Bump github.com/zricethezav/gitleaks/v8 from 8.21.2 to 8.23.0

[dependabot]

Bumps github.com/zricethezav/gitleaks/v8 from 8.21.2 to 8.23.0.

Release notes

Sourced from github.com/zricethezav/gitleaks/v8's releases.

v8.23.0

Changelog

• db8e5e6 feat(generate): use multiple allowlists (#1691)
• 973c794 chore(rules): include fps in reference (#1471)
• f0d4499 Add comma as operator for GenerateSemiGenericRegex (#1679)
• ab38a46 refactor: central logger (#1692)
• b022d1c friendship ended with tines

READ THIS!!! The default gitleaks config now uses [[rules.allowlists]]

    # ⚠️ In v8.21.0 `[rules.allowlist]` was replaced with `[[rules.allowlists]]`.
    # This change was backwards-compatible: instances of `[rules.allowlist]` still  work.
    #
    # You can define multiple allowlists for a rule to reduce false positives.
    # A finding will be ignored if _ANY_ `[[rules.allowlists]]` matches.
    [[rules.allowlists]]
    description = "ignore commit A"
    # When multiple criteria are defined the default condition is "OR".
    # e.g., this can match on |commits| OR |paths| OR |stopwords|.
    condition = "OR"
    commits = [ "commit-A", "commit-B"]
    paths = [
      '''go\.mod''',
      '''go\.sum'''
    ]
    # note: stopwords targets the extracted secret, not the entire regex match
    # like 'regexes' does. (stopwords introduced in 8.8.0)
    stopwords = [
      '''client''',
      '''endpoint''',
    ]
[[rules.allowlists]]
# The "AND" condition can be used to make sure all criteria match.
# e.g., this matches if |regexes| AND |paths| are satisfied.
condition = "AND"
# note: |regexes| defaults to check the _Secret_ in the finding.
# Acceptable values for |regexTarget| are "secret" (default), "match", and "line".
regexTarget = "match"
regexes = [ '''(?i)parseur[il]''' ]
paths = [ '''package-lock\.json''' ]

v8.22.1

Changelog

• b69b515 Entropy trace (#1659)
• 7357adc build: add 'toolchain' to go.mod (#1682)
• 4c3da6e refactor(detect): create readUntilSafeBoundary + add tests (#1676)
• dbe3746 twitter really does suck ass now
• 7edfc6b chore(tests): test cases for generate.go (#1623)

... (truncated)

Commits

• db8e5e6 feat(generate): use multiple allowlists (#1691)
• 973c794 chore(rules): include fps in reference (#1471)
• f0d4499 Add comma as operator for GenerateSemiGenericRegex (#1679)
• ab38a46 refactor: central logger (#1692)
• b022d1c friendship ended with tines
• b69b515 Entropy trace (#1659)
• 7357adc build: add 'toolchain' to go.mod (#1682)
• 4c3da6e refactor(detect): create readUntilSafeBoundary + add tests (#1676)
• dbe3746 twitter really does suck ass now
• 7edfc6b chore(tests): test cases for generate.go (#1623)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)