Bump GitGuardian/ggshield from 1.26.0 to 1.33.0

[dependabot]

Bumps GitGuardian/ggshield from 1.26.0 to 1.33.0.

Release notes

Sourced from GitGuardian/ggshield's releases.

1.33.0

Changed

• The --debug option now automatically turns on verbose mode.

• The --use-gitignore option now also applies to single files passed as argument.

• RPM packages now depend on git-core instead of git, reducing the number of dependencies to install (#983).

Fixed

• When using the --debug option, the log output no longer overlaps with the progress bars.

• The ggshield pre-commit hook no longer crashes when merging files with spaces in their names (#991).

• RPM packages now work correctly on RHEL 8.8 (#984).

1.32.2

Fixed

• Fixed a regression introduced in ggshield 1.32.1, which made ggshield install -m global crash (#972).

1.32.1

Fixed

• Fixed a case where ggshield commit parser could fail because of the local git configuration.

1.32.0

Added

• When scanning a merge commit, ggshield secret scan pre-commit now skips files that merged without conflicts. This makes merging the default branch into a topic branch much faster. You can use the --scan-all-merge-files option to go back to the previous behavior.

• ggshield secret scan commands now provide the --with-incident-details option to output more information about known incidents (JSON and SARIF outputs only).

• It is now possible to ignore a secret manually using ggshield secret ignore SECRET_SHA --name NAME.

Fixed

• The git commit parser has been reworked, fixing cases where commands scanning commits would fail.

1.31.0

Added

• We now provide tar.gz archives for macOS, in addition to pkg files.

Fixed

• JSON output: fixed incorrect values for line and index when scanning a file and not a patch.

1.30.2

... (truncated)

Changelog

Sourced from GitGuardian/ggshield's changelog.

1.33.0 — 2024-10-29

Changed

• The --debug option now automatically turns on verbose mode.

• The --use-gitignore option now also applies to single files passed as argument.

• RPM packages now depend on git-core instead of git, reducing the number of dependencies to install (#983).

Fixed

• When using the --debug option, the log output no longer overlaps with the progress bars.

• The ggshield pre-commit hook no longer crashes when merging files with spaces in their names (#991).

• RPM packages now work correctly on RHEL 8.8 (#984).

1.32.2 — 2024-10-16

Fixed

• Fixed a regression introduced in ggshield 1.32.1, which made ggshield install -m global crash (#972).

1.32.1 — 2024-10-01

Fixed

• Fixed a case where ggshield commit parser could fail because of the local git configuration.

1.32.0 — 2024-09-24

Added

• When scanning a merge commit, ggshield secret scan pre-commit now skips files that merged without conflicts. This makes merging the default branch into a topic branch much faster. You can use the --scan-all-merge-files option to go back to the previous behavior.

• ggshield secret scan commands now provide the --with-incident-details option to output more information about known incidents (JSON and SARIF outputs only).

• It is now possible to ignore a secret manually using ggshield secret ignore SECRET_SHA --name NAME.

Fixed

• The git commit parser has been reworked, fixing cases where commands scanning commits would fail.

... (truncated)

Commits

• 537dbb8 chore(release): 1.33.0
• 6b33daa Merge pull request #995 from GitGuardian/agateau/improve-rpm-dependencies
• 82c6c8e fix: reduce number of dependencies of RPM packages
• e4cb88a ci: run some basic tests to check our Linux packages work
• 26a2662 Merge pull request #990 from GitGuardian/plalanne/-/add-default-eu-support-fo...
• 8d86a3a Merge pull request #993 from GitGuardian/agateau/use-manylinux
• b7137aa fix: fix build-os-packages failing when running inside the container
• a47d396 Merge pull request #992 from GitGuardian/jgriffe/fix-precommit-git-merge-file...
• 1680004 fix: make ggshield rpm packages work on RHEL 8.8
• dcd4900 fix: use a virtualenv for pipenv
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #25.