Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
dawidd6/action-send-mail	action	major	v17 → v18
trufflesecurity/trufflehog	action	patch	v3.95.6 → v3.95.9

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

dawidd6/action-send-mail (dawidd6/action-send-mail)

v18

Compare Source

What's Changed

• build(deps): bump brace-expansion from 5.0.5 to 5.0.6 by @​dependabot[bot] in #​291
• build(deps): bump nodemailer from 8.0.7 to 8.0.8 by @​dependabot[bot] in #​292
• build(deps): bump nodemailer from 8.0.8 to 8.0.9 by @​dependabot[bot] in #​293
• build(deps): bump nodemailer from 8.0.9 to 8.0.10 by @​dependabot[bot] in #​294
• build(deps): bump nodemailer from 8.0.10 to 8.0.11 by @​dependabot[bot] in #​295
• build(deps): bump nodemailer from 8.0.11 to 9.0.0 by @​dependabot[bot] in #​296
• node_modules: update by @​dawidd6 in #​297
• build(deps): bump nodemailer from 9.0.0 to 9.0.1 by @​dependabot[bot] in #​299
• build(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​300
• fix: Use extended HELLO with github.com domain by @​kroese in #​302

Full Changelog: dawidd6/action-send-mail@v17...v18

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.95.9

Compare Source

What's Changed

• feat: add OpenRouter detector by @​McPatate in #​4500
• Integrations fully codeowns detectors by @​trufflesteeeve in #​5104
• [INS-332] Add New Relic Insights Insert key detector by @​mustansir14 in #​4778
• [INS-351] Added Duffel Token Detector by @​MuneebUllahKhan222 in #​4795
• [INS-341] Added Shippo detector by @​MuneebUllahKhan222 in #​4820
• [INS-467] Add IPinfo detector to default detectors list by @​mustansir14 in #​4970
• fix: reject --include-repos/--exclude-repos with --repo in github scan by @​kashifkhan0771 in #​5112
• [INS-468] Add improved lob detector to defaults.go by @​mustansir14 in #​4971
• feat(action): add image input to allow registry mirror overrides by @​eightseventhreethree in #​4965
• feat: Support archived repo exclusion from GH org scans by @​hibare in #​4875
• [INT-715] Retry transient failures when verifying OpenAI keys by @​bill-rich in #​5117
• [INS-410] Added batch token detector by @​MuneebUllahKhan222 in #​4824
• [INT-650] Don't log as error when git diff is too long by @​bill-rich in #​5113

New Contributors

• @​McPatate made their first contribution in #​4500
• @​eightseventhreethree made their first contribution in #​4965

Full Changelog: trufflesecurity/trufflehog@v3.95.8...v3.95.9

v3.95.8

Compare Source

What's Changed

• removed "unauthorized" as exception for rotated graphana secrets by @​jordanTunstill in #​5068
• fix(azuresastoken): match SAS tokens regardless of parameter order by @​genisis0x in #​5043
• Add prometheus metrics for engine channels and workers by @​mcastorina in #​5095
• [INS-465] Skip unverified JWT Detector results when feature flag is enabled by @​MuneebUllahKhan222 in #​5072
• [INS-334] Octopus Deploy detector by @​MuneebUllahKhan222 in #​4787
• Fix Syntax error in feature.go by @​MuneebUllahKhan222 in #​5109
• Include encoded resume info instead of clobbering it by @​bill-rich in #​5110

Full Changelog: trufflesecurity/trufflehog@v3.95.7...v3.95.8

v3.95.7

Compare Source

What's Changed

• fix(sources/filesystem): order resume comparison by path component by @​genisis0x in #​5041
• test(handlers): point APK test fixture at trufflehog-test-assets by @​amanfcp in #​5053
• fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets. by @​jordanTunstill in #​5029
• Fix GitHub App cross-org member enumeration using per-installation tokens by @​dustin-decker in #​4774
• fix: add git worktree support in PrepareRepo by @​andoniaf in #​4690
• [INS-406] Braintrust detector by @​MuneebUllahKhan222 in #​4826
• huggingface: add bucket scanning by @​julien-c in #​5017
• Skip reverification results during deduplication by @​mcastorina in #​5069
• chore(renovate): bump shared config to v1.0.3 by @​bryanbeverly in #​5044
• Add scan_all_installations option for multi-org GitHub App scanning by @​dustin-decker in #​4775
• Expose SecretParts in the JSON output by @​bradlarsen in #​5073
• [INS-497] Add Pganalyze Read Key Detector by @​MuneebUllahKhan222 in #​4993
• [INS-197] Add redhatpyxis api key detector by @​MuneebUllahKhan222 in #​4995
• [INS-407] Fixed AWS detector producing non deterministic output by @​MuneebUllahKhan222 in #​4836

New Contributors

• @​genisis0x made their first contribution in #​5041
• @​andoniaf made their first contribution in #​4690
• @​julien-c made their first contribution in #​5017

Full Changelog: trufflesecurity/trufflehog@v3.95.6...v3.95.7

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

This change is 

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/dawidd6/action-send-mail	94de994a9f6fffee200243214e17002e2920bb59	🟢 4.3	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 5 Found 5/9 approved changesets -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 20 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Security-Policy ⚠️ 0 security policy file not detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed
actions/trufflesecurity/trufflehog	27b0417c16317ca9a472a9a8092acce143b49c55	🟢 7.4	Details Check Score Reason Security-Policy 🟢 10 security policy file detected Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 9 binaries present in source code License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases 🟢 8 4 out of the last 4 releases have a total of 4 signed artifacts. Pinned-Dependencies 🟢 7 dependency not pinned by hash detected -- score normalized to 7 Packaging 🟢 10 packaging workflow detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/shared-secret-scan.yml