chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.1.0 -> v4.1.1
actions/checkout	action	digest	8ade135 -> b4ffde6
aquasecurity/trivy-action	action	minor	0.12.0 -> 0.16.1
cicirello/jacoco-badge-generator	action	digest	a0c1eb1 -> f33476a
lycheeverse/lychee-action	action	minor	v1.8.0 -> v1.9.2
ossf/scorecard-action	action	minor	v2.2.0 -> v2.3.1
oxsecurity/megalinter	action	minor	v7.3.0 -> v7.8.0

---

Release Notes

actions/checkout (actions/checkout)

v4.1.1

Compare Source

What's Changed

• Update CODEOWNERS to Launch team by @​joshmgross in https://github.com/actions/checkout/pull/1510
• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

• @​joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
• @​peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.16.1

Compare Source

What's Changed

• Update Trivy to 0.48.1 by @​MartiUK in https://github.com/aquasecurity/trivy-action/pull/291
• docs: fix typo in README.md by @​hairmare in https://github.com/aquasecurity/trivy-action/pull/293

New Contributors

• @​MartiUK made their first contribution in https://github.com/aquasecurity/trivy-action/pull/291
• @​hairmare made their first contribution in https://github.com/aquasecurity/trivy-action/pull/293

Full Changelog: aquasecurity/trivy-action@0.16.0...0.16.1

v0.16.0

Compare Source

What's Changed

• Update to trivy version 0.48.0 by @​pragmaticivan in https://github.com/aquasecurity/trivy-action/pull/289

New Contributors

• @​pragmaticivan made their first contribution in https://github.com/aquasecurity/trivy-action/pull/289

Full Changelog: aquasecurity/trivy-action@0.15.0...0.16.0

v0.15.0

Compare Source

What's Changed

• feature(config): add terraform variable files by @​kderck in https://github.com/aquasecurity/trivy-action/pull/285

Full Changelog: aquasecurity/trivy-action@0.14.0...0.15.0

v0.14.0

Compare Source

What's Changed

• fix: set return code after each Trivy call by @​LiamMacP in https://github.com/aquasecurity/trivy-action/pull/247
• Update to trivy version 0.47.0 in Dockerfile by @​MPV in https://github.com/aquasecurity/trivy-action/pull/280
• feature: add filesystem alias by @​kderck in https://github.com/aquasecurity/trivy-action/pull/269

New Contributors

• @​LiamMacP made their first contribution in https://github.com/aquasecurity/trivy-action/pull/247
• @​MPV made their first contribution in https://github.com/aquasecurity/trivy-action/pull/280
• @​kderck made their first contribution in https://github.com/aquasecurity/trivy-action/pull/269

Full Changelog: aquasecurity/trivy-action@0.13.1...0.14.0

v0.13.1

Compare Source

What's Changed

• Update Dockerfile to 0.46.1 by @​witoldsleczkowski in https://github.com/aquasecurity/trivy-action/pull/277

New Contributors

• @​witoldsleczkowski made their first contribution in https://github.com/aquasecurity/trivy-action/pull/277

Full Changelog: aquasecurity/trivy-action@0.13.0...0.13.1

v0.13.0

Compare Source

What's Changed

• fix: mark image-ref attribute optional by @​arxeiss in https://github.com/aquasecurity/trivy-action/pull/261
• Update Dockerfile to 0.46.0 by @​Cr0n1c in https://github.com/aquasecurity/trivy-action/pull/274

New Contributors

• @​arxeiss made their first contribution in https://github.com/aquasecurity/trivy-action/pull/261
• @​Cr0n1c made their first contribution in https://github.com/aquasecurity/trivy-action/pull/274

Full Changelog: aquasecurity/trivy-action@0.12.0...0.13.0

lycheeverse/lychee-action (lycheeverse/lychee-action)

v1.9.2: Version 1.9.2

Compare Source

What's Changed

• Bump actions/cache from 3 to 4 by @​dependabot in https://github.com/lycheeverse/lychee-action/pull/221
• Bump peter-evans/create-issue-from-file from 4 to 5 by @​dependabot in https://github.com/lycheeverse/lychee-action/pull/223
• Bump to lychee 0.14.2 in lycheeverse/lychee-action@eeb9cb6

Full Changelog: lycheeverse/lychee-action@v1...v1.9.2

v1.9.1: Version 1.9.1

Compare Source

This is a hotfix release which restores the behavior of the accept config parameter.
Integers are accepted again as status codes.

