oxsecurity/megalinter (oxsecurity/megalinter)
### [`v7.11.1`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7111---2024-04-23)
[Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.11.0...v7.11.1)
- Fixes
- Implement fallback in case git diff does not work with merge-base
- Linter versions upgrades
- [stylelint](https://stylelint.io) from 16.3.1 to **16.4.0**
### [`v7.11.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7110---2024-04-23)
[Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.10.0...v7.11.0)
- Core
- Allow to override the number of parallel cores used, with variable **PARALLEL_PROCESS_NUMBER**, by [@nvuillam](https://togithub.com/nvuillam) in [#3428](https://togithub.com/oxsecurity/megalinter/pull/3428)
- Upgrade base python image from 3.12.2-alpine3.19 to 3.12.3-alpine3.19
- Upgrade PHP 8.1 to 8.3 by [@llaville](https://togithub.com/llaville) in [#3464](https://togithub.com/oxsecurity/megalinter/pull/3464)
- Add descriptor pre / post commands, by [@bdovaz](https://togithub.com/bdovaz) in [#3468](https://togithub.com/oxsecurity/megalinter/pull/3468)
- Allow merge lists with **EXTENDS**, by [@bdovaz](https://togithub.com/bdovaz) in [#3469](https://togithub.com/oxsecurity/megalinter/pull/3469)
- Media
- New linters
- Add Kotlin detekt linter, by [@enciyo](https://togithub.com/enciyo) in [#3408](https://togithub.com/oxsecurity/megalinter/pull/3408)
- Reporters
- Add ruff sarif support, by [@Skitionek](https://togithub.com/Skitionek) in [#3486](https://togithub.com/oxsecurity/megalinter/pull/3486)
- Fixes
- Fix listing of modified files, by [@vkucera](https://togithub.com/vkucera) in [#3472](https://togithub.com/oxsecurity/megalinter/pull/3472). Fixes [#2125](https://togithub.com/oxsecurity/megalinter/issues/2125).
- Fix conflict between prettier and yamllint about spaces, by [@apeyrat](https://togithub.com/apeyrat) in [#3426](https://togithub.com/oxsecurity/megalinter/pull/3426)
- Ensure [trufflehog](https://togithub.com/trufflesecurity/trufflehog) does not auto-update itself, by [@wandering-tales](https://togithub.com/wandering-tales) in [#3430](https://togithub.com/oxsecurity/megalinter/pull/3430)
- Salesforce linters: use sf + default Flow Scanner rules, by [@nvuillam](https://togithub.com/nvuillam) in [#3435](https://togithub.com/oxsecurity/megalinter/pull/3435)
- Disable JSON_ESLINT_PLUGIN_JSONC until [ota-meshi/eslint-plugin-jsonc#328](https://togithub.com/ota-meshi/eslint-plugin-jsonc/issues/328) is fixed
- Upgrade tar in mega-linter-runner
- secretlint: remove default `.secretlintignore` that was never used but `.gitignore` is used instead. Fixes [#3328](https://togithub.com/oxsecurity/megalinter/issues/3328)
- Add jpeg, xlsx to .gitleaks.toml, by [@rasa](https://togithub.com/rasa) in [#3434](https://togithub.com/oxsecurity/megalinter/pull/3434)
- Fix Json Schema, by [@nvuillam](https://togithub.com/nvuillam) in [#3470](https://togithub.com/oxsecurity/megalinter/pull/3470)
- Remove `TEMPLATES/.secretlintignore`, by [@pjungermann](https://togithub.com/pjungermann) in [#3476](https://togithub.com/oxsecurity/megalinter/pull/3476)
- Doc
- Update R2DevOps logo, by [@nvuillam](https://togithub.com/nvuillam) in [#3436](https://togithub.com/oxsecurity/megalinter/pull/3436)
- Update [Roslynator](https://togithub.com/dotnet/roslynator) repo url and logo, by [@TommyE123](https://togithub.com/TommyE123) in [#3444](https://togithub.com/oxsecurity/megalinter/pull/3444)
- Fix clang-format documentation links to point to the correct version. Fixes [#3452](https://togithub.com/oxsecurity/megalinter/issues/3452), by [@daltonv](https://togithub.com/daltonv) in [#3453](https://togithub.com/oxsecurity/megalinter/pull/3453)
- Add copy to clipboard button in code block (documentation), by [@nikkii86](https://togithub.com/nikkii86) in [#3491](https://togithub.com/oxsecurity/megalinter/pull/3491)
