Skip to content

chore(deps): update pre-commit hook mongodb/kingfisher to v1.87.0#478

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/mongodb-kingfisher-1.x
Mar 10, 2026
Merged

chore(deps): update pre-commit hook mongodb/kingfisher to v1.87.0#478
renovate[bot] merged 1 commit intomainfrom
renovate/mongodb-kingfisher-1.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 10, 2026

This PR contains the following updates:

Package Type Update Change
mongodb/kingfisher repository minor v1.86.0v1.87.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

mongodb/kingfisher (mongodb/kingfisher)

v1.87.0

Compare Source

  • Tree-sitter verification now runs for blobs from 0 bytes up to 128 KiB (previously 1 KiB to 64 KiB), while remaining a post-regex verification step applied only to context-dependent candidate matches from Hyperscan/Vectorscan.
  • False-positive reduction: Hyperscan/Vectorscan still scans everything first, then tree-sitter performs a second-pass verification only on auto-classified context-dependent findings; self-identifying/token-explicit findings stay regex-first.
  • Hardened Perplexity API key validation to reject auth failures (401/403) and avoid false "Active Credential" results from error payloads.
  • Fixed Yelp API key validation false positives by switching to an auth-enforcing endpoint (/v3/businesses/search) and adding explicit auth error guards.
  • Added 37 new provider detection + HTTP validation rules: Ably, AbstractAPI, AbuseIPDB, AviationStack, Better Stack, Brevo, Clearout, Clerk, Cloudinary, Coinlayer, Contentstack, Currencylayer, Daily, Fixer, Geoapify, Hunter.io, Mux, NewsAPI, Numverify, OneSignal, Pinecone, Pingdom, Positionstack, Railway, Render, Rollbar, Salesloft, Sanity, StatusCake, Storyblok, UptimeRobot, urlscan.io, VirusTotal, WeatherAPI, Webflow, and ZeroBounce.
  • Tightened regex specificity for newly added rules by replacing broad variable-length token captures with explicit fixed formats/lengths and aligned examples to pass rules check.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Third-party library dependencies. label Mar 10, 2026
@renovate renovate bot enabled auto-merge (squash) March 10, 2026 09:32
@renovate renovate bot merged commit 8f88ac1 into main Mar 10, 2026
13 checks passed
@renovate renovate bot deleted the renovate/mongodb-kingfisher-1.x branch March 10, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Third-party library dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants