Update GitHub Actions by renovate[bot] · Pull Request #90 · vortex-data/vortex.dev

renovate · 2026-08-27T15:17:37Z

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action	action	patch	`v1.0.191` → `v1.0.207`
bun (source)	uses-with	minor	`1.3.14` → `1.4.0`
github/codeql-action	action	patch	`v4.37.7` → `v4.37.9`
trufflesecurity/trufflehog	action	minor	`v3.96.0` → `v3.97.1`

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

What's Changed

fix: neutralize the checkout credential under actions/checkout v6+ include layout (#1510) by @TemRevil in #1526

New Contributors

@TemRevil made their first contribution in #1526

Full Changelog: anthropics/claude-code-action@v1.0.196...v1.0.197

`v1.0.196`

Compare Source

What's Changed

fix(security): unify secret redaction in public comment outputs by @Juwan-Hwang in #1693
fix: strip unused ALL_INPUTS environment variable from Claude subprocess env by @Juwan-Hwang in #1692
fix(github): match bot actors in comment filters using GraphQL __typename by @Neal006 in #1616

New Contributors

@Juwan-Hwang made their first contribution in #1693

Full Changelog: anthropics/claude-code-action@v1.0.195...v1.0.196

`v1.0.195`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.194...v1.0.195

`v1.0.194`

Compare Source

What's Changed

Harden delete_files MCP tool: validate paths within repo root (consistency with commit_files) by @GabrielOnRails in #1636
Only limit fetch depth when the checkout is already shallow by @winklemad in #1647
fix(base-action): add ~/.local/bin to $GITHUB_PATH after auto-install by @anishesg in #1643
feat(context): include diffHunk in PR review comment context by @rishavnaskar in #1584
ci: skip Claude-backed test jobs on fork PRs by @ashwin-ant in #1655
fix: bump shell-quote to 1.8.4 to remediate CVE-2026-9277 by @doshidhaval in #1557
fix(images): bound attachment downloads by @abhinavkr26104 in #1625

New Contributors

@GabrielOnRails made their first contribution in #1636
@winklemad made their first contribution in #1647
@doshidhaval made their first contribution in #1557

Full Changelog: anthropics/claude-code-action@v1.0.193...v1.0.194

`v1.0.193`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.192...v1.0.193

`v1.0.192`

Compare Source

What's Changed

fix(mcp): paginate GitHub Actions results by @abhinavkr26104 in #1629
fix(summary): keep every text block in structured tool results by @Neal006 in #1619
fix(mcp): detect binary files by content instead of extension allowlist by @henriquepe in #1633

New Contributors

@abhinavkr26104 made their first contribution in #1629
@Neal006 made their first contribution in #1619
@henriquepe made their first contribution in #1633

Full Changelog: anthropics/claude-code-action@v1.0.191...v1.0.192

oven-sh/bun (bun)

`v1.4.0`: Bun v1.4

Compare Source

To install Bun v1.4

curl -fsSL https://bun.com/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.0:

bun upgrade

Read the blog post:

Thank you

Bun is free, open source, and MIT-licensed. We receive a lot of contributions from the community, and we'd like to thank everyone who fixed a bug or contributed since Bun v1.3.

github/codeql-action (github/codeql-action)

`v4.37.9`

Compare Source

Update default CodeQL bundle version to 2.26.4. #4106

`v4.37.8`

Compare Source

No user facing changes.

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

`v3.97.1`

Compare Source

`v3.97.0`

Compare Source

What's Changed

fix(detectors/privatekey): report encrypted keys with uncrackable passphrases by @genisis0x in #5127
Update module go.mongodb.org/mongo-driver to v1.17.7 [SECURITY] by @renovate[bot] in #5058
Remove url tag from common HTTP client metrics by @mcastorina in #5158
Update github.com/avast/apkparser digest to 7fcaee4 by @renovate[bot] in #5037
[INS-318] Add New Relic License Key Detector by @mustansir14 in #4760
[INS-348] Add New Relic Browser Key detector by @mustansir14 in #4769
[INS-339] Add New Relic User Key detector by @mustansir14 in #4794
[INS-345] Add New Relic Insights Query Key detector by @mustansir14 in #4781
fix(sources): stop UnitHook Close racing in-flight Finish sends by @bill-rich in #5154
There are now 3 CircleCI projects by @trufflesteeeve in #5166
Update github.com/shurcooL/githubv4 digest to 2402fdf by @renovate[bot] in #5038
Update github-actions by @renovate[bot] in #5036
Update aws-sdk-go-v2 monorepo by @renovate[bot] in #4890
[INS-344] Add New Relic Mobile App Token Detector by @mustansir14 in #4810
Give each clone its own directory under --clone-path by @shahzadhaider1 in #5175
feat(output): add SARIF output format for GitHub code scanning by @kashifkhan0771 in #5165
[SCAN-1018] Treat SlackWebhook invalid_token (HTTP 400) as determinate not-live by @alafiand in #5177
make cwd-changing normalization tests non-parallel to fix flaky clone failures by @jordanTunstill in #5178
[INS-456] Add Microsoft Teams Webhook V2 detector by @mustansir14 in #4902
surface git clone errors at v(0) by @jordanTunstill in #5162
Add Figma Personal Access Token v3 Detector by @shahzadhaider1 in #4790
fix(github): fallback resource Name to avoid empty-string proto validation failure by @kashifkhan0771 in #5182
[INT-643] Update Protos definition to cater bitbucket Api token authentication by @MuneebUllahKhan222 in #5171
Update regex pattern and 403 handling in the Lob detector to fix false positives by @MachiavelliII in #5188
Deprecate AppOptics detector by @Ahsan-Sarbaz in #5198
Anthropic detector: surface API error detail on non-2xx verification by @Ahsan-Sarbaz in #5180
Deprecated bingsubscriptionkey detector by @Ahsan-Sarbaz in #5179
Add SolarWinds Observability detector by @Ahsan-Sarbaz in #5199
fix(jiratoken): stop 202 reverification retry loop by @Ahsan-Sarbaz in #5200
Add custom endpoint support to the S3 source by @shahzadhaider1 in #5202
fix(blogger): anchor regex to AIzaSy prefix to eliminate false positives by @unsmith in #5203
fix(huggingface): move unscoped fine-grained models to UnboundedResources by @unsmith in #5204
Add AWS Secrets Manager metadata type by @rosecodym in #5210
fix(detectors/harness): allow underscore in PAT account segment by @mattbrady-1 in #5153

New Contributors

@MachiavelliII made their first contribution in #5188
@Ahsan-Sarbaz made their first contribution in #5198
@unsmith made their first contribution in #5203

Full Changelog: trufflesecurity/trufflehog@v3.96.0...v3.97.0

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-08-27T15:17:39Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vortex	Ready	Preview	Aug 27, 2026 3:17pm

Update GitHub Actions

ae52e0c

renovate Bot added dependencies Pull requests that update a dependency file github-actions labels Aug 27, 2026

renovate Bot enabled auto-merge (squash) August 27, 2026 15:17

renovate-approve Bot approved these changes Aug 27, 2026

View reviewed changes

vercel Bot deployed to Preview August 27, 2026 15:17 View deployment

renovate Bot merged commit 6f49d10 into main Aug 27, 2026
11 of 13 checks passed

renovate Bot deleted the renovate/github-actions branch August 27, 2026 15:19

Navigation Menu

Uh oh!

Update GitHub Actions - #90

Update GitHub Actions#90
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented Aug 27, 2026

Uh oh!

vercel Bot commented Aug 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 27, 2026

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v1.4.0: Bun v1.4

Thank you

What's Changed

New Contributors

Configuration

Uh oh!

vercel Bot commented Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v1.4.0`: Bun v1.4

vercel Bot commented Aug 27, 2026 •

edited

Loading