- Flavors
- Add C & C++ linters in Python flavor by [@nvuillam](https://togithub.com/nvuillam) in [#3456](https://togithub.com/oxsecurity/megalinter/pull/3456)
- CI
- Make SPELL_LYCHEE non blocking for internal CI jobs
- Remove old unused automerge workflows by [@echoix](https://togithub.com/echoix) in [#3432](https://togithub.com/oxsecurity/megalinter/pull/3432)
- Add consistent python3/python handling at build.sh, by [@pjungermann](https://togithub.com/pjungermann) in [#3475](https://togithub.com/oxsecurity/megalinter/pull/3475)
- Linter versions upgrades
- [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.2.0 to **24.2.2**
- [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.25.53 to **0.26.170**
- [black](https://black.readthedocs.io/en/stable/) from 24.2.0 to **24.4.0**
- [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.86.0 to **0.86.4**
- [checkov](https://www.checkov.io/) from 3.2.34 to **3.2.74**
- [checkstyle](https://checkstyle.org/) from 10.14.0 to **10.15.0**
- [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.76 to **0.1.77**
- [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2024.03.05 to **2024.03.13**
- [csharpier](https://csharpier.com/) from 0.27.3 to **0.28.1**
- [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.6.0 to **8.7.0**
- [devskim](https://togithub.com/microsoft/DevSkim) from 1.0.32 to **1.0.33**
- [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 8.0.102 to **8.0.104**
- [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.13.0 to **2.15.1**
- [golangci-lint](https://golangci-lint.run/) from 1.56.2 to **1.57.2**
- [grype](https://togithub.com/anchore/grype) from 0.74.7 to **0.77.0**
- [kics](https://www.kics.io) from 1.7.13 to **2.0.0**
- [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.18.0 to **2.22.0**
- [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.11.2 to **3.12.1**
- [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.3 to **14.4.1**
- [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.9.0 to **3.9.1**
- [phpstan](https://phpstan.org/) from 1.10.60 to **1.10.67**
- [protolint](https://togithub.com/yoheimuta/protolint) from 0.48.0 to **0.49.6**
- [psalm](https://psalm.dev) from Psalm.5.23.0@ to **Psalm.5.23.1@**
- [pyright](https://togithub.com/Microsoft/pyright) from 1.1.353 to **1.1.359**
- [roslynator](https://togithub.com/dotnet/Roslynator) from 0.8.3.0 to **0.8.6.0**
- [rstcheck](https://togithub.com/myint/rstcheck) from 6.2.0 to **6.2.1**
- [rubocop](https://rubocop.org/) from 1.62.0 to **1.63.3**
- [ruff](https://togithub.com/astral-sh/ruff) from 0.3.2 to **0.4.1**
- [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.2 to **8.2.3**
- [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0**
- [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0**
- [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0**
- [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.10.0 to **0.10.1**
- [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.5.5 to **8.10.8**
- [spectral](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview) from 6.11.0 to **6.11.1**
- [sqlfluff](https://www.sqlfluff.com/) from 2.3.5 to **3.0.5**
- [stylelint](https://stylelint.io) from 16.2.1 to **16.3.1**
- [syft](https://togithub.com/anchore/syft) from 1.0.1 to **1.2.0**
- [tekton-lint](https://togithub.com/IBM/tekton-lint) from 1.0.0 to **1.0.2**
- [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.4 to **1.8.1**
- [terragrunt](https://terragrunt.gruntwork.io) from 0.55.13 to **0.57.5**
- [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.49.1 to **0.50.2**
- [trivy](https://aquasecurity.github.io/trivy/) from 0.49.1 to **0.50.2**
- [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.69.0 to **3.73.0**
- [vale](https://vale.sh/) from 3.2.2 to **3.4.0**
