Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update oxsecurity/megalinter action to v7.11.1 (#184)
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [oxsecurity/megalinter](https://togithub.com/oxsecurity/megalinter) | action | minor | `v7.8.0` -> `v7.11.1` | --- ### Release Notes <details> <summary>oxsecurity/megalinter (oxsecurity/megalinter)</summary> ### [`v7.11.1`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7111---2024-04-23) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.11.0...v7.11.1) - Fixes - Implement fallback in case git diff does not work with merge-base - Linter versions upgrades - [stylelint](https://stylelint.io) from 16.3.1 to **16.4.0** ### [`v7.11.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7110---2024-04-23) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.10.0...v7.11.0) - Core - Allow to override the number of parallel cores used, with variable **PARALLEL_PROCESS_NUMBER**, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3428](https://togithub.com/oxsecurity/megalinter/pull/3428) - Upgrade base python image from 3.12.2-alpine3.19 to 3.12.3-alpine3.19 - Upgrade PHP 8.1 to 8.3 by [@​llaville](https://togithub.com/llaville) in [#​3464](https://togithub.com/oxsecurity/megalinter/pull/3464) - Add descriptor pre / post commands, by [@​bdovaz](https://togithub.com/bdovaz) in [#​3468](https://togithub.com/oxsecurity/megalinter/pull/3468) - Allow merge lists with **EXTENDS**, by [@​bdovaz](https://togithub.com/bdovaz) in [#​3469](https://togithub.com/oxsecurity/megalinter/pull/3469) - Media - New linters - Add Kotlin detekt linter, by [@​enciyo](https://togithub.com/enciyo) in [#​3408](https://togithub.com/oxsecurity/megalinter/pull/3408) - Reporters - Add ruff sarif support, by [@​Skitionek](https://togithub.com/Skitionek) in [#​3486](https://togithub.com/oxsecurity/megalinter/pull/3486) - Fixes - Fix listing of modified files, by [@​vkucera](https://togithub.com/vkucera) in [#​3472](https://togithub.com/oxsecurity/megalinter/pull/3472). Fixes [#​2125](https://togithub.com/oxsecurity/megalinter/issues/2125). - Fix conflict between prettier and yamllint about spaces, by [@​apeyrat](https://togithub.com/apeyrat) in [#​3426](https://togithub.com/oxsecurity/megalinter/pull/3426) - Ensure [trufflehog](https://togithub.com/trufflesecurity/trufflehog) does not auto-update itself, by [@​wandering-tales](https://togithub.com/wandering-tales) in [#​3430](https://togithub.com/oxsecurity/megalinter/pull/3430) - Salesforce linters: use sf + default Flow Scanner rules, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3435](https://togithub.com/oxsecurity/megalinter/pull/3435) - Disable JSON_ESLINT_PLUGIN_JSONC until [ota-meshi/eslint-plugin-jsonc#328](https://togithub.com/ota-meshi/eslint-plugin-jsonc/issues/328) is fixed - Upgrade tar in mega-linter-runner - secretlint: remove default `.secretlintignore` that was never used but `.gitignore` is used instead. Fixes [#​3328](https://togithub.com/oxsecurity/megalinter/issues/3328) - Add jpeg, xlsx to .gitleaks.toml, by [@​rasa](https://togithub.com/rasa) in [#​3434](https://togithub.com/oxsecurity/megalinter/pull/3434) - Fix Json Schema, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3470](https://togithub.com/oxsecurity/megalinter/pull/3470) - Remove `TEMPLATES/.secretlintignore`, by [@​pjungermann](https://togithub.com/pjungermann) in [#​3476](https://togithub.com/oxsecurity/megalinter/pull/3476) - Doc - Update R2DevOps logo, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3436](https://togithub.com/oxsecurity/megalinter/pull/3436) - Update [Roslynator](https://togithub.com/dotnet/roslynator) repo url and logo, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3444](https://togithub.com/oxsecurity/megalinter/pull/3444) - Fix clang-format documentation links to point to the correct version. Fixes [#​3452](https://togithub.com/oxsecurity/megalinter/issues/3452), by [@​daltonv](https://togithub.com/daltonv) in [#​3453](https://togithub.com/oxsecurity/megalinter/pull/3453) - Add copy to clipboard button in code block (documentation), by [@​nikkii86](https://togithub.com/nikkii86) in [#​3491](https://togithub.com/oxsecurity/megalinter/pull/3491) - Flavors - Add C & C++ linters in Python flavor by [@​nvuillam](https://togithub.com/nvuillam) in [#​3456](https://togithub.com/oxsecurity/megalinter/pull/3456) - CI - Make SPELL_LYCHEE non blocking for internal CI jobs - Remove old unused automerge workflows by [@​echoix](https://togithub.com/echoix) in [#​3432](https://togithub.com/oxsecurity/megalinter/pull/3432) - Add consistent python3/python handling at build.sh, by [@​pjungermann](https://togithub.com/pjungermann) in [#​3475](https://togithub.com/oxsecurity/megalinter/pull/3475) - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.2.0 to **24.2.2** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.25.53 to **0.26.170** - [black](https://black.readthedocs.io/en/stable/) from 24.2.0 to **24.4.0** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.86.0 to **0.86.4** - [checkov](https://www.checkov.io/) from 3.2.34 to **3.2.74** - [checkstyle](https://checkstyle.org/) from 10.14.0 to **10.15.0** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.76 to **0.1.77** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2024.03.05 to **2024.03.13** - [csharpier](https://csharpier.com/) from 0.27.3 to **0.28.1** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.6.0 to **8.7.0** - [devskim](https://togithub.com/microsoft/DevSkim) from 1.0.32 to **1.0.33** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 8.0.102 to **8.0.104** - [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.13.0 to **2.15.1** - [golangci-lint](https://golangci-lint.run/) from 1.56.2 to **1.57.2** - [grype](https://togithub.com/anchore/grype) from 0.74.7 to **0.77.0** - [kics](https://www.kics.io) from 1.7.13 to **2.0.0** - [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.18.0 to **2.22.0** - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.11.2 to **3.12.1** - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.3 to **14.4.1** - [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.9.0 to **3.9.1** - [phpstan](https://phpstan.org/) from 1.10.60 to **1.10.67** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.48.0 to **0.49.6** - [psalm](https://psalm.dev) from Psalm.5.23.0@​ to **Psalm.5.23.1@​** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.353 to **1.1.359** - [roslynator](https://togithub.com/dotnet/Roslynator) from 0.8.3.0 to **0.8.6.0** - [rstcheck](https://togithub.com/myint/rstcheck) from 6.2.0 to **6.2.1** - [rubocop](https://rubocop.org/) from 1.62.0 to **1.63.3** - [ruff](https://togithub.com/astral-sh/ruff) from 0.3.2 to **0.4.1** - [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.2 to **8.2.3** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0** - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.10.0 to **0.10.1** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.5.5 to **8.10.8** - [spectral](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview) from 6.11.0 to **6.11.1** - [sqlfluff](https://www.sqlfluff.com/) from 2.3.5 to **3.0.5** - [stylelint](https://stylelint.io) from 16.2.1 to **16.3.1** - [syft](https://togithub.com/anchore/syft) from 1.0.1 to **1.2.0** - [tekton-lint](https://togithub.com/IBM/tekton-lint) from 1.0.0 to **1.0.2** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.4 to **1.8.1** - [terragrunt](https://terragrunt.gruntwork.io) from 0.55.13 to **0.57.5** - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.49.1 to **0.50.2** - [trivy](https://aquasecurity.github.io/trivy/) from 0.49.1 to **0.50.2** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.69.0 to **3.73.0** - [vale](https://vale.sh/) from 3.2.2 to **3.4.0** ### [`v7.10.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7100---2024-03-10) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.9.0...v7.10.0) - Core - Update dotnet linters to .NET 8, by [@​bdovaz](https://togithub.com/bdovaz) in [#​3182](https://togithub.com/oxsecurity/megalinter/pull/3182) - Media - [How to use MegaLinter with Jenkins](https://www.youtube.com/watch?v=KhkNf2tQ3hM), by [Darin Pope](https://www.linkedin.com/in/darinpope/) / [Cloudbees](https://www.cloudbees.com/) - Fixes - Trivy: use `misconfig` instead of the deprecated `config` scanner, updating the default arguments, by [@​pjungermann](https://togithub.com/pjungermann) in [#​3376](https://togithub.com/oxsecurity/megalinter/pull/3376) - Update calls to sfdx-scanner to output a CSV file for Aura & LWC, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3398](https://togithub.com/oxsecurity/megalinter/pull/3398) - Kics: fixed error count in the summary table, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3402](https://togithub.com/oxsecurity/megalinter/pull/3402) - Fix issue with EXTENDS using private repository by sending GITHUB_TOKEN as HTTP auth header, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3404](https://togithub.com/oxsecurity/megalinter/pull/3404) - Fix SPELL_VALE_CONFIG_FILE not working (handle the override of linter CONFIG_FILE if the linter is activated only if some files are found), by [@​nvuillam](https://togithub.com/nvuillam) in [#​3409](https://togithub.com/oxsecurity/megalinter/pull/3409) - CI - Enable dependabot updates for devcontainer and other Docker directories, by [@​echoix](https://togithub.com/echoix) in [#​3390](https://togithub.com/oxsecurity/megalinter/pull/3390) - Doc - Removed obsolete warning for semgrep as the issue has been fixed, by [@​Jayllyz](https://togithub.com/Jayllyz) in [#​3374](https://togithub.com/oxsecurity/megalinter/pull/3374) - docs: fix docs in TrivySbomLinter.py, by [@​pjungermann](https://togithub.com/pjungermann) in <https://togithub.com/oxsecurity/megalinter/pull/3377S> - Linter versions upgrades - [actionlint](https://rhysd.github.io/actionlint/) from 1.6.26 to **1.6.27** - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.7 to **1.7.8** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.25.3 to **0.25.53** - [black](https://black.readthedocs.io/en/stable/) from 24.1.1 to **24.2.0** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.85.1 to **0.86.0** - [checkov](https://www.checkov.io/) from 3.2.20 to **3.2.21** - [checkstyle](https://checkstyle.org/) from 10.13.0 to **10.14.0** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2023.12.15 to **2024.03.05** - [csharpier](https://csharpier.com/) from 0.27.2 to **0.27.3** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.3.2 to **8.6.0** - [devskim](https://togithub.com/microsoft/DevSkim) from 1.0.28 to **1.0.32** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 7.0.115 to **8.0.102** - [eslint](https://eslint.org) from 8.56.0 to **8.57.0** - [golangci-lint](https://golangci-lint.run/) from 1.56.1 to **1.56.2** - [grype](https://togithub.com/anchore/grype) from 0.74.5 to **0.74.7** - [helm](https://helm.sh/docs/helm/helm_lint/) from 3.13.2 to **3.14.2** - [kics](https://www.kics.io) from 1.7.12 to **1.7.13** - [ktlint](https://ktlint.github.io) from 1.1.1 to **1.2.1** - [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.16.0 to **2.18.0** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.8.0 to **1.9.0** - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.1 to **14.2.3** - [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.8.1 to **3.9.0** - [phpstan](https://phpstan.org/) from 1.10.57 to **1.10.60** - [powershell](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.4.0 to **7.4.1** - [powershell_formatter](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.4.0 to **7.4.1** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.47.5 to **0.48.0** - [psalm](https://psalm.dev) from Psalm.5.21.1@​ to **Psalm.5.23.0@​** - [pylint](https://pylint.readthedocs.io) from 3.0.3 to **3.1.0** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.350 to **1.1.353** - [rubocop](https://rubocop.org/) from 1.60.2 to **1.62.0** - [ruff](https://togithub.com/astral-sh/ruff) from 0.2.1 to **0.3.2** - [scalafix](https://scalacenter.github.io/scalafix/) from 0.11.1 to **0.12.0** - [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.1 to **8.1.2** - [shellcheck](https://togithub.com/koalaman/shellcheck) from 0.9.0 to **0.10.0** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.4.8 to **8.5.5** - [syft](https://togithub.com/anchore/syft) from 0.104.0 to **1.0.1** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.3 to **1.7.4** - [terragrunt](https://terragrunt.gruntwork.io) from 0.55.1 to **0.55.13** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.67.5 to **3.69.0** - [vale](https://vale.sh/) from 3.0.5 to **3.2.2** - [xmllint](https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home) from 21106 to **21107** - [yamllint](https://yamllint.readthedocs.io/) from 1.34.0 to **1.35.1** ### [`v7.9.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v790---2024-02-11) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.8.0...v7.9.0) - Core - Upgrade actions/checkout and stefanzweifel/git-auto-commit-action in generator template workflow, by [@​Jayllyz](https://togithub.com/Jayllyz) in [#​3327](https://togithub.com/oxsecurity/megalinter/pull/3327) - Upgrade base python image to python:3.12.2-alpine3.19 - Fixes - Format powershell linter output into terminal-wide table, and count errors, by [@​efrecon](https://togithub.com/efrecon) in [#​3318](https://togithub.com/oxsecurity/megalinter/pull/3318) - Allow active_only_if_file_found to work in specified subdirectory (\_DIRECTORY), fixes [#​2873](https://togithub.com/oxsecurity/megalinter/issues/2873), by [@​TimothyEarley](https://togithub.com/TimothyEarley) in [#​3323](https://togithub.com/oxsecurity/megalinter/pull/3323) - Activate CI servers reporters only if we find a related default env variable, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3321](https://togithub.com/oxsecurity/megalinter/pull/3321) - Doc - Update copyright year to 2024, by [@​Jayllyz](https://togithub.com/Jayllyz) in [#​3339](https://togithub.com/oxsecurity/megalinter/pull/3339) - CI - Free more disk space before docker build - Upgrade peter-evans/create-pull-request from v5 to v6 in GitHub Actions workflows - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.22.2 to **24.2.0** - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.6 to **1.7.7** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.24.24 to **0.25.3** - [black](https://black.readthedocs.io/en/stable/) from 23.12.1 to **24.1.1** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.84.0 to **0.85.1** - [checkov](https://www.checkov.io/) from 3.1.67 to **3.2.20** - [checkstyle](https://checkstyle.sourceforge.io) from 10.12.7 to **10.13.0** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.75 to **0.1.76** - [csharpier](https://csharpier.com/) from 0.27.0 to **0.27.2** - [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.12.2 to **2.13.0** - [gitleaks](https://togithub.com/gitleaks/gitleaks) from 8.18.1 to **8.18.2** - [golangci-lint](https://golangci-lint.run/) from 1.55.2 to **1.56.1** - [grype](https://togithub.com/anchore/grype) from 0.63.1 to **0.74.5** - [lychee](https://lychee.cli.rs) from 0.14.1 to **0.14.3** - [markdownlint](https://togithub.com/DavidAnson/markdownlint) from 0.38.0 to **0.39.0** - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.0 to **14.2.1** - [phplint](https://togithub.com/overtrue/phplint) from 9.1.0 to **9.1.2** - [phpstan](https://phpstan.org/) from 1.10.56 to **1.10.57** - [prettier](https://prettier.io/) from 3.2.4 to **3.2.5** - [psalm](https://psalm.dev) from Psalm.5.20.0@​ to **Psalm.5.21.1@​** - [puppet-lint](http://puppet-lint.com/) from 4.2.3 to **4.2.4** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.347 to **1.1.350** - [revive](https://revive.run/) from 1.3.6 to **1.3.7** - [roslynator](https://togithub.com/JosefPihrt/Roslynator) from 0.8.2.0 to **0.8.3.0** - [rubocop](https://rubocop.org/) from 1.60.1 to **1.60.2** - [ruff](https://togithub.com/astral-sh/ruff) from 0.1.14 to **0.2.1** - [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.0 to **8.1.1** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.20.0 to **3.21.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.20.0 to **3.21.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.20.0 to **3.21.0** - [shfmt](https://togithub.com/mvdan/sh) from 3.7.0 to **3.8.0** - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.9.0 to **0.10.0** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.2.3 to **8.4.8** - [stylelint](https://stylelint.io) from 16.2.0 to **16.2.1** - [syft](https://togithub.com/anchore/syft) from 0.101.1 to **0.104.0** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.0 to **1.7.3** - [terragrunt](https://terragrunt.gruntwork.io) from 0.54.20 to **0.55.1** - [tflint](https://togithub.com/terraform-linters/tflint) from 0.50.1 to **0.50.3** - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.48.3 to **0.49.1** - [trivy](https://aquasecurity.github.io/trivy/) from 0.48.3 to **0.49.1** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.63.10 to **3.67.5** - [v8r](https://togithub.com/chris48s/v8r) from 2.1.0 to **3.0.0** - [yamllint](https://yamllint.readthedocs.io/) from 1.33.0 to **1.34.0** </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/quiltdata/nf-quilt). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM1MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
](https://renovatebot.com){kind=link}
- Loading branch information
1 parent
26b4d13
commit 2ea05f4