Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update oxsecurity/megalinter action to v8 (#224)
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [oxsecurity/megalinter](https://togithub.com/oxsecurity/megalinter) | action | major | `v7.12.0` -> `v8.0.0` | --- ### Release Notes <details> <summary>oxsecurity/megalinter (oxsecurity/megalinter)</summary> ### [`v8.0.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v800---2024-08-19) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.13.0...v8.0.0) - Reporters - New [**ApiReporter**](https://megalinter.io/beta/reporters/ApiReporter/) (can be used to build Grafana dashboards), by [@​nvuillam](https://togithub.com/nvuillam) in [#​3540](https://togithub.com/oxsecurity/megalinter/pull/3540) [](https://www.youtube.com/watch?v=vbx-ifa1oXE) - Removed deprecated linters, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3854](https://togithub.com/oxsecurity/megalinter/pull/3854) - CSS_SCSSLINT: [Project discontinued and advising to use stylelint](https://togithub.com/sds/scss-lint#notice-consider-other-tools-before-adopting-scss-lint) - OPENAPI_SPECTRAL: Replaced by [API_SPECTRAL](https://megalinter.io/latest/descriptors/api_spectral/) (same linter but more formats handled) - SQL_SQL_LINT: [Project no longer maintained](https://togithub.com/joereynolds/sql-lint/issues/262) - Core - Hide to linters by default all environment variables that contain **TOKEN**, **USERNAME** or **PASSWORD**, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3881](https://togithub.com/oxsecurity/megalinter/pull/3881) - Allow to override CLI_LINT_MODE when defined as project, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3772](https://togithub.com/oxsecurity/megalinter/pull/3772) - Allow to use absolute paths for LINTER_RULES_PATH, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3775](https://togithub.com/oxsecurity/megalinter/pull/3775) - Allow to update variables from [PRE/POST Commands](https://megalinter.io/latest/config-precommands/) using `output_variables` property, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3861](https://togithub.com/oxsecurity/megalinter/pull/3861) - Media - [MegaLinter: un linter pour les gouverner tous](https://blog.wescale.fr/megalinter-un-linter-pour-les-gouverner-tous) (FR), by [Guillaume Arnaud](https://www.linkedin.com/in/guillaume-arnaud/) from [WeScale](https://www.wescale.fr/) - [MegaLinter](https://blog.stephane-robert.info/docs/developper/autres-outils/linters/megalinter/), by [Stéphane Robert](https://www.linkedin.com/in/stephanerobert1/), from [3DS OutScale](https://fr.outscale.com/) - [30 Seconds to Setup MegaLinter: Your Go-To Tool for Automated Code Quality](https://medium.com/@​caodanju/30-seconds-to-setup-megalinter-your-go-to-tool-for-automated-code-quality-and-iac-security-969d90a5a99c), by [Peng Cao](https://www.linkedin.com/in/peng-cao-83b6a2103/) | - Linters enhancements - [bandit](https://megalinter.io/latest/descriptors/python_bandit/) Call bandit with quiet mode to generate less logs, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3892](https://togithub.com/oxsecurity/megalinter/pull/3892) - [grype](https://megalinter.io/latest/descriptors/repository_grype/) Count number of errors returned by Grype, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3906](https://togithub.com/oxsecurity/megalinter/pull/3906) - [yamllint](https://megalinter.io/latest/descriptors/yaml_yamllint) Fix yamllint default format to avoid special characters or GitHub sections in text logs, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3898](https://togithub.com/oxsecurity/megalinter/pull/3898) - Fixes - [terrascan](https://runterrascan.io/) fixed errors and removed redundant code, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3767](https://togithub.com/oxsecurity/megalinter/pull/3767) - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) various performance improvements and ability to specify sln or proj paths, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3741](https://togithub.com/oxsecurity/megalinter/pull/3741) - [swiftlint](https://togithub.com/realm/SwiftLint) Remove deprecated argument --path - Salesforce linters: Disable SF CLI auto update warning, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3883](https://togithub.com/oxsecurity/megalinter/pull/3883) - Doc - Add images and links to Git, CI/CD & other tools integrations at the beginning of the README, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3885](https://togithub.com/oxsecurity/megalinter/pull/3885) - Create README animated GIF presentation of MegaLinter, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3910](https://togithub.com/oxsecurity/megalinter/pull/3910) - Format mkdocs search index in place, by [@​echoix](https://togithub.com/echoix) in [#​3890](https://togithub.com/oxsecurity/megalinter/pull/3890) - Use consistent spelling of 'flavor', by [@​InputUsername](https://togithub.com/InputUsername) in [#​3789](https://togithub.com/oxsecurity/megalinter/pull/3789) - CI - Fix docker warnings, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3853](https://togithub.com/oxsecurity/megalinter/pull/3853) - FromAsCasing: 'as' and 'FROM' keywords' casing do not match - NoEmptyContinuation: Empty continuation line - SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data - Port Beta workflows to use docker/metadata-action, by [@​echoix](https://togithub.com/echoix) in [#​3860](https://togithub.com/oxsecurity/megalinter/pull/3860) - AutoUpdate linters: Always create a PR if the job has been started manually, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3863](https://togithub.com/oxsecurity/megalinter/pull/3863) - Add `skip_checkout: true` to default MegaLinter GitHub Action template - Remove path filters in deploy-DEV workflow as it is a required check by [@​echoix](https://togithub.com/echoix) in [#​3894](https://togithub.com/oxsecurity/megalinter/pull/3894) - mega-linter-runner - Add new rules to upgrade to MegaLinter v8, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3896](https://togithub.com/oxsecurity/megalinter/pull/3896) - Replace glob-promise by glob library, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3902](https://togithub.com/oxsecurity/megalinter/pull/3902) - **Minimum NodeJs version is now 20.x** - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.6.1 to **24.7.0** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.28.1 to **0.29.47** - [black](https://black.readthedocs.io/en/stable/) from 24.4.2 to **24.8.0** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 1.5.0 to **1.10.3** - [checkov](https://www.checkov.io/) from 3.2.174 to **3.2.232** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.79 to **0.1.80** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2024.05.24 to **2024.08.01** - [csharpier](https://csharpier.com/) from 0.28.2 to **0.29.0** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.10.4 to **8.14.1** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 8.0.106 to **8.0.108** - [flake8](https://flake8.pycqa.org) from 7.1.0 to **7.1.1** - [golangci-lint](https://golangci-lint.run/) from 1.59.1 to **1.60.1** - [grype](https://togithub.com/anchore/grype) from 0.79.2 to **0.79.5** - [jsonlint](https://togithub.com/prantlf/jsonlint) from 14.0.3 to **16.0.0** - [kics](https://www.kics.io) from 2.1.1 to **2.1.2** - [kubeconform](https://togithub.com/yannh/kubeconform) from 0.6.6 to **0.6.7** - [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.28.0 to **2.33.0** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.10.1 to **1.11.1** - [php-cs-fixer](https://cs.symfony.com/) from 3.59.3 to **3.62.0** - [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.10.1 to **3.10.2** - [phpstan](https://phpstan.org/) from 1.11.9 to **1.11.11** - [pmd](https://pmd.github.io/) from 7.3.0 to **7.4.0** - [prettier](https://prettier.io/) from 3.3.2 to **3.3.3** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.50.2 to **0.50.5** - [pylint](https://pylint.readthedocs.io) from 3.2.5 to **3.2.6** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.370 to **1.1.376** - [revive](https://revive.run/) from 1.3.7 to **1.3.9** - [rstcheck](https://togithub.com/myint/rstcheck) from 6.2.1 to **6.2.4** - [rubocop](https://rubocop.org/) from 1.64.1 to **1.65.1** - [ruff](https://togithub.com/astral-sh/ruff) from 0.5.1 to **0.6.1** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 4.3.2 to **4.4.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 4.3.2 to **4.4.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 4.3.2 to **4.4.0** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.15.2 to **8.18.1** - [stylelint](https://stylelint.io) from 16.6.1 to **16.8.2** - [swiftlint](https://togithub.com/realm/SwiftLint) from 0.55.1 to **0.56.1** - [syft](https://togithub.com/anchore/syft) from 1.8.0 to **1.11.0** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.9.0 to **1.9.4** - [terragrunt](https://terragrunt.gruntwork.io) from 0.59.6 to **0.66.8** - [tflint](https://togithub.com/terraform-linters/tflint) from 0.52.0 to **0.53.0** - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.53.0 to **0.54.1** - [trivy](https://aquasecurity.github.io/trivy/) from 0.53.0 to **0.54.1** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.79.0 to **3.81.9** - [v8r](https://togithub.com/chris48s/v8r) from 3.1.0 to **4.0.1** - [vale](https://vale.sh/) from 3.6.0 to **3.7.0** ### [`v7.13.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7130---2024-07-06) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.12.0...v7.13.0) - New linters - Add [**ls-lint**](https://ls-lint.org/), file and folder linter, by [@​scolladon](https://togithub.com/scolladon) in [#​3681](https://togithub.com/oxsecurity/megalinter/pull/3681) - Core - Handle renovate version comments in build script, by [@​echoix](https://togithub.com/echoix) in [#​3617](https://togithub.com/oxsecurity/megalinter/pull/3617) , [#​3627](https://togithub.com/oxsecurity/megalinter/pull/3627) , [#​3643](https://togithub.com/oxsecurity/megalinter/pull/3643) , [#​3699](https://togithub.com/oxsecurity/megalinter/pull/3699) , [#​3700](https://togithub.com/oxsecurity/megalinter/pull/3700) - Update base image to python:3.12.4-alpine3.20 - Use `dotnet8-sdk` available in the main repository, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3696](https://togithub.com/oxsecurity/megalinter/pull/3696) - Media - [Introducing MegaLinter: Streamlining Code Quality Checks Across Multiple Languages](https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages), by Cloud Tuned - [Infrastructure as Code GitHub Codespace Template](https://luke.geek.nz/azure/iac-github-codespace/), by [Luke Murray](https://www.linkedin.com/in/ljmurray/) - [Video: How to: Secrets scanning](https://youtu.be/iBMWAk5QIfM?si=EVcJilkz7Y2jdn6e\&t=649), by [Hackitect's playground](https://www.youtube.com/@​hackitectsplayground) - Linters enhancements - Add SARIF support (v2) for all PHP linters by [@​llaville](https://togithub.com/llaville) in [#​3745](https://togithub.com/oxsecurity/megalinter/pull/3745) , [#​3729](https://togithub.com/oxsecurity/megalinter/pull/3729) - Add python package Pygments to rst-lint venv, by [@​bobidle](https://togithub.com/bobidle) in [#​3631](https://togithub.com/oxsecurity/megalinter/pull/3631) - [CSharpier](https://csharpier.com) added ability to override config filename and path, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3664](https://togithub.com/oxsecurity/megalinter/pull/3664) - [xmllint](https://gnome.pages.gitlab.gnome.org/libxml2/xmllint.html) added support for `xsd` files, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3665](https://togithub.com/oxsecurity/megalinter/pull/3665) - Fixes - Improve support for single argument in `get_list_args` function, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3589](https://togithub.com/oxsecurity/megalinter/pull/3589) - [ansible-lint](https://ansible-lint.readthedocs.io) Improved activation by checking for `.ansible-lint` config file, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3697](https://togithub.com/oxsecurity/megalinter/pull/3697) - [DevSkim](https://togithub.com/microsoft/DevSkim) fixed fatal errors when scanning and ability to override config path, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3673](https://togithub.com/oxsecurity/megalinter/pull/3673) - [GitLeaks](https://togithub.com/gitleaks/gitleaks) add missing schema properties, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3675](https://togithub.com/oxsecurity/megalinter/pull/3675) - [Powershell](https://togithub.com/PowerShell/PSScriptAnalyzer#readme) Error table truncation improvements, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3620](https://togithub.com/oxsecurity/megalinter/pull/3620) - [Powershell](https://togithub.com/PowerShell/PSScriptAnalyzer#readme) added missing schema property `POWERSHELL_POWERSHELL_FORMATTER_OUTPUT_ENCODING`, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3678](https://togithub.com/oxsecurity/megalinter/pull/3678) - [syft](https://togithub.com/anchore/syft) use `scan` instead of deprecated `packages` arg, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3613](https://togithub.com/oxsecurity/megalinter/pull/3613) - [tflint](https://togithub.com/terraform-linters/tflint) added missing schema property `TERRAFORM_TFLINT_SECURED_ENV`, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3679](https://togithub.com/oxsecurity/megalinter/pull/3679) - [tflint](https://togithub.com/terraform-linters/tflint) fixed deprecated argument and other improvements to default `.tflint.hcl` template, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3688](https://togithub.com/oxsecurity/megalinter/pull/3688) - [xmllint](https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home) added missing schema properties `XML_XMLLINT_AUTOFORMAT` and `XML_XMLLINT_INDENT`, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3677](https://togithub.com/oxsecurity/megalinter/pull/3677) - [yamllint](https://togithub.com/adrienverge/yamllint) fix error/warning count to work with different log output formats, by [@​TommyE123](https://togithub.com/TommyE123) in [#​3612](https://togithub.com/oxsecurity/megalinter/pull/3612) - Doc - Update documentation icons by [@​nvuillam](https://togithub.com/nvuillam) in [#​3625](https://togithub.com/oxsecurity/megalinter/pull/3625) - Flavors - Add gherkin-lint in c_cpp flavor, by [@​nvuillam](https://togithub.com/nvuillam) in [#​3698](https://togithub.com/oxsecurity/megalinter/pull/3698) - CI - Bump actions/checkout from 3 to 4, by [@​KristjanESPERANTO](https://togithub.com/KristjanESPERANTO) in [#​2994](https://togithub.com/oxsecurity/megalinter/pull/2994) - Reduce dependabot PR frequency to weekly by [@​echoix](https://togithub.com/echoix) in [#​3642](https://togithub.com/oxsecurity/megalinter/pull/3642) - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.2.3 to **24.6.1** - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.8 to **1.7.9** - [bash-exec](https://www.gnu.org/software/bash/) from 5.2.21 to **5.2.26** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.27.1 to **0.28.1** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.87.4 to **1.5.0** - [checkov](https://www.checkov.io/) from 3.2.122 to **3.2.174** - [clang-format](https://releases.llvm.org/17.0.1/tools/clang/docs/ClangFormat.html) from 17.0.5 to **17.0.6** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.78 to **0.1.79** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.8.3 to **8.10.4** - [editorconfig-checker](https://editorconfig-checker.github.io/) from 3.0.1 to **3.0.3** - [flake8](https://flake8.pycqa.org) from 7.0.0 to **7.1.0** - [git_diff](https://git-scm.com) from 2.43.4 to **2.45.2** - [gitleaks](https://togithub.com/gitleaks/gitleaks) from 8.18.2 to **8.18.4** - [golangci-lint](https://golangci-lint.run/) from 1.59.0 to **1.59.1** - [grype](https://togithub.com/anchore/grype) from 0.78.0 to **0.79.2** - [helm](https://helm.sh/docs/helm/helm_lint/) from 3.14.2 to **3.14.3** - [jscpd](https://togithub.com/kucherenko/jscpd/tree/master/packages/jscpd) from 4.0.4 to **4.0.5** - [kics](https://www.kics.io) from 2.0.1 to **2.1.1** - [ktlint](https://ktlint.github.io) from 1.2.1 to **1.3.1** - [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.26.0 to **2.28.0** - [markdown-table-formatter](https://www.npmjs.com/package/markdown-table-formatter) from 1.6.0 to **1.6.1** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.10.0 to **1.10.1** - [npm-package-json-lint](https://npmpackagejsonlint.org/) from 7.1.0 to **8.0.0** - [php-cs-fixer](https://cs.symfony.com/) from 3.58.1 to **3.59.3** - [phplint](https://togithub.com/overtrue/phplint) from 9.3.1 to **9.4.1** - [phpstan](https://phpstan.org/) from 1.11.3 to **1.11.7** - [pmd](https://pmd.github.io/) from 7.1.0 to **7.3.0** - [prettier](https://prettier.io/) from 3.3.0 to **3.3.2** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.49.7 to **0.50.2** - [psalm](https://psalm.dev) from Psalm.5.24.0@​ to **Psalm.5.25.0@​** - [pylint](https://pylint.readthedocs.io) from 3.2.2 to **3.2.5** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.365 to **1.1.370** - [ruff](https://togithub.com/astral-sh/ruff) from 0.4.10 to **0.5.1** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.25.0 to **4.3.2** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.25.0 to **4.3.2** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.25.0 to **4.3.2** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.12.0 to **8.15.2** - [sqlfluff](https://www.sqlfluff.com/) from 3.0.7 to **3.1.0** - [swiftlint](https://togithub.com/realm/SwiftLint) from 0.54.0 to **0.55.1** - [syft](https://togithub.com/anchore/syft) from 1.5.0 to **1.8.0** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.8.4 to **1.9.0** - [terragrunt](https://terragrunt.gruntwork.io) from 0.58.13 to **0.59.6** - [tflint](https://togithub.com/terraform-linters/tflint) from 0.51.1 to **0.52.0** - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.51.4 to **0.53.0** - [trivy](https://aquasecurity.github.io/trivy/) from 0.51.4 to **0.53.0** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.77.0 to **3.79.0** - [v8r](https://togithub.com/chris48s/v8r) from 3.0.0 to **3.1.0** - [vale](https://vale.sh/) from 3.4.2 to **3.6.0** - [xmllint](https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home) from 21108 to **21207** </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/quiltdata/nf-quilt). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
](https://renovatebot.com){kind=link}
](https://www.youtube.com/watch?v=vbx-ifa1oXE){kind=link}
- Loading branch information
1 parent
fd17092
commit eec0a82