​4424
• [GitHub] Add a GraphQL client to the connector by @​rgmz in #​3837
• Added support for additional validation rules in custom detector by @​kashifkhan0771 in #​4413
• Ignore known common prefix matches for Github V1 detector by @​kashifkhan0771 in #​4379
• Fix error propagation and a typo in verification logic by @​bradlarsen in #​4427
• [Feature] Added Detector for the Photoroom API by @​nabeelalam in #​4414
• Scan Github Private Repositories With Token by @​kashifkhan0771 in #​4426
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.5.1 by @​renovate[bot] in #​4425
• fix(deps): update module github.com/jedib0t/go-pretty/v6 to v6.6.8 by @​renovate[bot] in #​4396
• Fix legacy json flag for Github and Gitlab private repos by @​shahzadhaider1 in #​4386
• Changes to fix Enterprise UI filtering of Github Hosted Scanner Repositories to Include by @​jordanTunstill in #​4430
• pkg: fix some typos in comment by @​vetclippy in #​4440
• Added feature flag to configure projects per page in gitlab enumeration by @​kashifkhan0771 in #​4437

New Contributors

• @​patidartanay made their first contribution in #​4398
• @​bradlarsen made their first contribution in #​4427
• @​vetclippy made their first contribution in #​4440

Full Changelog: trufflesecurity/trufflehog@v3.90.5...v3.90.6

v3.90.5

Compare Source

What's Changed

• Fixed and improved currentsapi detector by @​kashifkhan0771 in #​4391
• Improved and fixed copper detector by @​kashifkhan0771 in #​4394
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.16.0 by @​renovate[bot] in #​4342
• fix(deps): update module github.com/sendgrid/sendgrid-go to v3.16.1+incompatible by @​renovate[bot] in #​4232
• Utf16 bom support by @​joeleonjr in #​4326
• Add additional unicode escape support by @​jltrfl in #​4296
• Update PreCommit.md with audit mode details by @​joeleonjr in #​4280
• Update proto definitions for custom bitbucket oauth by @​casey-tran in #​4390

New Contributors

• @​jltrfl made their first contribution in #​4296

Full Changelog: trufflesecurity/trufflehog@v3.90.4...v3.90.5

v3.90.4

Compare Source

What's Changed

• Disabled besnappy detector by @​kashifkhan0771 in #​4363
• Expanded test coverage for binary content by @​kashifkhan0771 in #​4332
• Fixed syslog source panic on invalid or chunked input by @​kashifkhan0771 in #​4366
• Improve Bitfinex Detector - Implemented API-Based Secret Validation by @​shahzadhaider1 in #​4368
• [SCAN-81] Report ChunkUnit Panics by @​mariduv in #​4367
• Oss 133 new detector vault approle auth for hashicorp by @​SyedAliHamad in #​4362
• fix(deps): update module github.com/charmbracelet/glamour to v0.10.0 by @​renovate[bot] in #​4345
• Add private key id to GCP metadata by @​dustin-decker in #​4361
• fixed minor grammatical and punctuation issues by @​shahzadhaider1 in #​4369
• Refactored caflou detector by @​kashifkhan0771 in #​4372
• Add option to skip binary files during filesystem source scanning by @​dustin-decker in #​4376
• Improved and fixed couchbase detector by @​kashifkhan0771 in #​4383
• Fixed and improved Clickhelp detector by @​kashifkhan0771 in #​4384
• Fix error-wrapping for callback in common.RecoverWithHandler by @​mariduv in #​4380
• Fixed gitlab detector by @​kashifkhan0771 in #​4371
• [Feature] Fixed And Updated Fibery Detecor by @​nabeelalam in #​4385
• added User to proto by @​jordanTunstill in #​4378

New Contributors

• @​mariduv made their first contribution in #​4367

Full Changelog: trufflesecurity/trufflehog@v3.90.3...v3.90.4

v3.90.3

Compare Source

What's Changed

• Refactored Gitlab Detectors by @​kashifkhan0771 in #​4323
• Support sub-unit resumption in filesystem scans by @​mcastorina in #​4325
• Arranged the detectors in alphabetical order by @​shahzadhaider1 in #​4335
• fix(deps): update module cloud.google.com/go/storage to v1.56.0 by @​renovate[bot] in #​4311
• (fix) Git Repo Cloning Error by @​abmussani in #​4223
• chore(deps): update sigstore/cosign-installer action to v3.9.2 by @​renovate[bot] in #​4337
• fix(deps): update module cloud.google.com/go/secretmanager to v1.15.0 by @​renovate[bot] in #​4310
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4338
• fix(deps): update module github.com/couchbase/gocb/v2 to v2.10.1 by @​renovate[bot] in #​4340
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.3 by @​renovate[bot] in #​4341
• fix(deps): update module github.com/aws/smithy-go to v1.22.5 by @​renovate[bot] in #​4339
• chore: updated defaults.go references in documentation for adding new detectors by @​Jeff-Rowell in #​4344
• fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.3.0 by @​renovate[bot] in #​4343
• feat: add webexbot support by @​jonathongardner in #​4322
• Regenerate protobufs with the correct protoc (etc) version by @​camgunz in #​4349
• fix GCS test by @​dustin-decker in #​4350
• [Detector]-Detector for tableau personal access token by @​SyedAliHamad in #​4261
• Scan GitLab Groups by @​shahzadhaider1 in #​4320
• Fixed Aha detector by @​kashifkhan0771 in #​4354
• Updated Github V1 detector to ignore matches with known common prefixes by @​kashifkhan0771 in #​4329
• fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] by @​renovate[bot] in #​4355
• removed duplicate detector entries from engine defaults by @​shahzadhaider1 in #​4357
• Missed Smartsheet Tokens by @​shahzadhaider1 in #​4358
• Do not quit TUI, if 'q' is pressed on specific pages by @​kashifkhan0771 in #​4356
• Improve LarkSuite Detector Accuracy and Error Handling by @​shahzadhaider1 in #​4334
• [detector] feat: added rootly detector by @​sahil9001 in #​3414
• Improved and fixed A&B detectors pattern test cases by @​kashifkhan0771 in #​4359
• Restore link field in Slack Continuous Source protobuf message by @​camgunz in #​4360
• fix: fixed verification endpoint and verification logic for brand fetch by @​sahil9001 in #​3470

New Contributors

• @​Jeff-Rowell made their first contribution in #​4344
• @​jonathongardner made their first contribution in #​4322

Full Changelog: trufflesecurity/trufflehog@v3.90.2...v3.90.3

v3.90.2

Compare Source

What's Changed

• Added Anypoint API OAuth2 Detector by @​nabeelalam in #​4312
• Updated and Fixed CircleCI Source by @​kashifkhan0771 in #​4309
• Add additional Vector configuration options by @​dustin-decker in #​4301
• Removed stored logger from HuggingFace source by @​kashifkhan0771 in #​4328
• Suppress AWS SDK checksum skip warnings for S3 by @​peterfraedrich in #​4324
• Add slack continuous protobuf messages by @​camgunz in #​4330
• [Update] Dovico Detector Updated by @​nabeelalam in #​4290

New Contributors

• @​peterfraedrich made their first contribution in #​4324

Full Changelog: trufflesecurity/trufflehog@v3.90.1...v3.90.2

v3.90.1

Compare Source

What's Changed

• Added KeySet Pagination for Gitlab Projects V2 Enumeration by @​kashifkhan0771 in #​4319
• Salesforce Refresh Token Detector by @​shahzadhaider1 in #​4295

Full Changelog: trufflesecurity/trufflehog@v3.90.0...v3.90.1

v3.90.0

Compare Source

What's Changed

• chore: fix comment by @​largemouth in #​4239
• Fixed jira detector invalid domain issue by @​kashifkhan0771 in #​4250
• Added LangSmith API Key detector by @​kashifkhan0771 in #​4251
• Gitparse test: Decreased MaxDiffSize in gitparse TestMaxDiffSize() function by @​nabeelalam in #​4240
• Updated GoDaddy Detector by @​kashifkhan0771 in #​4258
• Bannerbear Detector V2 by @​shahzadhaider1 in #​4222
• Surface errors when Github source cannot fetch repo or gist by @​kashifkhan0771 in #​4259
• Move default detectors ownership to OSS by @​rosecodym in #​4257
• Added Shannon Entropy Check in Gitlab v1 detector by @​kashifkhan0771 in #​4260
• Feat: bitbucket app by @​x-stp in #​4214
• fix: throws error if dir not found by @​sahil9001 in #​3419
• (fix) Flaky BoxOAuth detector test by @​abmussani in #​4199
• Enabled and Enhanced Artifactory Detector by @​kashifkhan0771 in #​4207
• Fix TestChunkUnit by @​shahzadhaider1 in #​4263
• Disable s3 filter test by @​rosecodym in #​4262
• feat [detector]: added hasura detector by @​sahil9001 in #​3427
• Handle no such host errors for Algolia Detector by @​kashifkhan0771 in #​4264
• [Update] Coinbase API Detector Updated by @​nabeelalam in #​4202
• Added SQL Server error code and message to verification error by @​kashifkhan0771 in #​4267
• Fixed and Improved billomat detector by @​kashifkhan0771 in #​4268
• Allow users to exit the TUI when there are extra args by @​mcastorina in #​4274
• Updated ExchangeRate Detector by @​kashifkhan0771 in #​4278
• Deprecated AirTable API Key detector by @​kashifkhan0771 in #​4266
• [chore] Write --help to stdout by @​mcastorina in #​4277
• Salesforce OAuth2 Detector by @​shahzadhaider1 in #​4252
• [Update] Added Missing Indeterminate Verification Errors In Detectors Starting With Letter "A" by @​nabeelalam in #​4256
• Updated Lokalise Detector by @​kashifkhan0771 in #​4279
• updating oss documentation to explain info provided here: CSM-1118 by @​jordanTunstill in #​4271
• RoninApp Rebranded to Clientary by @​kashifkhan0771 in #​4272
• [Update] Dwolla Detector Updated by @​nabeelalam in #​4282
• Added support for scanning images from the docker daemon by @​saghaulor in #​4276
• Revert "Added support for scanning images from the docker daemon" by @​rosecodym in #​4291
• Fixed Gist URL Detection by @​kashifkhan0771 in #​4284
• chore: fix some minor issues in the comments by @​shangchenglumetro in #​4292
• Updated Detectors Proto by @​kashifkhan0771 in #​4294
• [perf] - Optimize Chunk Size Handling for Improved I/O and Memory Efficiency by @​ahrav in #​3134
• fix(deps): update module github.com/charmbracelet/bubbletea to v1.3.6 by @​renovate[bot] in #​4227
• fix(deps): update module github.com/google/go-containerregistry to v0.20.6 by @​renovate[bot] in #​4230
• chore(deps): update dependency go to v1.24.5 by @​renovate[bot] in #​4298
• Simplified Gitlab Enumeration by @​kashifkhan0771 in #​4283
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​4299
• fix(deps): update github.com/avast/apkparser digest to d53391f by @​renovate[bot] in #​4297
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.8 by @​renovate[bot] in #​4302
• fix(deps): update module github.com/xo/dburl to v0.23.8 by @​renovate[bot] in #​4303
• fix(deps): update module go.mongodb.org/mongo-driver to v1.17.4 by @​renovate[bot] in #​4304
• fix(deps): update module go.uber.org/mock to v0.5.2 by @​renovate[bot] in #​4305
• chore(deps): update alpine docker tag to v3.22 by @​renovate[bot] in #​4307
• chore(deps): update sigstore/cosign-installer action to v3.9.1 by @​renovate[bot] in #​4308
• add detection for updated asana personal access token by @​SyedAliHamad in #​4273
• Added v2 for CircleCI Detector by @​kashifkhan0771 in #​4300
• Add field for conditional permission binding by @​bill-rich in #​4316
• Add support for docker daemon as a source by @​saghaulor in #​4306

New Contributors

• @​largemouth made their first contribution in #​4239
• @​x-stp made their first contribution in #​4214
• @​saghaulor made their first contribution in #​4276
• @​SyedAliHamad made their first contribution in #​4273

Full Changelog: trufflesecurity/trufflehog@v3.89.2...v3.90.0

v3.89.2

Compare Source

What's Changed

• Analyzer/datadog by @​amanfcp in #​4132
• (fix) validation to ensure only one of --org or --repo is provided for Github source by @​abmussani in #​4141
• addition of percent encoding for raw brackets CSM-1195 by @​jordanTunstill in #​4221
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate in #​4213
• fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.14.0 by @​renovate in #​4025
• fix(deps): update github.com/avast/apkparser digest to 166ba17 by @​renovate in #​4119
• fix(deps): update module github.com/go-logr/logr to v1.4.3 by @​renovate in #​4228
• fix(deps): update module github.com/googleapis/gax-go/v2 to v2.14.2 by @​renovate in #​4231
• Log recursion limiting by @​camgunz in #​4236
• Add git metrics for cloning and scanning by @​dustin-decker in #​4234
• [bugfix] - Refactor Jenkins Log Chunking to Use HandleFile by @​ahrav in #​4225

Full Changelog: trufflesecurity/trufflehog@v3.89.1...v3.89.2

v3.89.1

Compare Source

What's Changed

• feat(docker): implement exclude paths functionality by @​tannerjones4075 in #​4057
• chore(deps): update dependency go to v1.24.4 by @​renovate in #​4136
• chore(deps): update sigstore/cosign-installer action to v3.8.2 by @​renovate in #​4212
• Update ngrok.go detector to handle 403s properly by @​thiggy1342 in #​4216

New Contributors

• @​tannerjones4075 made their first contribution in #​4057
• @​thiggy1342 made their first contribution in #​4216

Full Changelog: trufflesecurity/trufflehog@v3.89.0...v3.89.1

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.