From d6dc5b19b7202ae3c64d275d7a3d3f54bd0fa08f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Jul 2026 09:37:02 +0000
Subject: [PATCH] chore(deps): Bump the actions group with 4 updates

Bumps the actions group with 4 updates: [hyperpolymath/a2ml-validate-action](https://github.com/hyperpolymath/a2ml-validate-action), [hyperpolymath/k9-validate-action](https://github.com/hyperpolymath/k9-validate-action), [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `hyperpolymath/a2ml-validate-action` from cb3c1e298169dc5ac2b42e257068b0fb5920cd5e to 55e8c28bab4e7f2399fdbd57a6da1051369f3847
- [Release notes](https://github.com/hyperpolymath/a2ml-validate-action/releases)
- [Changelog](https://github.com/hyperpolymath/a2ml-validate-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hyperpolymath/a2ml-validate-action/compare/cb3c1e298169dc5ac2b42e257068b0fb5920cd5e...55e8c28bab4e7f2399fdbd57a6da1051369f3847)

Updates `hyperpolymath/k9-validate-action` from 236f0035cc159051c8dd5dc7cd8af1e8cf961462 to 7c3c0e9fa5165626e74ecce78109b3295b798b92
- [Release notes](https://github.com/hyperpolymath/k9-validate-action/releases)
- [Changelog](https://github.com/hyperpolymath/k9-validate-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hyperpolymath/k9-validate-action/compare/236f0035cc159051c8dd5dc7cd8af1e8cf961462...7c3c0e9fa5165626e74ecce78109b3295b798b92)

Updates `trufflesecurity/trufflehog` from 3.95.8 to 3.95.9
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](https://github.com/trufflesecurity/trufflehog/compare/00155c9dc586f34d189adc83d3ac2698c2ec551f...27b0417c16317ca9a472a9a8092acce143b49c55)

Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/718ea10b132b3b2eba29c1007bb80653f286566b...3d0d9888cb7fd7b750713d6e236d1fcb99157228)

---
updated-dependencies:
- dependency-name: hyperpolymath/a2ml-validate-action
  dependency-version: 55e8c28bab4e7f2399fdbd57a6da1051369f3847
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: hyperpolymath/k9-validate-action
  dependency-version: 7c3c0e9fa5165626e74ecce78109b3295b798b92
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.95.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/dogfood-gate.yml   | 4 ++--
 .github/workflows/quality.yml        | 2 +-
 .github/workflows/release.yml        | 2 +-
 .github/workflows/secret-scanner.yml | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml
index 396572e..d19a465 100644
--- a/.github/workflows/dogfood-gate.yml
+++ b/.github/workflows/dogfood-gate.yml
@@ -42,7 +42,7 @@ jobs:
 
       - name: Validate A2ML manifests
         if: steps.detect.outputs.count > 0
-        uses: hyperpolymath/a2ml-validate-action@cb3c1e298169dc5ac2b42e257068b0fb5920cd5e # main
+        uses: hyperpolymath/a2ml-validate-action@55e8c28bab4e7f2399fdbd57a6da1051369f3847 # main
         with:
           path: '.'
           strict: 'false'
@@ -91,7 +91,7 @@ jobs:
 
       - name: Validate K9 contracts
         if: steps.detect.outputs.k9_count > 0
-        uses: hyperpolymath/k9-validate-action@236f0035cc159051c8dd5dc7cd8af1e8cf961462 # main
+        uses: hyperpolymath/k9-validate-action@7c3c0e9fa5165626e74ecce78109b3295b798b92 # main
         with:
           path: '.'
           strict: 'false'
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 336cc3c..d1cff52 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -26,7 +26,7 @@ jobs:
         run: |
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f # v3.93.3
+        uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.93.3
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d0c14c4..95fe83e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -130,7 +130,7 @@ jobs:
       #     name: release-artifacts
       #     path: artifacts/
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2
         with:
           body: ${{ needs.changelog.outputs.changelog }}
           draft: false
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index 8a94555..4bf7b70 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -26,6 +26,6 @@ jobs:
         with:
           fetch-depth: 0
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f # v3.95.8
+        uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9
         with:
           extra_args: --only-verified --fail
\ No newline at end of file