Update all dependencies by renovate[bot] · Pull Request #73 · HSLdevcom/jore4-tools

renovate · 2026-01-19T00:31:55Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	major	`v5` → `v6`
actions/upload-artifact	action	major	`v4` → `v7`
ctrf-io/github-test-reporter	action	minor	`v1.1.0` → `v1.3.0`
dawidd6/action-send-mail	action	major	`v17` → `v18`
trufflesecurity/trufflehog	action	minor	`v3.95.6` → `v3.97.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/setup-java (actions/setup-java)

What's Changed

Backport to v5: Add Maven compiler problem matcher for javac diagnostics by @brunoborges in #1087
feat: expose cache-primary-key output (#597) [v5 backport] by @brunoborges in #1089
dist: Cover Tencent Kona JDK 25 (#1108) [v5 backport] by @brunoborges in #1110
Backport #1111: Preserve Maven toolchains across repeated setup-java runs (#1099) by @brunoborges in #1113
Backport #1097/#1098 to v5: cache Maven and Gradle wrapper distributions separately by @brunoborges in #1122

Full Changelog: actions/setup-java@v5...v5.6.0

`v5.5.0`

Compare Source

`v5.4.0`

Compare Source

What's Changed

Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 by @dependabot[bot] in #1021
Fix codeql workflow permissions by @jsoref in #993
fix CodeQL permissions by @gdams in #1025
fix: reject non-semver candidate versions in isVersionSatisfies by @sproctor in #1009
Bump @actions/cache to 5.1.0, handle cache write denied by @jasongin in #1026
Add Maven Wrapper cache feature by @mahabaleshwars in #1027
Spelling by @jsoref in #713
add link to advanced configuration for JetBrains by @robstoll in #850
docs(action): fix missing required or default fields by @kranthipoturaju in #1007
feat: add microsoft openjdk 17.0.18 by @al-kau in #1002
Update README.md - use "alert syntax for Markdown" for notes by @mhoffrog in #924
Bump undici from 6.24.1 to 6.27.0 by @dependabot[bot] in #1033
Update contributor guide with emoji for clarity by @brunoborges in #1028
add javac problem matcher by @Trass3r in #562
Clarify README version syntax and migration guidance by @brunoborges with @Copilot in #1038
Update undici artifacts to 6.27.0 (license cache + dist) by @brunoborges in #1040
docs: enhance custom jdk file installation by @stephanabel in #996
Templates for new Java distributions by @panticmilos in #429
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1032
Bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in #1031
docs: replace non-existent HelloWorldApp references with java --version by @brunoborges with @Copilot in #1043
docs: add JavaFX Maven project configuration instructions by @brunoborges with @Copilot in #1044
docs: self-signed certificate / internal CA handling for GitHub Enterprise by @brunoborges in #1050
docs: document importing an internal CA into the installed JDK (cacerts) by @brunoborges in #1051
chore: Harden workflows: least-privilege permissions + zizmor integration by @brunoborges in #1039
dist: Add GraalVM Community distribution support by @brunoborges with @Copilot in #1042
docs: note jdkfile approach for Early Access / unreleased JDK builds by @brunoborges in #1058
dist: Apply Copilot review suggestions from PR #1042 (GraalVM Community) by @brunoborges in #1059

New Contributors

@jsoref made their first contribution in #993
@sproctor made their first contribution in #1009
@jasongin made their first contribution in #1026
@robstoll made their first contribution in #850
@kranthipoturaju made their first contribution in #1007
@al-kau made their first contribution in #1002
@mhoffrog made their first contribution in #924
@brunoborges made their first contribution in #1028
@Trass3r made their first contribution in #562
@stephanabel made their first contribution in #996

Full Changelog: actions/setup-java@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

chore: update Java version to 25 in setup examples by @alaahong in #969
Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #984
Refactor error handling and improve test logging for installers by @chiranjib-swain in #989
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) by @Copilot in #999
Add Oracle JDK 17 licensing limitation note by @mahabaleshwars in #1001
Update readme for ubuntu sudo java_home behavior by @mahabaleshwars in #1013
temurin: add support for Alpine Linux by @gdams in #674
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser by @gdams in #1015
Bump @typescript-eslint/eslint-plugin from 8.35.1 to 8.48.0 by @dependabot[bot] in #952
Bump eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot[bot] in #881
Bump picomatch, @types/jest, jest, jest-circus and ts-jest by @dependabot[bot] in #1016
Bump @types/node from 24.1.0 to 25.9.3 by @dependabot[bot] in #950
Implement pagination with link headers for Adoptium based apis by @johnoliver in #1014
Make the Adoptopenjdk package type look at the Temurin repo first for latest assets by @johnoliver in #522
Bump @vercel/ncc from 0.38.1 to 0.44.0 by @dependabot[bot] in #1018

New Contributors

@alaahong made their first contribution in #969
@Copilot made their first contribution in #999
@johnoliver made their first contribution in #1014

Full Changelog: actions/setup-java@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Enhancement

Retry on HTTP 522 Connection timed out by @findepi in #964

Documentation Changes

Update gradle caching by @priya-kinthali in #972
Update checkout to v6 by @mahabaleshwars in #973

Dependency Updates

Upgrade @actions/cache to v5 by @salmanmkc in #968
Upgrade actions/checkout from 5 to 6 by @dependabot in #961

New Contributors

@findepi made their first contribution in #964

Full Changelog: actions/setup-java@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v7`

Compare Source

`v6.0.0`

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in #681
Update README.md by @nebuk89 in #712
Readme: spell out the first use of GHES by @danwkennedy in #727
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #725
Bump @actions/artifact to v4.0.0
Prepare v5.0.0 by @danwkennedy in #734

New Contributors

@GhadimiR made their first contribution in #681
@nebuk89 made their first contribution in #712
@danwkennedy made their first contribution in #727
@patrikpolyak made their first contribution in #725

Full Changelog: actions/upload-artifact@v4...v5.0.0

`v5`

Compare Source

`v4.6.2`

Compare Source

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in #685

New Contributors

@salmanmkc made their first contribution in #685

Full Changelog: actions/upload-artifact@v4...v4.6.2

`v4.6.1`

Compare Source

What's Changed

Update to use artifact 2.2.2 package by @yacaovsnc in #673

Full Changelog: actions/upload-artifact@v4...v4.6.1

`v4.6.0`

Compare Source

What's Changed

Expose env vars to control concurrency and timeout by @yacaovsnc in #662

Full Changelog: actions/upload-artifact@v4...v4.6.0

`v4.5.0`

Compare Source

What's Changed

fix: deprecated Node.js version in action by @hamirmahal in #578
Add new artifact-digest output by @bdehamer in #656

New Contributors

@hamirmahal made their first contribution in #578
@bdehamer made their first contribution in #656

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

`v4.4.3`

Compare Source

What's Changed

Undo indirect dependency updates from #627 by @joshmgross in #632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

`v4.4.2`

Compare Source

What's Changed

Bump @actions/artifact to 2.1.11 by @robherley in #627
- Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

`v4.4.1`

Compare Source

What's Changed

Add a section about hidden files by @joshmgross in #607
Add workflow file for publishing releases to immutable action package by @Jcambass in #621
Update @actions/artifact to latest version, includes symlink and timeout fixes by @robherley in #625

New Contributors

@Jcambass made their first contribution in #621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

`v4.4.0`

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

Exclude hidden files by default by @joshmgross in #598

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

`v4.3.6`

Compare Source

What's Changed

Revert to @actions/artifact 2.1.8 by @robherley in #594

Full Changelog: actions/upload-artifact@v4...v4.3.6

`v4.3.5`

Compare Source

What's Changed

Bump @actions/artifact to v2.1.9 by @robherley in #588
- Fixed artifact upload chunk timeout logic #1774
- Use lazy stream to prevent issues with open file limits #1771

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

`v4.3.4`

Compare Source

What's Changed

Update @actions/artifact version, bump dependencies by @robherley in #584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

`v4.3.3`

Compare Source

What's Changed

updating @actions/artifact dependency to v2.1.6 by @eggyhead in #565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

`v4.3.2`

Compare Source

What's Changed

Update release-new-action-version.yml by @konradpabjan in #516
Minor fix to the migration readme by @andrewakim in #523
Update readme with v3/v2/v1 deprecation notice by @robherley in #561
updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @eggyhead in #562

New Contributors

@andrewakim made their first contribution in #523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

`v4.3.1`

Compare Source

Bump @actions/artifacts to latest version to include updated GHES host check

`v4.3.0`

Compare Source

What's Changed

Reorganize upload code in prep for merge logic & add more tests by @robherley in #504
Add sub-action to merge artifacts by @robherley in #505

Full Changelog: actions/upload-artifact@v4...v4.3.0

`v4.2.0`

Compare Source

What's Changed

Ability to overwrite an Artifact by @robherley in #501

Full Changelog: actions/upload-artifact@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Add migrations docs by @robherley in #482
Update README.md by @samuelwine in #492
Support artifact-url output by @konradpabjan in #496
Update readme to reflect new 500 artifact per job limit by @robherley in #497

New Contributors

@samuelwine made their first contribution in #492

Full Changelog: actions/upload-artifact@v4...v4.1.0

ctrf-io/github-test-reporter (ctrf-io/github-test-reporter)

`v1.3.0`

Compare Source

What's Changed

Added configurable limits for flaky-rate and fail-rate reports by @PBMax02 in #327

Thanks to @PBMax02 for this contribution!

Full Changelog: ctrf-io/github-test-reporter@v1.2.0...v1.3.0

`v1.2.0`

Compare Source

What's Changed

Added the issue-repo input, allowing reports from centralized test workflows to be posted to an issue or pull request in another repository. by @uglide in #326

New Contributors

@uglide made their first contribution in #326

Full Changelog: ctrf-io/github-test-reporter@v1.1.1...v1.2.0

`v1.1.1`

Compare Source

What's Changed

Updated runtime and development dependencies.
Improved reporting reliability by:
- Searching all pages of workflow artifacts and pull request comments.
- Preventing duplicate report comments on busy pull requests.
- Using only the latest artifact from workflow re-runs.
- Avoiding duplicated results and inaccurate flaky or failure-rate insights.
- Skipping expired artifacts and falling back to an earlier usable artifact when necessary.

Thanks @AlveElde for contributing these improvements in #319.

New Contributors

@AlveElde made their first contribution in #319.

Full Changelog: v1.1.0...v1.1.1

dawidd6/action-send-mail (dawidd6/action-send-mail)

`v18`

Compare Source

What's Changed

build(deps): bump brace-expansion from 5.0.5 to 5.0.6 by @dependabot[bot] in #291
build(deps): bump nodemailer from 8.0.7 to 8.0.8 by @dependabot[bot] in #292
build(deps): bump nodemailer from 8.0.8 to 8.0.9 by @dependabot[bot] in #293
build(deps): bump nodemailer from 8.0.9 to 8.0.10 by @dependabot[bot] in #294
build(deps): bump nodemailer from 8.0.10 to 8.0.11 by @dependabot[bot] in #295
build(deps): bump nodemailer from 8.0.11 to 9.0.0 by @dependabot[bot] in #296
node_modules: update by @dawidd6 in #297
build(deps): bump nodemailer from 9.0.0 to 9.0.1 by @dependabot[bot] in #299
build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #300
fix: Use extended HELLO with github.com domain by @kroese in #302

Full Changelog: dawidd6/action-send-mail@v17...v18

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

`v3.97.1`

Compare Source

`v3.97.0`

Compare Source

What's Changed

fix(detectors/privatekey): report encrypted keys with uncrackable passphrases by @genisis0x in #5127
Update module go.mongodb.org/mongo-driver to v1.17.7 [SECURITY] by @renovate[bot] in #5058
Remove url tag from common HTTP client metrics by @mcastorina in #5158
Update github.com/avast/apkparser digest to 7fcaee4 by @renovate[bot] in #5037
[INS-318] Add New Relic License Key Detector by @mustansir14 in #4760
[INS-348] Add New Relic Browser Key detector by @mustansir14 in #4769
[INS-339] Add New Relic User Key detector by @mustansir14 in #4794
[INS-345] Add New Relic Insights Query Key detector by @mustansir14 in #4781
fix(sources): stop UnitHook Close racing in-flight Finish sends by @bill-rich in #5154
There are now 3 CircleCI projects by @trufflesteeeve in #5166
Update github.com/shurcooL/githubv4 digest to 2402fdf by @renovate[bot] in #5038
Update github-actions by @renovate[bot] in #5036
Update aws-sdk-go-v2 monorepo by @renovate[bot] in #4890
[INS-344] Add New Relic Mobile App Token Detector by @mustansir14 in #4810
Give each clone its own directory under --clone-path by @shahzadhaider1 in #5175
feat(output): add SARIF output format for GitHub code scanning by @kashifkhan0771 in #5165
[SCAN-1018] Treat SlackWebhook invalid_token (HTTP 400) as determinate not-live by @alafiand in #5177
make cwd-changing normalization tests non-parallel to fix flaky clone failures by @jordanTunstill in #5178
[INS-456] Add Microsoft Teams Webhook V2 detector by @mustansir14 in #4902
surface git clone errors at v(0) by @jordanTunstill in #5162
Add Figma Personal Access Token v3 Detector by @shahzadhaider1 in #4790
fix(github): fallback resource Name to avoid empty-string proto validation failure by @kashifkhan0771 in #5182
[INT-643] Update Protos definition to cater bitbucket Api token authentication by @MuneebUllahKhan222 in #5171
Update regex pattern and 403 handling in the Lob detector to fix false positives by @MachiavelliII in #5188
Deprecate AppOptics detector by @Ahsan-Sarbaz in #5198
Anthropic detector: surface API error detail on non-2xx verification by @Ahsan-Sarbaz in #5180
Deprecated bingsubscriptionkey detector by @Ahsan-Sarbaz in #5179
Add SolarWinds Observability detector by @Ahsan-Sarbaz in #5199
fix(jiratoken): stop 202 reverification retry loop by @Ahsan-Sarbaz in #5200
Add custom endpoint support to the S3 source by @shahzadhaider1 in #5202
fix(blogger): anchor regex to AIzaSy prefix to eliminate false positives by @unsmith in #5203
fix(huggingface): move unscoped fine-grained models to UnboundedResources by @unsmith in #5204
Add AWS Secrets Manager metadata type by @rosecodym in #5210
fix(detectors/harness): allow underscore in PAT account segment by @mattbrady-1 in #5153

New Contributors

@MachiavelliII made their first contribution in #5188
@Ahsan-Sarbaz made their first contribution in #5198
@unsmith made their first contribution in #5203

Full Changelog: trufflesecurity/trufflehog@v3.96.0...v3.97.0

`v3.96.0`

Compare Source

What's Changed

[INS-355] Added Hashicorp vault token detector by @MuneebUllahKhan222 in #4819
Tighten JiraToken v1 verification by @shahzadhaider1 in #5122
[INT-718] Add TargetNotFoundError for targeted scan targets missing from the source by @bill-rich in #5123
Fix GitLab project metadata cache and switch to LRU by @kashifkhan0771 in #4727
Log analyze errors for Anthropic Analyzer by @kashifkhan0771 in #5120
Add metrics for chunks and results by @mcastorina in #5128
Update Cloudflare detectors for 2026+ prefixed credential formats (include upstream PR changes) by @kashifkhan0771 in #5111
[INS-312] Duo API Secret Key Detector by @MuneebUllahKhan222 in #4771
[Feature] Added SonarQube Cloud "Scoped Organization Token" Detector by @nabeelalam in #4739
[INS-255] Updated datadog detector to set verificationError in case of a verification error by @MuneebUllahKhan222 in #4661
Log analyze errors for Postgres analyzer by @kashifkhan0771 in #5131
Log analyze errors for HuggingFace analyzer by @kashifkhan0771 in #5130
Engine - Config.SourceManager doc by @amanfcp in #5002
Update module github.com/go-git/go-git/v5 to v5.19.1 [SECURITY] by @renovate[bot] in #5034
Retry git clone on transient network errors by @shahzadhaider1 in #5132
Fix scan_all_installations Rejecting Org Member Personal Repos by @shahzadhaider1 in #5142
updated detector to include underscore char by @mattbrady-1 in #5121
[chore] Change job_id in metric to source_type by @mcastorina in #5149
Posthog regex update by @mattbrady-1 in #5133
fix(handlers): apk handler now doesnt check for apk extension since json-enumerator and other byte stream methods wouldnt have it by @johannestaas-trufflesec in #5151

New Contributors

@mattbrady-1 made their first contribution in [#5121](https://redirect.github.com/trufflesecurity/tru

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This change is

github-actions · 2026-01-19T00:32:05Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

actions/dawidd6/action-send-mail

94de994a9f6fffee200243214e17002e2920bb59

🟢 4.1

Details

Check	Score	Reason
Maintained	🟢 10	17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 3	Found 2/6 approved changesets -- score normalized to 3
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

actions/trufflesecurity/trufflehog

20652fbbdefffcdaa493a5bf57ab2ac6b1db715b

🟢 7.4

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 10	all changesets reviewed
Security-Policy	🟢 10	security policy file detected
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 9	binaries present in source code
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Signed-Releases	🟢 8	5 out of the last 5 releases have a total of 5 signed artifacts.
Packaging	🟢 10	packaging workflow detected
Pinned-Dependencies	🟢 7	dependency not pinned by hash detected -- score normalized to 7
SAST	🟢 10	SAST tool is run on all commits

Scanned Files

.github/workflows/shared-secret-scan.yml

renovate Bot added the dependencies label Jan 19, 2026

renovate Bot requested a review from a team January 19, 2026 00:31

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 3f19c5b to 20533ff Compare February 5, 2026 10:56

renovate Bot force-pushed the renovate/all branch 3 times, most recently from c3c9935 to b6d145b Compare February 11, 2026 16:38

renovate Bot force-pushed the renovate/all branch 2 times, most recently from a45be0a to c1b7f30 Compare February 25, 2026 23:11

renovate Bot force-pushed the renovate/all branch 7 times, most recently from 466b40d to 92e48fc Compare March 5, 2026 08:41

renovate Bot force-pushed the renovate/all branch 5 times, most recently from 9eb1adf to 34eecc5 Compare March 11, 2026 09:02

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 5beb9cf to 196e75b Compare March 18, 2026 18:04

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 3ac3847 to b1fd059 Compare March 25, 2026 18:12

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 115470d to 4cda12b Compare April 1, 2026 13:19

renovate Bot force-pushed the renovate/all branch from 4cda12b to 27eb118 Compare April 8, 2026 17:22

renovate Bot force-pushed the renovate/all branch 4 times, most recently from aaef2fb to ab025e8 Compare April 21, 2026 23:44

renovate Bot force-pushed the renovate/all branch from ab025e8 to da1fdf6 Compare April 28, 2026 15:32

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 1500d94 to 87d4254 Compare May 11, 2026 20:57

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 77c44a9 to 303bc1f Compare June 2, 2026 19:07

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 9e4a655 to e2768da Compare June 20, 2026 18:25

renovate Bot force-pushed the renovate/all branch from e2768da to 8707769 Compare June 25, 2026 22:42

renovate Bot changed the title ~~Update all dependencies~~ Update dawidd6/action-send-mail action to v18 Jun 26, 2026

renovate Bot force-pushed the renovate/all branch from 8707769 to 7ca22f3 Compare June 26, 2026 07:47

renovate Bot changed the title ~~Update dawidd6/action-send-mail action to v18~~ Update all dependencies Jun 29, 2026

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 80a573d to 01f8285 Compare July 2, 2026 23:49

renovate Bot force-pushed the renovate/all branch from 01f8285 to e431789 Compare July 10, 2026 02:34

renovate Bot force-pushed the renovate/all branch from e431789 to 1d5a5d7 Compare July 24, 2026 21:07

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 0f4a344 to aa37c8a Compare August 21, 2026 20:37

renovate Bot force-pushed the renovate/all branch from aa37c8a to cba5d8f Compare August 25, 2026 10:21

Update all dependencies

838d408

renovate Bot force-pushed the renovate/all branch from cba5d8f to 838d408 Compare August 25, 2026 12:07

Navigation Menu

Uh oh!

Update all dependencies - #73

Update all dependencies#73
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Jan 19, 2026 •

edited by culka

Loading

Uh oh!

github-actions Bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jan 19, 2026 • edited by culka Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Enhancement

Documentation Changes

Dependency Updates

New Contributors

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v6 - What's new

Node.js 24

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Notice: Breaking Changes ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

github-actions Bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 19, 2026 •

edited by culka

Loading

github-actions Bot commented Jan 19, 2026 •

edited

Loading