From abbf04c82d8a46078b41056e3220a13d45cdb59f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 20:46:45 +0000 Subject: [PATCH] chore(deps): bump the all-minor-patch group across 1 directory with 2 updates Bumps the all-minor-patch group with 2 updates in the / directory: [google/osv-scanner-action](https://github.com/google/osv-scanner-action) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `google/osv-scanner-action` from 2.3.8 to 2.5.0 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0) Updates `trufflesecurity/trufflehog` from 3.95.5 to 3.96.0 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.95.5...v3.96.0) --- updated-dependencies: - dependency-name: google/osv-scanner-action dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-minor-patch - dependency-name: trufflesecurity/trufflehog dependency-version: 3.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/code-qa.yml | 2 +- .github/workflows/security-scheduled.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/code-qa.yml b/.github/workflows/code-qa.yml index 257f263..eed881e 100644 --- a/.github/workflows/code-qa.yml +++ b/.github/workflows/code-qa.yml @@ -210,7 +210,7 @@ jobs: contents: read steps: - uses: actions/checkout@v6 - - uses: google/osv-scanner-action/osv-scanner-action@v2.3.8 + - uses: google/osv-scanner-action/osv-scanner-action@v2.5.0 with: scan-args: |- --lockfile=pnpm-lock.yaml diff --git a/.github/workflows/security-scheduled.yml b/.github/workflows/security-scheduled.yml index d9f0a41..c50941e 100644 --- a/.github/workflows/security-scheduled.yml +++ b/.github/workflows/security-scheduled.yml @@ -23,7 +23,7 @@ jobs: - uses: actions/checkout@v6 with: fetch-depth: 0 - - uses: trufflesecurity/trufflehog@v3.95.5 + - uses: trufflesecurity/trufflehog@v3.96.0 with: path: ./ base: ""