Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
anthropics/claude-code-action	action	patch	v1.0.210 → v1.0.225	v1.0.236 (+10)
bun (source)	uses-with	patch	1.4.0 → 1.4.2
github/codeql-action	action	minor	v4.37.9 → v4.38.0	v4.38.2 (+1)
trufflesecurity/trufflehog	action	patch	v3.97.1 → v3.97.4	v3.97.9 (+4)

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.225

Compare Source

v1.0.224

Compare Source

v1.0.223

Compare Source

v1.0.222

Compare Source

v1.0.221

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.220...v1.0.221

v1.0.220

Compare Source

v1.0.219

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.218...v1.0.219

v1.0.218

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.217...v1.0.218

v1.0.217

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.216...v1.0.217

v1.0.216

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.215...v1.0.216

v1.0.215

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.214...v1.0.215

v1.0.214

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.213...v1.0.214

v1.0.213

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.212...v1.0.213

v1.0.212

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.211...v1.0.212

v1.0.211

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.210...v1.0.211

oven-sh/bun (bun)

v1.4.2: Bun v1.4.2

Compare Source

To install Bun v1.4.2

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.2:

bun upgrade

Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

• @​dylan-conway
• @​jarred-sumner
• @​robobun

v1.4.1

Compare Source

github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.97.4

Compare Source

What's Changed

• Make Transport Errors indeterminate for Twilio secrets and twilioapikeys by @​jordanTunstill in #​5267
• Improve the json-enumerator source by @​bradlarsen in #​5265
• added tests for twilio detector fixes by @​jordanTunstill in #​5271

Full Changelog: trufflesecurity/trufflehog@v3.97.3...v3.97.4

v3.97.3

Compare Source

What's Changed

• fix(s3): cut a child context per object so key/size log values don't pile up by @​mariduv in #​5236
• Revert "[INT-933] De-base64 SourceUnit.UnitData in the GitHub Source" by @​trufflesteeeve in #​5269

Full Changelog: trufflesecurity/trufflehog@v3.97.2...v3.97.3

v3.97.2

Compare Source

What's Changed

• detectors/github/v2: differentiate token type in ExtraData by @​hartsock in #​5223
• Update dependency trufflesecurity/.github to v1.0.4 by @​renovate[bot] in #​5228
• ci: let Renovate bump the golangci-lint pin in scripts/lint.sh by @​bryanbeverly in #​5231
• Update github.com/trufflesecurity/ldap-verify digest to aa52b46 by @​renovate[bot] in #​5172
• Update github-actions by @​renovate[bot] in #​5197
• Update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​5173
• Update module github.com/aws/smithy-go to v1.27.9 by @​renovate[bot] in #​5174
• [SCAN-18] Add SOURCE_TYPE_AWS_SECRETS_MANAGER source type by @​dipto-truffle in #​5234
• [INS-377] Add V2 for weights and biases detector by @​mustansir14 in #​4951
• Fix PagerDuty detector: treat 403 and 402 as verified credentials by @​unsmith in #​5230
• [INT-933] De-base64 SourceUnit.UnitData in the GitHub Source by @​camgunz in #​5248
• Implement Enumerate for the Jenkins source by @​Ahsan-Sarbaz in #​5229
• Update link to Truffle Security documentation by @​shahzadhaider1 in #​5256
• Retry git clone on secondary rate limit (bare 403/429) by @​kashifkhan0771 in #​5260

New Contributors

• @​hartsock made their first contribution in #​5223

Full Changelog: trufflesecurity/trufflehog@v3.97.1...v3.97.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
vortex	Ready	Preview	Sep 29, 2026 4:00am UTC