build(deps): bump gitleaks/gitleaks-action from 2 to 3 #13

Merged

dependabot[bot] merged 1 commit from dependabot/github_actions/gitleaks/gitleaks-action-3 into main

2026-06-02 15:17:12 -05:00

dependabot[bot] commented

2026-06-02 14:38:05 -05:00

(Migrated from github.com)

Bumps gitleaks/gitleaks-action from 2 to 3.

Release notes

Sourced from gitleaks/gitleaks-action's releases.

v3.0.0

What's changed

gitleaks-action v3 migrates the runtime from Node 20 to Node 24. No changes to inputs, outputs, or behavior. Update your workflow from gitleaks/gitleaks-action@v2 to gitleaks/gitleaks-action@v3.

Migration
# Before
- uses: gitleaks/gitleaks-action@v2
After

uses: gitleaks/gitleaks-action@v3
Why

GitHub is deprecating the Node 20 runtime for Actions:

June 2, 2026: GitHub flips the runner default to Node 24. Workflows using gitleaks-action@v2 (Node 20) will still run, but only if ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true is set as an environment variable.

September 16, 2026: Node 20 is removed from GitHub-hosted runners entirely. gitleaks-action@v2 stops working regardless of any opt-out flag.

Changes

action.yml: runtime node20 → node24

@actions/core: 1.10.0 → 1.11.1

dist/ rebuilt

Example workflows updated to actions/checkout@v6 and gitleaks-action@v3

README updated with v3 migration guide

Self-hosted runners

If you use self-hosted runners, ensure your runner version is >= v2.327.1 (required for Node 24 support).

v2.3.9

What's Changed

bump cache by @zricethezav in gitleaks/gitleaks-action#181

Full Changelog: https://github.com/gitleaks/gitleaks-action/compare/v2.3.8...v2.3.9

v2.3.8

What's Changed

Add environment variable to override gitleaks baseRef by @paulschuberth in gitleaks/gitleaks-action#113

bump default gitleaks version, update license filename, fix vulns by @zricethezav in gitleaks/gitleaks-action#178

New Contributors

@paulschuberth made their first contribution in gitleaks/gitleaks-action#113

Full Changelog: https://github.com/gitleaks/gitleaks-action/compare/v2.3.7...v2.3.8

... (truncated)

Commits

e0c47f4 chore: migrate to Node 24 runtime (v3)
bf2dc8e Merge pull request #191 from Olexandr88/patch-1
b71323b Update README.md
9c66aa9 Update README.md
186c3fe Create FUNDING.yml
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gitleaks/gitleaks-action/releases">gitleaks/gitleaks-action's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <h2>What's changed</h2> <p>gitleaks-action v3 migrates the runtime from Node 20 to Node 24. <strong>No changes to inputs, outputs, or behavior.</strong> Update your workflow from <code>gitleaks/gitleaks-action@v2</code> to <code>gitleaks/gitleaks-action@v3</code>.</p> <h3>Migration</h3> <pre lang="yaml"><code># Before - uses: gitleaks/gitleaks-action@v2 <h1>After</h1> <ul> <li>uses: gitleaks/gitleaks-action@v3<br /> </code></pre></li> </ul> <h3>Why</h3> <p>GitHub is deprecating the Node 20 runtime for Actions:</p> <ul> <li><strong>June 2, 2026:</strong> GitHub flips the runner default to Node 24. Workflows using <code>gitleaks-action@v2</code> (Node 20) will still run, but only if <code>ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true</code> is set as an environment variable.</li> <li><strong>September 16, 2026:</strong> Node 20 is removed from GitHub-hosted runners entirely. <code>gitleaks-action@v2</code> stops working regardless of any opt-out flag.</li> </ul> <h3>Changes</h3> <ul> <li><code>action.yml</code>: runtime <code>node20</code> → <code>node24</code></li> <li><code>@actions/core</code>: 1.10.0 → 1.11.1</li> <li><code>dist/</code> rebuilt</li> <li>Example workflows updated to <code>actions/checkout@v6</code> and <code>gitleaks-action@v3</code></li> <li>README updated with v3 migration guide</li> </ul> <h3>Self-hosted runners</h3> <p>If you use self-hosted runners, ensure your runner version is <code>>= v2.327.1</code> (required for Node 24 support).</p> <h2>v2.3.9</h2> <h2>What's Changed</h2> <ul> <li>bump cache by <a href="https://github.com/zricethezav"><code>@zricethezav</code></a> in <a href="https://redirect.github.com/gitleaks/gitleaks-action/pull/181">gitleaks/gitleaks-action#181</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gitleaks/gitleaks-action/compare/v2.3.8...v2.3.9">https://github.com/gitleaks/gitleaks-action/compare/v2.3.8...v2.3.9</a></p> <h2>v2.3.8</h2> <h2>What's Changed</h2> <ul> <li>Add environment variable to override gitleaks baseRef by <a href="https://github.com/paulschuberth"><code>@paulschuberth</code></a> in <a href="https://redirect.github.com/gitleaks/gitleaks-action/pull/113">gitleaks/gitleaks-action#113</a></li> <li>bump default gitleaks version, update license filename, fix vulns by <a href="https://github.com/zricethezav"><code>@zricethezav</code></a> in <a href="https://redirect.github.com/gitleaks/gitleaks-action/pull/178">gitleaks/gitleaks-action#178</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/paulschuberth"><code>@paulschuberth</code></a> made their first contribution in <a href="https://redirect.github.com/gitleaks/gitleaks-action/pull/113">gitleaks/gitleaks-action#113</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gitleaks/gitleaks-action/compare/v2.3.7...v2.3.8">https://github.com/gitleaks/gitleaks-action/compare/v2.3.7...v2.3.8</a></p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gitleaks/gitleaks-action/commit/e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e"><code>e0c47f4</code></a> chore: migrate to Node 24 runtime (v3)</li> <li><a href="https://github.com/gitleaks/gitleaks-action/commit/bf2dc8e55639c1e091e9b45970152e4313705814"><code>bf2dc8e</code></a> Merge pull request <a href="https://redirect.github.com/gitleaks/gitleaks-action/issues/191">#191</a> from Olexandr88/patch-1</li> <li><a href="https://github.com/gitleaks/gitleaks-action/commit/b71323b056f4cc8c7f4cc7decfcc26b5e80b8e15"><code>b71323b</code></a> Update README.md</li> <li><a href="https://github.com/gitleaks/gitleaks-action/commit/9c66aa96d2700e2b6aa0f9f7021ae6e5cc7a4375"><code>9c66aa9</code></a> Update README.md</li> <li><a href="https://github.com/gitleaks/gitleaks-action/commit/186c3fea8923e06a92dc3806067ad6afaf53e754"><code>186c3fe</code></a> Create FUNDING.yml</li> <li>See full diff in <a href="https://github.com/gitleaks/gitleaks-action/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gitleaks/gitleaks-action&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Gitchegumi (Migrated from github.com) approved these changes

2026-06-02 15:17:04 -05:00

No reviewers

Gitchegumi

No milestone

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

gitchegumi/GitchAlerts!13

No description provided.

Rows
Columns