chore(deps): bump the actions group with 2 updates (#36)

Bumps the actions group with 2 updates:
[dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata)
and
[trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).

Updates `dependabot/fetch-metadata` from 3.0.0 to 3.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dependabot/fetch-metadata/releases">dependabot/fetch-metadata's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add permissions to all workflows by <a
href="https://github.com/truggeri"><code>@​truggeri</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/687">dependabot/fetch-metadata#687</a></li>
<li>build(deps-dev): bump globals from 16.0.0 to 17.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/690">dependabot/fetch-metadata#690</a></li>
<li>build(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/693">dependabot/fetch-metadata#693</a></li>
<li>build(deps-dev): bump <code>@​hono/node-server</code> from 1.19.10
to 1.19.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/694">dependabot/fetch-metadata#694</a></li>
<li>build(deps-dev): bump hono from 4.12.7 to 4.12.12 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/695">dependabot/fetch-metadata#695</a></li>
<li>Dynamically update the tracking tag in action by <a
href="https://github.com/truggeri"><code>@​truggeri</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/696">dependabot/fetch-metadata#696</a></li>
<li>fix: handle duplicate dependency names in parseMetadataLinks by <a
href="https://github.com/devantler"><code>@​devantler</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/700">dependabot/fetch-metadata#700</a></li>
<li>fix: remove $ anchor from updateFragment regex to handle pip
directory suffixes by <a
href="https://github.com/devantler"><code>@​devantler</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/698">dependabot/fetch-metadata#698</a></li>
<li>Updates to README for permissions clarification by <a
href="https://github.com/truggeri"><code>@​truggeri</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/697">dependabot/fetch-metadata#697</a></li>
<li>fix: resolve update-type null for Python, Composer, and Terraform
PRs by <a
href="https://github.com/vitorsdcs"><code>@​vitorsdcs</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/704">dependabot/fetch-metadata#704</a></li>
<li>build(deps-dev): bump globals from 17.4.0 to 17.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/703">dependabot/fetch-metadata#703</a></li>
<li>build(deps): bump actions/create-github-app-token from 3.0.0 to
3.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/701">dependabot/fetch-metadata#701</a></li>
<li>build(deps): bump <code>@​actions/github</code> from 9.0.0 to 9.1.0
in the dependencies group across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/702">dependabot/fetch-metadata#702</a></li>
<li>build(deps-dev): bump hono from 4.12.12 to 4.12.14 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/705">dependabot/fetch-metadata#705</a></li>
<li>v3.1.0 by <a
href="https://github.com/fetch-metadata-action-automation"><code>@​fetch-metadata-action-automation</code></a>[bot]
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/692">dependabot/fetch-metadata#692</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/devantler"><code>@​devantler</code></a>
made their first contribution in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/700">dependabot/fetch-metadata#700</a></li>
<li><a href="https://github.com/vitorsdcs"><code>@​vitorsdcs</code></a>
made their first contribution in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/704">dependabot/fetch-metadata#704</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dependabot/fetch-metadata/compare/v3...v3.1.0">https://github.com/dependabot/fetch-metadata/compare/v3...v3.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/25dd0e34f4fe68f24cc83900b1fe3fe149efef98"><code>25dd0e3</code></a>
v3.1.0 (<a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/692">#692</a>)</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/e073f50d732cb48d48fb80afedb4fa61361626e9"><code>e073f50</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/705">#705</a>
from dependabot/dependabot/npm_and_yarn/hono-4.12.14</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/0670e167df1fbee1b0d07121de6a182ddebdd674"><code>0670e16</code></a>
build(deps-dev): bump hono from 4.12.12 to 4.12.14</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/7a7fe10a42310e65df80af6c771e9aa5d59842d1"><code>7a7fe10</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/702">#702</a>
from dependabot/dependabot/npm_and_yarn/dependencies-...</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/5168191cea3d4daa635bff6c796b4f0faeba522d"><code>5168191</code></a>
Updating dist build</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/23882e175b2f16bc495c89aa50940399c6a17504"><code>23882e1</code></a>
build(deps): bump <code>@​actions/github</code> in the dependencies
group</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/1072469591c13fda1d8dba1d1ac2e80187e247d7"><code>1072469</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/701">#701</a>
from dependabot/dependabot/github_actions/actions/cre...</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/43f8a0055c8e32587be67e097dff89a6823c9752"><code>43f8a00</code></a>
build(deps): bump actions/create-github-app-token from 3.0.0 to
3.1.1</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/b4d904a50935c8ebe744da148ea8a18a43fe72e1"><code>b4d904a</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/703">#703</a>
from dependabot/dependabot/npm_and_yarn/globals-17.5.0</li>
<li><a
href="https://github.com/dependabot/fetch-metadata/commit/c8046bb877d9989cc848797de1b944bc3e93ef82"><code>c8046bb</code></a>
build(deps-dev): bump globals from 17.4.0 to 17.5.0</li>
<li>Additional commits viewable in <a
href="https://github.com/dependabot/fetch-metadata/compare/ffa630c65fa7e0ecfa0625b5ceda64399aea1b36...25dd0e34f4fe68f24cc83900b1fe3fe149efef98">compare
view</a></li>
</ul>
</details>
<br />

Updates `trufflesecurity/trufflehog` from 3.94.3 to 3.95.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's
releases</a>.</em></p>
<blockquote>
<h2>v3.95.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert &quot;[INS-397] Fix git version parser panic on non-numeric
patch versions&quot; by <a
href="https://github.com/trufflesteeeve"><code>@​trufflesteeeve</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4903">trufflesecurity/trufflehog#4903</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.95.1...v3.95.2">https://github.com/trufflesecurity/trufflehog/compare/v3.95.1...v3.95.2</a></p>
<h2>v3.95.1</h2>
<h2>What's Changed</h2>
<ul>
<li>[INS-444] Fix verification logic in Mesibo detector by <a
href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4884">trufflesecurity/trufflehog#4884</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.95.0...v3.95.1">https://github.com/trufflesecurity/trufflehog/compare/v3.95.0...v3.95.1</a></p>
<h2>v3.95.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Upgrade golangci-lint in CI runner and Makefile by <a
href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4861">trufflesecurity/trufflehog#4861</a></li>
<li>Deprecate SquareUp Detector by <a
href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4855">trufflesecurity/trufflehog#4855</a></li>
<li>[INS-397] Fix git version parser panic on non-numeric patch versions
by <a
href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4882">trufflesecurity/trufflehog#4882</a></li>
<li>Fix Bitbucket line highlighting URLs by <a
href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4854">trufflesecurity/trufflehog#4854</a></li>
<li>[INS-403] Support Custom endpoint config in hashicorpvaultauth
Detector by <a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4825">trufflesecurity/trufflehog#4825</a></li>
<li>[INS-398] Added tests to ensure that custom endpoint configuration
works in artifactory detectors by <a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4832">trufflesecurity/trufflehog#4832</a></li>
<li>Host ldap-verify library in trufflesecurity by <a
href="https://github.com/trufflesteeeve"><code>@​trufflesteeeve</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4859">trufflesecurity/trufflehog#4859</a></li>
<li>Add AnalysisError type and wrap all analyzer error paths by <a
href="https://github.com/johnelliott"><code>@​johnelliott</code></a> in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4779">trufflesecurity/trufflehog#4779</a></li>
<li>dep-updates: Go 1.25 and dependency refreshes by <a
href="https://github.com/dustin-decker"><code>@​dustin-decker</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4888">trufflesecurity/trufflehog#4888</a></li>
<li>Fix nil pointer panics in GitHub analyzer gist/repo binding
functions by <a
href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4864">trufflesecurity/trufflehog#4864</a></li>
<li>[INS-399] Added Bitbucket data center(on prem) PAT detector by <a
href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4883">trufflesecurity/trufflehog#4883</a></li>
<li>[INS-402] Add Jira Data Center PAT Detector by <a
href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4872">trufflesecurity/trufflehog#4872</a></li>
<li>Add man page generation for trufflehog by <a
href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4894">trufflesecurity/trufflehog#4894</a></li>
<li>Add Confluence Data Center PAT detector by <a
href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4886">trufflesecurity/trufflehog#4886</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.94.3...v3.95.0">https://github.com/trufflesecurity/trufflehog/compare/v3.94.3...v3.95.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/17456f8c7d042d8c82c9a8ca9e937231f9f42e26"><code>17456f8</code></a>
Revert &quot;[INS-397] Fix git version parser panic on non-numeric patch
versions ...</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/2b8081980d685410c8d97588786fb1cfa946b35a"><code>2b80819</code></a>
[INS-444] Fix verification logic in Mesibo detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4884">#4884</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/65725840a041bf31aec4473016b803900070127d"><code>6572584</code></a>
Add Confluence Data Center PAT detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4886">#4886</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/4d2a8ef686341ee81a283d1d0fbcb97a5017ef35"><code>4d2a8ef</code></a>
Add man page generation for trufflehog (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4894">#4894</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/0d5afcefc50330bfd4a58909e85c6223c42ff619"><code>0d5afce</code></a>
[INS-402] Add Jira Data Center PAT Detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4872">#4872</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/0112444f7789f314bd51102571107a90c1a89b68"><code>0112444</code></a>
[INS-399] Added Bitbucket data center(on prem) PAT detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4883">#4883</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/371e227ee8a3622333f2d4d2d95fa5fc6a60b010"><code>371e227</code></a>
Fix nil pointer panics in GitHub analyzer gist/repo binding functions
(<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4864">#4864</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/794a6e5211d8b9c554a27a582c68e71189c5c33a"><code>794a6e5</code></a>
dep-updates: Go 1.25, refresh modules, add dependency workflow skill (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4888">#4888</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/761be8877b62e68cd4ae2efbfc50f9c7721a8f4e"><code>761be88</code></a>
Add AnalysisError type and wrap all analyzer error paths (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4779">#4779</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/3a11c8393e96981c44aa78d2b67d52d78f9220e0"><code>3a11c83</code></a>
Host ldap-verify library in trufflesecurity (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4859">#4859</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/trufflesecurity/trufflehog/compare/47e7b7cd74f578e1e3145d48f669f22fd1330ca6...17456f8c7d042d8c82c9a8ca9e937231f9f42e26">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/dependabot-automerge.yml

@@ -54,7 +54,7 @@ jobs:
     steps:
       - name: Fetch Dependabot metadata
         id: meta
-        uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v3.0.0
+        uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/quality.yml

@@ -19,7 +19,7 @@ jobs:
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@47e7b7cd74f578e1e3145d48f669f22fd1330ca6 # v3.94.3
+        uses: trufflesecurity/trufflehog@17456f8c7d042d8c82c9a8ca9e937231f9f42e26 # v3.95.2
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}

.github/workflows/secret-scanner.yml

@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0  # Full history for scanning
 
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@47e7b7cd74f578e1e3145d48f669f22fd1330ca6 # v3
+        uses: trufflesecurity/trufflehog@17456f8c7d042d8c82c9a8ca9e937231f9f42e26 # v3
         with:
           extra_args: --only-verified --fail