chore(deps): bump the github-actions group with 3 updates by dependabot[bot] · Pull Request #35 · happenv-com/filament-translatable

dependabot · 2026-10-15T20:13:52Z

Bumps the github-actions group with 3 updates: actions/setup-node, shivammathur/setup-php and trufflesecurity/trufflehog.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in actions/setup-node#1593

Fixed cache recommendation syntax by @SubJunk in actions/setup-node#1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in actions/setup-node#1583

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-node#1584

Pin @types/node to v24 by @v-priyagupta108 in actions/setup-node#1585

Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in actions/setup-node#1599

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-node#1598

Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in actions/setup-node#1590

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-node#1610

Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in actions/setup-node#1602

Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in actions/setup-node#1629

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-node#1616

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-node#1615

Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in actions/setup-node#1631

Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in actions/setup-node#1636

Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in actions/setup-node#1638

Update dependencies and add license files by @v-HarithaVattikuti in actions/setup-node#1642

Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-node#1635

New Contributors

@v-jitenderpalsingh made their first contribution in actions/setup-node#1580

@philip-gai made their first contribution in actions/setup-node#1584

@gperdomor made their first contribution in actions/setup-node#1421

@SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
7207c4f chore: update dependencies and add license files (#1642)
54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
0c54c7b Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
a829419 Bump @types/semver from 7.7.1 to 7.8.0 (#1616)
680d1e4 Support absolute paths in node-version-file (#1633)
db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
Additional commits viewable in compare view

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.
- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'
Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)
- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684
Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

Added support for cpx. (#1104)
- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx
Added support for Laravel Cloud CLI. (#1106)
- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud
Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits

eb7c497 Bump version to 2.40.0
7d671ba Resolve PHP formula aliases before invoking Homebrew
57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
421f97f Keep verbose tests in TypeScript
dc7811a Bump Node.js dependencies
7932293 Bump the github-actions group with 3 updates (#1130)
87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
f458a14 Remove macOS 14 from README runner listings
bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
bbf0b63 Try Brew extension installs before refreshing Homebrew
Additional commits viewable in compare view

Updates trufflesecurity/trufflehog from 3.97.9 to 3.99.2

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.99.2

What's Changed

Copy over dedupe cache size into the engine from the config by @camgunz in trufflesecurity/trufflehog#5402

Full Changelog: trufflesecurity/trufflehog@v3.99.1...v3.99.2

v3.99.1

What's Changed

Update github-actions by @renovate[bot] in trufflesecurity/trufflehog#5363

[INT-1084] Make the results deduplication cache size configurable by @camgunz in trufflesecurity/trufflehog#5399

Full Changelog: trufflesecurity/trufflehog@v3.99.0...v3.99.1

v3.99.0

What's Changed

Fix Sumo Logic detector ignoring configured verifier endpoints by @unsmith in trufflesecurity/trufflehog#5395

Add OAuth2 (ROPC) auth for verification requests by @unsmith in trufflesecurity/trufflehog#5392

Full Changelog: trufflesecurity/trufflehog@v3.98.1...v3.99.0

v3.98.1

What's Changed

Add postman source documentation by @kashifkhan0771 in trufflesecurity/trufflehog#5389

Add a TruffleHog dectector for Kong Konnect Platform by @mrwanny in trufflesecurity/trufflehog#5305

Add api_timeout_seconds to Gerrit source proto by @kashifkhan0771 in trufflesecurity/trufflehog#5394

New Contributors

@mrwanny made their first contribution in trufflesecurity/trufflehog#5305

Full Changelog: trufflesecurity/trufflehog@v3.98.0...v3.98.1

v3.98.0

What's Changed

Int 595 verify asymmetry by @shahzadhaider1 in trufflesecurity/trufflehog#5261

return error body for fetchBearerToken by @jordanTunstill in trufflesecurity/trufflehog#5301

Update module github.com/charmbracelet/bubbletea to v1.3.10 by @renovate[bot] in trufflesecurity/trufflehog#5281

Update github.com/trufflesecurity/ldap-verify digest to 3142cc9 by @renovate[bot] in trufflesecurity/trufflehog#5280

[INT-1086] Don't reuse maps; editing them afterwards edits them for all results by @camgunz in trufflesecurity/trufflehog#5351

[INT-1091] Treat Square 403 as verified on INSUFFICIENT_SCOPES by @MuneebUllahKhan222 in trufflesecurity/trufflehog#5367

feat: add --no-ignore-tag to report secrets on trufflehog:ignore lines by @thiswillnevermatch in trufflesecurity/trufflehog#5293

Fix failing TestGHCRListImages test in CI by @MuneebUllahKhan222 in trufflesecurity/trufflehog#5368

Revert duplicate --no-ignore-tag changes from #5293 by @shahzadhaider1 in trufflesecurity/trufflehog#5369

Show progress inside S3 buckets by @shahzadhaider1 in trufflesecurity/trufflehog#5330

fix(output): escape special characters in --github-actions output by @kenanyararbas in trufflesecurity/trufflehog#5353

fix(detectors): remove stray fmt.Printf in portainertoken by @Gracy769 in trufflesecurity/trufflehog#5334

resolve race condition in result deduplication cache by @kvnphvm in trufflesecurity/trufflehog#5359

added entropy filter and improved verification for gitlab v2/v3 by @jordanTunstill in trufflesecurity/trufflehog#5358

... (truncated)

Commits

e76dff8 Somehow forgot to pull the config value into the engine (#5402)
005b692 [INT-1084] Make the results deduplication cache size configurable (#5399)
f6499ff Update github-actions (#5363)
b2b0a92 Add OAuth2 (ROPC) auth for verification requests (#5392)
ab5ee07 Fix Sumo Logic detector ignoring configured verifier endpoints (#5395)
4c282f5 Add api_timeout_seconds to Gerrit source proto (#5394)
c95844e Add a TruffleHog dectector for Kong Konnect Platform (#5305)
cc79781 Add postman source documentation (#5389)
0186870 Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clien...
bb9ed13 docs: point five internal links at files that exist (#5375)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 3 updates: [actions/setup-node](https://github.com/actions/setup-node), [shivammathur/setup-php](https://github.com/shivammathur/setup-php) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `shivammathur/setup-php` from 2.37.2 to 2.40.0 - [Release notes](https://github.com/shivammathur/setup-php/releases) - [Commits](shivammathur/setup-php@f3e473d...eb7c497) Updates `trufflesecurity/trufflehog` from 3.97.9 to 3.99.2 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@4dd8831...e76dff8) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: shivammathur/setup-php dependency-version: 2.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.99.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 15, 2026

Navigation Menu

Repository navigation

chore(deps): bump the github-actions group with 3 updates - #35

chore(deps): bump the github-actions group with 3 updates#35
dependabot[bot] wants to merge 1 commit into
5.xfrom
dependabot/github_actions/github-actions-6916bb8c1f

dependabot Bot commented on behalf of github Oct 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 15, 2026

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

2.40.0

Changelog

v3.99.2

What's Changed

v3.99.1

What's Changed

v3.99.0

What's Changed

v3.98.1

What's Changed

New Contributors

v3.98.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants