[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bridgecrewio/checkov	repository	patch	3.3.20 → 3.3.29

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

bridgecrewio/checkov

v3.3.29

Compare Source

Bug Fix

• terraform: extend MySQL public access check to cover flexible server resources - #​7737

v3.3.28

Compare Source

Bug Fix

• terraform: resolve graph edges for count/for_each indexed resource references - #​7736

v3.3.27

Compare Source

Bug Fix

• secrets: detect paired AWS secret in bare CSV/delimited format - #​7734

v3.3.26

Compare Source

Bug Fix

• terraform_plan: resolve for_each module calls in plan parser - #​7723

v3.3.25

Compare Source

Bug Fix

• helm: source folder should be within the directory - #​7722
• kustomize: fix file path logic - #​7720
• terraform: avoid tmp_path in git loader tests - #​7726
• terraform: external module ref keeps inside directory - #​7721

v3.3.24

Compare Source

v3.3.23

Compare Source

Bug Fix

• sca: apply --skip-path regex and hidden-dir filtering to sca_package - #​7712

v3.3.22

Compare Source

v3.3.21

Compare Source

Bug Fix

• terraform_json: handle HCL JSON array and single-dict block formats in parser - #​7707

---

Configuration

📅 Schedule: (in timezone Europe/Helsinki)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.