accept = [200, 201, 202, 203, 429]

is equivalent to

accept = ["200..=203", 429]

Integers and strings (e.g. for ranges) can be mixed.

v1.9.0: Version 1.9.0

Compare Source

What's Changed

• Document the current directory for the cache argument example by @​theredfish in https://github.com/lycheeverse/lychee-action/pull/193
• Add *.rst glob pattern to defaults by @​kdeldycke in https://github.com/lycheeverse/lychee-action/pull/197
• Automatically pass Github token by @​mre in https://github.com/lycheeverse/lychee-action/pull/196
• Always create output file; not only on error by @​mre in https://github.com/lycheeverse/lychee-action/pull/199
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/lycheeverse/lychee-action/pull/208
• add documentation on using the param when testing local files (as in… by @​tgaff in https://github.com/lycheeverse/lychee-action/pull/211
• fix: Lychee output to file (fixes #​214) by @​LilDrunkenSmurf in https://github.com/lycheeverse/lychee-action/pull/215
• Add integration test for custom output paths (#​215) by @​mre in https://github.com/lycheeverse/lychee-action/pull/217
• Add integration tests for absolute output path and --dump by @​mre in https://github.com/lycheeverse/lychee-action/pull/218

New Contributors

• @​theredfish made their first contribution in https://github.com/lycheeverse/lychee-action/pull/193
• @​kdeldycke made their first contribution in https://github.com/lycheeverse/lychee-action/pull/197
• @​tgaff made their first contribution in https://github.com/lycheeverse/lychee-action/pull/211
• @​LilDrunkenSmurf made their first contribution in https://github.com/lycheeverse/lychee-action/pull/215

Full Changelog: lycheeverse/lychee-action@v1...v1.9.0

ossf/scorecard-action (ossf/scorecard-action)

v2.3.1

Compare Source

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1282
  • Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes

Full Changelog: ossf/scorecard-action@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1270
  • For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes
• ✨ Send rekor tlog index to webapp when publishing results by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1169
• 🐛 Prevent url clipping for GHES instances by @​rajbos in https://github.com/ossf/scorecard-action/pull/1225

Documentation

• 📖 Update access rights needed to see the results in code scanning by @​rajbos in https://github.com/ossf/scorecard-action/pull/1229
• 📖 Add package comments. by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1221
• 📖 Add SECURITY.md file by @​david-a-wheeler in https://github.com/ossf/scorecard-action/pull/1250
• 📖 Fix typo in token input docs by @​aabouzaid in https://github.com/ossf/scorecard-action/pull/1258

New Contributors

• @​david-a-wheeler made their first contribution in https://github.com/ossf/scorecard-action/pull/1250
• @​aabouzaid made their first contribution in https://github.com/ossf/scorecard-action/pull/1258

Full Changelog: ossf/scorecard-action@v2.2.0...v2.3.0

oxsecurity/megalinter (oxsecurity/megalinter)

v7.8.0

Compare Source

• Reporters

  • New reporter MARKDOWN_SUMMARY_REPORTER, allows saving MegaLinter results summary as a markdown file. This file can be further utilised to add comments on the pull request (PR) from Jenkins and other continuous integration (CI) tools by @​saishivarcr in #​3250
  • New reporter BITBUCKET_COMMENT_REPORTER allowing to post MegaLinter results as comments on Bitbucket pull requests by @​saishivarcr in #​3256

• Core

  • mega-linter-runner: Remove container by default, except of no-remove-container option is sent by @​nvuillam in #​3203
  • Upgrade base image from python:3.11.6-alpine3.18 to python:3.11.7-alpine3.18, by @​echoix in #​3212
  • Upgrade to python 3.12.0 by @​nvuillam in #​3006
  • Upgrade actions/upload-artifact@v3 to actions/upload-artifact@v4 in default workflows by @​nvuillam in #​3225
  • mega-linter-runner: Improve check if running as script or module, by @​echoix in #​3233

• Media

  • (FR) MegaLinter presentation at DevCon 20 / Programmez Magazine, by Nicolas Vuillamy

<iframe width="560" height="315" src="https://www.youtube.com/embed/SlKurrIsUls" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

• Fixes

  • tekton-lint is now published as @​ibm/tekton-lint, by @​echoix in #​3210
  • PHP PHIVE: Use keys.openpgp.org and fingerprint for phive key verification, by @​echoix in #​3230
  • Undowngrade sass linters, by @​echoix in #​3260
  • Upgrade lychee default configuration to handle breaking change between 0.13.0 and 0.14.0
  • Hadolint: support both Containerfile and Dockerfile by @​sanmai-NL in #​3217

• Doc

  • Upgrade url to PHP CodeSniffer, as now the original repo is not maintained anymore by @​nvuillam in #​3201

• CI

  • Use docker/metadata-action for deploy-DEV.yml workflow, by @​echoix in #​3193

• Linter versions upgrades

  • ansible-lint from 6.22.1 to 6.22.2
  • bash-exec from 5.2.15 to 5.2.21
  • bicep_linter from 0.23.1 to 0.24.24 on 2023-12-14
  • black from 23.11.0 to 23.12.1 on 2023-12-23
  • cfn-lint from 0.83.4 to 0.84.0
  • checkov from 3.1.27 to 3.1.67
  • checkstyle from 10.12.6 to 10.12.7
  • clippy from 0.1.74 to 0.1.75 on 2023-12-28
  • clj-kondo from 2023.10.20 to 2023.12.15 on 2023-12-15
  • csharpier from 0.26.4 to 0.27.0
  • cspell from 8.1.3 to 8.3.2
  • devskim from 1.0.23 to 1.0.28
  • djlint from 1.34.0 to 1.34.1 on 2023-12-22
  • dotnet-format from 7.0.114 to 7.0.115
  • eslint-plugin-jsonc from 2.10.0 to 2.12.2
  • eslint from 8.55.0 to 8.56.0 on 2023-12-16
  • flake8 from 6.1.0 to 7.0.0
  • git_diff from 2.40.1 to 2.43.0
  • helm from 3.11.3 to 3.13.2
  • isort from 5.13.0 to 5.13.2 on 2023-12-13
  • kics from 1.7.11 to 1.7.12 on 2023-12-22
  • ktlint from 1.0.1 to 1.1.1
  • lychee from 0.13.0 to 0.14.1
  • mypy from 1.7.1 to 1.8.0 on 2023-12-22
  • npm-groovy-lint from 13.0.2 to 14.2.0
  • phpcs from 3.8.0 to 3.8.1
  • phplint from 9.0.6 to 9.1.0 on 2023-12-17
  • phpstan from 1.10.48 to 1.10.56
  • prettier from 3.1.0 to 3.2.4
  • protolint from 0.46.3 to 0.47.5
  • psalm from Psalm.5.17.0@​ to Psalm.5.20.0@​
  • pylint from 3.0.2 to 3.0.3 on 2023-12-13
  • pyright from 1.1.339 to 1.1.347
  • revive from 1.3.4 to 1.3.6
  • roslynator from 0.8.1.0 to 0.8.2.0
  • rubocop from 1.58.0 to 1.60.1
  • ruff from 0.1.7 to 0.1.14 on 2023-12-13
  • secretlint from 8.0.0 to 8.1.0 on 2023-12-28
  • sfdx-scanner-apex from 3.19.0 to 3.20.0
  • sfdx-scanner-aura from 3.19.0 to 3.20.0
  • sfdx-scanner-lwc from 3.19.0 to 3.20.0
  • snakefmt from 0.8.5 to 0.9.0
  • snakemake from 7.32.4 to 8.2.3
  • stylelint from 15.11.0 to 16.2.0
  • syft from 0.98.0 to 0.101.1 on 2023-12-22
  • tekton-lint from 0.6.0 to 1.0.0
  • terraform-fmt from 1.6.5 to 1.7.0
  • terragrunt from 0.54.0 to 0.54.20
  • terrascan from 1.18.3 to 1.18.8 on 2023-12-16
  • terrascan from 1.18.8 to 1.18.11 on 2023-12-30
  • tflint from 0.49.0 to 0.50.0 on 2023-12-30
  • tflint from 0.50.0 to 0.50.1
  • trivy-sbom from 0.48.0 to 0.48.1 on 2023-12-18
  • trivy-sbom from 0.48.1 to 0.48.2
  • trivy-sbom from 0.48.2 to 0.48.3
  • trivy from 0.48.0 to 0.48.1 on 2023-12-18
  • trivy from 0.48.1 to 0.48.2
  • trivy from 0.48.2 to 0.48.3
  • trufflehog from 3.63.2 to 3.63.3 on 2023-12-14
  • trufflehog from 3.63.3 to 3.63.4 on 2023-12-15
  • trufflehog from 3.63.4 to 3.63.6 on 2023-12-22
  • trufflehog from 3.63.6 to 3.63.7 on 2023-12-23
  • trufflehog from 3.63.7 to 3.63.9
  • trufflehog from 3.63.9 to 3.63.10
  • vale from 2.30.0 to 3.0.5

v7.7.0

Compare Source

• Core

  • Update base java apk package to openjdk 17 by @​nvuillam in #​3160
  • Update dotnet linters to .NET 7 by @​bdovaz in #​2402

• Media

  • Try using MegaLinter (article in japanese) by Takashi Minayaga

• New linters

  • Add clang-format c & cpp formatting linter including "apply fix" support
  • Add Roslynator C# linter by @​bdovaz in #​3155

• Fixes

  • Call jscpd with --gitignore to ignore copy-pastes in files matching .gitignore
  • cpplint: Dynamically add the list of extensions from list of files in --extensions parameter
  • Fix mkdocs generation + CI control job by @​nvuillam in #​3135
  • Add semgrep ruleset to validation schema by @​wesley-dean-flexion in #​3164
  • Downgrade stylelint to avoid crash with not v16 compliant dependencies
  • Fix count of yaml-lint errors
  • Remove openssl reinstall, as base image has updated version from alpine 3.18.5 by @​echoix in #​3181

• CI

  • Add arguments to make use of pytest-xdist, by @​echoix

• Linter versions upgrades

  • ansible-lint from 6.22.0 to 6.22.1
  • bandit from 1.7.5 to 1.7.6
  • cfn-lint from 0.83.3 to 0.83.4
  • checkov from 3.0.39 to 3.1.25
  • checkstyle from 10.12.5 to 10.12.6
  • csharpier from 0.26.2 to 0.26.4
  • cspell from 8.0.0 to 8.1.3
  • dotnet-format from 6.0.417 to 7.0.114
  • eslint from 8.54.0 to 8.55.0
  • gitleaks from 8.18.0 to 8.18.1
  • isort from 5.12.0 to 5.13.0
  • lightning-flow-scanner from 2.15.0 to 2.16.0
  • luacheck from 1.1.1 to 1.1.2
  • markdown-table-formatter from 1.4.0 to 1.5.0
  • markdownlint from 0.37.0 to 0.38.0
  • mypy from 1.7.0 to 1.7.1
  • npm-groovy-lint from 12.1.0 to 13.0.2
  • phpcs from 3.7.2 to 3.8.0
  • phplint from 9.0.4 to 9.0.6
  • phpstan from 1.10.42 to 1.10.48
  • psalm from Psalm.5.15.0@​ to Psalm.5.17.0@​
  • puppet-lint from 4.2.1 to 4.2.3
  • pyright from 1.1.336 to 1.1.339
  • roslynator from 0.8.0.0 to 0.8.1.0
  • rubocop from 1.57.2 to 1.58.0
  • ruff from 0.1.6 to 0.1.7
  • secretlint from 7.1.0 to 8.0.0
  • semgrep from 1.50.0 to 1.52.0
  • sfdx-scanner-apex from 3.18.0 to 3.19.0
  • sfdx-scanner-aura from 3.18.0 to 3.19.0
  • sfdx-scanner-lwc from 3.18.0 to 3.19.0
  • syft from 0.97.1 to 0.98.0
  • terraform-fmt from 1.6.4 to 1.6.5
  • terragrunt from 0.53.4 to 0.54.0
  • trivy from 0.47.0 to 0.48.0
  • trufflehog from 3.63.0 to 3.63.2
  • vale from 2.29.7 to 2.30.0

v7.6.0

Compare Source

• Major enhancements

  • New flavor c_cpp: New flavor for pure C/C++ projects, by @​daltonv in #​3067
  • New flavor formatters: Contains only formatter linters, by @​nvuillam in #​3071
  • Add Salesforce Lightning Flow Scanner, by @​nvuillam in #​3092

• Core

  • Allow to use value any to always activate a linter who as a _DIRECTORY variable. Example: KUBERNETES_DIRECTORY: any, by @​nvuillam in #​3058
  • Update base Docker image to python:3.11.6-alpine3.18

