Repository navigation
chore(deps): bump trufflesecurity/trufflehog from 3.92.4 to 3.99.3 - #75
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.92.4 to 3.99.3. - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@v3.92.4...v3.99.3) --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.99.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
 |
|
Overall Grade |
Security Reliability Complexity Hygiene |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| Code coverage |  |
Oct 22, 2026 3:34a.m. | Review ↗ |
| Secrets |  |
Oct 22, 2026 3:04a.m. | Review ↗ |
| JavaScript | |
Oct 22, 2026 3:04a.m. | Review ↗ |
Important
AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.
|
Superseded by #76. |
Bumps trufflesecurity/trufflehog from 3.92.4 to 3.99.3.
Release notes
Sourced from trufflesecurity/trufflehog's releases.
... (truncated)
Commits
e63326dgithub: name the missing permission when a comment listing is refused (#5438)048de9fUpdate module google.golang.org/grpc to v1.83.2 [SECURITY] (#5431)31d7303Add per-logger debug level override for source logging (#5432)feea7f9Add SonarQube Server token detector (#5419)27d8ea2fix(github): use a single "app client registry" to make sure we reuse client ...b40e7fe[INT-1051] Fix GitHub comment scans stopping early on large repositories (#5405)9e93a20Update module google.golang.org/grpc to v1.83.1 [SECURITY] (#5426)4b56723Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [S...37a6f6eReplace deprecated google.CredentialsFromJSON with CredentialsFromJSONWithTyp...6404b63Update module filippo.io/edwards25519 to v1.1.1 [SECURITY] (#5421)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)