chore(deps): bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 - #1349

Open

dependabot[bot] wants to merge 1 commit into

mainfrom

dependabot/github_actions/gitleaks/gitleaks-action-3.0.0

dependabot Bot commented on behalf of github Aug 21, 2026

Contributor

Bumps gitleaks/gitleaks-action from 2.3.9 to 3.0.0.

Release notes

Sourced from gitleaks/gitleaks-action's releases.

v3.0.0

What's changed

gitleaks-action v3 migrates the runtime from Node 20 to Node 24. No changes to inputs, outputs, or behavior. Update your workflow from gitleaks/gitleaks-action@v2 to gitleaks/gitleaks-action@v3.

Migration
# Before
- uses: gitleaks/gitleaks-action@v2
After

uses: gitleaks/gitleaks-action@v3
Why

GitHub is deprecating the Node 20 runtime for Actions:

June 2, 2026: GitHub flips the runner default to Node 24. Workflows using gitleaks-action@v2 (Node 20) will still run, but only if ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true is set as an environment variable.

September 16, 2026: Node 20 is removed from GitHub-hosted runners entirely. gitleaks-action@v2 stops working regardless of any opt-out flag.

Changes

action.yml: runtime node20 → node24

@actions/core: 1.10.0 → 1.11.1

dist/ rebuilt

Example workflows updated to actions/checkout@v6 and gitleaks-action@v3

README updated with v3 migration guide

Self-hosted runners

If you use self-hosted runners, ensure your runner version is >= v2.327.1 (required for Node 24 support).

Commits

e0c47f4 chore: migrate to Node 24 runtime (v3)
bf2dc8e Merge pull request #191 from Olexandr88/patch-1
b71323b Update README.md
9c66aa9 Update README.md
186c3fe Create FUNDING.yml
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot Bot assigned dlrsp-dev

dependabot Bot added the 📦 dependencies label

dependabot Bot requested a review from dlrsp-dev as a code owner

August 21, 2026 20:22

dependabot Bot added the 📦 dependencies label

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from c12dd2d to 48f346d Compare

August 23, 2026 08:38

dlrsp-actions Bot added the needs-human-review label

dlrsp-actions Bot commented Aug 23, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 48f346d to 1683f76 Compare

August 24, 2026 08:38

dlrsp-actions Bot commented Aug 24, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 1683f76 to 648c48b Compare

August 24, 2026 08:45

dlrsp-actions Bot commented Aug 24, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 648c48b to 48d195a Compare

August 25, 2026 08:32

dlrsp-actions Bot commented Aug 25, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 48d195a to 2fbb49d Compare

August 25, 2026 08:39

dlrsp-actions Bot commented Aug 25, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 2fbb49d to 1627518 Compare

August 25, 2026 08:52

dlrsp-actions Bot commented Aug 25, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch 2 times, most recently from 2b90d90 to 05fc445 Compare

August 26, 2026 08:39

dlrsp-actions Bot commented Aug 26, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

1 similar comment

dlrsp-actions Bot commented Aug 26, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 05fc445 to 81aaa9b Compare

August 26, 2026 08:53

dlrsp-actions Bot commented Aug 26, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 81aaa9b to 90f989c Compare

August 27, 2026 18:34

dlrsp-actions Bot commented Aug 27, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 90f989c to a859a87 Compare

August 27, 2026 18:47

dlrsp-actions Bot commented Aug 27, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from a859a87 to 110c73e Compare

August 27, 2026 19:09

dlrsp-actions Bot commented Aug 27, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 110c73e to 04256f5 Compare

August 28, 2026 19:48

dlrsp-actions Bot commented Aug 29, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from cddfb5c to 4fe1d65 Compare

August 30, 2026 13:27

dlrsp-actions Bot commented Aug 30, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 4fe1d65 to a605183 Compare

August 30, 2026 13:34

dlrsp-actions Bot commented Aug 30, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from a605183 to d5b2879 Compare

August 31, 2026 15:39

dlrsp-actions Bot commented Aug 31, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from d5b2879 to 0c52254 Compare

August 31, 2026 15:46

dlrsp-actions Bot commented Aug 31, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 0c52254 to 153d59e Compare

September 1, 2026 12:55

dlrsp-actions Bot commented Sep 1, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 153d59e to b37db30 Compare

September 1, 2026 13:02

dlrsp-actions Bot commented Sep 1, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from b37db30 to 918972c Compare

September 1, 2026 13:22

dlrsp-actions Bot commented Sep 1, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 918972c to 62451b8 Compare

September 2, 2026 12:24

dlrsp-actions Bot commented Sep 2, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 62451b8 to 9154ddb Compare

September 2, 2026 12:32

dlrsp-actions Bot commented Sep 2, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 9154ddb to a7351cb Compare

September 2, 2026 12:44

dlrsp-actions Bot commented Sep 2, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch 2 times, most recently from c56a109 to 1b25f74 Compare

September 3, 2026 12:31

dlrsp-actions Bot commented Sep 3, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

1 similar comment

dlrsp-actions Bot commented Sep 3, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 1b25f74 to 2b876d8 Compare

September 5, 2026 11:31

dlrsp-actions Bot commented Sep 5, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy


          chore(deps): bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0

9acbe9c

Bumps [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) from 2.3.9 to 3.0.0.
- [Release notes](https://github.com/gitleaks/gitleaks-action/releases)
- [Commits](gitleaks/gitleaks-action@v2.3.9...v3.0.0)

---
updated-dependencies:
- dependency-name: gitleaks/gitleaks-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 2b876d8 to 9acbe9c Compare

September 5, 2026 11:38

dlrsp-actions Bot commented Sep 5, 2026

Contributor

Policy gate blocked this PR: default-fail: matched catch-all policy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

📦 dependencies needs-human-review