chore(deps): Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action (changelog)	action	digest	abd2ef4 → dbcb813
trufflesecurity/trufflehog	action	minor	v3.95.9 → v3.96.0

---

Release Notes

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.96.0

Compare Source

What's Changed

• [INS-355] Added Hashicorp vault token detector by @​MuneebUllahKhan222 in #​4819
• Tighten JiraToken v1 verification by @​shahzadhaider1 in #​5122
• [INT-718] Add TargetNotFoundError for targeted scan targets missing from the source by @​bill-rich in #​5123
• Fix GitLab project metadata cache and switch to LRU by @​kashifkhan0771 in #​4727
• Log analyze errors for Anthropic Analyzer by @​kashifkhan0771 in #​5120
• Add metrics for chunks and results by @​mcastorina in #​5128
• Update Cloudflare detectors for 2026+ prefixed credential formats (include upstream PR changes) by @​kashifkhan0771 in #​5111
• [INS-312] Duo API Secret Key Detector by @​MuneebUllahKhan222 in #​4771
• [Feature] Added SonarQube Cloud "Scoped Organization Token" Detector by @​nabeelalam in #​4739
• [INS-255] Updated datadog detector to set verificationError in case of a verification error by @​MuneebUllahKhan222 in #​4661
• Log analyze errors for Postgres analyzer by @​kashifkhan0771 in #​5131
• Log analyze errors for HuggingFace analyzer by @​kashifkhan0771 in #​5130
• Engine - Config.SourceManager doc by @​amanfcp in #​5002
• Update module github.com/go-git/go-git/v5 to v5.19.1 [SECURITY] by @​renovate[bot] in #​5034
• Retry git clone on transient network errors by @​shahzadhaider1 in #​5132
• Fix scan_all_installations Rejecting Org Member Personal Repos by @​shahzadhaider1 in #​5142
• updated detector to include underscore char by @​mattbrady-1 in #​5121
• [chore] Change job_id in metric to source_type by @​mcastorina in #​5149
• Posthog regex update by @​mattbrady-1 in #​5133
• fix(handlers): apk handler now doesnt check for apk extension since json-enumerator and other byte stream methods wouldnt have it by @​johannestaas-trufflesec in #​5151

New Contributors

• @​mattbrady-1 made their first contribution in #​5121

Full Changelog: trufflesecurity/trufflehog@v3.95.9...v3.96.0

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Ansible Container Tests Summary — ✅ SUCCESS

Item	Status
Lint	✅
Build	✅
Structure Tests	✅
Security Tests	✅
Performance Tests	✅
Integration Tests	✅
Unit Tests	✅
Upgrade Tests	✅

Statistical Summary

• Total items: 8
• Passed: 8 ✅
• Failed: 0 ❌

Environment Information

• Run Date: Wed Jul 29 14:56:49 UTC 2026
• GitHub Run ID: 30462737668
• Ansible Version: 2.21.2