chore(deps): Update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	v1.0.151 → v1.0.152	v1.0.153
trufflesecurity/trufflehog	action	patch	v3.95.5 → v3.95.6

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.152

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.152

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.95.6

Compare Source

What's Changed

• Enigma detector enhance verification to prevent false verified findings by @​shahzadhaider1 in #​5011
• fix: scan files with lines exceeding bufio's default 64 KB token limit by @​MuneebUllahKhan222 in #​5022
• fix(postgres): honor ignore tags for default port URLs by @​Dawn-Fighter in #​4968
• Move to github.com/moby/moby/client from docker/docker by @​trufflesteeeve in #​4987
• fix: avoid terminal probes before CLI output by @​Hackerchen716 in #​4994
• Update test containers dependency by @​trufflesteeeve in #​4978
• Re-host pkg/handlers JSON test fixtures under the org by @​amanfcp in #​5023
• [INS-465] Add datadogapikey detector to defaults.go by @​mustansir14 in #​4969
• [INS-470] Add Tly detector to defaults.go, gate it behind feat flag and update its verification logic by @​MuneebUllahKhan222 in #​5006
• [INS-473] Add wit detector to defaults.go, gate it behind feat flag and update verification logic by @​MuneebUllahKhan222 in #​5008
• Updating Klaviyo PK new format by @​breetan in #​5009
• Restructure Klaviyo detector pattern tests by @​martinlocklear in #​5026
• Replace Renovate config with shared preset (high-risk tier) by @​bryanbeverly in #​4992
• set redacted value to last 4 characters of secret, to match how the secret type admin interface displays it by @​jordanTunstill in #​5027
• GitHub finegrained analyzer was improperly handling errors by @​dustin-decker in #​4498
• [INS-469] Added Rev detectors to defaults.go and gated it behind feature flag by @​MuneebUllahKhan222 in #​5005
• Fix Renovate lookup: update setup-captain version comment by @​bryanbeverly in #​4999
• [INS-472] [INS-515] Add user detector to defaults.go, gate it behind feat flag, update verification logic and add custom ep configuration by @​MuneebUllahKhan222 in #​5007
• Fix: Resolve known dedup issues in notifierWorker by @​MuneebUllahKhan222 in #​5028
• fix(dropbox): prevent long sl.u. tokens from being truncated by @​lukem-ts in #​5012
• fix: add filetype=sdist param to pypi detector by @​lukem-ts in #​4988
• Handlers - Embed small HTTP test fixtures by @​amanfcp in #​5001
• S3: surface bucket listing failures and fix multi-role object count by @​shahzadhaider1 in #​5035

New Contributors

• @​Dawn-Fighter made their first contribution in #​4968
• @​Hackerchen716 made their first contribution in #​4994
• @​breetan made their first contribution in #​5009
• @​lukem-ts made their first contribution in #​5012

Full Changelog: trufflesecurity/trufflehog@v3.95.4...v3.95.6

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.