chore(deps): bump the actions group across 1 directory with 3 updates

[dependabot]

Bumps the actions group with 3 updates in the / directory: actions/cache, dawidd6/action-send-mail and trufflesecurity/trufflehog.

Updates actions/cache from 5.0.5 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in actions/cache#1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

• Update packages, migrate to ESM by @​Samirat in actions/cache#1760

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

• Bump @​actions/cache to v5.1.0 - handle read-only cache access by @​jasongin in actions/cache#1775

Full Changelog: actions/cache@v5...v5.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

• Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token
• Switch redundant "Cache save failed" warning to debug log in save-only

6.0.0

• Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
• Migrated to ESM module system
• Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

... (truncated)

Commits

• 55cc834 Merge pull request #1768 from jasongin/readonly-cache
• d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
• 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
• e9b91fd Prettier fixes
• e4884b8 Rebuild dist
• 10baf01 Fixed licenses
• e39b386 Fix test mock return order
• b692820 PR feedback
• 6074912 Rebuild dist bundles as ESM to match type:module
• 5a912e8 Fix lint and jest issues
• Additional commits viewable in compare view

Updates dawidd6/action-send-mail from 6e502825a508b867ab2954ad6343b68787624c01 to c50dc4cc848ade21f848990889906d804fae78c5

Commits

• c50dc4c build(deps): bump nodemailer from 9.0.1 to 9.0.3 (#303)
• 994f270 build(deps): bump undici from 6.24.1 to 6.27.0 (#301)
• 94de994 fix: Use extended HELLO with github.com domain (#302)
• See full diff in compare view

Updates trufflesecurity/trufflehog from 3.95.6 to 3.95.7

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.95.7

What's Changed

• fix(sources/filesystem): order resume comparison by path component by @​genisis0x in trufflesecurity/trufflehog#5041
• test(handlers): point APK test fixture at trufflehog-test-assets by @​amanfcp in trufflesecurity/trufflehog#5053
• fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets. by @​jordanTunstill in trufflesecurity/trufflehog#5029
• Fix GitHub App cross-org member enumeration using per-installation tokens by @​dustin-decker in trufflesecurity/trufflehog#4774
• fix: add git worktree support in PrepareRepo by @​andoniaf in trufflesecurity/trufflehog#4690
• [INS-406] Braintrust detector by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4826
• huggingface: add bucket scanning by @​julien-c in trufflesecurity/trufflehog#5017
• Skip reverification results during deduplication by @​mcastorina in trufflesecurity/trufflehog#5069
• chore(renovate): bump shared config to v1.0.3 by @​bryanbeverly in trufflesecurity/trufflehog#5044
• Add scan_all_installations option for multi-org GitHub App scanning by @​dustin-decker in trufflesecurity/trufflehog#4775
• Expose SecretParts in the JSON output by @​bradlarsen in trufflesecurity/trufflehog#5073
• [INS-497] Add Pganalyze Read Key Detector by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4993
• [INS-197] Add redhatpyxis api key detector by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4995
• [INS-407] Fixed AWS detector producing non deterministic output by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4836

New Contributors

• @​genisis0x made their first contribution in trufflesecurity/trufflehog#5041
• @​andoniaf made their first contribution in trufflesecurity/trufflehog#4690
• @​julien-c made their first contribution in trufflesecurity/trufflehog#5017

Full Changelog: trufflesecurity/trufflehog@v3.95.6...v3.95.7

Commits

• f446421 [INS-407] Fixed AWS detector producing non deterministic output (#4836)
• 885fa2d [INS-197] Add redhatpyxis api key detector (#4995)
• c09d726 [INS-497] Add Pganalyze Read Key Detector (#4993)
• c1a1d6a Expose SecretParts in the JSON output (#5073)
• 39a1435 Add scan_all_installations option for multi-org GitHub App scanning (#4775)
• 8b85dcd Bump shared renovate-config to v1.0.3 (#5044)
• 2e4db5f Skip reverification results during deduplication (#5069)
• 4945fa3 huggingface: add bucket scanning (#5017)
• 3d196c8 [INS-406] Braintrust detector (#4826)
• 6f52203 fix: add git worktree support in PrepareRepo (#4690)
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.