chore(deps): bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 by dependabot[bot] · Pull Request #1349 · DLRSP/workflows

dependabot · 2026-08-21T20:22:51Z

Bumps gitleaks/gitleaks-action from 2.3.9 to 3.0.0.

Release notes

Sourced from gitleaks/gitleaks-action's releases.

v3.0.0

What's changed

gitleaks-action v3 migrates the runtime from Node 20 to Node 24. No changes to inputs, outputs, or behavior. Update your workflow from gitleaks/gitleaks-action@v2 to gitleaks/gitleaks-action@v3.

Migration
# Before
- uses: gitleaks/gitleaks-action@v2
After

uses: gitleaks/gitleaks-action@v3
Why

GitHub is deprecating the Node 20 runtime for Actions:

June 2, 2026: GitHub flips the runner default to Node 24. Workflows using gitleaks-action@v2 (Node 20) will still run, but only if ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true is set as an environment variable.

September 16, 2026: Node 20 is removed from GitHub-hosted runners entirely. gitleaks-action@v2 stops working regardless of any opt-out flag.

Changes

action.yml: runtime node20 → node24

@actions/core: 1.10.0 → 1.11.1

dist/ rebuilt

Example workflows updated to actions/checkout@v6 and gitleaks-action@v3

README updated with v3 migration guide

Self-hosted runners

If you use self-hosted runners, ensure your runner version is >= v2.327.1 (required for Node 24 support).

Commits

e0c47f4 chore: migrate to Node 24 runtime (v3)
bf2dc8e Merge pull request #191 from Olexandr88/patch-1
b71323b Update README.md
9c66aa9 Update README.md
186c3fe Create FUNDING.yml
See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dlrsp-actions · 2026-08-23T08:44:17Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-24T08:44:56Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-24T08:50:43Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-25T08:38:47Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-25T08:45:24Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-25T08:57:28Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-26T08:40:10Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-26T08:46:25Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-26T09:00:52Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-27T18:44:51Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-27T18:55:49Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-08-27T19:23:58Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-28T15:07:13Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-29T14:52:38Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-29T14:58:43Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-29T15:15:52Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-30T14:47:08Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-30T14:52:39Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-31T14:06:34Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-31T14:11:28Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-31T14:33:33Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-31T21:00:51Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-10-31T21:04:41Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-01T14:42:03Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-01T14:46:14Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-01T14:58:07Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-02T17:42:47Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-02T17:45:53Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-02T18:10:28Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-03T15:41:14Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-03T15:46:00Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-03T16:08:23Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-05T16:03:56Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-05T16:25:43Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-06T15:55:18Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-07T14:35:45Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-07T14:39:39Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-07T14:54:43Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-08T14:45:09Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dlrsp-actions · 2026-11-08T14:48:33Z

Policy gate blocked this PR: default-fail: matched catch-all policy

Bumps [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) from 2.3.9 to 3.0.0. - [Release notes](https://github.com/gitleaks/gitleaks-action/releases) - [Commits](gitleaks/gitleaks-action@v2.3.9...v3.0.0) --- updated-dependencies: - dependency-name: gitleaks/gitleaks-action dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dlrsp-actions · 2026-11-08T15:00:35Z

Policy gate blocked this PR: default-fail: matched catch-all policy

dependabot Bot assigned dlrsp-dev Aug 21, 2026

dependabot Bot added the 📦 dependencies Update of dependencies label Aug 21, 2026

dependabot Bot requested a review from dlrsp-dev as a code owner August 21, 2026 20:22

dependabot Bot added the 📦 dependencies Update of dependencies label Aug 21, 2026

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from c12dd2d to 48f346d Compare August 23, 2026 08:38

dlrsp-actions Bot added the needs-human-review Policy gate blocked; human review required label Aug 23, 2026

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 48f346d to 1683f76 Compare August 24, 2026 08:38

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 1683f76 to 648c48b Compare August 24, 2026 08:45

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 648c48b to 48d195a Compare August 25, 2026 08:32

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 48d195a to 2fbb49d Compare August 25, 2026 08:39

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 2fbb49d to 1627518 Compare August 25, 2026 08:52

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch 2 times, most recently from 2b90d90 to 05fc445 Compare August 26, 2026 08:39

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 05fc445 to 81aaa9b Compare August 26, 2026 08:53

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 81aaa9b to 90f989c Compare August 27, 2026 18:34

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 90f989c to a859a87 Compare August 27, 2026 18:47

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from a859a87 to 110c73e Compare August 27, 2026 19:09

dlrsp-actions Bot force-pushed the dependabot/github_actions/gitleaks/gitleaks-action-3.0.0 branch from 110c73e to 04256f5 Compare August 28, 2026 19:48

Conversation

dependabot Bot commented on behalf of github Aug 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.0.0

What's changed

Migration

Why

Changes

Self-hosted runners

Uh oh!

dlrsp-actions Bot commented Aug 23, 2026

Uh oh!

dlrsp-actions Bot commented Aug 24, 2026

Uh oh!

dlrsp-actions Bot commented Aug 24, 2026

Uh oh!

dlrsp-actions Bot commented Aug 25, 2026

Uh oh!

dlrsp-actions Bot commented Aug 25, 2026

Uh oh!

dlrsp-actions Bot commented Aug 25, 2026

Uh oh!

dlrsp-actions Bot commented Aug 26, 2026

Uh oh!

dlrsp-actions Bot commented Aug 26, 2026

Uh oh!

dlrsp-actions Bot commented Aug 26, 2026

Uh oh!

dlrsp-actions Bot commented Aug 27, 2026

Uh oh!

dlrsp-actions Bot commented Aug 27, 2026

Uh oh!

dlrsp-actions Bot commented Aug 27, 2026

Uh oh!

dlrsp-actions Bot commented Oct 28, 2026

Uh oh!

dlrsp-actions Bot commented Oct 29, 2026

Uh oh!

dlrsp-actions Bot commented Oct 29, 2026

Uh oh!

dlrsp-actions Bot commented Oct 29, 2026

Uh oh!

dlrsp-actions Bot commented Oct 30, 2026

Uh oh!

dlrsp-actions Bot commented Oct 30, 2026

Uh oh!

dlrsp-actions Bot commented Oct 31, 2026

Uh oh!

dlrsp-actions Bot commented Oct 31, 2026

Uh oh!

dlrsp-actions Bot commented Oct 31, 2026

Uh oh!

dlrsp-actions Bot commented Oct 31, 2026

Uh oh!

dlrsp-actions Bot commented Oct 31, 2026

Uh oh!

dlrsp-actions Bot commented Nov 1, 2026

Uh oh!

dlrsp-actions Bot commented Nov 1, 2026

Uh oh!

dlrsp-actions Bot commented Nov 1, 2026

Uh oh!

dlrsp-actions Bot commented Nov 2, 2026

Uh oh!

dlrsp-actions Bot commented Nov 2, 2026

Uh oh!

dlrsp-actions Bot commented Nov 2, 2026

Uh oh!

dlrsp-actions Bot commented Nov 3, 2026

Uh oh!

dlrsp-actions Bot commented Nov 3, 2026

Uh oh!

dlrsp-actions Bot commented Nov 3, 2026

Uh oh!

dlrsp-actions Bot commented Nov 5, 2026

Uh oh!

dlrsp-actions Bot commented Nov 5, 2026

Uh oh!

dlrsp-actions Bot commented Nov 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 21, 2026 •

edited

Loading