### [`v7.10.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7100---2024-03-10)
[Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.9.0...v7.10.0)
- Core
- Update dotnet linters to .NET 8, by [@bdovaz](https://togithub.com/bdovaz) in [#3182](https://togithub.com/oxsecurity/megalinter/pull/3182)
- Media
- [How to use MegaLinter with Jenkins](https://www.youtube.com/watch?v=KhkNf2tQ3hM), by [Darin Pope](https://www.linkedin.com/in/darinpope/) / [Cloudbees](https://www.cloudbees.com/)
- Fixes
- Trivy: use `misconfig` instead of the deprecated `config` scanner, updating the default arguments, by [@pjungermann](https://togithub.com/pjungermann) in [#3376](https://togithub.com/oxsecurity/megalinter/pull/3376)
- Update calls to sfdx-scanner to output a CSV file for Aura & LWC, by [@nvuillam](https://togithub.com/nvuillam) in [#3398](https://togithub.com/oxsecurity/megalinter/pull/3398)
- Kics: fixed error count in the summary table, by [@TommyE123](https://togithub.com/TommyE123) in [#3402](https://togithub.com/oxsecurity/megalinter/pull/3402)
- Fix issue with EXTENDS using private repository by sending GITHUB_TOKEN as HTTP auth header, by [@nvuillam](https://togithub.com/nvuillam) in [#3404](https://togithub.com/oxsecurity/megalinter/pull/3404)
- Fix SPELL_VALE_CONFIG_FILE not working (handle the override of linter CONFIG_FILE if the linter is activated only if some files are found), by [@nvuillam](https://togithub.com/nvuillam) in [#3409](https://togithub.com/oxsecurity/megalinter/pull/3409)
- CI
- Enable dependabot updates for devcontainer and other Docker directories, by [@echoix](https://togithub.com/echoix) in [#3390](https://togithub.com/oxsecurity/megalinter/pull/3390)
- Doc
- Removed obsolete warning for semgrep as the issue has been fixed, by [@Jayllyz](https://togithub.com/Jayllyz) in [#3374](https://togithub.com/oxsecurity/megalinter/pull/3374)
- docs: fix docs in TrivySbomLinter.py, by [@pjungermann](https://togithub.com/pjungermann) in
- Linter versions upgrades
- [actionlint](https://rhysd.github.io/actionlint/) from 1.6.26 to **1.6.27**
- [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.7 to **1.7.8**
- [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.25.3 to **0.25.53**
- [black](https://black.readthedocs.io/en/stable/) from 24.1.1 to **24.2.0**
- [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.85.1 to **0.86.0**
- [checkov](https://www.checkov.io/) from 3.2.20 to **3.2.21**
- [checkstyle](https://checkstyle.org/) from 10.13.0 to **10.14.0**
- [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2023.12.15 to **2024.03.05**
- [csharpier](https://csharpier.com/) from 0.27.2 to **0.27.3**
- [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.3.2 to **8.6.0**
- [devskim](https://togithub.com/microsoft/DevSkim) from 1.0.28 to **1.0.32**
- [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 7.0.115 to **8.0.102**
- [eslint](https://eslint.org) from 8.56.0 to **8.57.0**
- [golangci-lint](https://golangci-lint.run/) from 1.56.1 to **1.56.2**
- [grype](https://togithub.com/anchore/grype) from 0.74.5 to **0.74.7**
- [helm](https://helm.sh/docs/helm/helm_lint/) from 3.13.2 to **3.14.2**
- [kics](https://www.kics.io) from 1.7.12 to **1.7.13**
- [ktlint](https://ktlint.github.io) from 1.1.1 to **1.2.1**
- [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.16.0 to **2.18.0**
- [mypy](https://mypy.readthedocs.io/en/stable/) from 1.8.0 to **1.9.0**
- [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.1 to **14.2.3**
- [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.8.1 to **3.9.0**
- [phpstan](https://phpstan.org/) from 1.10.57 to **1.10.60**
- [powershell](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.4.0 to **7.4.1**
- [powershell_formatter](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.4.0 to **7.4.1**
- [protolint](https://togithub.com/yoheimuta/protolint) from 0.47.5 to **0.48.0**
- [psalm](https://psalm.dev) from Psalm.5.21.1@ to **Psalm.5.23.0@**
- [pylint](https://pylint.readthedocs.io) from 3.0.3 to **3.1.0**
- [pyright](https://togithub.com/Microsoft/pyright) from 1.1.350 to **1.1.353**
- [rubocop](https://rubocop.org/) from 1.60.2 to **1.62.0**
- [ruff](https://togithub.com/astral-sh/ruff) from 0.2.1 to **0.3.2**
- [scalafix](https://scalacenter.github.io/scalafix/) from 0.11.1 to **0.12.0**
- [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.1 to **8.1.2**
- [shellcheck](https://togithub.com/koalaman/shellcheck) from 0.9.0 to **0.10.0**
- [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.4.8 to **8.5.5**
- [syft](https://togithub.com/anchore/syft) from 0.104.0 to **1.0.1**
- [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.3 to **1.7.4**
- [terragrunt](https://terragrunt.gruntwork.io) from 0.55.1 to **0.55.13**
- [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.67.5 to **3.69.0**
- [vale](https://vale.sh/) from 3.0.5 to **3.2.2**
- [xmllint](https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home) from 21106 to **21107**
- [yamllint](https://yamllint.readthedocs.io/) from 1.34.0 to **1.35.1**
### [`v7.9.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v790---2024-02-11)
[Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.8.0...v7.9.0)
- Core
- Upgrade actions/checkout and stefanzweifel/git-auto-commit-action in generator template workflow, by [@Jayllyz](https://togithub.com/Jayllyz) in [#3327](https://togithub.com/oxsecurity/megalinter/pull/3327)
- Upgrade base python image to python:3.12.2-alpine3.19
- Fixes
- Format powershell linter output into terminal-wide table, and count errors, by [@efrecon](https://togithub.com/efrecon) in [#3318](https://togithub.com/oxsecurity/megalinter/pull/3318)
- Allow active_only_if_file_found to work in specified subdirectory (\_DIRECTORY), fixes [#2873](https://togithub.com/oxsecurity/megalinter/issues/2873), by [@TimothyEarley](https://togithub.com/TimothyEarley) in [#3323](https://togithub.com/oxsecurity/megalinter/pull/3323)
- Activate CI servers reporters only if we find a related default env variable, by [@nvuillam](https://togithub.com/nvuillam) in [#3321](https://togithub.com/oxsecurity/megalinter/pull/3321)
- Doc
- Update copyright year to 2024, by [@Jayllyz](https://togithub.com/Jayllyz) in [#3339](https://togithub.com/oxsecurity/megalinter/pull/3339)
- CI
- Free more disk space before docker build
- Upgrade peter-evans/create-pull-request from v5 to v6 in GitHub Actions workflows
- Linter versions upgrades
- [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.22.2 to **24.2.0**
- [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.6 to **1.7.7**
- [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.24.24 to **0.25.3**
- [black](https://black.readthedocs.io/en/stable/) from 23.12.1 to **24.1.1**
- [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.84.0 to **0.85.1**
- [checkov](https://www.checkov.io/) from 3.1.67 to **3.2.20**
- [checkstyle](https://checkstyle.sourceforge.io) from 10.12.7 to **10.13.0**
- [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.75 to **0.1.76**
- [csharpier](https://csharpier.com/) from 0.27.0 to **0.27.2**
- [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.12.2 to **2.13.0**
- [gitleaks](https://togithub.com/gitleaks/gitleaks) from 8.18.1 to **8.18.2**
- [golangci-lint](https://golangci-lint.run/) from 1.55.2 to **1.56.1**
- [grype](https://togithub.com/anchore/grype) from 0.63.1 to **0.74.5**
- [lychee](https://lychee.cli.rs) from 0.14.1 to **0.14.3**
- [markdownlint](https://togithub.com/DavidAnson/markdownlint) from 0.38.0 to **0.39.0**
- [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.0 to **14.2.1**
- [phplint](https://togithub.com/overtrue/phplint) from 9.1.0 to **9.1.2**
- [phpstan](https://phpstan.org/) from 1.10.56 to **1.10.57**
- [prettier](https://prettier.io/) from 3.2.4 to **3.2.5**
- [psalm](https://psalm.dev) from Psalm.5.20.0@ to **Psalm.5.21.1@**
- [puppet-lint](http://puppet-lint.com/) from 4.2.3 to **4.2.4**
- [pyright](https://togithub.com/Microsoft/pyright) from 1.1.347 to **1.1.350**
- [revive](https://revive.run/) from 1.3.6 to **1.3.7**
- [roslynator](https://togithub.com/JosefPihrt/Roslynator) from 0.8.2.0 to **0.8.3.0**
- [rubocop](https://rubocop.org/) from 1.60.1 to **1.60.2**
- [ruff](https://togithub.com/astral-sh/ruff) from 0.1.14 to **0.2.1**
- [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.0 to **8.1.1**
- [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.20.0 to **3.21.0**
- [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.20.0 to **3.21.0**
- [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.20.0 to **3.21.0**
- [shfmt](https://togithub.com/mvdan/sh) from 3.7.0 to **3.8.0**
- [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.9.0 to **0.10.0**
- [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.2.3 to **8.4.8**
- [stylelint](https://stylelint.io) from 16.2.0 to **16.2.1**
- [syft](https://togithub.com/anchore/syft) from 0.101.1 to **0.104.0**
- [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.0 to **1.7.3**
- [terragrunt](https://terragrunt.gruntwork.io) from 0.54.20 to **0.55.1**
- [tflint](https://togithub.com/terraform-linters/tflint) from 0.50.1 to **0.50.3**
- [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.48.3 to **0.49.1**
- [trivy](https://aquasecurity.github.io/trivy/) from 0.48.3 to **0.49.1**
- [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.63.10 to **3.67.5**
- [v8r](https://togithub.com/chris48s/v8r) from 2.1.0 to **3.0.0**
- [yamllint](https://yamllint.readthedocs.io/) from 1.33.0 to **1.34.0**
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v7.8.0
->v7.11.1
Release Notes
oxsecurity/megalinter (oxsecurity/megalinter)
### [`v7.11.1`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7111---2024-04-23) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.11.0...v7.11.1) - Fixes - Implement fallback in case git diff does not work with merge-base - Linter versions upgrades - [stylelint](https://stylelint.io) from 16.3.1 to **16.4.0** ### [`v7.11.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7110---2024-04-23) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.10.0...v7.11.0) - Core - Allow to override the number of parallel cores used, with variable **PARALLEL_PROCESS_NUMBER**, by [@nvuillam](https://togithub.com/nvuillam) in [#3428](https://togithub.com/oxsecurity/megalinter/pull/3428) - Upgrade base python image from 3.12.2-alpine3.19 to 3.12.3-alpine3.19 - Upgrade PHP 8.1 to 8.3 by [@llaville](https://togithub.com/llaville) in [#3464](https://togithub.com/oxsecurity/megalinter/pull/3464) - Add descriptor pre / post commands, by [@bdovaz](https://togithub.com/bdovaz) in [#3468](https://togithub.com/oxsecurity/megalinter/pull/3468) - Allow merge lists with **EXTENDS**, by [@bdovaz](https://togithub.com/bdovaz) in [#3469](https://togithub.com/oxsecurity/megalinter/pull/3469) - Media - New linters - Add Kotlin detekt linter, by [@enciyo](https://togithub.com/enciyo) in [#3408](https://togithub.com/oxsecurity/megalinter/pull/3408) - Reporters - Add ruff sarif support, by [@Skitionek](https://togithub.com/Skitionek) in [#3486](https://togithub.com/oxsecurity/megalinter/pull/3486) - Fixes - Fix listing of modified files, by [@vkucera](https://togithub.com/vkucera) in [#3472](https://togithub.com/oxsecurity/megalinter/pull/3472). Fixes [#2125](https://togithub.com/oxsecurity/megalinter/issues/2125). - Fix conflict between prettier and yamllint about spaces, by [@apeyrat](https://togithub.com/apeyrat) in [#3426](https://togithub.com/oxsecurity/megalinter/pull/3426) - Ensure [trufflehog](https://togithub.com/trufflesecurity/trufflehog) does not auto-update itself, by [@wandering-tales](https://togithub.com/wandering-tales) in [#3430](https://togithub.com/oxsecurity/megalinter/pull/3430) - Salesforce linters: use sf + default Flow Scanner rules, by [@nvuillam](https://togithub.com/nvuillam) in [#3435](https://togithub.com/oxsecurity/megalinter/pull/3435) - Disable JSON_ESLINT_PLUGIN_JSONC until [ota-meshi/eslint-plugin-jsonc#328](https://togithub.com/ota-meshi/eslint-plugin-jsonc/issues/328) is fixed - Upgrade tar in mega-linter-runner - secretlint: remove default `.secretlintignore` that was never used but `.gitignore` is used instead. Fixes [#3328](https://togithub.com/oxsecurity/megalinter/issues/3328) - Add jpeg, xlsx to .gitleaks.toml, by [@rasa](https://togithub.com/rasa) in [#3434](https://togithub.com/oxsecurity/megalinter/pull/3434) - Fix Json Schema, by [@nvuillam](https://togithub.com/nvuillam) in [#3470](https://togithub.com/oxsecurity/megalinter/pull/3470) - Remove `TEMPLATES/.secretlintignore`, by [@pjungermann](https://togithub.com/pjungermann) in [#3476](https://togithub.com/oxsecurity/megalinter/pull/3476) - Doc - Update R2DevOps logo, by [@nvuillam](https://togithub.com/nvuillam) in [#3436](https://togithub.com/oxsecurity/megalinter/pull/3436) - Update [Roslynator](https://togithub.com/dotnet/roslynator) repo url and logo, by [@TommyE123](https://togithub.com/TommyE123) in [#3444](https://togithub.com/oxsecurity/megalinter/pull/3444) - Fix clang-format documentation links to point to the correct version. Fixes [#3452](https://togithub.com/oxsecurity/megalinter/issues/3452), by [@daltonv](https://togithub.com/daltonv) in [#3453](https://togithub.com/oxsecurity/megalinter/pull/3453) - Add copy to clipboard button in code block (documentation), by [@nikkii86](https://togithub.com/nikkii86) in [#3491](https://togithub.com/oxsecurity/megalinter/pull/3491) - Flavors - Add C & C++ linters in Python flavor by [@nvuillam](https://togithub.com/nvuillam) in [#3456](https://togithub.com/oxsecurity/megalinter/pull/3456) - CI - Make SPELL_LYCHEE non blocking for internal CI jobs - Remove old unused automerge workflows by [@echoix](https://togithub.com/echoix) in [#3432](https://togithub.com/oxsecurity/megalinter/pull/3432) - Add consistent python3/python handling at build.sh, by [@pjungermann](https://togithub.com/pjungermann) in [#3475](https://togithub.com/oxsecurity/megalinter/pull/3475) - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.2.0 to **24.2.2** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.25.53 to **0.26.170** - [black](https://black.readthedocs.io/en/stable/) from 24.2.0 to **24.4.0** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.86.0 to **0.86.4** - [checkov](https://www.checkov.io/) from 3.2.34 to **3.2.74** - [checkstyle](https://checkstyle.org/) from 10.14.0 to **10.15.0** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.76 to **0.1.77** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2024.03.05 to **2024.03.13** - [csharpier](https://csharpier.com/) from 0.27.3 to **0.28.1** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.6.0 to **8.7.0** - [devskim](https://togithub.com/microsoft/DevSkim) from 1.0.32 to **1.0.33** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 8.0.102 to **8.0.104** - [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.13.0 to **2.15.1** - [golangci-lint](https://golangci-lint.run/) from 1.56.2 to **1.57.2** - [grype](https://togithub.com/anchore/grype) from 0.74.7 to **0.77.0** - [kics](https://www.kics.io) from 1.7.13 to **2.0.0** - [lightning-flow-scanner](https://togithub.com/Lightning-Flow-Scanner) from 2.18.0 to **2.22.0** - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.11.2 to **3.12.1** - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 14.2.3 to **14.4.1** - [phpcs](https://togithub.com/PHPCSStandards/PHP_CodeSniffer) from 3.9.0 to **3.9.1** - [phpstan](https://phpstan.org/) from 1.10.60 to **1.10.67** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.48.0 to **0.49.6** - [psalm](https://psalm.dev) from Psalm.5.23.0@ to **Psalm.5.23.1@** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.353 to **1.1.359** - [roslynator](https://togithub.com/dotnet/Roslynator) from 0.8.3.0 to **0.8.6.0** - [rstcheck](https://togithub.com/myint/rstcheck) from 6.2.0 to **6.2.1** - [rubocop](https://rubocop.org/) from 1.62.0 to **1.63.3** - [ruff](https://togithub.com/astral-sh/ruff) from 0.3.2 to **0.4.1** - [secretlint](https://togithub.com/secretlint/secretlint) from 8.1.2 to **8.2.3** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.21.0 to **3.23.0** - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.10.0 to **0.10.1** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.5.5 to **8.10.8** - [spectral](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview) from 6.11.0 to **6.11.1** - [sqlfluff](https://www.sqlfluff.com/) from 2.3.5 to **3.0.5** - [stylelint](https://stylelint.io) from 16.2.1 to **16.3.1** - [syft](https://togithub.com/anchore/syft) from 1.0.1 to **1.2.0** - [tekton-lint](https://togithub.com/IBM/tekton-lint) from 1.0.0 to **1.0.2** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.7.4 to **1.8.1** - [terragrunt](https://terragrunt.gruntwork.io) from 0.55.13 to **0.57.5** - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.49.1 to **0.50.2** - [trivy](https://aquasecurity.github.io/trivy/) from 0.49.1 to **0.50.2** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.69.0 to **3.73.0** - [vale](https://vale.sh/) from 3.2.2 to **3.4.0** ### [`v7.10.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v7100---2024-03-10) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.9.0...v7.10.0) - Core - Update dotnet linters to .NET 8, by [@bdovaz](https://togithub.com/bdovaz) in [#3182](https://togithub.com/oxsecurity/megalinter/pull/3182) - Media - [How to use MegaLinter with Jenkins](https://www.youtube.com/watch?v=KhkNf2tQ3hM), by [Darin Pope](https://www.linkedin.com/in/darinpope/) / [Cloudbees](https://www.cloudbees.com/) - Fixes - Trivy: use `misconfig` instead of the deprecated `config` scanner, updating the default arguments, by [@pjungermann](https://togithub.com/pjungermann) in [#3376](https://togithub.com/oxsecurity/megalinter/pull/3376) - Update calls to sfdx-scanner to output a CSV file for Aura & LWC, by [@nvuillam](https://togithub.com/nvuillam) in [#3398](https://togithub.com/oxsecurity/megalinter/pull/3398) - Kics: fixed error count in the summary table, by [@TommyE123](https://togithub.com/TommyE123) in [#3402](https://togithub.com/oxsecurity/megalinter/pull/3402) - Fix issue with EXTENDS using private repository by sending GITHUB_TOKEN as HTTP auth header, by [@nvuillam](https://togithub.com/nvuillam) in [#3404](https://togithub.com/oxsecurity/megalinter/pull/3404) - Fix SPELL_VALE_CONFIG_FILE not working (handle the override of linter CONFIG_FILE if the linter is activated only if some files are found), by [@nvuillam](https://togithub.com/nvuillam) in [#3409](https://togithub.com/oxsecurity/megalinter/pull/3409) - CI - Enable dependabot updates for devcontainer and other Docker directories, by [@echoix](https://togithub.com/echoix) in [#3390](https://togithub.com/oxsecurity/megalinter/pull/3390) - Doc - Removed obsolete warning for semgrep as the issue has been fixed, by [@Jayllyz](https://togithub.com/Jayllyz) in [#3374](https://togithub.com/oxsecurity/megalinter/pull/3374) - docs: fix docs in TrivySbomLinter.py, by [@pjungermann](https://togithub.com/pjungermann) inConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.