Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update oxsecurity/megalinter action to v8.1.0 #438

Merged
merged 1 commit into from
Oct 16, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 16, 2024

This PR contains the following updates:

Package Type Update Change
oxsecurity/megalinter action minor v8.0.0 -> v8.1.0

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v8.1.0

Compare Source

  • Core

    • Allow to tag PRE_COMMANDS to run them before loading plugins, by @​nvuillam in #​3944
    • Replace usage of setup.py with a pyproject.toml package install, by @​echoix in #​3893
    • Allow to add custom messages at the end of PR / MR MegaLinter Summary using variable JOB_SUMMARY_ADDITIONAL_MARKDOWN
  • New linters

  • Linters enhancements

    • Trivy
      • Embed vulnerability database in Docker Image for running trivy on internet-free network
      • Retry 5 times after 3 seconds in case of TooManyRequests when downloading vulnerability database
      • If the retries did not succeed, call trivy with --skip-db-update --skip-check-update (not ideal but better than nothing)
    • Bash/Perl: Support shell scripts with no extension and only support perl shebangs at the beginning of a file in #​4076
  • Fixes

    • Add debug traces to investigate reporters activation
    • Add more traces for ApiReporter
    • Activate ApiReporter by default
  • Reporters

    • Fix ApiReporter not called in MegaLinter flavors
  • Doc

    • Fix Grafana Home Dashboard to add missing criteria
    • Update PRE_COMMANDS documentation to describe all properties
    • Update Grafana documentation to fix secrets typo
  • CI

    • Free space in release job to avoid no space left on device, by @​nvuillam in #​3914
    • Add pytest-rerunfailures to improve CI control jobs success, by @​AlejandroSuero in #​3993
    • Send GITHUB_TOKEN to trivy-action
    • Workaround to avoid to reach Docker Hub rate limits: Build & push first on ghcr.io, then login to docker hub, then push to docker hub
  • Linter versions upgrades

    • actionlint from 1.7.1 to 1.7.3 on 2024-09-29
    • ansible-lint from 24.7.0 to 24.9.2 on 2024-09-20
    • bandit from 1.7.9 to 1.7.10 on 2024-09-23
    • bicep_linter from 0.29.47 to 0.30.23 on 2024-09-24
    • black from 24.8.0 to 24.10.0 on 2024-10-07
    • cfn-lint from 1.10.3 to 1.16.1 on 2024-10-11
    • checkov from 3.2.232 to 3.2.257 on 2024-10-06
    • checkstyle from 10.17.0 to 10.18.2 on 2024-09-29
    • clippy from 0.1.80 to 0.1.81 on 2024-09-06
    • clj-kondo from 2024.08.01 to 2024.09.27 on 2024-09-26
    • cpplint from 1.6.1 to 2.0.0 on 2024-10-06
    • csharpier from 0.29.0 to 0.29.2 on 2024-09-16
    • cspell from 8.14.1 to 8.15.1 on 2024-10-11
    • detekt from 1.23.6 to 1.23.7 on 2024-09-08
    • djlint from 1.34.1 to 1.35.2 on 2024-08-29
    • dotnet-format from 8.0.108 to 8.0.110 on 2024-10-11
    • eslint from 8.57.0 to 8.57.1 on 2024-09-16
    • gitleaks from 8.18.4 to 8.20.1 on 2024-10-08
    • golangci-lint from 1.60.1 to 1.61.0 on 2024-09-09
    • kics from 2.1.2 to 2.1.3 on 2024-10-04
    • lightning-flow-scanner from 2.33.0 to 2.34.0 on 2024-08-25
    • lychee from 0.15.1 to 0.16.1 on 2024-10-07
    • markdownlint from 0.41.0 to 0.42.0 on 2024-09-24
    • mypy from 1.11.1 to 1.11.2 on 2024-08-25
    • npm-groovy-lint from 14.6.0 to 15.0.2 on 2024-08-29
    • php-cs-fixer from 3.62.0 to 3.64.0 on 2024-08-31
    • phpcs from 3.10.2 to 3.10.3 on 2024-09-20
    • phplint from 9.4.1 to 9.5.3 on 2024-10-11
    • phpstan from 1.11.11 to 1.12.6 on 2024-10-06
    • pmd from 7.4.0 to 7.6.0 on 2024-09-27
    • psalm from Psalm.5.25.0@​ to Psalm.5.26.1@​ on 2024-09-09
    • pylint from 3.2.6 to 3.3.1 on 2024-09-24
    • pyright from 1.1.376 to 1.1.384 on 2024-10-11
    • revive from 1.3.9 to 1.4.0 on 2024-09-23
    • roslynator from 0.8.9.0 to 0.9.1.0 on 2024-10-11
    • rubocop from 1.65.1 to 1.66.1 on 2024-09-06
    • ruff from 0.6.1 to 0.6.9 on 2024-10-04
    • scalafix from 0.12.1 to 0.13.0 on 2024-09-27
    • secretlint from 8.2.4 to 8.4.0 on 2024-10-06
    • sfdx-scanner-apex from 4.4.0 to 4.6.0 on 2024-09-26
    • sfdx-scanner-aura from 4.4.0 to 4.6.0 on 2024-09-26
    • sfdx-scanner-lwc from 4.4.0 to 4.6.0 on 2024-09-26
    • shfmt from 3.8.0 to 3.9.0 on 2024-09-03
    • snakemake from 8.18.1 to 8.21.0 on 2024-10-13
    • spectral from 6.11.1 to 6.13.1 on 2024-09-21
    • sqlfluff from 3.1.0 to 3.2.3 on 2024-10-11
    • standard from 17.1.0 to 17.1.2 on 2024-09-13
    • stylelint from 16.8.2 to 16.10.0 on 2024-10-11
    • swiftlint from 0.56.1 to 0.57.0 on 2024-09-09
    • syft from 1.11.0 to 1.14.0 on 2024-10-07
    • terraform-fmt from 1.9.4 to 1.9.5 on 2024-08-28
    • terragrunt from 0.66.8 to 0.67.5 on 2024-09-16
    • terrascan from 1.18.11 to 1.19.9 on 2024-09-21
    • trivy-sbom from 0.54.1 to 0.56.2 on 2024-10-11
    • trivy from 0.54.1 to 0.56.2 on 2024-10-11
    • trufflehog from 3.81.10 to 3.82.8 on 2024-10-13
    • v8r from 4.0.1 to 4.1.0 on 2024-08-25
    • vale from 3.7.0 to 3.7.1 on 2024-09-26

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (rebase) October 16, 2024 11:11
@renovate renovate bot merged commit 6ee567e into main Oct 16, 2024
2 checks passed
@renovate renovate bot deleted the renovate/oxsecurity-megalinter-8.x branch October 16, 2024 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants