chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.1.0 -> v4.1.1
actions/checkout	action	digest	8ade135 -> b4ffde6
actions/upload-artifact	action	patch	v3.1.2 -> v3.1.3
docker/build-push-action	action	minor	v5.0.0 -> v5.1.0
docker/metadata-action	action	digest	96383f4 -> dbef880
oxsecurity/megalinter	action	minor	v7.1.0 -> v7.8.0
sigstore/cosign-installer	action	minor	v3.1.1 -> v3.3.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v4.1.1

Compare Source

What's Changed

• Update CODEOWNERS to Launch team by @​joshmgross in https://github.com/actions/checkout/pull/1510
• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

• @​joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
• @​peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

actions/upload-artifact (actions/upload-artifact)

v3.1.3

Compare Source

What's Changed

• chore(github): remove trailing whitespaces by @​ljmf00 in https://github.com/actions/upload-artifact/pull/313
• Bump @​actions/artifact version to v1.1.2 by @​bethanyj28 in https://github.com/actions/upload-artifact/pull/436

Full Changelog: actions/upload-artifact@v3...v3.1.3

docker/build-push-action (docker/build-push-action)

v5.1.0

Compare Source

• Add annotations input by @​crazy-max in https://github.com/docker/build-push-action/pull/992
• Add secret-envs input by @​elias-lundgren in https://github.com/docker/build-push-action/pull/980
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in https://github.com/docker/build-push-action/pull/991
• Bump @​docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in https://github.com/docker/build-push-action/pull/990 https://github.com/docker/build-push-action/pull/1006

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

oxsecurity/megalinter (oxsecurity/megalinter)

v7.8.0

Compare Source

• Reporters

  • New reporter MARKDOWN_SUMMARY_REPORTER, allows saving MegaLinter results summary as a markdown file. This file can be further utilised to add comments on the pull request (PR) from Jenkins and other continuous integration (CI) tools by @​saishivarcr in https://github.com/oxsecurity/megalinter/pull/3250
  • New reporter BITBUCKET_COMMENT_REPORTER allowing to post MegaLinter results as comments on Bitbucket pull requests by @​saishivarcr in https://github.com/oxsecurity/megalinter/pull/3256

• Core

  • mega-linter-runner: Remove container by default, except of no-remove-container option is sent by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3203
  • Upgrade base image from python:3.11.6-alpine3.18 to python:3.11.7-alpine3.18, by @​echoix in #​3212
  • Upgrade to python 3.12.0 by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3006
  • Upgrade actions/upload-artifact@v3 to actions/upload-artifact@v4 in default workflows by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3225
  • mega-linter-runner: Improve check if running as script or module, by @​echoix in #​3233

• Media

  • (FR) MegaLinter presentation at DevCon 20 / Programmez Magazine, by Nicolas Vuillamy

<iframe width="560" height="315" src="https://www.youtube.com/embed/SlKurrIsUls" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

• Fixes

  • tekton-lint is now published as @​ibm/tekton-lint, by @​echoix in #​3210
  • PHP PHIVE: Use keys.openpgp.org and fingerprint for phive key verification, by @​echoix in #​3230
  • Undowngrade sass linters, by @​echoix in #​3260
  • Upgrade lychee default configuration to handle breaking change between 0.13.0 and 0.14.0
  • Hadolint: support both Containerfile and Dockerfile by @​sanmai-NL in https://github.com/oxsecurity/megalinter/pull/3217

• Doc

  • Upgrade url to PHP CodeSniffer, as now the original repo is not maintained anymore by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3201

• CI

  • Use docker/metadata-action for deploy-DEV.yml workflow, by @​echoix in #​3193

• Linter versions upgrades

  • ansible-lint from 6.22.1 to 6.22.2
  • bash-exec from 5.2.15 to 5.2.21
  • bicep_linter from 0.23.1 to 0.24.24 on 2023-12-14
  • black from 23.11.0 to 23.12.1 on 2023-12-23
  • cfn-lint from 0.83.4 to 0.84.0
  • checkov from 3.1.27 to 3.1.67
  • checkstyle from 10.12.6 to 10.12.7
  • clippy from 0.1.74 to 0.1.75 on 2023-12-28
  • clj-kondo from 2023.10.20 to 2023.12.15 on 2023-12-15
  • csharpier from 0.26.4 to 0.27.0
  • cspell from 8.1.3 to 8.3.2
  • devskim from 1.0.23 to 1.0.28
  • djlint from 1.34.0 to 1.34.1 on 2023-12-22
  • dotnet-format from 7.0.114 to 7.0.115
  • eslint-plugin-jsonc from 2.10.0 to 2.12.2
  • eslint from 8.55.0 to 8.56.0 on 2023-12-16
  • flake8 from 6.1.0 to 7.0.0
  • git_diff from 2.40.1 to 2.43.0
  • helm from 3.11.3 to 3.13.2
  • isort from 5.13.0 to 5.13.2 on 2023-12-13
  • kics from 1.7.11 to 1.7.12 on 2023-12-22
  • ktlint from 1.0.1 to 1.1.1
  • lychee from 0.13.0 to 0.14.1
  • mypy from 1.7.1 to 1.8.0 on 2023-12-22
  • npm-groovy-lint from 13.0.2 to 14.2.0
  • phpcs from 3.8.0 to 3.8.1
  • phplint from 9.0.6 to 9.1.0 on 2023-12-17
  • phpstan from 1.10.48 to 1.10.56
  • prettier from 3.1.0 to 3.2.4
  • protolint from 0.46.3 to 0.47.5
  • psalm from Psalm.5.17.0@​ to Psalm.5.20.0@​
  • pylint from 3.0.2 to 3.0.3 on 2023-12-13
  • pyright from 1.1.339 to 1.1.347
  • revive from 1.3.4 to 1.3.6
  • roslynator from 0.8.1.0 to 0.8.2.0
  • rubocop from 1.58.0 to 1.60.1
  • ruff from 0.1.7 to 0.1.14 on 2023-12-13
  • secretlint from 8.0.0 to 8.1.0 on 2023-12-28
  • sfdx-scanner-apex from 3.19.0 to 3.20.0
  • sfdx-scanner-aura from 3.19.0 to 3.20.0
  • sfdx-scanner-lwc from 3.19.0 to 3.20.0
  • snakefmt from 0.8.5 to 0.9.0
  • snakemake from 7.32.4 to 8.2.3
  • stylelint from 15.11.0 to 16.2.0
  • syft from 0.98.0 to 0.101.1 on 2023-12-22
  • tekton-lint from 0.6.0 to 1.0.0
  • terraform-fmt from 1.6.5 to 1.7.0
  • terragrunt from 0.54.0 to 0.54.20
  • terrascan from 1.18.3 to 1.18.8 on 2023-12-16
  • terrascan from 1.18.8 to 1.18.11 on 2023-12-30
  • tflint from 0.49.0 to 0.50.0 on 2023-12-30
  • tflint from 0.50.0 to 0.50.1
  • trivy-sbom from 0.48.0 to 0.48.1 on 2023-12-18
  • trivy-sbom from 0.48.1 to 0.48.2
  • trivy-sbom from 0.48.2 to 0.48.3
  • trivy from 0.48.0 to 0.48.1 on 2023-12-18
  • trivy from 0.48.1 to 0.48.2
  • trivy from 0.48.2 to 0.48.3
  • trufflehog from 3.63.2 to 3.63.3 on 2023-12-14
  • trufflehog from 3.63.3 to 3.63.4 on 2023-12-15
  • trufflehog from 3.63.4 to 3.63.6 on 2023-12-22
  • trufflehog from 3.63.6 to 3.63.7 on 2023-12-23
  • trufflehog from 3.63.7 to 3.63.9
  • trufflehog from 3.63.9 to 3.63.10
  • vale from 2.30.0 to 3.0.5

v7.7.0

Compare Source

• Core

  • Update base java apk package to openjdk 17 by @​nvuillam in #​3160
  • Update dotnet linters to .NET 7 by @​bdovaz in #​2402

• Media

  • Try using MegaLinter (article in japanese) by Takashi Minayaga

• New linters

  • Add clang-format c & cpp formatting linter including "apply fix" support
  • Add Roslynator C# linter by @​bdovaz in #​3155

• Fixes

  • Call jscpd with --gitignore to ignore copy-pastes in files matching .gitignore
  • cpplint: Dynamically add the list of extensions from list of files in --extensions parameter
  • Fix mkdocs generation + CI control job by @​nvuillam in #​3135
  • Add semgrep ruleset to validation schema by @​wesley-dean-flexion in #​3164
  • Downgrade stylelint to avoid crash with not v16 compliant dependencies
  • Fix count of yaml-lint errors
  • Remove openssl reinstall, as base image has updated version from alpine 3.18.5 by @​echoix in #​3181

• CI

  • Add arguments to make use of pytest-xdist, by @​echoix

• Linter versions upgrades

  • ansible-lint from 6.22.0 to 6.22.1
  • bandit from 1.7.5 to 1.7.6
  • cfn-lint from 0.83.3 to 0.83.4
  • checkov from 3.0.39 to 3.1.25
  • checkstyle from 10.12.5 to 10.12.6
  • csharpier from 0.26.2 to 0.26.4
  • cspell from 8.0.0 to 8.1.3
  • dotnet-format from 6.0.417 to 7.0.114
  • eslint from 8.54.0 to 8.55.0
  • gitleaks from 8.18.0 to 8.18.1
  • isort from 5.12.0 to 5.13.0
  • lightning-flow-scanner from 2.15.0 to 2.16.0
  • luacheck from 1.1.1 to 1.1.2
  • markdown-table-formatter from 1.4.0 to 1.5.0
  • markdownlint from 0.37.0 to 0.38.0
  • mypy from 1.7.0 to 1.7.1
  • npm-groovy-lint from 12.1.0 to 13.0.2
  • phpcs from 3.7.2 to 3.8.0
  • phplint from 9.0.4 to 9.0.6
  • phpstan from 1.10.42 to 1.10.48
  • psalm from Psalm.5.15.0@​ to Psalm.5.17.0@​
  • puppet-lint from 4.2.1 to 4.2.3
  • pyright from 1.1.336 to 1.1.339
  • roslynator from 0.8.0.0 to 0.8.1.0
  • rubocop from 1.57.2 to 1.58.0
  • ruff from 0.1.6 to 0.1.7
  • secretlint from 7.1.0 to 8.0.0
  • semgrep from 1.50.0 to 1.52.0
  • sfdx-scanner-apex from 3.18.0 to 3.19.0
  • sfdx-scanner-aura from 3.18.0 to 3.19.0
  • sfdx-scanner-lwc from 3.18.0 to 3.19.0
  • syft from 0.97.1 to 0.98.0
  • terraform-fmt from 1.6.4 to 1.6.5
  • terragrunt from 0.53.4 to 0.54.0
  • trivy from 0.47.0 to 0.48.0
  • trufflehog from 3.63.0 to 3.63.2
  • vale from 2.29.7 to 2.30.0

v7.6.0

Compare Source

• Major enhancements

  • New flavor c_cpp: New flavor for pure C/C++ projects, by @​daltonv in #​3067
  • New flavor formatters: Contains only formatter linters, by @​nvuillam in #​3071
  • Add Salesforce Lightning Flow Scanner, by @​nvuillam in #​3092

• Core

  • Allow to use value any to always activate a linter who as a _DIRECTORY variable. Example: KUBERNETES_DIRECTORY: any, by @​nvuillam in #​3058
  • Update base Docker image to python:3.11.6-alpine3.18

• Fixes

  • Fix issue Gitleaks --no-git does not work anymore, #​2945, in #​3112
  • Fix way to install powershell on Alpine linux image
  • Fix issue with VS Code devcontainer not building #​3114
  • Fix Default Workflow to handle latest ActionLint rules, by @​nvuillam in #​3130
  • Write checkov SARIF report results_sarif.sarif in REPORT_FOLDER, by @​gmeligio in #​3121
  • Updated lintr config template to use linters_with_defaults() (formerly with_defaults())
  • Fix csharp installation dependencies, by @​nvuillam in #​3075
  • Fix powershell installation by @​nvuillam in #​3126

• Doc

  • Update lintr links to their current locations, by @​echoix in #​3122
  • Update Pylint links to their current locations, by @​echoix in #​3116
  • Add R2DevOps way to setup MegaLinter on Gitlab, by @​nvuillam in #​3129

• CI

  • Upgrade pymdown-extensions and markdown, by @​BryanQuigley in #​3053
  • Use docker/metadata-action for some internal CI, by @​echoix in #​3110
  • Call docker buildx prune instead of docker builder prune, by @​echoix in #​3127
  • Set schedule earlier for auto-update-linters.yml, allow manual runs, by @​echoix in #​3066
  • Add mike to dev/requirements.txt, by @​echoix in #​3070
  • Modernize dependabot.yml in correct directories, by @​echoix in #​3093
  • Fix devcontainer Dockerfile typo (fixes #​3114) by @​daltonv in #​3115

• Linter versions upgrades

  • ansible-lint from 6.21.1 to 6.22.0
  • bicep_linter from 0.22.6 to 0.23.1
  • black from 23.10.1 to 23.11.0
  • cfn-lint from 0.83.0 to 0.83.3
  • checkov from 3.0.12 to 3.0.39
  • checkstyle from 10.12.4 to 10.12.5
  • clippy from 0.1.73 to 0.1.74
  • csharpier from 0.25.0 to 0.26.2
  • cspell from 7.3.8 to 8.0.0
  • dotnet-format from 6.0.416 to 6.0.417
  • eslint from 8.52.0 to 8.54.0
  • golangci-lint from 1.55.1 to 1.55.2
  • kics from 1.7.10 to 1.7.11
  • kubeconform from 0.6.3 to 0.6.4
  • mypy from 1.6.1 to 1.7.0
  • npm-groovy-lint from 11.1.1 to 12.1.0
  • npm-package-json-lint from 7.0.0 to 7.1.0
  • phpstan from 1.10.39 to 1.10.42
  • powershell from 7.3.9 to 7.4.0
  • powershell_formatter from 7.3.9 to 7.4.0
  • prettier from 3.0.3 to 3.1.0
  • protolint from 0.46.2 to 0.46.3
  • pyright from 1.1.333 to 1.1.336
  • ruff from 0.1.3 to 0.1.6
  • secretlint from 7.0.7 to 7.1.0
  • semgrep from 1.46.0 to 1.50.0
  • sfdx-scanner-apex from 3.17.0 to 3.18.0
  • sfdx-scanner-aura from 3.17.0 to 3.18.0
  • sfdx-scanner-lwc from 3.17.0 to 3.18.0
  • swiftlint from 0.53.0 to 0.54.0
  • syft from 0.94.0 to 0.97.1
  • terraform-fmt from 1.6.2 to 1.6.4
  • terragrunt from 0.53.0 to 0.53.4
  • tflint from 0.48.0 to 0.49.0
  • trivy-sbom from 0.46.1 to 0.47.0
  • trivy from 0.46.1 to 0.47.0
  • trufflehog from 3.61.0 to 3.63.0
  • vale from 2.29.5 to 2.29.7
  • xmllint from 21104 to 21106
  • yamllint from 1.32.0 to 1.33.0

v7.5.0

Compare Source

• Core

  • mega-linter-runner: Convert to ES6 and upgrade npm dependencies. Node 18 minimum version is now required.
  • Allow to define COMPILER_ONLY virtual package as cargo dependency in descriptors to embed rust compiler in the Dockerfile
  • Optimize @generated marker scanning (#​2654)
  • Upgrade to python 3.12.0

• Media

  • Achieve Code Consistency: MegaLinter Integration in Azure DevOps, by Don Koning on Microsoft Tech Community

• Fixes

  • build.py: Remove exclusivity between pip, gem & cargo packages
  • Salesforce linters: Switch sfdx-cli to @​salesforce/cli
  • Fixed issue with actionlint throwing an error on if statements in the generated workflow file
  • Added default .devskim.json to mitigate errors introduced when no config exists

• Doc

  • Display list of articles from newest to oldest
  • Fix incorrect environment variable in djlint docs
  • Improve lychee documentation to add an example of .lycheeignore

• CI

  • Add the other maintainers globally to the CODEOWNERS file (#​3008)
  • Free disk space earlier in the process to avoid failure during docker build
  • Set flavors-stats.json as a generated file in .gitattributes (#​3023)
  • Update and fix our ChatOps automations to only run on pull request comments, by @​echoix in #​3034
  • Use App::cpm to install perlcritic faster, and clean .perl-cpm cache, by @​echoix in #​3036
  • Add failure message in ChatOps build-command and Slash dispatcher, by @​echoix in #​3037

• Linter versions upgrades

  • ansible-lint from 6.20.0 6.21.1
  • bicep_linter from 0.21.1 to 0.22.6
  • black from 23.9.1 to 23.10.1
  • cfn-lint from 0.80.2 to 0.83.0
  • checkov from 2.4.48 to 3.0.12
  • checkstyle from 10.12.3 to 10.12.4
  • clippy from 0.1.72 to 0.1.73
  • clj-kondo from 2023.09.07 to 2023.10.20
  • cspell from 7.3.6 to 7.3.8
  • devskim from 1.0.22 to 1.0.23
  • dotnet-format from 6.0.414 to 6.0.416
  • editorconfig-checker from 2.7.1 to 2.7.2
  • eslint-plugin-jsonc from 2.9.0 to 2.10.0
  • eslint from 8.49.0 to 8.52.0
  • golangci-lint from 1.54.2 to 1.55.1
  • kics from 1.7.8 to 1.7.10
  • ktlint from 1.0.0 to 1.0.1
  • mypy from 1.5.1 to 1.6.1
  • perlcritic from 1.150 to 1.152
  • phpstan from 1.10.35 to 1.10.39
  • powershell from 7.3.7 to 7.3.9
  • powershell_formatter from 7.3.7 to 7.3.9
  • protolint from 0.46.0 to 0.46.2
  • puppet-lint from 4.2.0 to 4.2.1
  • pylint from 2.17.5 to 3.0.2
  • pyright from 1.1.327 to 1.1.333
  • rubocop from 1.56.3 to 1.57.2
  • ruff from 0.1.2 to 0.1.3
  • ruff from 0.0.290 to 0.1.2
  • semgrep from 1.41.0 to 1.46.0
  • sfdx-scanner-apex from 3.16.0 to 3.17.0
  • sfdx-scanner-aura from 3.16.0 to 3.17.0
  • sfdx-scanner-lwc from 3.16.0 to 3.17.0
  • snakefmt from 0.8.4 to 0.8.5
  • sqlfluff from 2.3.2 to 2.3.5
  • stylelint from 15.10.3 to 15.11.0
  • swiftlint from 0.52.4 to 0.53.0
  • syft from 0.91.0 to 0.94.0
  • terraform-fmt from 1.5.7 to 1.6.2
  • terragrunt from 0.51.4 to 0.53.0
  • trivy-sbom from 0.45.1 to 0.46.1
  • trivy from 0.45.1 to 0.46.1
  • trufflehog from 3.56.1 to 3.61.0
  • v8r from 2.0.0 to 2.1.0
  • vale from 2.29.0 to 2.29.5

v7.4.0

Compare Source

• Core

  • Upgrade python to 3.11.5

• Media

  • Maximize your code consistency with Megalinter by Tor Ivar Asbølmo on codewithme.cloud
  • MegaLinter in Azure DevOps by James Cook

• Fixes

  • Fix IGNORE_GITIGNORED_FILES not working anymore , by @​iisisrael
  • Fix v7 issue when using MEGALINTER_FILES_TO_LINT ( thanks @​pfiaux !)
  • Fix Ignore symlink files when VALIDATE_ALL_CODEBASE is false
  • Fix rstcheck options & install

• Doc

  • Secretlint logo - reduce size to 150 and remove background
  • Replace https://megalinter.io/flavors with https://megalinter.io/latest/flavors to avoid lychee 404 error

• CI

  • Workflow job name changed from build to megalinter to prevent conflicts with other workflows
  • Add support for master branch in TEMPLATES/mega-linter.yml, by @​rasa

• Deprecations

  • Deprecate SCSS LINT as not maintained anymore (https://github.com/sds/scss-lint#notice-consider-other-tools-before-adopting-scss-lint)

• Linter versions upgrades

  • actionlint from 1.6.25 to 1.6.26
  • ansible-lint from 6.17.2 to 6.20.0
  • bicep_linter from 0.20.4 to 0.21.1
  • black from 23.7.0 to 23.9.1
  • cfn-lint from 0.79.6 to 0.80.2
  • checkov from 2.3.360 to 2.4.10
  • checkstyle from 10.12.2 to 10.12.3
  • chktex from 1.7.6 to 1.7.8
  • clippy from 0.1.71 to 0.1.72
  • clj-kondo from 2023.07.13 to 2023.09.07
  • cspell from 6.31.3 to 7.3.6
  • devskim from 1.0.18 to 1.0.22
  • djlint from 1.32.1 to 1.34.0
  • dotnet-format from 6.0.413 to 6.0.414
  • editorconfig-checker from 2.7.0 to 2.7.1
  • eslint from 8.46.0 to 8.49.0
  • git_diff from 2.38.5 to 2.40.1
  • gitleaks from 8.17.0 to 8.18.0
  • golangci-lint from 1.54.0 to 1.54.2
  • helm from 3.10.2 to 3.11.3
  • jscpd from 3.5.9 to 3.5.10
  • kics from 1.7.5 to 1.7.8
  • ktlint from 0.50.0 to 1.0.0
  • kubescape from 2.3.6 to 2.9.0
  • markdownlint from 0.35.0 to 0.36.0
  • mypy from 1.4.1 to 1.5.1
  • phpstan from 1.10.28 to 1.10.35
  • powershell from 7.3.6 to 7.3.7
  • powershell_formatter from 7.3.6 to 7.3.7
  • prettier from 3.0.1 to 3.0.3
  • protolint from 0.45.0 to 0.46.0
  • psalm from Psalm.5.14.1@​ to Psalm.5.15.0@​
  • puppet-lint from 4.0.1 to 4.2.0
  • pyright from 1.1.321 to 1.1.327
  • revive from 1.3.2 to 1.3.4
  • rstcheck from 6.1.2 to 6.2.0
  • rstfmt from 0.0.13 to 0.0.14
  • rubocop from 1.56.0 to 1.56.3
  • ruff from 0.0.284 to 0.0.290
  • scalafix from 0.11.0 to 0.11.1
  • semgrep from 1.34.1 to 1.41.0
  • sfdx-scanner-apex from 3.15.0 to 3.16.0
  • sfdx-scanner-aura from 3.15.0 to 3.16.0
  • sfdx-scanner-lwc from 3.15.0 to 3.16.0
  • snakemake from 7.32.3 to 7.32.4
  • spectral from 6.10.1 to 6.11.0
  • sqlfluff from 2.2.1 to 2.3.2
  • stylelint from 15.10.2 to 15.10.3
  • syft from 0.86.1 to 0.91.0
  • terraform-fmt from 1.5.4 to 1.5.7
  • terragrunt from 0.48.6 to 0.51.3
  • terrascan from 1.18.2 to 1.18.3
  • tflint from 0.47.0 to 0.48.0
  • trivy-sbom from 0.44.0 to 0.45.1
  • trivy from 0.44.0 to 0.45.1
  • trufflehog from 3.47.0 to 3.56.1
  • vale from 2.28.1 to 2.29.0
  • xmllint from 21004 to 21104

v7.3.0

Compare Source

• Features

  • Allow to define linter_key**_COMMAND_REMOVE_ARGUMENTS** to remove a command line argument internally added by MegaLinter

• Fixes

  • Replace https://megalinter.io/config-file by https://megalinter.io/latest/config-file to avoid lychee 404 detection
  • Improve docs for posting comments to PRs in GitHub Enterprise

• CodeTotal

  • Redis reporter: Return URL of linter icons when available, in property iconPngUrl
  • Allow to run CodeTotal with a single command npx mega-linter-runner@latest --codetotal , that opens CodeTotal in Web Browser once started

• Linter versions upgrades

  • bicep_linter from 0.19.5 to 0.20.4
  • cfn-lint from 0.79.2 to 0.79.6
  • checkov from 2.3.343 to 2.3.360
  • checkstyle from 10.12.1 to 10.12.2
  • cspell from 6.31.2 to 6.31.3
  • devskim from 1.0.1 to 1.0.18
  • dotnet-format from 6.0.412 to 6.0.413
  • eslint from 8.45.0 to 8.46.0
  • flake8 from 6.0.0 to 6.1.0
  • golangci-lint from 1.53.3 to 1.54.0
  • kics from 1.7.4 to 1.7.5
  • phpstan from 1.10.26 to 1.10.28
  • prettier from 3.0.0 to 3.0.1
  • psalm from Psalm.5.13.1@​ to Psalm.5.14.1@​
  • puppet-lint from 4.0.0 to 4.0.1
  • pyright from 1.1.318 to 1.1.321
  • rubocop from 1.55.0 to 1.56.0
  • ruff from 0.0.280 to 0.0.284
  • secretlint from 7.0.3 to 7.0.7
  • semgrep from 1.33.2 to 1.34.1
  • sfdx-scanner-apex from 3.14.0 to 3.15.0
  • sfdx-scanner-aura from 3.14.0 to 3.15.0
  • sfdx-scanner-lwc from 3.14.0 to 3.15.0
  • snakemake from 7.31.0 to 7.32.3
  • spectral from 6.10.0 to 6.10.1
  • sqlfluff from 2.1.4 to 2.2.1
  • syft from 0.85.0 to 0.86.1
  • terraform-fmt from 1.5.3 to 1.5.4
  • terragrunt from 0.48.4 to 0.48.6
  • terrascan from 1.18.1 to 1.18.2
  • trivy-sbom from 0.43.1 to 0.44.0
  • trivy from 0.43.1 to 0.44.0
  • trufflehog from 3.45.1 to 3.47.0

v7.2.1

Compare Source

• Fixes

  • Fix TAP reporter (3 real dots instead if 3 dots character)
  • Call trufflehog with --only-verified to avoid false positives in .git/config

• Linter versions upgrades

  • cfn-lint from 0.78.2 to 0.79.2
  • checkov from 2.3.340 to 2.3.343
  • pylint from 2.17.4 to 2.17.5
  • rubocop from 1.54.2 to 1.55.0
  • snakemake from 7.30.2 to 7.31.0
  • spectral from 6.8.0 to 6.10.0
  • sqlfluff from 2.1.3 to 2.1.4
  • trufflehog from 3.44.0 to 3.45.1

v7.2.0

Compare Source

• New linters

  • Add Lychee - links and email addresses checker, by @​DariuszPorowski in #​2673
  • Add grype security linter
  • Add trufflehog security linter

• New flavor dotnetweb: dotnet flavor linters + Javascript & Typescript linters

• Media

  • 8 Tools to Scan Node.js Applications for Security Vulnerability, by Chandan Kumar{target=_blank} on GeekFlare.com
  • Shift Left Just Become Easier (Black Hat Arsenal Session)

• Core

  • MegaLinter Server for CodeTotal
  • Improvements to Gitpod workspace and addition of Makefile for automation, by @​ThomasSanson in #​2737

• Fixes

  • Handle reporter crashes without making all ML crash
  • Devskim: Remove default --ignore-globs argument
  • mypy: Use /tmp as cache folder by default with ENV MYPY_CACHE_DIR=/tmp in Dockerfile
  • Fix hadolint to use its default configuration file properly, by @​KihyeokK in #​2763
  • Remove linters not in flavor before calling reporters
  • Undowngrade devskim, by @​nvuillam in #​2748
  • Add ts-standard linter for ts standard, by @​janderssonse in #​2746
  • Remove additional --update for apk in Dockerfile by @​PeterDaveHello in #​2619
  • Fix V8R config arg usage (#​2756), by @​bdovaz in #​2819

• Reporters

  • New Redis reporter (beta)

• CI

  • Clean docker build cache to avoid no space left on device during Build Dev job

• Linter versions upgrades

  • actionlint from 1.6.24 to 1.6.25
  • ansible-lint from 6.16.2 to 6.17.2
  • bicep_linter from 0.17.1 to 0.19.5
  • black from 23.3.0 to 23.7.0
  • cfn-lint from 0.77.10 to 0.78.2
  • checkov from 2.3.285 to 2.3.340
  • checkstyle from 10.12.0 to 10.12.1
  • clippy from 0.1.70 to 0.1.71
  • clj-kondo from 2023.05.26 to 2023.07.13
  • csharpier from 0.24.2 to 0.25.0
  • cspell from 6.31.1 to 6.31.2
  • devskim from 0.7.104 to 1.0.11
  • djlint from 1.30.2 to 1.32.1
  • dotnet-format from 6.0.408 to 6.0.412
  • eslint-plugin-jsonc from 2.8.0 to 2.9.0
  • eslint from 8.42.0 to 8.45.0
  • gitleaks from 8.16.4 to 8.17.0
  • golangci-lint from 1.53.2 to 1.53.3
  • grype from 0.63.1 to 0.63.1
  • kics from 1.7.1 to 1.7.4
  • ktlint from 0.49.1 to 0.50.0
  • kubeconform from 0.6.2 to 2.3.6
  • markdownlint from 0.34.0 to 0.37.0
  • mypy from 1.3.0 to 1.4.1
  • npm-package-json-lint from 6.4.0 to 7.0.0
  • phpstan from 1.10.18 to 1.10.26
  • powershell from 7.3.4 to 7.3.6
  • powershell_formatter from 7.3.4 to 7.3.6
  • prettier from 2.8.8 to 3.0.0
  • protolint from 0.44.0 to 0.45.0
  • psalm from Psalm.5.12.0@​ to Psalm.5.13.1@​
  • pyright from 1.1.313 to 1.1.318
  • rubocop from 1.52.0 to 1.54.2
  • ruff from 0.0.272 to 0.0.280
  • secretlint from 6.2.3 to 7.0.3
  • semgrep from 1.26.0 to 1.33.2
  • sfdx-scanner-apex from 3.13.0 to 3.14.0
  • sfdx-scanner-aura from 3.13.0 to 3.14.0
  • sfdx-scanner-lwc from 3.13.0 to 3.14.0
  • shfmt from 3.6.0 to 3.7.0
  • snakemake from 7.26.0 to 7.30.2
  • sqlfluff from 2.1.1 to 2.1.3
  • stylelint from 15.10.0 to 15.10.0
  • swiftlint from 0.52.2 to 0.52.4
  • syft from 0.83.0 to 0.85.0
  • terraform-fmt from 1.4.6 to 1.5.3
  • terragrunt from 0.46.3 to 0.51.4
  • tflint from 0.46.1 to 0.47.0
  • trivy from 0.42.1 to 0.43.1
  • vale from 2.27.0 to 2.28.1

sigstore/cosign-installer (sigstore/cosign-installer)

v3.3.0

Compare Source

What's Changed

• Bump actions/setup-go from 4.1.0 to 5.0.0 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/152
• update action to use latest cosign v2.2.2 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/153

Full Changelog: sigstore/cosign-installer@v3.2.0...v3.3.0

v3.2.0

Compare Source

Note: This release comes with a fix for CVE-2023-46737 described in this Github Security Advisory. Please upgrade to this release ASAP

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

What's Changed

• Support the runner context of gitea act by @​josedev-union in https://github.com/sigstore/cosign-installer/pull/147
• bump cosign to v2.2.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/148
• test with latest go version by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/150

New Contributors

• @​josedev-union made their first contribution in https://github.com/sigstore/cosign-installer/pull/147

Full Changelog: sigstore/cosign-installer@v3...v3.2.0

v3.1.2

Compare Source

What's Changed

• Fix build and push step Readme missing id by @​hbenali in https://github.com/sigstore/cosign-installer/pull/138
• bump cosign to v2.2.0 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/142

New Contributors

• @​hbenali made their first contribution in https://github.com/sigstore/cosign-installer/pull/138

Full Changelog: sigstore/cosign-installer@v3...v3.1.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ ACTION	actionlint	2		1	0.02s
✅ COPYPASTE	jscpd	yes		no	1.27s
✅ JSON	eslint-plugin-jsonc	4		0	1.09s
✅ JSON	jsonlint	4		0	0.3s
✅ JSON	prettier	4		0	0.45s
✅ JSON	v8r	4		0	3.76s
✅ MARKDOWN	markdownlint	1		0	0.31s
✅ MARKDOWN	markdown-link-check	1		0	0.4s
✅ MARKDOWN	markdown-table-formatter	1		0	0.27s
✅ REPOSITORY	checkov	yes		no	15.12s
❌ REPOSITORY	devskim	yes		1	1.65s
✅ REPOSITORY	dustilock	yes		no	0.0s
✅ REPOSITORY	gitleaks	yes		no	0.08s
✅ REPOSITORY	git_diff	yes		no	0.0s
✅ REPOSITORY	grype	yes		no	11.43s
✅ REPOSITORY	secretlint	yes		no	0.96s
✅ REPOSITORY	syft	yes		no	0.32s
✅ REPOSITORY	trivy	yes		no	5.12s
✅ REPOSITORY	trivy-sbom	yes		no	2.58s
✅ REPOSITORY	trufflehog	yes		no	2.4s
✅ YAML	prettier	3		0	0.38s
✅ YAML	v8r	3		0	4.44s
✅ YAML	yamllint	3		0	0.84s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/[email protected] (50 linters)
• oxsecurity/megalinter/flavors/[email protected] (50 linters)
• oxsecurity/megalinter/flavors/[email protected] (50 linters)
• oxsecurity/megalinter/flavors/[email protected] (50 linters)
• oxsecurity/megalinter/flavors/[email protected] (52 linters)
• oxsecurity/megalinter/flavors/[email protected] (53 linters)
• oxsecurity/megalinter/flavors/[email protected] (53 linters)
• oxsecurity/megalinter/flavors/[email protected] (54 linters)
• oxsecurity/megalinter/flavors/[email protected] (54 linters)
• oxsecurity/megalinter/flavors/[email protected] (54 linters)
• oxsecurity/megalinter/flavors/[email protected] (59 linters)
• oxsecurity/megalinter/flavors/[email protected] (61 linters)
• oxsecurity/megalinter/flavors/[email protected] (63 linters)
• oxsecurity/megalinter/flavors/[email protected] (72 linters)
• oxsecurity/megalinter/flavors/[email protected] (83 linters)

MegaLinter is graciously provided by