An open index of dependabot pull requests across open source projects.

Bump trufflesecurity/trufflehog from 3.88.34 to 3.90.8

Closed
Number: #83
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: September 22, 2025 at 01:25 PM UTC
(9 months ago)
Updated: October 20, 2025 at 01:56 PM UTC
(8 months ago)
Closed: October 20, 2025 at 01:56 PM UTC
(8 months ago)
Time to Close: 28 days
Labels:
dependencies github_actions
Description:

Bumps trufflesecurity/trufflehog from 3.88.34 to 3.90.8.

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.90.8

What's Changed

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.90.7...v3.90.8

v3.90.7

What's Changed

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.90.6...v3.90.7

v3.90.6

What's Changed

... (truncated)

Commits
  • 466da5b Pre-filter GitHub v1 findings to prevent large numbers of validation requests...
  • 9adec3c Add metrics to SaneHTTPClient (#4471)
  • cc50239 Revert "Improved and fixed copper detector (#4394)" (#4470)
  • bd45a70 updated the flightlabs api detector (#4393)
  • a1cee48 fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.6.0 (#4457)
  • 3b8d23c fix(deps): update module google.golang.org/protobuf to v1.36.9 (#4456)
  • 6f619b7 fix(deps): update module github.com/couchbase/gocb/v2 to v2.11.0 (#4455)
  • 989e806 fix(deps): update aws-sdk-go-v2 monorepo (#4433)
  • 7f32919 Fix nondeterminism in custom detectors (#4446)
  • 18c7b1f Added feature flag to configure projects per page in gitlab enumeration (#4437)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Ecosystem:
actions
Version Change:
3.88.34 → 3.90.8
Update Type:
Minor
Technical Details
ID: 10343417
UUID: 3441002244
Node ID: PR_kwDOOODVq86p2Gjz
Host: GitHub
Repository: TMHSDigital/Github-Demo-Repo