Skip to content

chore(deps): update all non-major dependencies - #825

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch
Jun 16, 2026
Merged

chore(deps): update all non-major dependencies#825
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
gitleaks/gitleaks repository patch v8.30.0v8.30.1 OpenSSF Scorecard
java patch 1717.0.19+10

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

gitleaks/gitleaks (gitleaks/gitleaks)

v8.30.1

Compare Source

Changelog


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

  • Chores
    • Updated development tooling configurations to maintain security and dependency versions.

@renovate
renovate Bot enabled auto-merge (squash) June 16, 2026 01:28
@renovate
renovate Bot requested a review from yxtay as a code owner June 16, 2026 01:28
@coderabbitai

coderabbitai Bot commented Jun 16, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

Two tool version string updates: the gitleaks pre-commit hook is bumped from v8.30.0 to v8.30.1, and the Java toolchain in the mise configuration is pinned from the generic 17 to the specific 17.0.19+10.

Changes

Tool version pin updates

Layer / File(s) Summary
gitleaks hook and Java toolchain version pins
.pre-commit-config.yaml, chezmoi/private_dot_config/mise/config.toml
gitleaks hook rev updated from v8.30.0 to v8.30.1; Java toolchain version changed from unpinned 17 to 17.0.19+10.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

  • yxtay/dotfiles#813: Updates the exact same two entries — gitleaks rev and chezmoi Java toolchain pin — as this PR.
  • yxtay/dotfiles#806: Introduced the [tools] section with java = "17" in chezmoi/private_dot_config/mise/config.toml, the entry being further pinned in this PR.

Suggested labels

size/XS

Poem

🐇 A hop and a skip through the config files bright,
Gitleaks gets a patch, now pinned just right,
Java's no longer a vague seventeen,
17.0.19+10 keeps the toolchain clean,
Two tiny bumps, and the dotfiles gleam! ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately reflects the main changeset: updating two non-major dependencies (gitleaks patch and Java patch version) to their latest versions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/all-minor-patch

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions

Copy link
Copy Markdown
Contributor

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ BASH shfmt 3 0 0 0 0.01s
✅ JSON prettier 1 0 0 0 0.4s
✅ MARKDOWN markdownlint 4 0 0 0 0.52s
✅ MARKDOWN markdown-table-formatter 4 0 0 0 0.14s
✅ YAML prettier 10 0 0 0 0.41s

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters BASH_SHFMT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,YAML_PRETTIER

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

Copy link
Copy Markdown
Contributor

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ BASH bash-exec 3 0 0 0.01s
✅ BASH shellcheck 3 0 0 0.1s
✅ REPOSITORY checkov yes no no 24.48s
✅ REPOSITORY devskim yes no no 1.72s
✅ REPOSITORY dustilock yes no no 0.01s
✅ REPOSITORY gitleaks yes no no 1.37s
✅ REPOSITORY grype yes no no 54.5s
✅ REPOSITORY kingfisher yes no no 6.58s
⚠️ REPOSITORY osv-scanner yes 1 no 0.13s
✅ REPOSITORY secretlint yes no no 1.62s
✅ REPOSITORY semgrep yes no no 24.06s
✅ REPOSITORY syft yes no no 2.19s
✅ REPOSITORY trivy yes no no 12.54s
✅ REPOSITORY trivy-sbom yes no no 0.14s
✅ REPOSITORY trufflehog yes no no 5.23s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
End status: 38 dirs visited, 128 inodes visited, 0 Extract calls, 3.351052ms elapsed, 3.351243ms wall time
No package sources found, --help for usage information.

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters BASH_EXEC,BASH_SHELLCHECK,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

Copy link
Copy Markdown
Contributor

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.2s
✅ ACTION zizmor 5 0 0 0 1.12s
✅ BASH bash-exec 3 0 0 0.01s
✅ BASH shellcheck 3 0 0 0.11s
✅ BASH shfmt 3 0 0 0 0.01s
✅ COPYPASTE jscpd yes no no 0.86s
✅ EDITORCONFIG editorconfig-checker 59 0 0 0.14s
✅ JSON prettier 1 0 0 0 0.33s
✅ JSON v8r 1 0 0 1.97s
✅ MARKDOWN markdownlint 4 0 0 0 0.73s
✅ MARKDOWN markdown-table-formatter 4 0 0 0 0.21s
✅ REPOSITORY checkov yes no no 25.23s
✅ REPOSITORY gitleaks yes no no 1.59s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 55.52s
⚠️ REPOSITORY osv-scanner yes 1 no 0.11s
✅ REPOSITORY secretlint yes no no 1.32s
✅ REPOSITORY semgrep yes no no 23.76s
✅ REPOSITORY syft yes no no 1.73s
✅ REPOSITORY trivy yes no no 13.49s
✅ REPOSITORY trivy-sbom yes no no 0.15s
✅ REPOSITORY trufflehog yes no no 4.46s
✅ SPELL lychee 17 0 0 1.34s
✅ YAML prettier 10 0 0 0 0.56s
✅ YAML v8r 10 0 0 7.7s
✅ YAML yamllint 10 0 0 0.52s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
End status: 38 dirs visited, 128 inodes visited, 0 Extract calls, 5.524509ms elapsed, 5.524719ms wall time
No package sources found, --help for usage information.

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,COPYPASTE_JSCPD,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@chezmoi/private_dot_config/mise/config.toml`:
- Line 2: The Java version specification in the mise configuration file needs to
be verified for availability in your mise installation. First, run the command
`mise ls-remote java | grep 17.0.19` to confirm that version 17.0.19+10 is
indexed and available. If the version is not found in the registry, update the
java configuration value to include a vendor prefix such as temurin-17.0.19+10
to explicitly specify the OpenJDK distribution, which will ensure compatibility
and proper version resolution in your mise setup.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 97fabbac-a0cc-4ab3-910a-660e001ac8fd

📥 Commits

Reviewing files that changed from the base of the PR and between 8e39c13 and ab34da9.

📒 Files selected for processing (2)
  • .pre-commit-config.yaml
  • chezmoi/private_dot_config/mise/config.toml

Comment thread chezmoi/private_dot_config/mise/config.toml
@renovate
renovate Bot merged commit f899a53 into main Jun 16, 2026
35 checks passed
@renovate
renovate Bot deleted the renovate/all-minor-patch branch June 16, 2026 01:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant