From e3b9a63d0275148159702892161ab352ee5cde00 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Nov 2026 23:59:25 +0000 Subject: [PATCH] chore(deps): Bump the actions group with 2 updates Bumps the actions group with 2 updates: [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) and [hyperpolymath/smtp-notify-action](https://github.com/hyperpolymath/smtp-notify-action). Updates `trufflesecurity/trufflehog` from 3.99.4 to 3.99.7 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.99.4...v3.99.7) Updates `hyperpolymath/smtp-notify-action` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/hyperpolymath/smtp-notify-action/releases) - [Changelog](https://github.com/hyperpolymath/smtp-notify-action/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/hyperpolymath/smtp-notify-action/compare/v0.5.0...v0.5.1) --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.99.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: hyperpolymath/smtp-notify-action dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 16 ++++++++-------- .github/workflows/comprehensive-quality.yml | 2 +- .github/workflows/push-email-notify.yml | 2 +- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 950b17c..db63ef8 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -23,7 +23,7 @@ workflows: - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370' '.github/workflows/comprehensive-quality.yml': - 'actions/checkout@v7.0.1' - - 'trufflesecurity/trufflehog@v3.99.4' + - 'trufflesecurity/trufflehog@v3.99.7' '.github/workflows/governance.yml': [] '.github/workflows/hypatia-scan.yml': [] '.github/workflows/label-triage.yml': [] @@ -37,7 +37,7 @@ workflows: '.github/workflows/proofs.yml': - 'actions/checkout@v7.0.1' '.github/workflows/push-email-notify.yml': - - 'hyperpolymath/smtp-notify-action@v0.5.0' + - 'hyperpolymath/smtp-notify-action@v0.5.1' '.github/workflows/release.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' @@ -139,9 +139,9 @@ dependencies: commit: 'sha1-0f8e8c99d88aeb3fbfd523f1ef2c6f762d10d64d' owner_id: 75048950 repo_id: 623796603 - 'hyperpolymath/smtp-notify-action@v0.5.0': - ref: 'v0.5.0' - commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' + 'hyperpolymath/smtp-notify-action@v0.5.1': + ref: 'v0.5.1' + commit: 'sha1-e384daf6167a7a7567642d6a62060106244d2413' owner_id: 6759885 repo_id: 1352485172 'softprops/action-gh-release@v3.0.3': @@ -149,8 +149,8 @@ dependencies: commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' owner_id: 2242 repo_id: 204253808 - 'trufflesecurity/trufflehog@v3.99.4': - ref: 'v3.99.4' - commit: 'sha1-c85580b712841eda4c53bc28fc6ace6100e8c16c' + 'trufflesecurity/trufflehog@v3.99.7': + ref: 'v3.99.7' + commit: 'sha1-31ce31ee1abbcc7dc8eee5764c17121c3044c8b2' owner_id: 79229934 repo_id: 77726177 diff --git a/.github/workflows/comprehensive-quality.yml b/.github/workflows/comprehensive-quality.yml index f0b6411..f66179f 100644 --- a/.github/workflows/comprehensive-quality.yml +++ b/.github/workflows/comprehensive-quality.yml @@ -40,7 +40,7 @@ jobs: steps: - uses: actions/checkout@v7.0.1 - name: Secret scanning - uses: trufflesecurity/trufflehog@v3.99.4 + uses: trufflesecurity/trufflehog@v3.99.7 continue-on-error: true - name: Dependency vulnerabilities run: | diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index 3cd69a5..b846a76 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -41,7 +41,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@v0.5.0 + uses: hyperpolymath/smtp-notify-action@v0.5.1 with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }}