search

ruzickap / packer-templates

Scripts and Templates used for generating Vagrant images
Apache License 2.0
443 stars 113 forks source link

chore(deps): update megalinter/megalinter action to v7 #474

Closed my-renovate[bot] closed 1 year ago

my-renovate[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
megalinter/megalinter action major v6.18.0 -> v7.0.2

Release Notes

megalinter/megalinter ### [`v7.0.2`](https://togithub.com/oxsecurity/megalinter/releases/tag/v7.0.2): MegaLinter v7.0.2 [Compare Source](https://togithub.com/megalinter/megalinter/compare/v7.0.1...v7.0.2) #### What's Changed To upgrade to MegaLinter v7, run `npx mega-linter-runner@latest --upgrade` , comment [here](https://togithub.com/oxsecurity/megalinter/issues/2692) if you have any issue :) - MAJOR Updates - [SECURED_ENV_VARIABLES](https://megalinter.io/latest/config-variables-security/) & core scoped configuration by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2601](https://togithub.com/oxsecurity/megalinter/pull/2601) - New configuration variables **SECURED_ENV_VARIABLES** and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter - Read [documentation](https://megalinter.io/latest/config-variables-security/) to enhance security using MegaLinter - Use **relative file paths** to call linters by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/1877](https://togithub.com/oxsecurity/megalinter/pull/1877) - This can be a breaking change for customizations, post an issue if you see a problem ! - New linters - Add linter [cljstyle](https://togithub.com/greglook/cljstyle), Clojure formatter, by [@​practicalli-john](https://togithub.com/practicalli-john) in [https://github.com/oxsecurity/megalinter/pull/2115](https://togithub.com/oxsecurity/megalinter/pull/2115) - Add [kubescape](https://togithub.com/kubescape/kubescape), kubernetes linter, by [@​muandane](https://togithub.com/muandane) in [https://github.com/oxsecurity/megalinter/pull/2531](https://togithub.com/oxsecurity/megalinter/pull/2531) - Add [Vale](https://vale.sh/), a powerful enforcer of writing style, by [@​wesley-dean-flexion](https://togithub.com/wesley-dean-flexion) in [https://github.com/oxsecurity/megalinter/pull/2406](https://togithub.com/oxsecurity/megalinter/pull/2406) - Removed linters - KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors) - REPOSITORY_GOODCHECK: Not open-source anymore - SPELL_MISSPELL: Not maintained anymore (last commit in 2018) - TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV - TERRAFORM_KICS: Replaced by REPOSITORY_KICS - Medias - Article: [Use the Workflows JSON schema in your IDE](https://cloud.google.com/workflows/docs/use-workflows-json-schema-with-ide), by [Google Cloud](https://cloud.google.com/) - Video: [Ortelius Architecture Meeting](https://www.youtube.com/watch?v=oegOSmVegiQ\&t=1510s), with a review of MegaLinter, by [Steve Taylor](https://togithub.com/sbtaylor15) from [Ortelius](https://ortelius.io/) - Web site: [my-devops-lab.com](https://www.my-devops-lab.com/tools) - Linter enhancements & fixes - [cspell](https://megalinter.io/latest/descriptors/spell_cspell/) - Fix corrective .cspell.json file generated from cspell output by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2562](https://togithub.com/oxsecurity/megalinter/pull/2562) - [eslint](https://megalinter.io/latest/descriptors/javascript_eslint/) - Ensure ESLint actually runs in project mode ([#​1572](https://togithub.com/megalinter/megalinter/issues/1572)) by [@​Kurt-von-Laven](https://togithub.com/Kurt-von-Laven) in [https://github.com/oxsecurity/megalinter/pull/2455](https://togithub.com/oxsecurity/megalinter/pull/2455) - [jscpd](https://megalinter.io/latest/descriptors/copypaste_jscpd/) - Prevent jscpd to create output folder if the repo is not writable by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2556](https://togithub.com/oxsecurity/megalinter/pull/2556) - [Gitleaks](https://megalinter.io/latest/descriptors/repository_gitleaks/) - Add support to scan PR commits only on PRs when `VALIDATE_ALL_CODEBASE` is set to `false`, by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) [#​2504](https://togithub.com/oxsecurity/megalinter/pull/2504) - [KICS](https://megalinter.io/latest/descriptors/repository_kics/) - Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2689](https://togithub.com/oxsecurity/megalinter/pull/2689) - KICS can now output SARIF - The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary - [KubeConform](https://megalinter.io/latest/descriptors/kubernetes_kubeconform/) - Simplify kubeconform install & get version by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2629](https://togithub.com/oxsecurity/megalinter/pull/2629) - [PHPLint](https://megalinter.io/latest/descriptors/php_phplint/) - Upgrade PHPLint to v9 by [@​bdovaz](https://togithub.com/bdovaz) in [https://github.com/oxsecurity/megalinter/pull/2638](https://togithub.com/oxsecurity/megalinter/pull/2638) - [sqlfluff](https://megalinter.io/latest/descriptors/sql_sqlfluff/) - Remove old options from SQLFluff config file by [@​tunetheweb](https://togithub.com/tunetheweb) in [https://github.com/oxsecurity/megalinter/pull/2560](https://togithub.com/oxsecurity/megalinter/pull/2560) - [v8r](https://megalinter.io/latest/descriptors/json_v8r/) - Allow use of configuration files with v8r by [@​bdovaz](https://togithub.com/bdovaz) in [https://github.com/oxsecurity/megalinter/pull/1982](https://togithub.com/oxsecurity/megalinter/pull/1982) - Core - Upgrade base Docker image to python:3.11.3-alpine3.17 by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2537](https://togithub.com/oxsecurity/megalinter/pull/2537) - Allow simultaneous regex filtering at descriptor and linter levels by [@​nvuillam](https://togithub.com/nvuillam) & [@​seaneagan](https://togithub.com/seaneagan) in [https://github.com/oxsecurity/megalinter/pull/2669](https://togithub.com/oxsecurity/megalinter/pull/2669) - Allow MEGALINTER_CONFIG to contain a full path to a MegaLinter config file by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2649](https://togithub.com/oxsecurity/megalinter/pull/2649) - Fix issue preventing plugins to work with flavors by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2532](https://togithub.com/oxsecurity/megalinter/pull/2532) - Fix crash in case of unreachable symlinks by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2538](https://togithub.com/oxsecurity/megalinter/pull/2538) - mega-linter-runner: Use --platform also for docker run by [@​nvuillam](https://togithub.com/nvuillam) , [@​Kurt-Von-Laven](https://togithub.com/Kurt-Von-Laven) & [@​cam-barts](https://togithub.com/cam-barts) in [https://github.com/oxsecurity/megalinter/pull/2690](https://togithub.com/oxsecurity/megalinter/pull/2690) - Replace deprecated distutils.copy_tree by shutil.copytree - Reporters - [SARIF_REPORTER](https://megalinter.io/latest/reporters/SarifReporter/) - Add option to skip def_ws prefix in sarif reports by [@​janderssonse](https://togithub.com/janderssonse) in [https://github.com/oxsecurity/megalinter/pull/2383](https://togithub.com/oxsecurity/megalinter/pull/2383) - update schema to pass official SARIF validator by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) in [https://github.com/oxsecurity/megalinter/pull/2645](https://togithub.com/oxsecurity/megalinter/pull/2645) - [CONFIG_REPORTER](https://megalinter.io/latest/reporters/ConfigReporter/) - Add support for idea plugins auto-install by [@​waterfoul](https://togithub.com/waterfoul) in [https://github.com/oxsecurity/megalinter/pull/2553](https://togithub.com/oxsecurity/megalinter/pull/2553) - [CONSOLE_REPORTER](https://megalinter.io/latest/reporters/ConsoleReporter/) - Updated cases in console/log output to use ⚠ `Warning Sign (U+26A0)` instead of ◬ `White Up-Pointing Triangle with Dot (U+25EC)`, by [@​Doommius](https://togithub.com/Doommius) - [GITLAB_COMMENT_REPORTER](https://megalinter.io/latest/reporters/GitlabCommentReporter/) - Enhancement & fixes for GitlabCommentReporter by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2564](https://togithub.com/oxsecurity/megalinter/pull/2564) - New var GITLAB_COMMENT_REPORTER_OVERWRITE_COMMENT to allow to disable the overwrite of existing MegaLinter comment in case of new run - In case of overwrite activated (by default), fetch all Merge Request comments, not the first 20. - Display a different message in log when a Merge Request comment is created or updated. - [AZURE_COMMENT_REPORTER](https://megalinter.io/latest/reporters/AzureCommentReporter/) - Downgrade Azure DevOps pipy package to avoid crash by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2576](https://togithub.com/oxsecurity/megalinter/pull/2576) - Documentation - Improve documentation pages split by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2688](https://togithub.com/oxsecurity/megalinter/pull/2688) - Now Installation and Configuration menus have their own child menus - Doc about how to use fine grained PAT by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2662](https://togithub.com/oxsecurity/megalinter/pull/2662) - Fixed incorrect link in Azure to Gitlab reporters pages. by [@​Doommius](https://togithub.com/Doommius) in [https://github.com/oxsecurity/megalinter/pull/2613](https://togithub.com/oxsecurity/megalinter/pull/2613) - Added bitbucket job template + Fix icon in console logs by [@​Doommius](https://togithub.com/Doommius) in [https://github.com/oxsecurity/megalinter/pull/2617](https://togithub.com/oxsecurity/megalinter/pull/2617) - Exclude licenses pages from online search results by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2665](https://togithub.com/oxsecurity/megalinter/pull/2665) - Improve HTML tables display by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2670](https://togithub.com/oxsecurity/megalinter/pull/2670) - Remove ASCII characters from linters helps displayed in MegaLinter documentation - Internal CI - Upgrade GitHub Actions to change automated comments and increase timeout by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2536](https://togithub.com/oxsecurity/megalinter/pull/2536) - Use Github Permissions instead of PAT by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2652](https://togithub.com/oxsecurity/megalinter/pull/2652) - Update GitHub Actions workflows environments by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2657](https://togithub.com/oxsecurity/megalinter/pull/2657) - Automate External Plugins table generation using **.automation/plugins.yml** file by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2667](https://togithub.com/oxsecurity/megalinter/pull/2667) - Fix MegaLinter build issue by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2539](https://togithub.com/oxsecurity/megalinter/pull/2539) - Fix for trivy-action (new naming for input) by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) in [https://github.com/oxsecurity/megalinter/pull/2541](https://togithub.com/oxsecurity/megalinter/pull/2541) - Fix `/build` slash command to checkout the correct PR branch by [@​echoix](https://togithub.com/echoix) in [https://github.com/oxsecurity/megalinter/pull/2542](https://togithub.com/oxsecurity/megalinter/pull/2542) - Fix local run of python test cases by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2565](https://togithub.com/oxsecurity/megalinter/pull/2565) - Fix mkdocs documentation generation by downgrading mkdocs-glightbox to 0.3.2 by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2582](https://togithub.com/oxsecurity/megalinter/pull/2582) - Do not push to docker from dev PRs by [@​nvuillam](https://togithub.com/nvuillam) in [https://github.com/oxsecurity/megalinter/pull/2639](https://togithub.com/oxsecurity/megalinter/pull/2639) - Update stale workflow: remove trigger on comments and explicit permissions by [@​echoix](https://togithub.com/echoix) in [https://github.com/oxsecurity/megalinter/pull/2641](https://togithub.com/oxsecurity/megalinter/pull/2641) - Decouple updating docker pull stats from building docs by [@​echoix](https://togithub.com/echoix) in [https://github.com/oxsecurity/megalinter/pull/2677](https://togithub.com/oxsecurity/megalinter/pull/2677) - Review MegaLinter's own cspell word list for outdated exclusions by [@​echoix](https://togithub.com/echoix) in [https://github.com/oxsecurity/megalinter/pull/2676](https://togithub.com/oxsecurity/megalinter/pull/2676) - Run stale workflow only on schedule, by [@​echoix](https://togithub.com/echoix) in [https://github.com/oxsecurity/megalinter/pull/2641](https://togithub.com/oxsecurity/megalinter/pull/2641) - Add explicit permissions to stale workflow, by [@​echoix](https://togithub.com/echoix) in [https://github.com/oxsecurity/megalinter/pull/2641](https://togithub.com/oxsecurity/megalinter/pull/2641) - Linter versions upgrades - [actionlint](https://rhysd.github.io/actionlint/) from 1.6.23 to **1.6.24** - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.14.4 to **6.16.2** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.15.31 to **0.17.1** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.76.1 to **0.77.5** - [checkov](https://www.checkov.io/) from 2.3.149 to **2.3.259** - [checkstyle](https://checkstyle.sourceforge.io) from 10.9.3 to **10.11.0** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.68 to **0.1.69** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2023.03.17 to **2023.05.18** - [csharpier](https://csharpier.com/) from 0.23.0 to **0.24.2** - [djlint](https://djlint.com/) from 1.19.16 to **1.29.0** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 6.0.407 to **6.0.408** - [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.7.0 to **2.8.0** - [eslint](https://eslint.org) from 8.37.0 to **8.41.0** - [git_diff](https://git-scm.com) from 2.38.4 to **2.38.5** - [gitleaks](https://togithub.com/zricethezav/gitleaks) from 8.16.1 to **8.16.3** - [jscpd](https://togithub.com/kucherenko/jscpd/tree/master/packages/jscpd) from 3.5.4 to **3.5.9** - [jsonlint](https://togithub.com/prantlf/jsonlint) from 14.0.2 to **14.0.3** - [kics](https://www.kics.io) from 1.6.13 to **1.7.1** - [ktlint](https://ktlint.github.io) from 0.48.2 to **0.49.1** - [kubeconform](https://togithub.com/yannh/kubeconform) from 0.5.0 to **0.6.1** - [kubescape](https://togithub.com/kubescape/kubescape) from 2.3.1 to **2.3.3** - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.10.3 to **3.11.2** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.1.1 to **1.3.0** - [phplint](https://togithub.com/overtrue/phplint) from 5.5 to **9.0.4** - [phpstan](https://phpstan.org/) from 1.10.10 to **1.10.15** - [pmd](https://pmd.github.io/) from 6.48.0 to **6.55.0** - [powershell](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.3.3 to **7.3.4** - [powershell_formatter](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.3.3 to **7.3.4** - [prettier](https://prettier.io/) from 2.8.7 to **2.8.8** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.43.1 to **0.44.0** - [psalm](https://psalm.dev) from Psalm.5.9.0@​ to **Psalm.5.12.0@​** - [puppet-lint](http://puppet-lint.com/) from 3.3.0 to **4.0.0** - [pylint](https://pylint.pycqa.org) from 2.17.2 to **2.17.4** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.301 to **1.1.310** - [revive](https://revive.run/) from 1.3.1 to **1.3.2** - [rubocop](https://rubocop.org/) from 1.49.0 to **1.51.0** - [ruff](https://togithub.com/charliermarsh/ruff) from 0.0.260 to **0.0.270** - [semgrep](https://semgrep.dev/) from 1.16.0 to **1.23.0** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.11.0 to **3.12.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.11.0 to **3.12.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.11.0 to **3.12.0** - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.8.3 to **0.8.4** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 7.25.0 to **7.26.0** - [spectral](https://meta.stoplight.io/docs/spectral/README.md) from 6.6.0 to **6.8.0** - [sqlfluff](https://www.sqlfluff.com/) from 2.0.2 to **2.1.1** - [stylelint](https://stylelint.io) from 15.4.0 to **15.6.2** - [swiftlint](https://togithub.com/realm/SwiftLint) from 0.51.0 to **0.52.2** - [syft](https://togithub.com/anchore/syft) from 0.76.0 to **0.82.0** - [terraform-fmt](https://www.terraform.io/docs/cli/commands/fmt.html) from 1.4.4 to **1.4.6** - [terragrunt](https://terragrunt.gruntwork.io) from 0.45.0 to **0.45.11** - [terrascan](https://www.accurics.com/products/terrascan/) from 1.18.0 to **1.18.1** - [tflint](https://togithub.com/terraform-linters/tflint) from 0.45.0 to **0.46.1** - [trivy](https://aquasecurity.github.io/trivy/) from 0.39.0 to **0.41.0** - [v8r](https://togithub.com/chris48s/v8r) from 1.0.0 to **2.0.0** - [vale](https://vale.sh/) from 2.24.0 to **2.27.0** - [xmllint](http://xmlsoft.org/xmllint.html) from 21003 to **21004** - [yamllint](https://yamllint.readthedocs.io/) from 1.30.0 to **1.32.0** #### New Contributors - [@​waterfoul](https://togithub.com/waterfoul) made their first contribution in [https://github.com/oxsecurity/megalinter/pull/2553](https://togithub.com/oxsecurity/megalinter/pull/2553) - [@​Doommius](https://togithub.com/Doommius) made their first contribution in [https://github.com/oxsecurity/megalinter/pull/2613](https://togithub.com/oxsecurity/megalinter/pull/2613) - [@​muandane](https://togithub.com/muandane) made their first contribution in [https://github.com/oxsecurity/megalinter/pull/2531](https://togithub.com/oxsecurity/megalinter/pull/2531) *MegaLinter is graciously provided by [![OX Security](https://www.ox.security/wp-content/uploads/2022/06/logo.svg?ref=megalinter_comment)](https://www.ox.security/?ref=megalinter)* **Full Changelog**: https://github.com/oxsecurity/megalinter/compare/v6.22.2...v7.0.2 ### [`v7.0.1`](https://togithub.com/megalinter/megalinter/compare/v7.0.0...v7.0.1) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v7.0.0...v7.0.1) ### [`v7.0.0`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v700---2023-05-27) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.22.2...v7.0.0) To upgrade to MegaLinter v7, run `npx mega-linter-runner@latest --upgrade` , comment [here](https://togithub.com/oxsecurity/megalinter/issues/2692) if you have any issue :) - MAJOR Updates - [SECURED_ENV_VARIABLES](https://megalinter.io/latest/config-variables-security/) & core scoped configuration by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2601](https://togithub.com/oxsecurity/megalinter/pull/2601) - New configuration variables **SECURED_ENV_VARIABLES** and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter - Read [documentation](https://megalinter.io/latest/config-variables-security/) to enhance security using MegaLinter - Use **relative file paths** to call linters by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​1877](https://togithub.com/oxsecurity/megalinter/pull/1877) - This can be a breaking change for customizations, post an issue if you see a problem ! - New linters - Add linter [cljstyle](https://togithub.com/greglook/cljstyle), Clojure formatter, by [@​practicalli-john](https://togithub.com/practicalli-john) in [oxsecurity#​2115](https://togithub.com/oxsecurity/megalinter/pull/2115) - Add [kubescape](https://togithub.com/kubescape/kubescape), kubernetes linter, by [@​muandane](https://togithub.com/muandane) in [oxsecurity#​2531](https://togithub.com/oxsecurity/megalinter/pull/2531) - Add [Vale](https://vale.sh/), a powerful enforcer of writing style, by [@​wesley-dean-flexion](https://togithub.com/wesley-dean-flexion) in [oxsecurity#​2406](https://togithub.com/oxsecurity/megalinter/pull/2406) - Removed linters - KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors) - REPOSITORY_GOODCHECK: Not open-source anymore - SPELL_MISSPELL: Not maintained anymore (last commit in 2018) - TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV - TERRAFORM_KICS: Replaced by REPOSITORY_KICS - Medias - Article: [Use the Workflows JSON schema in your IDE](https://cloud.google.com/workflows/docs/use-workflows-json-schema-with-ide), by [Google Cloud](https://cloud.google.com/) - Video: [Ortelius Architecture Meeting](https://www.youtube.com/watch?v=oegOSmVegiQ\&t=1510s), with a review of MegaLinter, by [Steve Taylor](https://togithub.com/sbtaylor15) from [Ortelius](https://ortelius.io/) - Web site: [my-devops-lab.com](https://www.my-devops-lab.com/tools) - Linter enhancements & fixes - [cspell](https://megalinter.io/latest/descriptors/spell_cspell/) - Fix corrective .cspell.json file generated from cspell output by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2562](https://togithub.com/oxsecurity/megalinter/pull/2562) - [eslint](https://megalinter.io/latest/descriptors/javascript_eslint/) - Ensure ESLint actually runs in project mode ([#​1572](https://togithub.com/megalinter/megalinter/issues/1572)) by [@​Kurt-von-Laven](https://togithub.com/Kurt-von-Laven) in [oxsecurity#​2455](https://togithub.com/oxsecurity/megalinter/pull/2455) - [jscpd](https://megalinter.io/latest/descriptors/copypaste_jscpd/) - Prevent jscpd to create output folder if the repo is not writable by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2556](https://togithub.com/oxsecurity/megalinter/pull/2556) - [Gitleaks](https://megalinter.io/latest/descriptors/repository_gitleaks/) - Add support to scan PR commits only on PRs when `VALIDATE_ALL_CODEBASE` is set to `false`, by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) [#​2504](https://togithub.com/oxsecurity/megalinter/pull/2504) - [KICS](https://megalinter.io/latest/descriptors/repository_kics/) - Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2689](https://togithub.com/oxsecurity/megalinter/pull/2689) - KICS can now output SARIF - The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary - [KubeConform](https://megalinter.io/latest/descriptors/kubernetes_kubeconform/) - Simplify kubeconform install & get version by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2629](https://togithub.com/oxsecurity/megalinter/pull/2629) - [PHPLint](https://megalinter.io/latest/descriptors/php_phplint/) - Upgrade PHPLint to v9 by [@​bdovaz](https://togithub.com/bdovaz) in [oxsecurity#​2638](https://togithub.com/oxsecurity/megalinter/pull/2638) - [sqlfluff](https://megalinter.io/latest/descriptors/sql_sqlfluff/) - Remove old options from SQLFluff config file by [@​tunetheweb](https://togithub.com/tunetheweb) in [oxsecurity#​2560](https://togithub.com/oxsecurity/megalinter/pull/2560) - [v8r](https://megalinter.io/latest/descriptors/json_v8r/) - Allow use of configuration files with v8r by [@​bdovaz](https://togithub.com/bdovaz) in [oxsecurity#​1982](https://togithub.com/oxsecurity/megalinter/pull/1982) - Core - Upgrade base Docker image to python:3.11.3-alpine3.17 by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2537](https://togithub.com/oxsecurity/megalinter/pull/2537) - Allow simultaneous regex filtering at descriptor and linter levels by [@​nvuillam](https://togithub.com/nvuillam) & [@​seaneagan](https://togithub.com/seaneagan) in [oxsecurity#​2669](https://togithub.com/oxsecurity/megalinter/pull/2669) - Allow MEGALINTER_CONFIG to contain a full path to a MegaLinter config file by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2649](https://togithub.com/oxsecurity/megalinter/pull/2649) - Fix issue preventing plugins to work with flavors by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2532](https://togithub.com/oxsecurity/megalinter/pull/2532) - Fix crash in case of unreachable symlinks by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2538](https://togithub.com/oxsecurity/megalinter/pull/2538) - mega-linter-runner: Use --platform also for docker run by [@​nvuillam](https://togithub.com/nvuillam) , [@​Kurt-Von-Laven](https://togithub.com/Kurt-Von-Laven) & [@​cam-barts](https://togithub.com/cam-barts) in [oxsecurity#​2690](https://togithub.com/oxsecurity/megalinter/pull/2690) - Replace deprecated distutils.copy_tree by shutil.copytree - Reporters - [SARIF_REPORTER](https://megalinter.io/latest/reporters/SarifReporter/) - Add option to skip def_ws prefix in sarif reports by [@​janderssonse](https://togithub.com/janderssonse) in [oxsecurity#​2383](https://togithub.com/oxsecurity/megalinter/pull/2383) - update schema to pass official SARIF validator by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) in [oxsecurity#​2645](https://togithub.com/oxsecurity/megalinter/pull/2645) - [CONFIG_REPORTER](https://megalinter.io/latest/reporters/ConfigReporter/) - Add support for idea plugins auto-install by [@​waterfoul](https://togithub.com/waterfoul) in [oxsecurity#​2553](https://togithub.com/oxsecurity/megalinter/pull/2553) - [CONSOLE_REPORTER](https://megalinter.io/latest/reporters/ConsoleReporter/) - Updated cases in console/log output to use ⚠ `Warning Sign (U+26A0)` instead of ◬ `White Up-Pointing Triangle with Dot (U+25EC)`, by [@​Doommius](https://togithub.com/Doommius) - [GITLAB_COMMENT_REPORTER](https://megalinter.io/latest/reporters/GitlabCommentReporter/) - Enhancement & fixes for GitlabCommentReporter by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2564](https://togithub.com/oxsecurity/megalinter/pull/2564) - New var GITLAB_COMMENT_REPORTER_OVERWRITE_COMMENT to allow to disable the overwrite of existing MegaLinter comment in case of new run - In case of overwrite activated (by default), fetch all Merge Request comments, not the first 20. - Display a different message in log when a Merge Request comment is created or updated. - [AZURE_COMMENT_REPORTER](https://megalinter.io/latest/reporters/AzureCommentReporter/) - Downgrade Azure DevOps pipy package to avoid crash by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2576](https://togithub.com/oxsecurity/megalinter/pull/2576) - Documentation - Improve documentation pages split by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2688](https://togithub.com/oxsecurity/megalinter/pull/2688) - Now Installation and Configuration menus have their own child menus - Doc about how to use fine grained PAT by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2662](https://togithub.com/oxsecurity/megalinter/pull/2662) - Fixed incorrect link in Azure to Gitlab reporters pages. by [@​Doommius](https://togithub.com/Doommius) in [oxsecurity#​2613](https://togithub.com/oxsecurity/megalinter/pull/2613) - Added bitbucket job template + Fix icon in console logs by [@​Doommius](https://togithub.com/Doommius) in [oxsecurity#​2617](https://togithub.com/oxsecurity/megalinter/pull/2617) - Exclude licenses pages from online search results by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2665](https://togithub.com/oxsecurity/megalinter/pull/2665) - Improve HTML tables display by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2670](https://togithub.com/oxsecurity/megalinter/pull/2670) - Remove ASCII characters from linters helps displayed in MegaLinter documentation - Internal CI - Upgrade GitHub Actions to change automated comments and increase timeout by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2536](https://togithub.com/oxsecurity/megalinter/pull/2536) - Use Github Permissions instead of PAT by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2652](https://togithub.com/oxsecurity/megalinter/pull/2652) - Update GitHub Actions workflows environments by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2657](https://togithub.com/oxsecurity/megalinter/pull/2657) - Automate External Plugins table generation using **.automation/plugins.yml** file by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2667](https://togithub.com/oxsecurity/megalinter/pull/2667) - Fix MegaLinter build issue by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2539](https://togithub.com/oxsecurity/megalinter/pull/2539) - Fix for trivy-action (new naming for input) by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) in [oxsecurity#​2541](https://togithub.com/oxsecurity/megalinter/pull/2541) - Fix `/build` slash command to checkout the correct PR branch by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2542](https://togithub.com/oxsecurity/megalinter/pull/2542) - Fix local run of python test cases by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2565](https://togithub.com/oxsecurity/megalinter/pull/2565) - Fix mkdocs documentation generation by downgrading mkdocs-glightbox to 0.3.2 by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2582](https://togithub.com/oxsecurity/megalinter/pull/2582) - Do not push to docker from dev PRs by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2639](https://togithub.com/oxsecurity/megalinter/pull/2639) - Update stale workflow: remove trigger on comments and explicit permissions by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2641](https://togithub.com/oxsecurity/megalinter/pull/2641) - Decouple updating docker pull stats from building docs by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2677](https://togithub.com/oxsecurity/megalinter/pull/2677) - Review MegaLinter's own cspell word list for outdated exclusions by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2676](https://togithub.com/oxsecurity/megalinter/pull/2676) - Run stale workflow only on schedule, by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2641](https://togithub.com/oxsecurity/megalinter/pull/2641) - Add explicit permissions to stale workflow, by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2641](https://togithub.com/oxsecurity/megalinter/pull/2641) - Linter versions upgrades - [actionlint](https://rhysd.github.io/actionlint/) from 1.6.23 to **1.6.24** - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.14.4 to **6.16.2** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.15.31 to **0.17.1** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.76.1 to **0.77.5** - [checkov](https://www.checkov.io/) from 2.3.149 to **2.3.259** - [checkstyle](https://checkstyle.sourceforge.io) from 10.9.3 to **10.11.0** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.68 to **0.1.69** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2023.03.17 to **2023.05.18** - [csharpier](https://csharpier.com/) from 0.23.0 to **0.24.2** - [djlint](https://djlint.com/) from 1.19.16 to **1.29.0** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 6.0.407 to **6.0.408** - [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.7.0 to **2.8.0** - [eslint](https://eslint.org) from 8.37.0 to **8.41.0** - [git_diff](https://git-scm.com) from 2.38.4 to **2.38.5** - [gitleaks](https://togithub.com/zricethezav/gitleaks) from 8.16.1 to **8.16.3** - [jscpd](https://togithub.com/kucherenko/jscpd/tree/master/packages/jscpd) from 3.5.4 to **3.5.9** - [jsonlint](https://togithub.com/prantlf/jsonlint) from 14.0.2 to **14.0.3** - [kics](https://www.kics.io) from 1.6.13 to **1.7.1** - [ktlint](https://ktlint.github.io) from 0.48.2 to **0.49.1** - [kubeconform](https://togithub.com/yannh/kubeconform) from 0.5.0 to **0.6.1** - [kubescape](https://togithub.com/kubescape/kubescape) from 2.3.1 to **2.3.3** - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.10.3 to **3.11.2** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.1.1 to **1.3.0** - [phplint](https://togithub.com/overtrue/phplint) from 5.5 to **9.0.4** - [phpstan](https://phpstan.org/) from 1.10.10 to **1.10.15** - [pmd](https://pmd.github.io/) from 6.48.0 to **6.55.0** - [powershell](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.3.3 to **7.3.4** - [powershell_formatter](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.3.3 to **7.3.4** - [prettier](https://prettier.io/) from 2.8.7 to **2.8.8** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.43.1 to **0.44.0** - [psalm](https://psalm.dev) from Psalm.5.9.0@​ to **Psalm.5.12.0@​** - [puppet-lint](http://puppet-lint.com/) from 3.3.0 to **4.0.0** - [pylint](https://pylint.pycqa.org) from 2.17.2 to **2.17.4** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.301 to **1.1.310** - [revive](https://revive.run/) from 1.3.1 to **1.3.2** - [rubocop](https://rubocop.org/) from 1.49.0 to **1.51.0** - [ruff](https://togithub.com/charliermarsh/ruff) from 0.0.260 to **0.0.270** - [semgrep](https://semgrep.dev/) from 1.16.0 to **1.23.0** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.11.0 to **3.12.