Renovate: Update all non-major dependencies #48
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate-all-minor-patch"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
3.3.3-r0->3.3.6-r0v8.18.4->v8.21.33.12.4-alpine3.20->3.13.1-alpine3.205.0.0->5.1.0Note: The
pre-commitmanager in Renovate is not supported by thepre-commitmaintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
gitleaks/gitleaks (gitleaks/gitleaks)
v8.21.3Compare Source
Changelog
a9e6d8cgo mod 1.232f73a3eEnsure keywords are downcased (#1633)f696605feat: add settlemint api keys detection (#1663)0bf13fcfeat(dir): better chunking (#1665)83e99bafeat(report): allow user-defined templates (#1650)e393d29Add support for GitLab routable tokens (#1656)263ce82Add freemius secret key detection (#1611)3c0e068fix(kubernetes): only match 'kind: secret' (#1649)f3adda0feat: use STDOUT when report file not specified (#1642)ed205a5fix(dir): skip opening file&dir if allowlist matches (#1653)6018012fix: increase chunk size 10kb -> 100kb (#1652)7f77987feat: detect sentry.io tokens in the new format (#1640)48a2e0erefactor: pre-commit hooks (#1627)4e303d0fix(easypost): only detect tokens of correct length (#1628)c1add1dfeat(dir): continue on permission error (#1621)202106aAdd human readable description for curl rules (#1625)8e94f98Add option to includeLinefield in report (#1616)dbb42a7hm (great comment)2599460Update README.md8ffb980nop for stupid build4181ad6Add new jira api token pattern (#1601)48ea14bfeat: update global & generic allowlist (#1618)81f0002fix(vault-service-token): ensure that TPS contains digits (#1614)c11adc9Generate comprehensive secret samples (#1484)d1d9054fix(aws): detect token in url (#1615)5fe58bffix(rules): entropy, uppercase in samples (#1593)5c2e813feat: tweak rules (#1608)v8.21.2Compare Source
Changelog
43fae35feat(rules): create Octopus Deploy api key (#1602)a158e4ffix(aws-access-token): only match if correct length (#1584)b6e0eeefix(config): ignore jquery/swagger w/o version (#1607)722e7d8feat: add new GitLab tokens (#1560)961f2e6feat(generic-api-key): tune false positives (#1606)e734fcfCreate .gitleaks.toml (#1605)7206d6bfeat(curl): tweak tps and fps (#1603)2db25f1feat(config): ignore swagger-ui assets (#1604)e97695bfeat(generic-api-key): exclude keywords (#1587)0afb525feat(okta): bump entropy to 4 (#1599)2068870feat: update global allowlist (#1597)8cf93b9refactor(allowlist): deduplicate commits & keywords (#1596)50c2818feat(config): ignore jquery static assets (#1595)455ae0aMore rule fixes (#1586)5407c44chore: log skipped symlinks (#1591)d03d6c4feat: match left side of identifier (#1585)851c11awhat secrets?8cfa6b2fix(rules): add entropy (#1580)9152eaafeat(aws): add entropy & allowlist (#1582)93acc6efeat(rules): add 1password token (#1583)83a5724feat(config): add curl header rule (#1576)v8.21.1Compare Source
Changelog
cf5334ffeat: add curl basic auth rule (#1575)d07b394Update spelling in README.md (#1574)5c03fa4refactor(allowlist): use iota for condition (#1569)12034a7refactor(config): temporarily switch to [rules.allowlist] (#1573)v8.21.0Compare Source
Changelog
aabe381Define multiple allowlists per rule (#1496)8ea6085build: upgrade gitleaks/go-gitdiff to v0.9.1 (#1559)be9d0f8Fix rule extension (#1556)9988e52Update base config allowlist (#1555)8fb39bafeat(azure): detect Azure AD client secrets (#1199)14c924dchore: match gitleaks.toml anywhere (#1553)respect @rgmz @9999years
⚠️ Note: you may find some findings that were previously ignored if using .gitleaksignore pop up in your scans. This is due to a fix for a long standing bug where gitleaks would incorrectly report merge commit SHAs instead of the actual commit where a secret was introduced. See the following issues for more context:
v8.20.1Compare Source
Changelog
b2fbaebfeat(config): add placeholder regexes to global allowlist (#1547)00bb821feat: add PrivateAI rule (#1548)445abe3Bump golang verion used in docker build to match version specified in go.mod (#1551)1a2f656feat: add cohere rule (#1549)82d737dfeat(generate): generate global (#1546)f6e5499Feat/nuget config password rule (#1540)v8.20.0Compare Source
Changelog
bf8a49fMake private key check less greedy and include fifth dash (#1440)9c354f5print tags if they exist2278a2aDecode Base64 (#1488)c5b15c9refactor(config): keyword map (#1538)a971a32fix: use regexTarget for extend config (#1536)a0f2f46feat: bump go to 1.22 (#1537)4e8d7d3fix: handle pre-commit and staged (#1533)f8dcd83Bugfix/1352 incorrect report multiple lines (#1501)Huge huge thanks to @bplaxco for supporting b64 decoding, @recreator66 for bug fixes, and to @rgmz for his continued support of the project in the form of PRs and reviews. Thanks you!
New Feature: Decoding
Sometimes secrets are encoded in a way that can make them difficult to find
with just regex. Now you can tell gitleaks to automatically find and decode
encoded text. The flag
--max-decode-depthenables this feature (the defaultvalue "0" means the feature is disabled by default).
Recursive decoding is supported since decoded text can also contain encoded
text. The flag
--max-decode-depthsets the recursion limit. Recursion stopswhen there are no new segments of encoded text to decode, so setting a really
high max depth doesn't mean it will make that many passes. It will only make as
many as it needs to decode the text. Overall, decoding only minimally increases
scan times.
The findings for encoded text differ from normal findings in the following
ways:
include that as well
decoded:<encoding>anddecode-depth:<depth>Currently supported encodings:
base64(both standard and base64url)v8.19.3Compare Source
Changelog
ed19c4efix(config): extend allowlist & handle extend when validating (#1524)989ef19refactor(kubernetes-secret): tweak variable chars (#1520)191eb43Revert "remove validate config test temporarily" (#1529)78f7d3ffeat: create fly.io rule (#1528)7098f6dfix: to many false-positive for gltf files, add gltf suffix to allowlist (#1527)97dbe1eAdd support in .gitleaksignore file comment strings (#1425) (#1502)9e06824Restrict Etsy keywords (#1491)db78260feat(github): add entropy to rule (#1489)df126a7feat(gcp): update api key rule (#1481)75dd70efix(hashicorp): ignore common fps (#1498)8510d39fix(square): make prefix case sensitive (#1469)3698060refactor(kubernetes-secret): collapse rules and update regex (#1462)v8.19.2Compare Source
Changelog
128cd22fix(rule): comment out errant validation case (#1509)1a6d2b0remove validate config test temporarily0874ebcUpdate README.mdv8.19.1Compare Source
Changelog
9463ffafix flag access (#1506)v8.19.0Compare Source
Changelog
44ad62eDeprecatedetectandprotect. Addgit,dir,stdin(#1504) HEY THIS IS AN IMPORTANT CHANGE. If it breaks some stuff... sorry, I'll fix it asap, just open an issue and make sure to ping me. The change is meant to be backwards compatible.e93a7c0Update Harness rules to add _ and - in the account ID part. (#1503)4e43d11chore: fix gl workflow error (#1487)bd81872Make config generation utils public (#1480)3be7faaUpdate Hashicorp Vault token pattern (#1483)1aae66dfeat(config): update rule validation (#1466)6dfcf5eUpdate .gitleaksignoref361c5efix(detect): handle EOF with bytes (#1472)8a1ca9eAdded poetry.lock to default allowlist paths (#1474)525c4b4refactor(sarif): remove |name| and change |shortDescription| (#1473)c0fda43Use rule id for config validation error (#1463)d3c4b90Use first non-empty group ifsecretGroupisn't set (#1459)b4009bfchore: remove unnecessary capture groups (#1460)80bd177Return non-0 exit code fromDetectGit(#1461)0334ec1add gradle verification-metadata.xml to global allowlist (#1446)c1345e1feat(openshift): add user token (#1449)7697b3e(feat): Adding secret detection rule for Kubernetes secrets (#1454)26f3469add version to defaultbc979deAdd go.work and go.work.sum to global allowlist (#1353)b899915Add harness PAT and SAT rules (#1406)4c5195bUpdate README.mdConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
f9ec3a62a6to1b5ec719421b5ec71942toeb7edc7f70eb7edc7f70toeeb39f3ce3eeb39f3ce3to25a470b941Renovate: Update python Docker tag to v3.12.5to Renovate: Update python Docker tag to v3.12.625a470b941to3e28ea2f663e28ea2f66to927eab7824Renovate: Update python Docker tag to v3.12.6to Renovate: Update all non-major dependencies927eab7824to7d218e03f97d218e03f9to3d16ae479c3d16ae479ctoe715fe28c7e715fe28c7to14223650421422365042toff57110cd7ff57110cd7toc97f40e5e6c97f40e5e6to57b9d3ef8b57b9d3ef8bto4246982f024246982f02to10319284c610319284c6toefe4c76688efe4c76688to2b8079d6582b8079d658to0918302f070918302f07to1bb61e59551bb61e5955to8e108063c18e108063c1tobeca01125ebeca01125eto68cc4a6c2fView command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.