Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update oxsecurity/megalinter from v8.0.0 to v8.1.0 #104

Merged
merged 2 commits into from
Oct 21, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 16, 2024

This PR contains the following updates:

Package Type Update Change
oxsecurity/megalinter action minor v8.0.0 -> v8.1.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v8.1.0

Compare Source

  • Core

    • Allow to tag PRE_COMMANDS to run them before loading plugins, by @​nvuillam in #​3944
    • Replace usage of setup.py with a pyproject.toml package install, by @​echoix in #​3893
    • Allow to add custom messages at the end of PR / MR MegaLinter Summary using variable JOB_SUMMARY_ADDITIONAL_MARKDOWN
  • New linters

  • Linters enhancements

    • Trivy
      • Embed vulnerability database in Docker Image for running trivy on internet-free network
      • Retry 5 times after 3 seconds in case of TooManyRequests when downloading vulnerability database
      • If the retries did not succeed, call trivy with --skip-db-update --skip-check-update (not ideal but better than nothing)
    • Bash/Perl: Support shell scripts with no extension and only support perl shebangs at the beginning of a file in #​4076
  • Fixes

    • Add debug traces to investigate reporters activation
    • Add more traces for ApiReporter
    • Activate ApiReporter by default
  • Reporters

    • Fix ApiReporter not called in MegaLinter flavors
  • Doc

    • Fix Grafana Home Dashboard to add missing criteria
    • Update PRE_COMMANDS documentation to describe all properties
    • Update Grafana documentation to fix secrets typo
  • CI

    • Free space in release job to avoid no space left on device, by @​nvuillam in #​3914
    • Add pytest-rerunfailures to improve CI control jobs success, by @​AlejandroSuero in #​3993
    • Send GITHUB_TOKEN to trivy-action
    • Workaround to avoid to reach Docker Hub rate limits: Build & push first on ghcr.io, then login to docker hub, then push to docker hub
  • Linter versions upgrades