• Fixes

  • Fix issue Gitleaks --no-git does not work anymore, #​2945, in #​3112
  • Fix way to install powershell on Alpine linux image
  • Fix issue with VS Code devcontainer not building #​3114
  • Fix Default Workflow to handle latest ActionLint rules, by @​nvuillam in #​3130
  • Write checkov SARIF report results_sarif.sarif in REPORT_FOLDER, by @​gmeligio in #​3121
  • Updated lintr config template to use linters_with_defaults() (formerly with_defaults())
  • Fix csharp installation dependencies, by @​nvuillam in #​3075
  • Fix powershell installation by @​nvuillam in #​3126

• Doc

  • Update lintr links to their current locations, by @​echoix in #​3122
  • Update Pylint links to their current locations, by @​echoix in #​3116
  • Add R2DevOps way to setup MegaLinter on Gitlab, by @​nvuillam in #​3129

• CI

  • Upgrade pymdown-extensions and markdown, by @​BryanQuigley in #​3053
  • Use docker/metadata-action for some internal CI, by @​echoix in #​3110
  • Call docker buildx prune instead of docker builder prune, by @​echoix in #​3127
  • Set schedule earlier for auto-update-linters.yml, allow manual runs, by @​echoix in #​3066
  • Add mike to dev/requirements.txt, by @​echoix in #​3070
  • Modernize dependabot.yml in correct directories, by @​echoix in #​3093
  • Fix devcontainer Dockerfile typo (fixes #​3114) by @​daltonv in #​3115

• Linter versions upgrades

  • ansible-lint from 6.21.1 to 6.22.0
  • bicep_linter from 0.22.6 to 0.23.1
  • black from 23.10.1 to 23.11.0
  • cfn-lint from 0.83.0 to 0.83.3
  • checkov from 3.0.12 to 3.0.39
  • checkstyle from 10.12.4 to 10.12.5
  • clippy from 0.1.73 to 0.1.74
  • csharpier from 0.25.0 to 0.26.2
  • cspell from 7.3.8 to 8.0.0
  • dotnet-format from 6.0.416 to 6.0.417
  • eslint from 8.52.0 to 8.54.0
  • golangci-lint from 1.55.1 to 1.55.2
  • kics from 1.7.10 to 1.7.11
  • kubeconform from 0.6.3 to 0.6.4
  • mypy from 1.6.1 to 1.7.0
  • npm-groovy-lint from 11.1.1 to 12.1.0
  • npm-package-json-lint from 7.0.0 to 7.1.0
  • phpstan from 1.10.39 to 1.10.42
  • powershell from 7.3.9 to 7.4.0
  • powershell_formatter from 7.3.9 to 7.4.0
  • prettier from 3.0.3 to 3.1.0
  • protolint from 0.46.2 to 0.46.3
  • pyright from 1.1.333 to 1.1.336
  • ruff from 0.1.3 to 0.1.6
  • secretlint from 7.0.7 to 7.1.0
  • semgrep from 1.46.0 to 1.50.0
  • sfdx-scanner-apex from 3.17.0 to 3.18.0
  • sfdx-scanner-aura from 3.17.0 to 3.18.0
  • sfdx-scanner-lwc from 3.17.0 to 3.18.0
  • swiftlint from 0.53.0 to 0.54.0
  • syft from 0.94.0 to 0.97.1
  • terraform-fmt from 1.6.2 to 1.6.4
  • terragrunt from 0.53.0 to 0.53.4
  • tflint from 0.48.0 to 0.49.0
  • trivy-sbom from 0.46.1 to 0.47.0
  • trivy from 0.46.1 to 0.47.0
  • trufflehog from 3.61.0 to 3.63.0
  • vale from 2.29.5 to 2.29.7
  • xmllint from 21104 to 21106
  • yamllint from 1.32.0 to 1.33.0

v7.5.0

Compare Source

• Core

  • mega-linter-runner: Convert to ES6 and upgrade npm dependencies. Node 18 minimum version is now required.
  • Allow to define COMPILER_ONLY virtual package as cargo dependency in descriptors to embed rust compiler in the Dockerfile
  • Optimize @generated marker scanning (#​2654)
  • Upgrade to python 3.12.0

• Media

  • Achieve Code Consistency: MegaLinter Integration in Azure DevOps, by Don Koning on Microsoft Tech Community

• Fixes

  • build.py: Remove exclusivity between pip, gem & cargo packages
  • Salesforce linters: Switch sfdx-cli to @​salesforce/cli
  • Fixed issue with actionlint throwing an error on if statements in the generated workflow file
  • Added default .devskim.json to mitigate errors introduced when no config exists

• Doc

  • Display list of articles from newest to oldest
  • Fix incorrect environment variable in djlint docs
  • Improve lychee documentation to add an example of .lycheeignore

• CI

  • Add the other maintainers globally to the CODEOWNERS file (#​3008)
  • Free disk space earlier in the process to avoid failure during docker build
  • Set flavors-stats.json as a generated file in .gitattributes (#​3023)
  • Update and fix our ChatOps automations to only run on pull request comments, by @​echoix in #​3034
  • Use App::cpm to install perlcritic faster, and clean .perl-cpm cache, by @​echoix in #​3036
  • Add failure message in ChatOps build-command and Slash dispatcher, by @​echoix in #​3037

• Linter versions upgrades

  • ansible-lint from 6.20.0 6.21.1
  • bicep_linter from 0.21.1 to 0.22.6
  • black from 23.9.1 to 23.10.1
  • cfn-lint from 0.80.2 to 0.83.0
  • checkov from 2.4.48 to 3.0.12
  • checkstyle from 10.12.3 to 10.12.4
  • clippy from 0.1.72 to 0.1.73
  • clj-kondo from 2023.09.07 to 2023.10.20
  • cspell from 7.3.6 to 7.3.8
  • devskim from 1.0.22 to 1.0.23
  • dotnet-format from 6.0.414 to 6.0.416
  • editorconfig-checker from 2.7.1 to 2.7.2
  • eslint-plugin-jsonc from 2.9.0 to 2.10.0
  • eslint from 8.49.0 to 8.52.0
  • golangci-lint from 1.54.2 to 1.55.1
  • kics from 1.7.8 to 1.7.10
  • ktlint from 1.0.0 to 1.0.1
  • mypy from 1.5.1 to 1.6.1
  • perlcritic from 1.150 to 1.152
  • phpstan from 1.10.35 to 1.10.39
  • powershell from 7.3.7 to 7.3.9
  • powershell_formatter from 7.3.7 to 7.3.9
  • protolint from 0.46.0 to 0.46.2
  • puppet-lint from 4.2.0 to 4.2.1
  • pylint from 2.17.5 to 3.0.2
  • pyright from 1.1.327 to 1.1.333
  • rubocop from 1.56.3 to 1.57.2
  • ruff from 0.1.2 to 0.1.3
  • ruff from 0.0.290 to 0.1.2
  • semgrep from 1.41.0 to 1.46.0
  • sfdx-scanner-apex from 3.16.0 to 3.17.0
  • sfdx-scanner-aura from 3.16.0 to 3.17.0
  • sfdx-scanner-lwc from 3.16.0 to 3.17.0
  • snakefmt from 0.8.4 to 0.8.5
  • sqlfluff from 2.3.2 to 2.3.5
  • stylelint from 15.10.3 to 15.11.0
  • swiftlint from 0.52.4 to 0.53.0
  • syft from 0.91.0 to 0.94.0
  • terraform-fmt from 1.5.7 to 1.6.2
  • terragrunt from 0.51.4 to 0.53.0
  • trivy-sbom from 0.45.1 to 0.46.1
  • trivy from 0.45.1 to 0.46.1
  • trufflehog from 3.56.1 to 3.61.0
  • v8r from 2.0.0 to 2.1.0
  • vale from 2.29.0 to 2.29.5

v7.4.0

Compare Source

• Core

  • Upgrade python to 3.11.5

• Media

  • Maximize your code consistency with Megalinter by Tor Ivar Asbølmo on codewithme.cloud
  • MegaLinter in Azure DevOps by James Cook

• Fixes

  • Fix IGNORE_GITIGNORED_FILES not working anymore , by @​iisisrael
  • Fix v7 issue when using MEGALINTER_FILES_TO_LINT ( thanks @​pfiaux !)
  • Fix Ignore symlink files when VALIDATE_ALL_CODEBASE is false
  • Fix rstcheck options & install

• Doc

  • Secretlint logo - reduce size to 150 and remove background
  • Replace https://megalinter.io/flavors with https://megalinter.io/latest/flavors to avoid lychee 404 error

• CI

  • Workflow job name changed from build to megalinter to prevent conflicts with other workflows
  • Add support for master branch in TEMPLATES/mega-linter.yml, by @​rasa

• Deprecations

  • Deprecate SCSS LINT as not maintained anymore (https://github.com/sds/scss-lint#notice-consider-other-tools-before-adopting-scss-lint)

• Linter versions upgrades

  • actionlint from 1.6.25 to 1.6.26
  • ansible-lint from 6.17.2 to 6.20.0
  • bicep_linter from 0.20.4 to 0.21.1
  • black from 23.7.0 to 23.9.1
  • cfn-lint from 0.79.6 to 0.80.2
  • checkov from 2.3.360 to 2.4.10
  • checkstyle from 10.12.2 to 10.12.3
  • chktex from 1.7.6 to 1.7.8
  • clippy from 0.1.71 to 0.1.72
  • clj-kondo from 2023.07.13 to 2023.09.07
  • cspell from 6.31.3 to 7.3.6
  • devskim from 1.0.18 to 1.0.22
  • djlint from 1.32.1 to 1.34.0
  • dotnet-format from 6.0.413 to 6.0.414
  • editorconfig-checker from 2.7.0 to 2.7.1
  • eslint from 8.46.0 to 8.49.0
  • git_diff from 2.38.5 to 2.40.1
  • gitleaks from 8.17.0 to 8.18.0
  • golangci-lint from 1.54.0 to 1.54.2
  • helm from 3.10.2 to 3.11.3
  • jscpd from 3.5.9 to 3.5.10
  • kics from 1.7.5 to 1.7.8
  • ktlint from 0.50.0 to 1.0.0
  • kubescape from 2.3.6 to 2.9.0
  • markdownlint from 0.35.0 to 0.36.0
  • mypy from 1.4.1 to 1.5.1
  • phpstan from 1.10.28 to 1.10.35
  • powershell from 7.3.6 to 7.3.7
  • powershell_formatter from 7.3.6 to 7.3.7
  • prettier from 3.0.1 to 3.0.3
  • protolint from 0.45.0 to 0.46.0
  • psalm from Psalm.5.14.1@​ to Psalm.5.15.0@​
  • puppet-lint from 4.0.1 to 4.2.0
  • pyright from 1.1.321 to 1.1.327
  • revive from 1.3.2 to 1.3.4
  • rstcheck from 6.1.2 to 6.2.0
  • rstfmt from 0.0.13 to 0.0.14
  • rubocop from 1.56.0 to 1.56.3
  • ruff from 0.0.284 to 0.0.290
  • scalafix from 0.11.0 to 0.11.1
  • semgrep from 1.34.1 to 1.41.0
  • sfdx-scanner-apex from 3.15.0 to 3.16.0
  • sfdx-scanner-aura from 3.15.0 to 3.16.0
  • sfdx-scanner-lwc from 3.15.0 to 3.16.0
  • snakemake from 7.32.3 to 7.32.4
  • spectral from 6.10.1 to 6.11.0
  • sqlfluff from 2.2.1 to 2.3.2
  • stylelint from 15.10.2 to 15.10.3
  • syft from 0.86.1 to 0.91.0
  • terraform-fmt from 1.5.4 to 1.5.7
  • terragrunt from 0.48.6 to 0.51.3
  • terrascan from 1.18.2 to 1.18.3
  • tflint from 0.47.0 to 0.48.0
  • trivy-sbom from 0.44.0 to 0.45.1
  • trivy from 0.44.0 to 0.45.1
  • trufflehog from 3.47.0 to 3.56.1
  • vale from 2.28.1 to 2.29.0
  • xmllint from 21004 to 21104

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	5		0	0.1s
✅ REPOSITORY	checkov	yes		no	11.39s
✅ REPOSITORY	gitleaks	yes		no	0.17s
✅ REPOSITORY	git_diff	yes		no	0.0s
✅ REPOSITORY	grype	yes		no	12.4s
✅ REPOSITORY	secretlint	yes		no	0.76s
✅ REPOSITORY	trivy	yes		no	4.17s
✅ REPOSITORY	trivy-sbom	yes		no	0.99s
✅ REPOSITORY	trufflehog	yes		no	6.27s
✅ YAML	prettier	5		0	0.88s
✅ YAML	v8r	5		0	3.93s
✅ YAML	yamllint	5		0	0.39s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.