Skip to content

chore(deps): update dependency mongodb/kingfisher to v2.7.0 - #494

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/mongodb-kingfisher-2.x
Sep 26, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/mongodb-kingfisher-2.x

Conversation

@renovate

@renovate renovate Bot commented Sep 26, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
mongodb/kingfisher minor v2.5.0 → v2.7.0
mongodb/kingfisher repository minor v2.5.0 → v2.7.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

mongodb/kingfisher (mongodb/kingfisher)

v2.7.0

Compare Source

  • Added opt-in bounded verification for ambiguous credential components, with ranked candidates for AWS, BrowserStack, ClickHouse Cloud, MongoDB Atlas, PlanetScale, Razorpay, and Wiz.
  • Kept unresolved pairings inconclusive: searches try at most 16 combinations within 30 seconds, and only authoritative validation success selects a pair. Candidate verification requires supported fixed destinations, disables HTTP redirects, and keeps unselected secrets out of reports.

v2.6.0

Compare Source

  • Added opt-in GitHub gist scanning #​508, plus GitLab and Bitbucket Cloud snippet scanning, with full Git history.
  • Reduced peak scan memory: findings now deduplicate on exact cryptographic digests alone (the Bloom prefilter and its dependency were removed), the Git object index stores each object ID once, and raw matcher bookkeeping was slimmed.
  • Added opt-in --disk-offload to reduce accumulated finding memory across repositories; it falls back to memory with a warning when temporary storage fills up.
  • Fixed HTML report validation filters to match displayed states, including assumed-valid, invalid-material, and skipped-canary findings.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Saturday (* * * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Third-party library dependencies. label Sep 26, 2026
@renovate
renovate Bot enabled auto-merge (rebase) September 26, 2026 06:39
@renovate
renovate Bot merged commit e372766 into main Sep 26, 2026
7 checks passed
@renovate
renovate Bot deleted the renovate/mongodb-kingfisher-2.x branch September 26, 2026 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Third-party library dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants