chore(deps): update dependency mongodb/kingfisher to v2.9.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
mongodb/kingfisher		minor	v2.7.0 → v2.9.1
mongodb/kingfisher	repository	minor	v2.7.0 → v2.9.1

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

mongodb/kingfisher (mongodb/kingfisher)

v2.9.1

Compare Source

• Updated PyO3 to 0.29.3 to fix Python binding memory-safety and thread-safety advisories.
• Fixed crates.io packaging and bumped kingfisher-core to 1.0.1.
• Enabled Python SDK publishing on merges to main, preserving every pending release.
• Added Rust and Python homepage quick starts and clarified the open-source revocation comparison.

v2.9.0

Compare Source

• Fixed the validation-phase message to appear when credential validation begins.
• Reduced scan CPU use in Base64 and Unicode detection without changing scan results.
• Library behavior change: validation timeout(Duration::ZERO) and max_response_bytes(0) now disable their respective limits instead of returning a build error.
• Added --no-limits for unlimited scan budgets and timeouts. Behavior change: --extraction-depth 0 disables the archive depth limit; use --no-extract-archives to disable extraction. #​524
• GitHub user/org and GitLab user/group scans now overlap discovery, cloning, and scanning; added --user-file for both providers. Behavior change: clone limits select the first unique repositories discovered per provider in API order; explicit Git URLs and added wiki URLs are not counted. #​525
• Added --since-hours N for recent Git history scans. Behavior change: --since-commit now scans all refs by default; use --branch HEAD to retain the previous scope. --branch restricts either scan. #​526

v2.8.0

Compare Source

• Behavior change: --since-commit now scans full commit ranges by default, catching secrets later deleted. Use --git-history none for net-diff scanning. #​518
• Added Git author name and email alongside committer information in finding metadata. #​519
• Improved --branch scan performance by avoiding per-commit Git index setup.
• Branch-only remote scans now fetch just the selected branch and keep branch-specific clones separate from full-repository clones. #​514
• Added the optional native wizard (gui) for configuring scans, tracking progress, and inspecting JSON/JSONL or SARIF reports with filters, exports, and Git provenance.
• Added independent report tabs and native Kingfisher desktop icons for macOS, Linux, and Windows.
• Improved wizard readability with comma-separated counts, compact column controls, clickable commit links, and a Local Web Viewer action that preserves imported reports.
• Library behavior changes: ScannerConfig::enable_dedup now defaults to false (previously true). Opt-in deduplication keys on both blob ID and source path, preserving identical content at different paths. Betterleaks filter evaluation errors now fail the scan call instead of silently keeping the finding.
• Stabilized the 1.0.0 embedding APIs for kingfisher-core, kingfisher-rules, and kingfisher-scanner, with runnable examples and version-aware crates.io publishing for all crates, including kingfisher-bin.
• Switched to the published kingfisher-vectorscan crate and its checksum-verified prebuilt archives, removing the local Vectorscan CMake build on supported targets. Windows builds use GNU/LLVM MinGW; MSVC is unsupported.
• Replaced the temporary MongoDB driver Git pin with crates.io 3.8.0, retaining SRV validation and the Hickory 0.26 DNS fix.
• Fixed scan-time validation requests to send a User-Agent, preventing services such as GitHub from rejecting them. Thanks @​wingc-canva. #​512

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Saturday (* * * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.