Merge branch 'main' into go-task

.github/workflows/merge-bot-pr.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: dependabot
-        uses: dependabot/fetch-metadata@v2.2.0
+        uses: dependabot/fetch-metadata@v2.3.0
       - name: Judge
         id: conclusion
         if: >-
@@ -32,7 +32,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v2.2.0
+        uses: dependabot/fetch-metadata@v2.3.0
       - name: Wait other jobs
         uses: kachick/wait-other-jobs@v3
         timeout-minutes: 75

.github/workflows/scan-secrets.yml

@@ -16,7 +16,7 @@ jobs:
           fetch-depth: 0 # Getting all refs for git mode
       - name: Secret Scanning
         # Okay for using the latest since specified the CLI version below. Consider to pin with a tag if the project looks unstable
-        uses: trufflesecurity/trufflehog@39d24534f239563888e7c0d58be0f39112e94b27 # main
+        uses: trufflesecurity/trufflehog@755005733ccd3a43892d71ad606f6dc082a371b7 # main
         with:
           extra_args: --results=verified,unknown
           version: '3.88.2' # selfup {"extract":"\\d[^']+","replacer":["bash", "-c", "trufflehog --version 2>&1"],"nth":2}

.lycheeignore

@@ -13,3 +13,6 @@ ubuntuforums.org
 launcher.keychron.com
 
 web.archive.org
+
+# Almost unstable. See GH-1051
+sr.ht