chore(deps): bump the actions group with 4 updates (#26)

Bumps the actions group with 4 updates:
[actions/cache](https://github.com/actions/cache),
[dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain),
[dawidd6/action-send-mail](https://github.com/dawidd6/action-send-mail)
and
[trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).

Updates `actions/cache` from 6.0.0 to 6.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v6.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/cache</code> to v6.1.0 - handle read-only cache
access by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1768">actions/cache#1768</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v6...v6.1.0">https://github.com/actions/cache/compare/v6...v6.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h2>How to prepare a release</h2>
<blockquote>
<p>[!NOTE]
Relevant for maintainers with write access only.</p>
</blockquote>
<ol>
<li>Switch to a new branch from <code>main</code>.</li>
<li>Run <code>npm test</code> to ensure all tests are passing.</li>
<li>Update the version in <a
href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li>
<li>Run <code>npm run build</code> to update the compiled files.</li>
<li>Update this <a
href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a>
with the new version and changes in the <code>## Changelog</code>
section.</li>
<li>Run <code>licensed cache</code> to update the license report.</li>
<li>Run <code>licensed status</code> and resolve any warnings by
updating the <a
href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a>
file with the exceptions.</li>
<li>Commit your changes and push your branch upstream.</li>
<li>Open a pull request against <code>main</code> and get it reviewed
and merged.</li>
<li>Draft a new release <a
href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a>
use the same version number used in <code>package.json</code>
<ol>
<li>Create a new tag with the version number.</li>
<li>Auto generate release notes and update them to match the changes you
made in <code>RELEASES.md</code>.</li>
<li>Toggle the set as the latest release option.</li>
<li>Publish the release.</li>
</ol>
</li>
<li>Navigate to <a
href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a>
<ol>
<li>There should be a workflow run queued with the same version
number.</li>
<li>Approve the run to publish the new version and update the major tags
for this action.</li>
</ol>
</li>
</ol>
<h2>Changelog</h2>
<h3>6.1.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a
href="https://redirect.github.com/actions/toolkit/pull/2435">actions/toolkit#2435
Handle cache write error due to read-only token</a></li>
<li>Switch redundant &quot;Cache save failed&quot; warning to debug log
in save-only</li>
</ul>
<h3>6.0.0</h3>
<ul>
<li>Updated <code>@actions/cache</code> to ^6.0.1,
<code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to
^3.0.0, <code>@actions/io</code> to ^3.0.2</li>
<li>Migrated to ESM module system</li>
<li>Upgraded Jest to v30 and test infrastructure to be ESM
compatible</li>
</ul>
<h3>5.0.4</h3>
<ul>
<li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar
patterns)</li>
<li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb
protection, header validation fixes)</li>
<li>Bump <code>fast-xml-parser</code> to v5.5.6</li>
</ul>
<h3>5.0.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<h3>5.0.2</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9"><code>55cc834</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1768">#1768</a>
from jasongin/readonly-cache</li>
<li><a
href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337"><code>d8cd72f</code></a>
Bump <code>@​actions/cache</code> to v6.1.0 - handle cache write error
due to RO token</li>
<li>See full diff in <a
href="https://github.com/actions/cache/compare/2c8a9bd7457de244a408f35966fab2fb45fda9c8...55cc8345863c7cc4c66a329aec7e433d2d1c52a9">compare
view</a></li>
</ul>
</details>
<br />

Updates `dtolnay/rust-toolchain` from
67ef31d5b988238dd797d409d6f9574278e20537 to
fa04a1451ff1842e2626ccb99004d0195b455a88
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dtolnay/rust-toolchain/commit/fa04a1451ff1842e2626ccb99004d0195b455a88"><code>fa04a14</code></a>
Add 1.96.1 patch release</li>
<li>See full diff in <a
href="https://github.com/dtolnay/rust-toolchain/compare/67ef31d5b988238dd797d409d6f9574278e20537...fa04a1451ff1842e2626ccb99004d0195b455a88">compare
view</a></li>
</ul>
</details>
<br />

Updates `dawidd6/action-send-mail` from
6e502825a508b867ab2954ad6343b68787624c01 to
c50dc4cc848ade21f848990889906d804fae78c5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dawidd6/action-send-mail/commit/c50dc4cc848ade21f848990889906d804fae78c5"><code>c50dc4c</code></a>
build(deps): bump nodemailer from 9.0.1 to 9.0.3 (<a
href="https://redirect.github.com/dawidd6/action-send-mail/issues/303">#303</a>)</li>
<li><a
href="https://github.com/dawidd6/action-send-mail/commit/994f270325d4f7257aff241a35488ef54ba364a4"><code>994f270</code></a>
build(deps): bump undici from 6.24.1 to 6.27.0 (<a
href="https://redirect.github.com/dawidd6/action-send-mail/issues/301">#301</a>)</li>
<li><a
href="https://github.com/dawidd6/action-send-mail/commit/94de994a9f6fffee200243214e17002e2920bb59"><code>94de994</code></a>
fix: Use extended HELLO with github.com domain (<a
href="https://redirect.github.com/dawidd6/action-send-mail/issues/302">#302</a>)</li>
<li>See full diff in <a
href="https://github.com/dawidd6/action-send-mail/compare/6e502825a508b867ab2954ad6343b68787624c01...c50dc4cc848ade21f848990889906d804fae78c5">compare
view</a></li>
</ul>
</details>
<br />

Updates `trufflesecurity/trufflehog` from 3.95.6 to 3.95.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's
releases</a>.</em></p>
<blockquote>
<h2>v3.95.7</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(sources/filesystem): order resume comparison by path component
by <a href="https://github.com/genisis0x"><code>@​genisis0x</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5041">trufflesecurity/trufflehog#5041</a></li>
<li>test(handlers): point APK test fixture at trufflehog-test-assets by
<a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5053">trufflesecurity/trufflehog#5053</a></li>
<li>fixed regex typo that was causing conf uuid's to be surfaced as
non-live atlassian secrets. by <a
href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5029">trufflesecurity/trufflehog#5029</a></li>
<li>Fix GitHub App cross-org member enumeration using per-installation
tokens by <a
href="https://github.com/dustin-decker"><code>@​dustin-decker</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4774">trufflesecurity/trufflehog#4774</a></li>
<li>fix: add git worktree support in PrepareRepo by <a
href="https://github.com/andoniaf"><code>@​andoniaf</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4690">trufflesecurity/trufflehog#4690</a></li>
<li>[INS-406] Braintrust detector by <a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4826">trufflesecurity/trufflehog#4826</a></li>
<li>huggingface: add bucket scanning by <a
href="https://github.com/julien-c"><code>@​julien-c</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5017">trufflesecurity/trufflehog#5017</a></li>
<li>Skip reverification results during deduplication by <a
href="https://github.com/mcastorina"><code>@​mcastorina</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5069">trufflesecurity/trufflehog#5069</a></li>
<li>chore(renovate): bump shared config to v1.0.3 by <a
href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5044">trufflesecurity/trufflehog#5044</a></li>
<li>Add scan_all_installations option for multi-org GitHub App scanning
by <a
href="https://github.com/dustin-decker"><code>@​dustin-decker</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4775">trufflesecurity/trufflehog#4775</a></li>
<li>Expose <code>SecretParts</code> in the JSON output by <a
href="https://github.com/bradlarsen"><code>@​bradlarsen</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5073">trufflesecurity/trufflehog#5073</a></li>
<li>[INS-497] Add Pganalyze Read Key Detector by <a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4993">trufflesecurity/trufflehog#4993</a></li>
<li>[INS-197] Add redhatpyxis api key detector by <a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4995">trufflesecurity/trufflehog#4995</a></li>
<li>[INS-407] Fixed AWS detector producing non deterministic output by
<a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4836">trufflesecurity/trufflehog#4836</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/genisis0x"><code>@​genisis0x</code></a>
made their first contribution in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5041">trufflesecurity/trufflehog#5041</a></li>
<li><a href="https://github.com/andoniaf"><code>@​andoniaf</code></a>
made their first contribution in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4690">trufflesecurity/trufflehog#4690</a></li>
<li><a href="https://github.com/julien-c"><code>@​julien-c</code></a>
made their first contribution in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5017">trufflesecurity/trufflehog#5017</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.95.6...v3.95.7">https://github.com/trufflesecurity/trufflehog/compare/v3.95.6...v3.95.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/f446421baf832d6356c42c1743d99abff52ff334"><code>f446421</code></a>
[INS-407] Fixed AWS detector producing non deterministic output (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4836">#4836</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/885fa2d6b0e8347ee3d921bf79ecb6c8510f8ae1"><code>885fa2d</code></a>
[INS-197] Add redhatpyxis api key detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4995">#4995</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/c09d72666af2336c402d6a12d0acfd9693432060"><code>c09d726</code></a>
[INS-497] Add Pganalyze Read Key Detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4993">#4993</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/c1a1d6a28a601e902d8652e75425c4b3d3294053"><code>c1a1d6a</code></a>
Expose <code>SecretParts</code> in the JSON output (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5073">#5073</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/39a1435e800f8a78b61188844272a22b3ec1722d"><code>39a1435</code></a>
Add scan_all_installations option for multi-org GitHub App scanning (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4775">#4775</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/8b85dcd16cd35f7bfe4968a1e666af3602ee2193"><code>8b85dcd</code></a>
Bump shared renovate-config to v1.0.3 (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5044">#5044</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/2e4db5fa4f301c651f659df940321bce7eb30209"><code>2e4db5f</code></a>
Skip reverification results during deduplication (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5069">#5069</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/4945fa3cd2a115fa661f9ecbedae3598557996ee"><code>4945fa3</code></a>
huggingface: add bucket scanning (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5017">#5017</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/3d196c8d11feff93b52cd2505f6b2c06085b99f3"><code>3d196c8</code></a>
[INS-406] Braintrust detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4826">#4826</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/6f5220357f498d156b85eff1bf8e13e841362de8"><code>6f52203</code></a>
fix: add git worktree support in PrepareRepo (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4690">#4690</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/trufflesecurity/trufflehog/compare/30d5bb91af1a771378349dbbb0c82129392acf70...f446421baf832d6356c42c1743d99abff52ff334">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/casket-pages.yml

@@ -29,7 +29,7 @@ jobs:
           ghc-version: '9.8.2'
           cabal-version: '3.10'
       - name: Cache Cabal
-        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cabal/packages

.github/workflows/mirror.yml

@@ -112,7 +112,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup Rust
-        uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # stable
+        uses: dtolnay/rust-toolchain@fa04a1451ff1842e2626ccb99004d0195b455a88 # stable
         with:
           toolchain: stable
       - name: Install Radicle

.github/workflows/push-email-notify.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Send push notification email
-        uses: dawidd6/action-send-mail@6e502825a508b867ab2954ad6343b68787624c01 # pinned
+        uses: dawidd6/action-send-mail@c50dc4cc848ade21f848990889906d804fae78c5 # pinned
         with:
           server_address: ${{ secrets.SMTP_HOST }}
           server_port: ${{ secrets.SMTP_PORT }}

.github/workflows/secret-scanner.yml

@@ -22,7 +22,7 @@ jobs:
         with:
           fetch-depth: 0 # Full history for scanning
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3
+        uses: trufflesecurity/trufflehog@f446421baf832d6356c42c1743d99abff52ff334 # v3
         with:
           # The v3 action injects --fail automatically on pull_request events.
           # Passing --fail here triggers "flag 'fail' cannot be repeated".