Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 4, 2023

Bumps trufflesecurity/trufflehog from 3.31.2 to 3.31.3.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.31.3

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.31.2...v3.31.3

Commits
  • 5822261 readme improvements (#1234)
  • 3932486 Add lint for exporting loop references (#1232)
  • 8f10938 forager requires direct access to gitparse.FromReader (#1233)
  • 90737fe Bump github.com/getsentry/sentry-go from 0.19.0 to 0.20.0 (#1231)
  • c8646bd Bump cloud.google.com/go/storage from 1.29.0 to 1.30.1 (#1225)
  • ab86c12 Bump github.com/googleapis/gax-go/v2 from 2.7.0 to 2.8.0 (#1227)
  • 9b941ef Bump go from 1.18 to 1.20 (#1230)
  • 12127b0 Bump google.golang.org/api from 0.109.0 to 0.114.0 (#1228)
  • 9ca53d7 Bump github.com/go-logr/logr from 1.2.3 to 1.2.4 (#1226)
  • 6052383 Bump github.com/TheZeroSlave/zapsentry from 1.14.0 to 1.15.0 (#1229)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.31.2 to 3.31.3.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml)
- [Commits](trufflesecurity/trufflehog@v3.31.2...v3.31.3)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code patch labels Apr 4, 2023
@github-actions github-actions bot enabled auto-merge April 4, 2023 03:11
@github-actions github-actions bot added the cicd label Apr 4, 2023
@github-actions
Copy link
Contributor

github-actions bot commented Apr 4, 2023

@github-advanced-security
Copy link

You have successfully added a new CodeQL configuration .github/workflows/pull-request.yml:analyze/language:javascript. As part of the setup process, we have scanned this repository and found no existing alerts. In the future, you will see all code scanning alerts on the repository Security tab.

@github-actions github-actions bot merged commit c9e6375 into main Apr 4, 2023
@github-actions github-actions bot deleted the dependabot-github_actions-trufflesecurity-trufflehog-3.31.3 branch April 4, 2023 03:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cicd dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants