chore(deps): update docker (minor) by renovate[bot] · Pull Request #126 · padok-team/git-secret-scanner

renovate · 2026-02-25T00:10:32Z

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/alpine	final	minor	`3.23.3` → `3.24.1`
docker.io/library/golang	stage	digest	`c83e68f` → `fb612b7`
docker.io/trufflesecurity/trufflehog	stage	minor	`3.93.3` → `3.95.6`

Release Notes

trufflesecurity/trufflehog (docker.io/trufflesecurity/trufflehog)

`v3.95.6`

Compare Source

What's Changed

Enigma detector enhance verification to prevent false verified findings by @shahzadhaider1 in #5011
fix: scan files with lines exceeding bufio's default 64 KB token limit by @MuneebUllahKhan222 in #5022
fix(postgres): honor ignore tags for default port URLs by @Dawn-Fighter in #4968
Move to github.com/moby/moby/client from docker/docker by @trufflesteeeve in #4987
fix: avoid terminal probes before CLI output by @Hackerchen716 in #4994
Update test containers dependency by @trufflesteeeve in #4978
Re-host pkg/handlers JSON test fixtures under the org by @amanfcp in #5023
[INS-465] Add datadogapikey detector to defaults.go by @mustansir14 in #4969
[INS-470] Add Tly detector to defaults.go, gate it behind feat flag and update its verification logic by @MuneebUllahKhan222 in #5006
[INS-473] Add wit detector to defaults.go, gate it behind feat flag and update verification logic by @MuneebUllahKhan222 in #5008
Updating Klaviyo PK new format by @breetan in #5009
Restructure Klaviyo detector pattern tests by @martinlocklear in #5026
Replace Renovate config with shared preset (high-risk tier) by @bryanbeverly in #4992
set redacted value to last 4 characters of secret, to match how the secret type admin interface displays it by @jordanTunstill in #5027
GitHub finegrained analyzer was improperly handling errors by @dustin-decker in #4498
[INS-469] Added Rev detectors to defaults.go and gated it behind feature flag by @MuneebUllahKhan222 in #5005
Fix Renovate lookup: update setup-captain version comment by @bryanbeverly in #4999
[INS-472] [INS-515] Add user detector to defaults.go, gate it behind feat flag, update verification logic and add custom ep configuration by @MuneebUllahKhan222 in #5007
Fix: Resolve known dedup issues in notifierWorker by @MuneebUllahKhan222 in #5028
fix(dropbox): prevent long sl.u. tokens from being truncated by @lukem-ts in #5012
fix: add filetype=sdist param to pypi detector by @lukem-ts in #4988
Handlers - Embed small HTTP test fixtures by @amanfcp in #5001
S3: surface bucket listing failures and fix multi-role object count by @shahzadhaider1 in #5035

New Contributors

@Dawn-Fighter made their first contribution in #4968
@Hackerchen716 made their first contribution in #4994
@breetan made their first contribution in #5009
@lukem-ts made their first contribution in #5012

Full Changelog: trufflesecurity/trufflehog@v3.95.4...v3.95.6

`v3.95.5`

Compare Source

What's Changed

[INS-461] Add test to ensure new detectors are registered in defaults.go by @mustansir14 in #4915
[INS-455] Unify common logic in Atlassian Data Center detectors by @mustansir14 in #4907
fix(github): cache repo info under original URL on redirect by @kashifkhan0771 in #4958
Added GitLab OAuth Detector by @shahzadhaider1 in #4729
Box Detector: Extract Subject ID for Analyzer Integration by @shahzadhaider1 in #4761
[INS-346] SpectralOps Personal API Key Detector by @MuneebUllahKhan222 in #4770
[INS-335] Added AWS Appsync Detector by @MuneebUllahKhan222 in #4803
fix(twilio): deduplicate matches to prevent O(N×M) result explosion by @kashifkhan0771 in #4954
Automate corpora testing in CI by @mustansir14 in #4927
Enable errcheck and staticcheck for golangci-lint v2 and resolve all issues by @amanfcp in #4924
feat: add host, db and username to ExtraData for database detectors by @mariocj89 in #4849
Remove over speculation from Corpora CI workflow by @mustansir14 in #4974
Fix line numbers for duplicate secrets within a chunk by @amanfcp in #4910
Add feature flags for Pinecone, Cloudinary, and GitLab OAuth detectors by @camgunz in #4961
Update Go security dependencies by @cursor[bot] in #4986
Pin GitHub Actions to SHA digests by @bryanbeverly in #4985
Update CODEOWNERS: replace 5 slugs with scanning + integrations by @bryanbeverly in #4983
Added source config flags to sharepoint proto by @MuneebUllahKhan222 in #4972
[SCAN-795] HTML decoder: ASPX and entity-encoded HTML support by @mustansir14 in #4981
adds some debugging info for APKs and fixes issues parsing obfuscated APKs by @johannestaas-trufflesec in #4991

New Contributors

@mariocj89 made their first contribution in #4849
@cursor[bot] made their first contribution in #4986
@johannestaas-trufflesec made their first contribution in #4991

Full Changelog: trufflesecurity/trufflehog@v3.95.3...v3.95.5

`v3.95.4`

Compare Source

What's Changed

[INS-461] Add test to ensure new detectors are registered in defaults.go by @mustansir14 in #4915
[INS-455] Unify common logic in Atlassian Data Center detectors by @mustansir14 in #4907
fix(github): cache repo info under original URL on redirect by @kashifkhan0771 in #4958
Added GitLab OAuth Detector by @shahzadhaider1 in #4729
Box Detector: Extract Subject ID for Analyzer Integration by @shahzadhaider1 in #4761
[INS-346] SpectralOps Personal API Key Detector by @MuneebUllahKhan222 in #4770
[INS-335] Added AWS Appsync Detector by @MuneebUllahKhan222 in #4803
fix(twilio): deduplicate matches to prevent O(N×M) result explosion by @kashifkhan0771 in #4954
Automate corpora testing in CI by @mustansir14 in #4927
Enable errcheck and staticcheck for golangci-lint v2 and resolve all issues by @amanfcp in #4924
feat: add host, db and username to ExtraData for database detectors by @mariocj89 in #4849
Remove over speculation from Corpora CI workflow by @mustansir14 in #4974
Fix line numbers for duplicate secrets within a chunk by @amanfcp in #4910
Add feature flags for Pinecone, Cloudinary, and GitLab OAuth detectors by @camgunz in #4961
Update Go security dependencies by @cursor[bot] in #4986
Pin GitHub Actions to SHA digests by @bryanbeverly in #4985
Update CODEOWNERS: replace 5 slugs with scanning + integrations by @bryanbeverly in #4983
Added source config flags to sharepoint proto by @MuneebUllahKhan222 in #4972
[SCAN-795] HTML decoder: ASPX and entity-encoded HTML support by @mustansir14 in #4981
adds some debugging info for APKs and fixes issues parsing obfuscated APKs by @johannestaas-trufflesec in #4991

New Contributors

@mariocj89 made their first contribution in #4849
@cursor[bot] made their first contribution in #4986
@johannestaas-trufflesec made their first contribution in #4991

Full Changelog: trufflesecurity/trufflehog@v3.95.3...v3.95.4

`v3.95.3`

Compare Source

What's Changed

Renamed AnypointOAuth2 detector's AnalysisInfo keys to make it consistent with its Analyzer by @MuneebUllahKhan222 in #4906
Rename AnalysisInfo field to SecretParts on detectors.Result by @mcastorina in #4911
Document SecretParts contract in detector-authoring docs by @mcastorina in #4912
Add a static check for detectors that don't set SecretParts by @mcastorina in #4913
Populate SecretParts on all detectors by @mcastorina in #4919
Make checksecretparts required in CI by @mcastorina in #4921
Deduplicate concurrent credential verification requests via singleflight by @kashifkhan0771 in #4314
log non-critical chunk errors at V(2).Info instead of Error by @johnelliott in #4928
[INS-320] Cloudinary detector by @MuneebUllahKhan222 in #4747
ci: bump JS actions to Node 24 majors (incl. CodeQL v4 + WIF auth v3) by @bryanbeverly in #4933
chore: bump golangci-lint-action v7 → v9 (Node 24) by @bryanbeverly in #4936
Add default Content-Type: application/json header for custom detector verification request by @MuneebUllahKhan222 in #4947
Make detector Result.SecretParts initialization stricter by @mcastorina in #4948
Add Pinecone API key detector by @dylanTruffle in #4917
adding customizable successRanges and rotatedRanges to customDetector by @jordanTunstill in #4892

Full Changelog: trufflesecurity/trufflehog@v3.95.2...v3.95.3

`v3.95.2`

Compare Source

What's Changed

Revert "[INS-397] Fix git version parser panic on non-numeric patch versions" by @trufflesteeeve in #4903

Full Changelog: trufflesecurity/trufflehog@v3.95.1...v3.95.2

`v3.95.1`

Compare Source

What's Changed

[INS-444] Fix verification logic in Mesibo detector by @mustansir14 in #4884

Full Changelog: trufflesecurity/trufflehog@v3.95.0...v3.95.1

`v3.95.0`

Compare Source

What's Changed

Upgrade golangci-lint in CI runner and Makefile by @amanfcp in #4861
Deprecate SquareUp Detector by @nabeelalam in #4855
[INS-397] Fix git version parser panic on non-numeric patch versions by @shahzadhaider1 in #4882
Fix Bitbucket line highlighting URLs by @shahzadhaider1 in #4854
[INS-403] Support Custom endpoint config in hashicorpvaultauth Detector by @MuneebUllahKhan222 in #4825
[INS-398] Added tests to ensure that custom endpoint configuration works in artifactory detectors by @MuneebUllahKhan222 in #4832
Host ldap-verify library in trufflesecurity by @trufflesteeeve in #4859
Add AnalysisError type and wrap all analyzer error paths by @johnelliott in #4779
dep-updates: Go 1.25 and dependency refreshes by @dustin-decker in #4888
Fix nil pointer panics in GitHub analyzer gist/repo binding functions by @shahzadhaider1 in #4864
[INS-399] Added Bitbucket data center(on prem) PAT detector by @MuneebUllahKhan222 in #4883
[INS-402] Add Jira Data Center PAT Detector by @mustansir14 in #4872
Add man page generation for trufflehog by @bryanbeverly in #4894
Add Confluence Data Center PAT detector by @amanfcp in #4886

Full Changelog: trufflesecurity/trufflehog@v3.94.3...v3.95.0

`v3.94.3`

Compare Source

What's Changed

Add release bot workflow by @bryanbeverly in #4835
handle AADSTS50173 as explicit revocation signal for azure refresh tokens by @jordanTunstill in #4842
Add AnalysisInfo to verified results by @hxnyk in #4862
Add nil check and error context to GitHub analyzer by @johnelliott in #4858
[CSM-1857] Fix expired Azure secrets being silently dropped by @dipto-truffle in #4845
Add HTML decoder for secret detection in HTML-formatted sources by @alafiand in #4840
Split out detector types into separate proto file in order to narrow CODEOWNERS scope by @casey-tran in #4871

New Contributors

@johnelliott made their first contribution in #4858
@dipto-truffle made their first contribution in #4845
@alafiand made their first contribution in #4840

Full Changelog: trufflesecurity/trufflehog@v3.94.2...v3.94.3

`v3.94.2`

Compare Source

What's Changed

Skip TestAPKHandler by @shahzadhaider1 in #4841
fix: replace release-guard workflow with revert-latest job by @sysread in #4838
Deprecated GoogleAPIKey Detector by @nabeelalam in #4853
todoist: replace deprecated verification endpoint by @rai1612 in #4828
Add Shopify OAuth Detector by @amanfcp in #4738
[INS-425] Updated google.golang.org/grpc v1.78.0 --> v1.79.3 by @MuneebUllahKhan222 in #4852
[INS-421] Re-enabled TestAPKHandler test and updated artifact url by @MuneebUllahKhan222 in #4856

New Contributors

@sysread made their first contribution in #4838
@rai1612 made their first contribution in #4828

Full Changelog: trufflesecurity/trufflehog@v3.94.1...v3.94.2

`v3.94.1`

Compare Source

What's Changed

use struct-based SourceMetadataFunc signature across git sources by @amanfcp in #4813

Full Changelog: trufflesecurity/trufflehog@v3.94.0...v3.94.1

`v3.94.0`

Compare Source

What's Changed

Use trContext instead of context throughout Filesystem source by @camgunz in #4804
Make naming more consistent in the Filesystem source by @camgunz in #4805
Rearrange some method parameters in the Filesystem source by @camgunz in #4806
[INS-254] Datadog detector verification fix and endpoint configuration by @MuneebUllahKhan222 in #4616
[INS-241] Datadogapikey detector by @MuneebUllahKhan222 in #4627
Analysis info now uses snake case by @MuneebUllahKhan222 in #4765
Add anypoint oauth2 detector to defaults.go by @mustansir14 in #4722
Update README formatting and CLI help output by @bryanbeverly in #4758
Add test cases for escaped unicode by @casey-tran in #4812
Confine symlink state handling to scanSymlink in Filesystem source by @camgunz in #4807
Expand tilde manually in TUI by @mcastorina in #4827

New Contributors

@bryanbeverly made their first contribution in #4758

Full Changelog: trufflesecurity/trufflehog@v3.93.8...v3.94.0

`v3.93.8`

Compare Source

What's Changed

fix: make LDAP verification context-aware by @mariduv in #4768
Stop growing filesystem resume data by @rosecodym in #4797

Full Changelog: trufflesecurity/trufflehog@v3.93.7...v3.93.8

`v3.93.7`

Compare Source

What's Changed

[INS-331] Fix the issue causing the tests file system soruce tests to fail on windows by @MuneebUllahKhan222 in #4743
Thread original chunk data through engine pipeline by @dustin-decker in #4780
Added detector for JFrog Artifactory Reference Tokens by @shahzadhaider1 in #4684
Fix JDBC detector regex truncating trailing non-alphanumeric password characters by @amanfcp in #4755

Full Changelog: trufflesecurity/trufflehog@v3.93.6...v3.93.7

`v3.93.6`

Compare Source

What's Changed

GH_TOKEN needed for gh by @bill-rich in #4772
Move verify flag into detectableChunk by @rosecodym in #4558

Full Changelog: trufflesecurity/trufflehog@v3.93.5...v3.93.6

`v3.93.5`

Compare Source

What's Changed

Add workspace_id to Slack Continuous metadata by @mariduv in #4749
fix(release): Disable docker provenance feature by @mariduv in #4752
Base64 decoding depth assessment by @dxa4481 in #4744
[INS-246] Add Google Gemini API key detector by @mustansir14 in #4649
Refactor log package by @mcastorina in #4734
[INS-309]updated google api version to v0.259.0 by @MuneebUllahKhan222 in #4736
fix(ftp): set read deadline on connection to prevent indefinite hang by @dylanTruffle in #4759
added rotation on 403s access_refused, this detector considered them indeterminate failures by @jordanTunstill in #4740
[INS-283] Support following symlinks in filesystem source by @MuneebUllahKhan222 in #4742
Fix typos in comments in json-enumerator source by @bradlarsen in #4764
Fix race condition in release process by @bill-rich in #4766

Full Changelog: trufflesecurity/trufflehog@v3.93.4...v3.93.5

`v3.93.4`

Compare Source

What's Changed

Add a new NDJSON / JSONL input source by @bradlarsen in #4721
Fix typo in CODEOWNERS for pkg/analyzer by @shahzadhaider1 in #4748
Pre-allocate anthropic analyzer bindings slice capacity with zero length by @kashifkhan0771 in #4746
Made indeterminate error for JWT detector determinate by @jordanTunstill in #4745
Optimize the regex pattern in the artifactory access token detector by @shahzadhaider1 in #4685

Full Changelog: trufflesecurity/trufflehog@v3.93.3...v3.93.4

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the renovate label Feb 25, 2026

renovate Bot requested a review from declement as a code owner February 25, 2026 00:10

renovate Bot changed the title ~~chore(deps): update docker.io/library/golang:1.26.0 docker digest to b39810f~~ chore(deps): update docker.io/library/golang:1.26.0 docker digest to b751797 Feb 25, 2026

renovate Bot force-pushed the renovate/docker branch from 11079b3 to 4fc2fd3 Compare February 25, 2026 03:48

renovate Bot changed the title ~~chore(deps): update docker.io/library/golang:1.26.0 docker digest to b751797~~ chore(deps): update docker.io/library/golang:1.26.0 docker digest to 9edf713 Feb 25, 2026

renovate Bot force-pushed the renovate/docker branch from 4fc2fd3 to 1377d1d Compare February 25, 2026 09:16

renovate Bot changed the title ~~chore(deps): update docker.io/library/golang:1.26.0 docker digest to 9edf713~~ chore(deps): update docker.io/library/golang:1.26.0 docker digest to fb612b7 Mar 3, 2026

renovate Bot force-pushed the renovate/docker branch from 1377d1d to be8ebf2 Compare March 3, 2026 06:39

renovate Bot force-pushed the renovate/docker branch from be8ebf2 to 6e13fa5 Compare March 20, 2026 18:57

renovate Bot changed the title ~~chore(deps): update docker.io/library/golang:1.26.0 docker digest to fb612b7~~ chore(deps): update docker Mar 20, 2026

renovate Bot force-pushed the renovate/docker branch 2 times, most recently from 1b69358 to 83a99de Compare April 1, 2026 15:42

renovate Bot force-pushed the renovate/docker branch from 83a99de to 34d19f0 Compare April 8, 2026 22:17

renovate Bot force-pushed the renovate/docker branch from 34d19f0 to 27c389f Compare April 22, 2026 00:32

renovate Bot force-pushed the renovate/docker branch from 27c389f to 6265aaf Compare May 11, 2026 23:01

renovate Bot force-pushed the renovate/docker branch 2 times, most recently from fadc732 to a1f2f1a Compare June 2, 2026 20:03

renovate Bot force-pushed the renovate/docker branch from a1f2f1a to 82c682a Compare June 9, 2026 21:53

renovate Bot changed the title ~~chore(deps): update docker~~ chore(deps): update docker (minor) Jun 9, 2026

renovate Bot force-pushed the renovate/docker branch 2 times, most recently from 28e379f to 072d529 Compare June 16, 2026 14:16

chore(deps): update docker

53f3fbf

renovate Bot force-pushed the renovate/docker branch from 072d529 to 53f3fbf Compare June 18, 2026 17:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update docker (minor)#126

chore(deps): update docker (minor)#126
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker

renovate Bot commented Feb 25, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Feb 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Feb 25, 2026 •

edited

Loading