chore(deps): update trufflesecurity/trufflehog action to v3.95.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
trufflesecurity/trufflehog	action	minor	v3.94.1 → v3.95.3

---

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.95.3

Compare Source

What's Changed

• Renamed AnypointOAuth2 detector's AnalysisInfo keys to make it consistent with its Analyzer by @​MuneebUllahKhan222 in #​4906
• Rename AnalysisInfo field to SecretParts on detectors.Result by @​mcastorina in #​4911
• Document SecretParts contract in detector-authoring docs by @​mcastorina in #​4912
• Add a static check for detectors that don't set SecretParts by @​mcastorina in #​4913
• Populate SecretParts on all detectors by @​mcastorina in #​4919
• Make checksecretparts required in CI by @​mcastorina in #​4921
• Deduplicate concurrent credential verification requests via singleflight by @​kashifkhan0771 in #​4314
• log non-critical chunk errors at V(2).Info instead of Error by @​johnelliott in #​4928
• [INS-320] Cloudinary detector by @​MuneebUllahKhan222 in #​4747
• ci: bump JS actions to Node 24 majors (incl. CodeQL v4 + WIF auth v3) by @​bryanbeverly in #​4933
• chore: bump golangci-lint-action v7 → v9 (Node 24) by @​bryanbeverly in #​4936
• Add default Content-Type: application/json header for custom detector verification request by @​MuneebUllahKhan222 in #​4947
• Make detector Result.SecretParts initialization stricter by @​mcastorina in #​4948
• Add Pinecone API key detector by @​dylanTruffle in #​4917
• adding customizable successRanges and rotatedRanges to customDetector by @​jordanTunstill in #​4892

Full Changelog: trufflesecurity/trufflehog@v3.95.2...v3.95.3

v3.95.2

Compare Source

What's Changed

• Revert "[INS-397] Fix git version parser panic on non-numeric patch versions" by @​trufflesteeeve in #​4903

Full Changelog: trufflesecurity/trufflehog@v3.95.1...v3.95.2

v3.95.1

Compare Source

What's Changed

• [INS-444] Fix verification logic in Mesibo detector by @​mustansir14 in #​4884

Full Changelog: trufflesecurity/trufflehog@v3.95.0...v3.95.1

v3.95.0

Compare Source

What's Changed

• Upgrade golangci-lint in CI runner and Makefile by @​amanfcp in #​4861
• Deprecate SquareUp Detector by @​nabeelalam in #​4855
• [INS-397] Fix git version parser panic on non-numeric patch versions by @​shahzadhaider1 in #​4882
• Fix Bitbucket line highlighting URLs by @​shahzadhaider1 in #​4854
• [INS-403] Support Custom endpoint config in hashicorpvaultauth Detector by @​MuneebUllahKhan222 in #​4825
• [INS-398] Added tests to ensure that custom endpoint configuration works in artifactory detectors by @​MuneebUllahKhan222 in #​4832
• Host ldap-verify library in trufflesecurity by @​trufflesteeeve in #​4859
• Add AnalysisError type and wrap all analyzer error paths by @​johnelliott in #​4779
• dep-updates: Go 1.25 and dependency refreshes by @​dustin-decker in #​4888
• Fix nil pointer panics in GitHub analyzer gist/repo binding functions by @​shahzadhaider1 in #​4864
• [INS-399] Added Bitbucket data center(on prem) PAT detector by @​MuneebUllahKhan222 in #​4883
• [INS-402] Add Jira Data Center PAT Detector by @​mustansir14 in #​4872
• Add man page generation for trufflehog by @​bryanbeverly in #​4894
• Add Confluence Data Center PAT detector by @​amanfcp in #​4886

Full Changelog: trufflesecurity/trufflehog@v3.94.3...v3.95.0

v3.94.3

Compare Source

What's Changed

• Add release bot workflow by @​bryanbeverly in #​4835
• handle AADSTS50173 as explicit revocation signal for azure refresh tokens by @​jordanTunstill in #​4842
• Add AnalysisInfo to verified results by @​hxnyk in #​4862
• Add nil check and error context to GitHub analyzer by @​johnelliott in #​4858
• [CSM-1857] Fix expired Azure secrets being silently dropped by @​dipto-truffle in #​4845
• Add HTML decoder for secret detection in HTML-formatted sources by @​alafiand in #​4840
• Split out detector types into separate proto file in order to narrow CODEOWNERS scope by @​casey-tran in #​4871

New Contributors

• @​johnelliott made their first contribution in #​4858
• @​dipto-truffle made their first contribution in #​4845
• @​alafiand made their first contribution in #​4840

Full Changelog: trufflesecurity/trufflehog@v3.94.2...v3.94.3

v3.94.2

Compare Source

What's Changed

• Skip TestAPKHandler by @​shahzadhaider1 in #​4841
• fix: replace release-guard workflow with revert-latest job by @​sysread in #​4838
• Deprecated GoogleAPIKey Detector by @​nabeelalam in #​4853
• todoist: replace deprecated verification endpoint by @​rai1612 in #​4828
• Add Shopify OAuth Detector by @​amanfcp in #​4738
• [INS-425] Updated google.golang.org/grpc v1.78.0 --> v1.79.3 by @​MuneebUllahKhan222 in #​4852
• [INS-421] Re-enabled TestAPKHandler test and updated artifact url by @​MuneebUllahKhan222 in #​4856

New Contributors

• @​sysread made their first contribution in #​4838
• @​rai1612 made their first contribution in #​4828

Full Changelog: trufflesecurity/trufflehog@v3.94.1...v3.94.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🚀 Integration Test Results

npm-pr-version action test:

• ✅ Version generation: 0.0.0-PR-80--fbfa8f7
• ✅ package.json update: Successful
• ✅ Format validation: Passed

The action is working correctly! 🎉

[github-actions]

🧪 Test Results

✅ All tests passed successfully!

• Linting: ✅ Passed
• Unit tests: ✅ Passed
• Integration tests: ✅ Passed

[github-actions]

❌ PR package publish failed!

Error: ❌ Failed to publish with npm (tarball): npm error code E404 npm error 404 Not Found - PUT https://registry.npmjs.org/@codfish0.000000actions - Not found npm error 404 npm error 404 The requested resource @codfish/actions@0.0.0-PR-80--fbfa8f7 could not be found or you do not have permission to access it. npm error 404

📋 View workflow logs for more details.