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.11.0 to **3.12.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.11.0 to **3.12.0** - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.8.3 to **0.8.4** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 7.25.0 to **7.26.0** - [spectral](https://meta.stoplight.io/docs/spectral/README.md) from 6.6.0 to **6.8.0** - [sqlfluff](https://www.sqlfluff.com/) from 2.0.2 to **2.1.1** - [stylelint](https://stylelint.io) from 15.4.0 to **15.6.2** - [swiftlint](https://togithub.com/realm/SwiftLint) from 0.51.0 to **0.52.2** - [syft](https://togithub.com/anchore/syft) from 0.76.0 to **0.82.0** - [terraform-fmt](https://www.terraform.io/docs/cli/commands/fmt.html) from 1.4.4 to **1.4.6** - [terragrunt](https://terragrunt.gruntwork.io) from 0.45.0 to **0.45.11** - [terrascan](https://www.accurics.com/products/terrascan/) from 1.18.0 to **1.18.1** - [tflint](https://togithub.com/terraform-linters/tflint) from 0.45.0 to **0.46.1** - [trivy](https://aquasecurity.github.io/trivy/) from 0.39.0 to **0.41.0** - [v8r](https://togithub.com/chris48s/v8r) from 1.0.0 to **2.0.0** - [vale](https://vale.sh/) from 2.24.0 to **2.27.0** - [xmllint](http://xmlsoft.org/xmllint.html) from 21003 to **21004** - [yamllint](https://yamllint.readthedocs.io/) from 1.30.0 to **1.32.0** ### [`v6.22.2`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v6222---2023-04-03) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.22.1...v6.22.2) - Core - Fix failure of AzureCommentReporter when there is no pull request found in ENV vars - Fix HTML comment appearing in Azure Pull Request mail notifications - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.14.3 to **6.14.4** - [checkov](https://www.checkov.io/) from 2.3.145 to **2.3.149** - [pylint](https://pylint.pycqa.org) from 2.17.1 to **2.17.2** on 2023-04-03 - [rubocop](https://rubocop.org/) from 1.48.1 to **1.49.0** on 2023-04-03 ### [`v6.22.1`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v6221---2023-04-02) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.22.0...v6.22.1) - Core - Changed vars in AzureCommentReporter to reflects official Azure DevOps naming convention + fallback to keep backward compatibility, see [#​2509](https://togithub.com/oxsecurity/megalinter/issues/2509) - Update AzureCommentReport to have only one MegaLinter thread instead of a new one for each run of MegaLinter - Documentation - Updated usage scenario for Azure DevOps, see [#​2509](https://togithub.com/oxsecurity/megalinter/issues/2509) - Linter versions upgrades - [checkov](https://www.checkov.io/) from 2.3.141 to **2.3.145** - [phpstan](https://phpstan.org/) from 1.10.9 to **1.10.10** - [rstfmt](https://togithub.com/dzhu/rstfmt) from 0.0.12 to **0.0.13** ### [`v6.22.0`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v6220---2023-04-01) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.21.0...v6.22.0) - New linters - Add [**ruff**](https://togithub.com/charliermarsh/ruff), by [@​lars-reimann](https://togithub.com/lars-reimann) in [oxsecurity#​2458](https://togithub.com/oxsecurity/megalinter/pull/2458) - Linter enhancements & fixes - Pin markdown-link-check to 3.10.3 until [tcort/markdown-link-check#​246](https://togithub.com/tcort/markdown-link-check/issues/246) is fixed, by [@​Kurt-von-Laven](https://togithub.com/Kurt-von-Laven) ([#​2498](https://togithub.com/oxsecurity/megalinter/issues/2498)). - Core - Fix MegaLinter doc version & url displayed in logs, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2485](https://togithub.com/oxsecurity/megalinter/pull/2485) - Use [megalinter-bot](https://togithub.com/megalinter-bot) to create apply fixes commits, by [@​lars-reimann](https://togithub.com/lars-reimann), [@​nvuillam](https://togithub.com/nvuillam) and [@​megalinter-bot](https://togithub.com/megalinter-bot) :) - If you are an existing user of MegaLinter, you must update your github actions workflows to add the following parameters to **stefanzweifel/git-auto-commit-action@v4** : ```yaml commit_user_name: megalinter-bot commit_user_email: nicolas.vuillamy@ox.security ``` - You can also use any github username and email you like :) - Documentation - Close parentheses in ci_light flavour doc by [@​moverperfect](https://togithub.com/moverperfect) in [oxsecurity#​2494](https://togithub.com/oxsecurity/megalinter/pull/2494) - Linter versions upgrades - [black](https://black.readthedocs.io/en/stable/) from 23.1.0 to **23.3.0** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.75.1 to **0.76.1** - [checkov](https://www.checkov.io/) from 2.3.120 to **2.3.141** - [eslint](https://eslint.org) from 8.36.0 to **8.37.0** - [kics](https://www.kics.io) from 1.6.12 to **1.6.13** - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.11.0 to **3.10.3** - [phpstan](https://phpstan.org/) from 1.10.8 to **1.10.9** - [psalm](https://psalm.dev) from Psalm.5.8.0@​ to **Psalm.5.9.0@​** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.300 to **1.1.301** - [ruff](https://togithub.com/charliermarsh/ruff) from 0.0.255 to **0.0.260** - [semgrep](https://semgrep.dev/) from 1.15.0 to **1.16.0** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.10.0 to **3.11.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.10.0 to **3.11.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.10.0 to **3.11.0** - [stylelint](https://stylelint.io) from 15.3.0 to **15.4.0** - [swiftlint](https://togithub.com/realm/SwiftLint) from 0.50.3 to **0.51.0** - [syft](https://togithub.com/anchore/syft) from 0.75.0 to **0.76.0** - [terraform-fmt](https://www.terraform.io/docs/cli/commands/fmt.html) from 1.4.2 to **1.4.4** - [trivy](https://aquasecurity.github.io/trivy/) from 0.38.3 to **0.39.0** ### [`v6.21.0`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v6210---2023-03-26) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.20.1...v6.21.0) - New linters - Add [**helm lint**](https://helm.sh/docs/helm/helm_lint/), by [@​ThomasSanson](https://togithub.com/ThomasSanson) in [oxsecurity#​2386](https://togithub.com/oxsecurity/megalinter/pull/2386) - Medias - Video: [Code quality - Ep01 - MegaLinter, one linter to rule them all](https://www.youtube.com/watch?v=NauVD4z-cMA), by [@​devpro](https://togithub.com/devpro) - Video: [DevSecOps Webinar using MegaLinter](https://www.youtube.com/watch?v=hk950RUwIUA), by [5.15 Technologies](https://www.515tech.com/) - Video: (FR) [Coding Tech - L'importance de la CI/CD dans le développement de logiciels](https://www.youtube.com/watch?v=raCDpsP9O78), by [@​GridexX](https://togithub.com/GridexX) from [R2DevOps](https://r2devops.io/) - Article: (FR) [MegaLinter, votre meilleur ami pour un code de qualité](https://www.neosoft.fr/nos-publications/blog-tech/mega-linter-votre-meilleur-ami-pour-un-code-de-qualite/?utm_source=twitter\&utm_medium=organic\&utm_campaign=article-mega-linter), by [@​ThomasSanson](https://togithub.com/ThomasSanson) - Linter enhancements & fixes - [phpcs](https://megalinter.io/latest/descriptors/php_phpcs/): Add regex in descriptor to be able to extract the number of found errors, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2453](https://togithub.com/oxsecurity/megalinter/pull/2453) - Replace babel-eslint with [@​babel/eslint-parser](https://togithub.com/babel/eslint-parser), by [@​bdovaz](https://togithub.com/bdovaz) in [oxsecurity#​2445](https://togithub.com/oxsecurity/megalinter/pull/2445) - Use docker image to install phpstan, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2469](https://togithub.com/oxsecurity/megalinter/pull/2469) - Avoid cspell error on readonly workspaces, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2474](https://togithub.com/oxsecurity/megalinter/pull/2474) - Allow bandit to use pyproject.toml, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2475](https://togithub.com/oxsecurity/megalinter/pull/2475) - Bring back stylelint-config-sass-guidelines package, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2477](https://togithub.com/oxsecurity/megalinter/pull/2477) - Display only errors in markdown-link-check logs for better readability, by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2479](https://togithub.com/oxsecurity/megalinter/pull/2479) - Core - Run CI linter jobs only on Pull requests to avoid doubling jobs - Documentation - mega-linter-runner: doc fix for env list of values, see [#​2448](https://togithub.com/oxsecurity/megalinter/issues/2448), by [@​DariuszPorowski](https://togithub.com/DariuszPorowski) in [oxsecurity#​2449](https://togithub.com/oxsecurity/megalinter/pull/2449) - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.14.1 to **6.14.3** - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.4 to **1.7.5** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.74.1 to **0.75.1** - [checkov](https://www.checkov.io/) from 2.3.70 to **2.3.120** - [checkstyle](https://checkstyle.sourceforge.io) from 10.8.0 to **10.9.3** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.67 to **0.1.68** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2023.02.17 to **2023.03.17** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 6.28.0 to **6.31.1** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 6.0.406 to **6.0.407** - [eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/) from 2.6.0 to **2.7.0** - [eslint](https://eslint.org) from 8.35.0 to **8.36.0** - [gitleaks](https://togithub.com/zricethezav/gitleaks) from 8.16.0 to **8.16.1** - [jscpd](https://togithub.com/kucherenko/jscpd/tree/master/packages/jscpd) from 3.5.3 to **3.5.4** - [jsonlint](https://togithub.com/prantlf/jsonlint) from 14.0.1 to **14.0.2** - [kics](https://www.kics.io) from 1.6.11 to **1.6.12** - [markdown-link-check](https://togithub.com/tcort/markdown-link-check) from 3.10.3 to **3.11.0** - [phpstan](https://phpstan.org/) from 1.10.5 to **1.10.8** - [prettier](https://prettier.io/) from 2.8.4 to **2.8.7** - [psalm](https://psalm.dev) from Psalm.5.7.7@​ to **Psalm.5.8.0@​** - [pylint](https://pylint.pycqa.org) from 2.16.4 to **2.17.1** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.296 to **1.1.300** - [revive](https://revive.run/) from 1.2.5 to **1.3.1** - [rstcheck](https://togithub.com/myint/rstcheck) from 6.1.1 to **6.1.2** - [rubocop](https://rubocop.org/) from 1.48.0 to **1.48.1** - [semgrep](https://semgrep.dev/) from 1.14.0 to **1.15.0** - [snakefmt](https://togithub.com/snakemake/snakefmt) from 0.8.1 to **0.8.3** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 7.24.0 to **7.25.0** - [sqlfluff](https://www.sqlfluff.com/) from 1.4.5 to **2.0.2** - [stylelint](https://stylelint.io) from 15.2.0 to **15.3.0** - [syft](https://togithub.com/anchore/syft) from 0.74.0 to **0.75.0** - [terraform-fmt](https://www.terraform.io/docs/cli/commands/fmt.html) from 1.3.9 to **1.4.2** - [terragrunt](https://terragrunt.gruntwork.io) from 0.44.4 to **0.45.0** - [trivy](https://aquasecurity.github.io/trivy/) from 0.38.1 to **0.38.3** - [v8r](https://togithub.com/chris48s/v8r) from 0.14.0 to **1.0.0** - [yamllint](https://yamllint.readthedocs.io/) from 1.29.0 to **1.30.0** ### [`v6.20.1`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v6201---2023-03-07) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.20.0...v6.20.1) - Fixes - Fix [issue with running on Mac m1 no longer working](https://togithub.com/oxsecurity/megalinter/issues/2427), by [@​nvuillam](https://togithub.com/nvuillam) in [oxsecurity#​2430](https://togithub.com/oxsecurity/megalinter/pull/2430) - Fix [Container images errors when pulling](https://togithub.com/oxsecurity/megalinter/issues/2348), by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2435](https://togithub.com/oxsecurity/megalinter/pull/2435) - Fix [Pre npm install not resolving](https://togithub.com/oxsecurity/megalinter/issues/2428), by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2435](https://togithub.com/oxsecurity/megalinter/pull/2435) - Add build date in Beta docker images, by [@​nvuillam](https://togithub.com/nvuillam) - Correct misleading error message in **GitlabCommentReporter.py**, see [#​2420](https://togithub.com/oxsecurity/megalinter/issues/2420) - Fix **GitlabCommentReporter** wrong variables names, check [#​2423](https://togithub.com/oxsecurity/megalinter/issues/2423) - Core - Improve config test, by [@​bdovaz](https://togithub.com/bdovaz) in [oxsecurity#​2426](https://togithub.com/oxsecurity/megalinter/pull/2426) - Doc - Add article [Level up your Unity Packages with CI/CD](https://medium.com/@​RunningMattress/level-up-your-unity-packages-with-ci-cd-9498d2791211), by [@​RunningMattress](https://togithub.com/RunningMattress) in [oxsecurity#​2436](https://togithub.com/oxsecurity/megalinter/pull/2436) - Correct minor docs error by [@​moverperfect](https://togithub.com/moverperfect) in [oxsecurity#​2440](https://togithub.com/oxsecurity/megalinter/pull/2440) - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.14.0 to **6.14.1** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.14.85 to **0.15.31** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.74.0 to **0.74.1** - [checkov](https://www.checkov.io/) from 2.3.59 to **2.3.70** - [csharpier](https://csharpier.com/) from 0.22.1 to **0.23.0** - [jsonlint](https://togithub.com/prantlf/jsonlint) from 13.0.1 to **14.0.1** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.0.1 to **1.1.1** - [phpstan](https://phpstan.org/) from 1.10.3 to **1.10.5** on 2023-03-07 - [protolint](https://togithub.com/yoheimuta/protolint) from 0.43.0 to **0.43.1** - [puppet-lint](http://puppet-lint.com/) from 3.2.0 to **3.3.0** - [pylint](https://pylint.pycqa.org) from 2.16.3 to **2.16.4** - [rubocop](https://rubocop.org/) from 1.47.0 to **1.48.0** - [stylelint](https://stylelint.io) from 14.16.1 to **15.2.0** ### [`v6.20.0`](https://togithub.com/megalinter/megalinter/blob/HEAD/CHANGELOG.md#v6200---2023-03-05) [Compare Source](https://togithub.com/megalinter/megalinter/compare/v6.19.0...v6.20.0) - Core - Upgrade base docker image from python:3.10.4-alpine3.16 to python:3.11.1-alpine3.17 - Build: remove folder contents before generating Dockerfile files for each linter in generate_linter_dockerfiles(), by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Build: remove folder contents before generating test classes for each linter in generate_linter_test_classes(), by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Build: automatically update the linter list used in the matrix of several of the workflows, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Test: create a testing architecture for format/autofix linters, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Test: create or adapt input files for format/autofix tests, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Test: created specific test folders for linters that need them because they can't share them, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Added rubocop-rake RubyGem for linting Rake files with RuboCop - Fixes - Correctly generate class names and test class files for each linter when the linter descriptor defines the attribute "name", by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Removed the default **powershell** templates TEMPLATES/.powershell-formatter.psd1 and TEMPLATES/.powershell-psscriptanalyzer.psd1. Having these templates caused all rules to be ignored as the settings aren't incremental but absolute, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Added **cli_lint_fix_arg_name** parameter to **dotnet format** descriptor as without it, autofix doesn't work, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Created **BicepLinter** class to add **DOTNET_SYSTEM_GLOBALIZATION_INVARIANT** environment variable to avoid problems with ICU packages, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Modified **npm-groovy-lint** descriptor to add **--failon** parameter to only fail with error and not info which is the default value, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Added **cli_lint_fix_arg_name** parameter to **powershell formatter** descriptor as without it, autofix doesn't work, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Created **ProtolintLinter** class to fix the problem that returns exit code 1 when it encounters a problem to correct even though it corrects it correctly, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Concatenate **--output** parameter correctly to **xmllint** linter, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Modified the .pre-commit-hooks.yaml for megalinter-full so the containername argument is correctly split between two lines, by [@​drbothen](https://togithub.com/drbothen) [#​2411](https://togithub.com/oxsecurity/megalinter/pull/2411) - Avoid [jscpd](https://megalinter.io/v6/descriptors/copypaste_jscpd/) default config to detect copy pastes in image files - Move utilstest to megalinter folder to avoid import issues - Replace deprecated spectral package, by [@​bdovaz](https://togithub.com/bdovaz) in by [@​bdovaz](https://togithub.com/bdovaz) in [oxsecurity#​2340](https://togithub.com/oxsecurity/megalinter/pull/2340) - Generate correct urls for packages with fixed versions, by [@​bdovaz](https://togithub.com/bdovaz) in [oxsecurity#​2339](https://togithub.com/oxsecurity/megalinter/pull/2339) - Documentation - Change **swiftlint** example that did not correctly reflect the **--fix** parameter, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Change in TSX **eslint** descriptor the urls as they were not correct, by [@​bdovaz](https://togithub.com/bdovaz) in [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Change in TYPESCRIPT **eslint** descriptor the urls as they were not correct, by [@​bdovaz](https://togithub.com/bdovaz) on [#​2294](https://togithub.com/oxsecurity/megalinter/pull/2294) - Use mkdocs-glightbox to allow to click on images and display them in full screen - CI - Use docker/build-push-action to build docker images and akhilerm/tag-push-action to release by retagging and pushing beta images instead of rebuilding them - Authenticate to GitHub API during docker build to avoid reaching limits - Remove apk go package install in images where possible to decrease image sizes, by [@​echoix](https://togithub.com/echoix) in [oxsecurity#​2318](https://togithub.com/oxsecurity/megalinter/pull/2318) - Create a slash PR bot to run `./build.sh` command manually on PRs, by [@​echoix](https://togithub.com/echoix) in [#​2353](https://togithub.com/oxsecurity/megalinter/pull/2353) and [#​2381](https://togithub.com/oxsecurity/megalinter/pull/2381) - Limit parallel execution of large job matrix in the workflows with max-parallel in order to keep runners available for other jobs, by [@​echoix](https://togithub.com/echoix) in [#​2397](https://togithub.com/oxsecurity/megalinter/pull/2397) - Linter versions upgrades - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.12.1 to **6.14.0** - [bash-exec](https://tiswww.case.edu/php/chet/bash/bashtop.html) from 5.1.16 to **5.2.15** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.14.46 to **0.14.85** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.72.10 to **0.74.0** - [checkmake](https://togithub.com/mrtazz/checkmake) from 0.2.1 to **0.2.0** - [checkov](https://www.checkov.io/) from 2.1.244 to **2.3.18** - [checkstyle](https://checkstyle.s
my-renovate[bot] commented 1 year ago

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.