Skip to content

chore(deps): update pre-commit hook mongodb/kingfisher to v1.92.0#304

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/mongodb-kingfisher-1.x
Mar 30, 2026
Merged

chore(deps): update pre-commit hook mongodb/kingfisher to v1.92.0#304
renovate[bot] merged 1 commit intomainfrom
renovate/mongodb-kingfisher-1.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 30, 2026

This PR contains the following updates:

Package Type Update Change
mongodb/kingfisher repository minor v1.91.0v1.92.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

mongodb/kingfisher (mongodb/kingfisher)

v1.92.0

Compare Source

  • Added new built-in rules for Etsy, Flutterwave, Freemius, JFrog, Kraken, KuCoin, Trello, Octopus Deploy, OpenShift, Private AI, SettleMint, Sidekiq, and Polymarket.
  • Added live HTTP validation for Etsy, JFrog, Octopus Deploy, OpenShift, and Private AI where provider documentation supported reliable token-only checks.
  • Added detection + validation rules for Anthropic Admin, Azure Speech, Azure Translator, Databento, DataStax Astra, DevCycle, Fullstory, GC Notify, and Stytch; built-in runtime rule count is now 601 with --confidence=low.
  • Added Heroku token revocation support for both legacy UUID-format tokens and HRKU- platform tokens via the OAuth authorizations API.
  • Added hmac_sha256_b64key Liquid filter for HMAC-SHA256 signing with base64-encoded keys (decodes key to raw bytes before signing), enabling correct Azure Notification Hub SAS validation.
  • Integrated SLSA v3 provenance generation into the release workflow; hash computation now scopes to build artifacts only for idempotent re-runs.
  • Removed Zapier webhook live validation (GET to a catch hook triggers the Zap).
  • Hardened Heroku revocation regex to prevent crossing JSON object boundaries when extracting authorization IDs.
  • Fixed Zendesk subdomain regex to reject trailing hyphens; renamed ZENDESK_SUBDOMAIN to ZENDESK_HOST for clarity.
  • Fixed Stytch and Polymarket trailing \b boundaries that prevented matching base64-padded secrets ending with =.
  • Tightened Kubernetes API Server URL pattern to require kube-specific identifiers, preventing bootstrap tokens from binding to unrelated server: entries.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Third-party library dependencies. label Mar 30, 2026
@renovate renovate bot enabled auto-merge (squash) March 30, 2026 09:32
@renovate renovate bot added the dependencies Third-party library dependencies. label Mar 30, 2026
@renovate renovate bot merged commit 86a0e04 into main Mar 30, 2026
8 checks passed
@renovate renovate bot deleted the renovate/mongodb-kingfisher-1.x branch March 30, 2026 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Third-party library dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants