From 724051dc74e1443862a7e6123fad8a167ab2d5bb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Oct 2026 21:11:03 +0000
Subject: [PATCH] chore(deps): bump the actions group with 2 updates

Bumps the actions group with 2 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).


Updates `ruby/setup-ruby` from 1.329.0 to 1.331.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/v1.329.0...v1.331.0)

Updates `trufflesecurity/trufflehog` from 3.99.2 to 3.99.3
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.99.2...v3.99.3)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.331.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.99.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/actions.lock        | 16 ++++++++--------
 .github/workflows/quality.yml         |  4 ++--
 .github/workflows/security-policy.yml |  4 ++--
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index 0a3c33d0..969188b2 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -74,7 +74,7 @@ workflows:
         - 'actions/upload-pages-artifact@v5.0.0'
         - 'dtolnay/rust-toolchain@v1'
         - 'editorconfig-checker/action-editorconfig-checker@v3.0.0'
-        - 'ruby/setup-ruby@v1.329.0'
+        - 'ruby/setup-ruby@v1.331.0'
     '.github/workflows/release.yml':
         - 'actions/attest-build-provenance@v4.2.2'
         - 'actions/checkout@v7.0.1'
@@ -107,7 +107,7 @@ workflows:
         - 'github/codeql-action@v4.38.2'
         - 'gitleaks/gitleaks-action@v3.0.0'
         - 'taiki-e/install-action@v2.87.29'
-        - 'trufflesecurity/trufflehog@v3.99.2'
+        - 'trufflesecurity/trufflehog@v3.99.3'
     '.github/workflows/tests.yml':
         - 'actions/cache@v6.1.0'
         - 'actions/checkout@v7.0.1'
@@ -380,9 +380,9 @@ dependencies:
         commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6'
         owner_id: 108928776
         repo_id: 512644635
-    'ruby/setup-ruby@v1.329.0':
-        ref: 'v1.329.0'
-        commit: 'sha1-651ff0d62c5c79bed6d53ec518387aae20e72c1a'
+    'ruby/setup-ruby@v1.331.0':
+        ref: 'v1.331.0'
+        commit: 'sha1-824c0e29fdfc7d689c191c27acc969d2d04b7dd8'
         owner_id: 210414
         repo_id: 231208785
     'softprops/action-gh-release@v3.0.3':
@@ -400,9 +400,9 @@ dependencies:
         commit: 'sha1-8cca0918f8471c33515202b73f56ab27f2bed283'
         owner_id: 43724913
         repo_id: 442947557
-    'trufflesecurity/trufflehog@v3.99.2':
-        ref: 'v3.99.2'
-        commit: 'sha1-e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9'
+    'trufflesecurity/trufflehog@v3.99.3':
+        ref: 'v3.99.3'
+        commit: 'sha1-e63326d6545de8f425d93ce24078c6e68d83f70e'
         owner_id: 79229934
         repo_id: 77726177
     'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 3d9c9aa9..6af23c3c 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1.329.0
+        uses: ruby/setup-ruby@v1.331.0
         with:
           ruby-version: '3.2'
           bundler-cache: true
@@ -226,7 +226,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1.329.0
+        uses: ruby/setup-ruby@v1.331.0
         with:
           ruby-version: '3.2'
 
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
index c3b37c25..f0394d52 100644
--- a/.github/workflows/security-policy.yml
+++ b/.github/workflows/security-policy.yml
@@ -472,7 +472,7 @@ jobs:
       # ======================================================================
 
       - name: Gate A — verified credentials fail the gate
-        uses: trufflesecurity/trufflehog@v3.99.2
+        uses: trufflesecurity/trufflehog@v3.99.3
         with:
           path: ./
           base: ${{ steps.th.outputs.base }}
@@ -481,7 +481,7 @@ jobs:
           extra_args: --results=verified
 
       - name: Gate B — private keys fail the gate even when unverified
-        uses: trufflesecurity/trufflehog@v3.99.2
+        uses: trufflesecurity/trufflehog@v3.99.3
         with:
           path: ./
           base: ${{ steps.th.outputs.base }}