Skip to content

ci(deps): bump the all-actions group with 2 updates - #1005

Merged
alienx5499 merged 1 commit into
mainfrom
dependabot/github_actions/main/all-actions-8214197655
Sep 1, 2026
Merged

ci(deps): bump the all-actions group with 2 updates#1005
alienx5499 merged 1 commit into
mainfrom
dependabot/github_actions/main/all-actions-8214197655

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-actions group with 2 updates: trufflesecurity/trufflehog and crate-ci/typos.

Updates trufflesecurity/trufflehog from 3.95.9 to 3.97.1

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.97.1

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.97.0...v3.97.1

v3.97.0

What's Changed

... (truncated)

Commits
  • 20652fb Carry GitHub App installation ID on repo units (#5215)
  • 3ab759f Refine SECURITY.md (#5216)
  • 2cdb97d [SCAN-101] s3 source accept persisted unit envelopes in UnmarshalSourceUnit (...
  • 4ec7749 preallocate bindings capacity in dockerhub and groq, with unit tests (#5213)
  • 9610306 Doubled timeout, as MongoDB secrets are repeatedly hitting this and failing t...
  • 9d3f5d1 [SCAN-1020] neon scram pgx (#5217)
  • 925c1d0 fix(detectors/docker): don't greedy match in keyPat (#5214)
  • e12da3c docs: add generic config-secret custom detector example (#5195)
  • bcbcab2 Fix GHEC with Data Residency (*.ghe.com) base URL (#4777)
  • bc3a3ae Update module github.com/go-git/go-git/v5 to v5.19.2 [SECURITY] (#5196)
  • Additional commits viewable in compare view

Updates crate-ci/typos from 1.48.0 to 1.50.0

Release notes

Sourced from crate-ci/typos's releases.

v1.50.0

[1.50.0] - 2026-08-28

Features

v1.49.1

[1.49.1] - 2026-08-27

Fixes

  • Don't correct the brand name HashiCorp

v1.49.0

[1.49.0] - 2026-08-03

Features

  • Updated the dictionary with the July 2026 changes
Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.50.0] - 2026-08-28

Features

[1.49.1] - 2026-08-27

Fixes

  • Don't correct the brand name HashiCorp

[1.49.0] - 2026-08-03

Features

  • Updated the dictionary with the July 2026 changes

[1.48.0] - 2026-06-30

Features

  • Updated the dictionary with the June 2026 changes

[1.47.2] - 2026-06-04

Fixes

  • Don't correct inferrable
  • Correct unused inferible variant

[1.47.1] - 2026-06-03

Fixes

  • Don't correct requestors

[1.47.0] - 2026-05-29

Features

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-actions group with 2 updates: [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) and [crate-ci/typos](https://github.com/crate-ci/typos).


Updates `trufflesecurity/trufflehog` from 3.95.9 to 3.97.1
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@27b0417...20652fb)

Updates `crate-ci/typos` from 1.48.0 to 1.50.0
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@bee27e3...4d9c206)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.97.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: crate-ci/typos
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Sep 1, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
sortvision Ready Ready Preview Sep 1, 2026 10:25am UTC

@alienx5499
alienx5499 merged commit 4058217 into main Sep 1, 2026
11 of 12 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/main/all-actions-8214197655 branch September 1, 2026 10:24
@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

QA suite report

Metric Value
Total tests 655
Passed 655
Failed 0
Warnings 0
Pass rate 100.0%
Grade S+
Duration 3.68s

Result: passed.

View workflow run

QA vs main (last successful CI on base branch)

Baseline: last green Continuous integration on main @ b113d1d (same test:ci suite).

Base This PR Δ passed
Passed 655 655 0
Failed 0 0
Total 655 655

Fixed (failed on base, passing on this PR)

None

New failures (failed on this PR; were not failing on base)

None

Still failing (failed on base and still failing on this PR)

None

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

Dependabot auto-merge

Auto-merge is enabled (squash). GitHub will merge this PR once all required checks and reviews pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant