Skip to content

chore(deps): bump the actions group across 1 directory with 2 updates - #917

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-7cbd780897
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-7cbd780897

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: taiki-e/install-action and trufflesecurity/trufflehog.

Updates taiki-e/install-action from 2.87.24 to 2.87.26

Release notes

Sourced from taiki-e/install-action's releases.

2.87.26

  • Update tombi@latest to 1.7.2.

  • Update prek@latest to 0.5.5.

  • Update mise@latest to 2026.10.3.

  • Update kache@latest to 1.0.0.

  • Update hyperfine@latest to 1.21.0.

2.87.25

  • Update uv@latest to 0.12.23.

  • Update mise@latest to 2026.10.2.

  • Update kingfisher@latest to 2.10.0.

  • Update dprint@latest to 0.60.1.

  • Update cargo-semver-checks@latest to 0.51.0.

  • Update cargo-binstall@latest to 1.25.1.

Changelog

Sourced from taiki-e/install-action's changelog.

[2.87.26] - 2026-10-06

  • Update tombi@latest to 1.7.2.

  • Update prek@latest to 0.5.5.

  • Update mise@latest to 2026.10.3.

  • Update kache@latest to 1.0.0.

  • Update hyperfine@latest to 1.21.0.

[2.87.25] - 2026-10-05

  • Update uv@latest to 0.12.23.

  • Update mise@latest to 2026.10.2.

  • Update kingfisher@latest to 2.10.0.

  • Update dprint@latest to 0.60.1.

  • Update cargo-semver-checks@latest to 0.51.0.

  • Update cargo-binstall@latest to 1.25.1.

Commits

Updates trufflesecurity/trufflehog from 3.97.9 to 3.99.0

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.99.0

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.98.1...v3.99.0

v3.98.1

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.98.0...v3.98.1

v3.98.0

What's Changed

New Contributors

... (truncated)

Commits
  • b2b0a92 Add OAuth2 (ROPC) auth for verification requests (#5392)
  • ab5ee07 Fix Sumo Logic detector ignoring configured verifier endpoints (#5395)
  • 4c282f5 Add api_timeout_seconds to Gerrit source proto (#5394)
  • c95844e Add a TruffleHog dectector for Kong Konnect Platform (#5305)
  • cc79781 Add postman source documentation (#5389)
  • 0186870 Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clien...
  • bb9ed13 docs: point five internal links at files that exist (#5375)
  • c56f0b1 Add Jenkins source documentation (#5388)
  • 2b2c270 Fix NetSuite detector running out of memory on dense input (#5383)
  • 59e3b04 fix(github): switch back to fetching access token through apiClient, (#5380)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 8, 2026
@coderabbitai

coderabbitai Bot commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 211d2a1e-c518-4d87-ae9e-282cf29d6570

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Comment thread .github/workflows/build-gossamer-gui.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/security-policy.yml Fixed
Comment thread .github/workflows/security-policy.yml Fixed
Comment thread .github/workflows/security-policy.yml Fixed
Comment thread .github/workflows/tests.yml Fixed
Bumps the actions group with 2 updates in the / directory: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).


Updates `taiki-e/install-action` from 2.87.24 to 2.87.26
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@v2.87.24...v2.87.26)

Updates `trufflesecurity/trufflehog` from 3.97.9 to 3.99.0
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@v3.97.9...v3.99.0)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the actions group with 2 updates chore(deps): bump the actions group across 1 directory with 2 updates Oct 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-7cbd780897 branch from 7aaf021 to 51ae28a Compare October 9, 2026 21:44

- name: Install just
uses: taiki-e/install-action@v2.87.24
uses: taiki-e/install-action@v2.87.26
Comment thread .github/workflows/ci.yml

- name: Install cargo-llvm-cov
uses: taiki-e/install-action@v2.87.24
uses: taiki-e/install-action@v2.87.26

- name: Install cargo-deny
uses: taiki-e/install-action@v2.87.24
uses: taiki-e/install-action@v2.87.26

- name: Gate A — verified credentials fail the gate
uses: trufflesecurity/trufflehog@v3.97.9
uses: trufflesecurity/trufflehog@v3.99.0

- name: Gate B — private keys fail the gate even when unverified
uses: trufflesecurity/trufflehog@v3.97.9
uses: trufflesecurity/trufflehog@v3.99.0

- name: Install cargo-llvm-cov
uses: taiki-e/install-action@v2.87.24
uses: taiki-e/install-action@v2.87.26

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant