chore(deps): bump oxsecurity/megalinter from 6.15.0 to 6.21.0

[dependabot[bot]]

Bumps oxsecurity/megalinter from 6.15.0 to 6.21.0.

Release notes

Sourced from oxsecurity/megalinter's releases.

MegaLinter v6.21.0

What's Changed

• New linters
  • Add helm lint, by @​ThomasSanson in oxsecurity/megalinter#2386

• Medias
  • Video: Code quality - Ep01 - MegaLinter, one linter to rule them all, by @​devpro
  • Video: DevSecOps Webinar using MegaLinter, by 5.15 Technologies
  • Video: (FR) Coding Tech - L'importance de la CI/CD dans le développement de logiciels, by @​GridexX from R2DevOps
  • Article: (FR) MegaLinter, votre meilleur ami pour un code de qualité, by @​ThomasSanson

• Linter enhancements & fixes

  • phpcs: Add regex in descriptor to be able to extract the number of found errors, by @​nvuillam in oxsecurity/megalinter#2453
  • Replace babel-eslint with @​babel/eslint-parser, by @​bdovaz in oxsecurity/megalinter#2445
  • Use docker image to install phpstan, by @​nvuillam in oxsecurity/megalinter#2469
  • Avoid cspell error on readonly workspaces, by @​nvuillam in oxsecurity/megalinter#2474
  • Allow bandit to use pyproject.toml, by @​nvuillam in oxsecurity/megalinter#2475
  • Bring back stylelint-config-sass-guidelines package, by @​nvuillam in oxsecurity/megalinter#2477
  • Display only errors in markdown-link-check logs for better readability, by @​nvuillam in oxsecurity/megalinter#2479

• Core

  • Run CI linter jobs only on Pull requests to avoid doubling jobs

• Documentation

  • mega-linter-runner: doc fix for env list of values, see #2448, by @​DariuszPorowski in oxsecurity/megalinter#2449

• Linter versions upgrades

  • ansible-lint from 6.14.1 to 6.14.3
  • bandit from 1.7.4 to 1.7.5
  • cfn-lint from 0.74.1 to 0.75.1
  • checkov from 2.3.70 to 2.3.120
  • checkstyle from 10.8.0 to 10.9.3
  • clippy from 0.1.67 to 0.1.68
  • clj-kondo from 2023.02.17 to 2023.03.17
  • cspell from 6.28.0 to 6.31.1
  • dotnet-format from 6.0.406 to 6.0.407
  • eslint-plugin-jsonc from 2.6.0 to 2.7.0
  • eslint from 8.35.0 to 8.36.0
  • gitleaks from 8.16.0 to 8.16.1
  • jscpd from 3.5.3 to 3.5.4
  • jsonlint from 14.0.1 to 14.0.2
  • kics from 1.6.11 to 1.6.12
  • markdown-link-check from 3.10.3 to 3.11.0
  • phpstan from 1.10.5 to 1.10.8
  • prettier from 2.8.4 to 2.8.7

... (truncated)

Changelog

Sourced from oxsecurity/megalinter's changelog.

[v6.21.0] - 2023-03-26

• New linters
  • Add helm lint, by @​ThomasSanson in oxsecurity/megalinter#2386

• Medias
  • Video: Code quality - Ep01 - MegaLinter, one linter to rule them all, by @​devpro
  • Video: DevSecOps Webinar using MegaLinter, by 5.15 Technologies
  • Video: (FR) Coding Tech - L'importance de la CI/CD dans le développement de logiciels, by @​GridexX from R2DevOps
  • Article: (FR) MegaLinter, votre meilleur ami pour un code de qualité, by @​ThomasSanson

• Linter enhancements & fixes

  • phpcs: Add regex in descriptor to be able to extract the number of found errors, by @​nvuillam in oxsecurity/megalinter#2453
  • Replace babel-eslint with @​babel/eslint-parser, by @​bdovaz in oxsecurity/megalinter#2445
  • Use docker image to install phpstan, by @​nvuillam in oxsecurity/megalinter#2469
  • Avoid cspell error on readonly workspaces, by @​nvuillam in oxsecurity/megalinter#2474
  • Allow bandit to use pyproject.toml, by @​nvuillam in oxsecurity/megalinter#2475
  • Bring back stylelint-config-sass-guidelines package, by @​nvuillam in oxsecurity/megalinter#2477
  • Display only errors in markdown-link-check logs for better readability, by @​nvuillam in oxsecurity/megalinter#2479

• Core

  • Run CI linter jobs only on Pull requests to avoid doubling jobs

• Documentation

  • mega-linter-runner: doc fix for env list of values, see #2448, by @​DariuszPorowski in oxsecurity/megalinter#2449

• Linter versions upgrades

  • ansible-lint from 6.14.1 to 6.14.3
  • bandit from 1.7.4 to 1.7.5
  • cfn-lint from 0.74.1 to 0.75.1
  • checkov from 2.3.70 to 2.3.120
  • checkstyle from 10.8.0 to 10.9.3
  • clippy from 0.1.67 to 0.1.68
  • clj-kondo from 2023.02.17 to 2023.03.17
  • cspell from 6.28.0 to 6.31.1
  • dotnet-format from 6.0.406 to 6.0.407
  • eslint-plugin-jsonc from 2.6.0 to 2.7.0
  • eslint from 8.35.0 to 8.36.0
  • gitleaks from 8.16.0 to 8.16.1
  • jscpd from 3.5.3 to 3.5.4
  • jsonlint from 14.0.1 to 14.0.2
  • kics from 1.6.11 to 1.6.12
  • markdown-link-check from 3.10.3 to 3.11.0
  • phpstan from 1.10.5 to 1.10.8
  • prettier from 2.8.4 to 2.8.7
  • psalm from Psalm.5.7.7@ to Psalm.5.8.0@

... (truncated)

Commits

• c364436 Release MegaLinter v6.21.0
• 6610801 [automation] Auto-update linters version, help and documentation (#2481)
• a852026 [automation] Auto-update linters version, help and documentation (#2480)
• 68d04b3 Display only errors in markdown-link-check logs for better readability (#2479)
• b290798 Upgrade gitleaks (#2478)
• 8a1727f Bring back stylelint-config-sass-guidelines (#2477)
• 7ca4c0d Allow bandit to use pyproject.toml (#2475)
• 65d3ca4 [documentation] runner - doc fix for env list of values (#2449)
• ae9697a [automation] Auto-update linters version, help and documentation (#2476)
• 65d21a2 Avoid cspell error on readonly workspaces (#2474)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #217.