chore(deps): update all non-major dependencies

Author: renovate[bot]

.github/workflows/check-pr-title.yaml

@@ -30,7 +30,7 @@ jobs:
           requireScope: false
           wip: true
 
-      - uses: marocchino/sticky-pull-request-comment@v2.9.0
+      - uses: marocchino/sticky-pull-request-comment@67d0dec7b07ed060a405f9b2a64b8ab319fdd7db # v2.9.2
         # When the previous steps fails, the workflow would stop. By adding this
         # condition you can continue the execution with the populated error message.
         if: always() && (steps.lint_pr_title.outputs.error_message != null)
@@ -52,7 +52,7 @@ jobs:
 
       # Delete a previous comment when the issue has been resolved
       - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
-        uses: marocchino/sticky-pull-request-comment@v2.9.0
+        uses: marocchino/sticky-pull-request-comment@67d0dec7b07ed060a405f9b2a64b8ab319fdd7db # v2.9.2
         with:
           header: pr-title-lint-error
           GITHUB_TOKEN: ${{ github.token }}

.github/workflows/secrets_scanner.yaml

@@ -7,11 +7,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: TruffleHog OSS
-        uses: trufflesecurity/trufflehog@06bbd6fd493fcac4a6db0e4850a92bcf932fafed # v3.81.10
+        uses: trufflesecurity/trufflehog@d722a7e50645c42123e31fe97761a88ade988db8 # v3.88.25
         with:
           path: ./
           base: ${{ github.event.repository.default_branch }}

bun.lockb

@@ -7,7 +7,7 @@
     "@openzeppelin/contracts": "^5.2.0",
     "@typechain/ethers-v6": "^0.5.1",
     "@typechain/hardhat": "^9.1.0",
-    "dotenv": "^16.4.7",
+    "dotenv": "^16.5.0",
     "ethers": "^6.13.5",
     "hardhat": "^2.22.18",
     "ts-node": "^10.9.2",