    • actionlint from 1.7.1 to 1.7.3 on 2024-09-29
    • ansible-lint from 24.7.0 to 24.9.2 on 2024-09-20
    • bandit from 1.7.9 to 1.7.10 on 2024-09-23
    • bicep_linter from 0.29.47 to 0.30.23 on 2024-09-24
    • black from 24.8.0 to 24.10.0 on 2024-10-07
    • cfn-lint from 1.10.3 to 1.16.1 on 2024-10-11
    • checkov from 3.2.232 to 3.2.257 on 2024-10-06
    • checkstyle from 10.17.0 to 10.18.2 on 2024-09-29
    • clippy from 0.1.80 to 0.1.81 on 2024-09-06
    • clj-kondo from 2024.08.01 to 2024.09.27 on 2024-09-26
    • cpplint from 1.6.1 to 2.0.0 on 2024-10-06
    • csharpier from 0.29.0 to 0.29.2 on 2024-09-16
    • cspell from 8.14.1 to 8.15.1 on 2024-10-11
    • detekt from 1.23.6 to 1.23.7 on 2024-09-08
    • djlint from 1.34.1 to 1.35.2 on 2024-08-29
    • dotnet-format from 8.0.108 to 8.0.110 on 2024-10-11
    • eslint from 8.57.0 to 8.57.1 on 2024-09-16
    • gitleaks from 8.18.4 to 8.20.1 on 2024-10-08
    • golangci-lint from 1.60.1 to 1.61.0 on 2024-09-09
    • kics from 2.1.2 to 2.1.3 on 2024-10-04
    • lightning-flow-scanner from 2.33.0 to 2.34.0 on 2024-08-25
    • lychee from 0.15.1 to 0.16.1 on 2024-10-07
    • markdownlint from 0.41.0 to 0.42.0 on 2024-09-24
    • mypy from 1.11.1 to 1.11.2 on 2024-08-25
    • npm-groovy-lint from 14.6.0 to 15.0.2 on 2024-08-29
    • php-cs-fixer from 3.62.0 to 3.64.0 on 2024-08-31
    • phpcs from 3.10.2 to 3.10.3 on 2024-09-20
    • phplint from 9.4.1 to 9.5.3 on 2024-10-11
    • phpstan from 1.11.11 to 1.12.6 on 2024-10-06
    • pmd from 7.4.0 to 7.6.0 on 2024-09-27
    • psalm from Psalm.5.25.0@​ to Psalm.5.26.1@​ on 2024-09-09
    • pylint from 3.2.6 to 3.3.1 on 2024-09-24
    • pyright from 1.1.376 to 1.1.384 on 2024-10-11
    • revive from 1.3.9 to 1.4.0 on 2024-09-23
    • roslynator from 0.8.9.0 to 0.9.1.0 on 2024-10-11
    • rubocop from 1.65.1 to 1.66.1 on 2024-09-06
    • ruff from 0.6.1 to 0.6.9 on 2024-10-04
    • scalafix from 0.12.1 to 0.13.0 on 2024-09-27
    • secretlint from 8.2.4 to 8.4.0 on 2024-10-06
    • sfdx-scanner-apex from 4.4.0 to 4.6.0 on 2024-09-26
    • sfdx-scanner-aura from 4.4.0 to 4.6.0 on 2024-09-26
    • sfdx-scanner-lwc from 4.4.0 to 4.6.0 on 2024-09-26
    • shfmt from 3.8.0 to 3.9.0 on 2024-09-03
    • snakemake from 8.18.1 to 8.21.0 on 2024-10-13
    • spectral from 6.11.1 to 6.13.1 on 2024-09-21
    • sqlfluff from 3.1.0 to 3.2.3 on 2024-10-11
    • standard from 17.1.0 to 17.1.2 on 2024-09-13
    • stylelint from 16.8.2 to 16.10.0 on 2024-10-11
    • swiftlint from 0.56.1 to 0.57.0 on 2024-09-09
    • syft from 1.11.0 to 1.14.0 on 2024-10-07
    • terraform-fmt from 1.9.4 to 1.9.5 on 2024-08-28
    • terragrunt from 0.66.8 to 0.67.5 on 2024-09-16
    • terrascan from 1.18.11 to 1.19.9 on 2024-09-21
    • trivy-sbom from 0.54.1 to 0.56.2 on 2024-10-11
    • trivy from 0.54.1 to 0.56.2 on 2024-10-11
    • trufflehog from 3.81.10 to 3.82.8 on 2024-10-13
    • v8r from 4.0.1 to 4.1.0 on 2024-08-25
    • vale from 3.7.0 to 3.7.1 on 2024-09-26

Configuration

📅 Schedule: Branch creation - "after 12am and before 7am every weekday,on sunday" in timezone Europe/Copenhagen, Automerge - "after 12pm and before 4pm every weekday" in timezone Europe/Copenhagen.

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Oct 16, 2024

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ API spectral 1 0 1.64s
⚠️ CSHARP csharpier 18 1 1.53s
⚠️ CSHARP dotnet-format yes 1 0.64s
⚠️ CSHARP roslynator 2 1 21.31s
✅ DOCKERFILE hadolint 1 0 0.1s
✅ JSON jsonlint 4 0 0.16s
⚠️ JSON prettier 4 1 0.45s
⚠️ MARKDOWN markdownlint 1 2 0.4s
✅ MARKDOWN markdown-table-formatter 1 0 0.25s
✅ REPOSITORY gitleaks yes no 0.15s
✅ REPOSITORY grype yes no 12.56s
✅ REPOSITORY secretlint yes no 0.82s
✅ REPOSITORY trivy-sbom yes no 0.19s
✅ REPOSITORY trufflehog yes no 2.63s
✅ XML xmllint 1 0 0.0s
✅ YAML prettier 1 0 0.41s
✅ YAML v8r 1 0 2.41s
✅ YAML yamllint 1 0 0.27s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

Copy link
Contributor Author

renovate bot commented Oct 21, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@renovate renovate bot merged commit 486b25b into main Oct 21, 2024
4 checks passed
@renovate renovate bot deleted the renovate/oxsecurity/megalinter-minor branch October 21, 2024 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant