Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update oxsecurity/megalinter action to v7.12.0 (#205)
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [oxsecurity/megalinter](https://togithub.com/oxsecurity/megalinter) | action | minor | `v7.11.1` -> `v7.12.0` | --- ### Release Notes <details> <summary>oxsecurity/megalinter (oxsecurity/megalinter)</summary> ### [`v7.12.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7120---2024-06-02) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.11.1...v7.12.0) - Core - Add new logs (at debug level) on each linter activation/deactivation - Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues - Upgrade to Java 21 except for npm-groovy-lint that requires Java 17 - Media - Add blog post [5 ways MegaLinter upped our DevSecOps game](https://flexion.us/blog/5-ways-megalinter-upped-our-devsecops-game/) to the list of English articles by [@​wesley-dean-flexion](https://togithub.com/wesley-dean-flexion) in [#​3596](https://togithub.com/oxsecurity/megalinter/pull/3596) - Linters - Add PHP fixer by [@​llaville](https://togithub.com/llaville) in [#​3598](https://togithub.com/oxsecurity/megalinter/pull/3598) - `API_SPECTRAL` was added as replacement for `OPENAPI_SPECTRAL` (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name `.spectral.yaml` instead of `.openapirc.yml` with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes [#​3387](https://togithub.com/oxsecurity/megalinter/issues/3387) - Disable SQL_TSQLLINT until security issues are solved. Related to [tsqllint/tsqllint#333](https://togithub.com/tsqllint/tsqllint/issues/333) - PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of <https://github.com/llaville/sarif-php-sdk> - Php psalm improvement by [@​llaville](https://togithub.com/llaville) in [#​3541](https://togithub.com/oxsecurity/megalinter/pull/3541) - `KOTLIN_KTLINT` now supports `list_of_files` mode, and has better error counting - Upgrade `KOTLIN_DETEKT` and make it work with cli_lint_mode = project - Reporters - Fixes - Change `golangci-lint` lint mode to `project`, by [@​wandering-tales](https://togithub.com/wandering-tales) in [#​3509](https://togithub.com/oxsecurity/megalinter/pull/3509) - Disable sql-lint as it is no longer maintained - Add new entries `findUnusedCode` and `findUnusedBaselineEntry` in default `psalm.xml` configuration file for PHP_PSALM linter. Related to [#​3538](https://togithub.com/oxsecurity/megalinter/issues/3538) - fix(pylint): overgeneral-exceptions fully qualified name by [@​gardar](https://togithub.com/gardar) in [#​3576](https://togithub.com/oxsecurity/megalinter/pull/3576) - Update `ktlint` descriptor to support `list_of_files` and better error counting by [@​Yann-J](https://togithub.com/Yann-J) in [#​3575](https://togithub.com/oxsecurity/megalinter/pull/3575) - Sync PowerShell version in arm.megalinter-descriptor.yml by [@​echoix](https://togithub.com/echoix) in [#​3586](https://togithub.com/oxsecurity/megalinter/pull/3586) - Adjust find commands to clean up files in same step by [@​echoix](https://togithub.com/echoix) in [#​3588](https://togithub.com/oxsecurity/megalinter/pull/3588) - Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project by [@​nvuillam](https://togithub.com/nvuillam) in [#​3590](https://togithub.com/oxsecurity/megalinter/pull/3590) - Doc - Handle disabled_reason property in descriptors - Sort enums in json schema, by [@​echoix](https://togithub.com/echoix) in [#​3595](https://togithub.com/oxsecurity/megalinter/pull/3595) - Flavors - CI - Build: take in account disabled linters for workflow auto-update - Remove useless package-lock.json that was in python tests folder - Fix SARIF_REPORTER that was wrongly sent to `true` to format & fix test methods - Build: Write ARG lines at the top of Dockerfiles if they are used by FROM variables - Remove Github Actions Workflow telemetry to improve performances - Update Docker image for Gitpod to run on Ubuntu Noble, by [@​echoix](https://togithub.com/echoix) - Update makefile bootstrap config (gitpod or local) to use uv for package installation, by [@​echoix](https://togithub.com/echoix) - Use uv to install Python deps for CI by [@​echoix](https://togithub.com/echoix) in [#​3561](https://togithub.com/oxsecurity/megalinter/pull/3561) - Use a single find command to delete pycache files by [@​echoix](https://togithub.com/echoix) in [#​3562](https://togithub.com/oxsecurity/megalinter/pull/3562) - Sort schema enums by [@​echoix](https://togithub.com/echoix) in [#​3595](https://togithub.com/oxsecurity/megalinter/pull/3595) - Linter versions upgrades - [actionlint](https://rhysd.github.io/actionlint/) from 1.6.27 to **1.7.1** on 2024-05-28 - [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.2.2 to **24.2.3** on 2024-05-20 - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.26.170 to **0.27.1** on 2024-05-07 - [black](https://black.readthedocs.io/en/stable/) from 24.4.0 to **24.4.2** on 2024-04-26 - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.86.4 to **0.87.4** on 2024-05-28 - [checkov](https://www.checkov.io/) from 3.2.74 to **3.2.122** on 2024-05-04 - [checkstyle](https://checkstyle.org/) from 10.15.0 to **10.17.0** on 2024-05-27 - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.77 to **0.1.78** on 2024-05-04 - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2024.03.13 to **2024.05.24** on 2024-05-25 - [csharpier](https://csharpier.com/) from 0.28.1 to **0.28.2** on 2024-04-26 - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.7.0 to **8.8.3** on 2024-05-24 - [detekt](https://detekt.dev/) from 1.23.5 to **1.23.6** on 2024-05-28 - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 8.0.104 to **8.0.106** on 2024-06-01 - [editorconfig-checker](https://editorconfig-checker.github.io/) from 2.7.2 to **3.0.1** on 2024-04-30 - [git_diff](https://git-scm.com) from 2.43.0 to **2.43.4** on 2024-05-18 - [golangci-lint](https://golangci-lint.run/) from 1.57.2 to **1.59.0** on 2024-05-27 - [grype](https://togithub.com/anchore/grype) from 0.77.0 to **0.78.0** on 2024-05-28 - [jscpd](https://togithub.com/kucherenko/jscpd/tree/master/packages/jscpd) from 3.5.10 to **4.0.4** on 2024-05-28 - [kics](https://www.kics.io) from 2.0.0 to **2.0.1** on 2024-05-04 - [kubeconform](https://togithub.com/yannh/kubeconform) from 0.6.4 to **0.6.6** on 2024-05-12 - [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.22.0 to **2.24.0** on 2024-05-20 - [luacheck](https://luacheck.readthedocs.io) from 1.1.2 to **1.2.0** on 2024-05-25 - [lychee](https://lychee.cli.rs) from 0.14.3 to **0.15.1** on 2024-05-13 - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.12.1 to **3.12.2** on 2024-05-22 - [markdown-table-formatter](https://www.npmjs.com/package/markdown-table-formatter) from 1.5.0 to **1.6.0** on 2024-04-27 - [markdownlint](https://togithub.com/DavidAnson/markdownlint) from 0.39.0 to **0.41.0** on 2024-05-26 - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.9.0 to **1.10.0** on 2024-04-26 - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.4.1 to **14.6.0** on 2024-05-12 - [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.9.1 to **3.10.1** on 2024-04-23 - [phplint](https://togithub.com/overtrue/phplint) from 9.1.2 to **9.3.1** on 2024-05-18 - [phpstan](https://phpstan.org/) from 1.10.67 to **1.11.0** to **1.11.3** on 2024-05-31 - [pmd](https://pmd.github.io/) from 6.55.0 to **7.1.0** on 2024-04-28 - [powershell](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.4.1 to **7.4.2** on 2024-04-28 - [powershell_formatter](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.4.1 to **7.4.2** on 2024-04-28 - [prettier](https://prettier.io/) from 3.2.5 to **3.3.0** on 2024-06-01 - [proselint](https://togithub.com/amperser/proselint) from 0.13.0 to **0.14.0** on 2024-05-24 - [protolint](https://togithub.com/yoheimuta/protolint) from 0.49.6 to **0.49.7** on 2024-05-04 - [psalm](https://psalm.dev) from Psalm.5.23.1@​ to **Psalm.5.24.0@​** on 2024-05-04 - [pylint](https://pylint.readthedocs.io) from 3.1.0 to **3.2.2** on 2024-05-20 - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.359 to **1.1.365** on 2024-05-31 - [roslynator](https://togithub.com/dotnet/Roslynator) from 0.8.6.0 to **0.8.9.0** on 2024-06-01 - [rubocop](https://rubocop.org/) from 1.63.3 to **1.64.1** on 2024-05-31 - [ruff](https://togithub.com/astral-sh/ruff) from 0.4.1 to **0.4.7** on 2024-05-31 - [scalafix](https://scalacenter.github.io/scalafix/) from 0.12.0 to **0.12.1** on 2024-05-04 - [secretlint](https://togithub.com/secretlint/secretlint) from 8.2.3 to **8.2.4** on 2024-04-29 - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.23.0 to **3.25.0** on 2024-05-28 - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.23.0 to **3.25.0** on 2024-05-28 - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.23.0 to **3.25.0** on 2024-05-28 - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.10.1 to **0.10.2** on 2024-05-12 - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.10.8 to **8.12.0** on 2024-05-27 - [sqlfluff](https://www.sqlfluff.com/) from 3.0.5 to **3.0.7** on 2024-05-24 - [stylelint](https://stylelint.io) from 16.4.0 to **16.6.1** on 2024-05-28 - [syft](https://togithub.com/anchore/syft) from 1.2.0 to **1.5.0** on 2024-05-28 - [tekton-lint](https://togithub.com/IBM/tekton-lint) from 1.0.2 to **1.1.0** on 2024-05-25 - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.8.1 to **1.8.4** on 2024-05-25 - [terragrunt](https://terragrunt.gruntwork.io) from 0.57.5 to **0.58.10** on 2024-05-27 - [tflint](https://togithub.com/terraform-linters/tflint) from 0.50.3 to **0.51.1** on 2024-06-02 - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.50.2 to **0.51.4** on 2024-05-25 - [trivy](https://aquasecurity.github.io/trivy/) from 0.50.2 to **0.51.4** on 2024-05-25 - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.73.0 to **3.77.0** on 2024-05-28 - [vale](https://vale.sh/) from 3.4.0 to **3.4.2** on 2024-05-04 - [xmllint](https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home) from 21107 to **21108** on 2024-05-18 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/quiltdata/nf-quilt). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNzcuOCIsInVwZGF0ZWRJblZlciI6IjM3LjM3Ny44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
](https://renovatebot.com){kind=link}
- Loading branch information
1 parent
5d6a150
commit 45c9391