Bump oxsecurity/megalinter from 7.11.1 to 7.12.0

dependabot[bot] commented 1 month ago

Bumps oxsecurity/megalinter from 7.11.1 to 7.12.0.

Release notes

Sourced from oxsecurity/megalinter's releases.

v7.12.0

What's Changed

Core

Add new logs (at debug level) on each linter activation/deactivation

Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues

Upgrade to Java 21 except for npm-groovy-lint that requires Java 17

Media

Add blog post 5 ways MegaLinter upped our DevSecOps game to the list of English articles by @wesley-dean-flexion in oxsecurity/megalinter#3596

Linters

Add PHP fixer by @llaville in oxsecurity/megalinter#3598

API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #3387

Disable SQL_TSQLLINT until security issues are solved. Related to tsqllint/tsqllint#333

PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of https://github.com/llaville/sarif-php-sdk

Php psalm improvement by @llaville in oxsecurity/megalinter#3541

KOTLIN_KTLINT now supports list_of_files mode, and has better error counting

Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project

Fixes

Change golangci-lint lint mode to project, by @wandering-tales in oxsecurity/megalinter#3509

Disable sql-lint as it is no longer maintained

Add new entries findUnusedCode and findUnusedBaselineEntry in default psalm.xml configuration file for PHP_PSALM linter. Related to oxsecurity/megalinter#3538

fix(pylint): overgeneral-exceptions fully qualified name by @gardar in oxsecurity/megalinter#3576

Update ktlint descriptor to support list_of_files and better error counting by @Yann-J in oxsecurity/megalinter#3575

Sync PowerShell version in arm.megalinter-descriptor.yml by @echoix in oxsecurity/megalinter#3586

Adjust find commands to clean up files in same step by @echoix in oxsecurity/megalinter#3588

Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project by @nvuillam in oxsecurity/megalinter#3590

Doc

Handle disabled_reason property in descriptors

Sort enums in json schema, by @echoix in oxsecurity/megalinter#3595

CI

Build: take in account disabled linters for workflow auto-update

Remove useless package-lock.json that was in python tests folder

Fix SARIF_REPORTER that was wrongly sent to true to format & fix test methods

Build: Write ARG lines at the top of Dockerfiles if they are used by FROM variables

Remove Github Actions Workflow telemetry to improve performances

Update Docker image for Gitpod to run on Ubuntu Noble, by @echoix

Update makefile bootstrap config (gitpod or local) to use uv for package installation, by @echoix

Use uv to install Python deps for CI by @echoix in oxsecurity/megalinter#3561

Use a single find command to delete pycache files by @echoix in oxsecurity/megalinter#3562

Sort schema enums by @echoix in oxsecurity/megalinter#3595

Linter versions upgrades

actionlint from 1.6.27 to 1.7.1 on 2024-05-28

ansible-lint from 24.2.2 to 24.2.3 on 2024-05-20

bicep_linter from 0.26.170 to 0.27.1 on 2024-05-07

... (truncated)

Changelog

Sourced from oxsecurity/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

Core

Media

Linters

Reporters

Fixes

Doc

Flavors

CI

Linter versions upgrades

checkov from 3.2.122 to 3.2.124 on 2024-06-02

[v7.12.0] - 2024-06-02

Core

Add new logs (at debug level) on each linter activation/deactivation

Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues

Upgrade to Java 21 except for npm-groovy-lint that requires Java 17

Media

Add blog post 5 ways MegaLinter upped our DevSecOps game to the list of English articles by @wesley-dean-flexion in oxsecurity/megalinter#3596

Linters

Add PHP fixer by @llaville in oxsecurity/megalinter#3598

API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #3387

Disable SQL_TSQLLINT until security issues are solved. Related to tsqllint/tsqllint#333

PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of https://github.com/llaville/sarif-php-sdk

Php psalm improvement by @llaville in oxsecurity/megalinter#3541

KOTLIN_KTLINT now supports list_of_files mode, and has better error counting

Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project

Reporters

... (truncated)

Commits

5199c63 Release MegaLinter v7.12.0
4cc617e [automation] Auto-update linters version, help and documentation (#3602)
219bdab Features/php cs fixer (#3598)
178d6a8 Upgrade tflint (#3594)
3809490 [automation] Auto-update linters version, help and documentation (#3600)
346b985 Add my blog post to the list of English articles (#3596)
aed2a20 [automation] Auto-update linters version, help and documentation (#3593)
9094ce0 chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0....
f4dbe62 Sort schema enums (#3595)
28d17bd [automation] Auto-update linters version, help and documentation (#3591)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

github-actions[bot] commented 1 month ago

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	1		0	0.02s
✅ MARKDOWN	markdownlint	1	0	0	0.57s
✅ MARKDOWN	markdown-link-check	1		0	0.79s
✅ MARKDOWN	markdown-table-formatter	1	0	0	0.31s
✅ PYTHON	bandit	1		0	1.31s
✅ PYTHON	black	1	0	0	0.6s
✅ PYTHON	flake8	1		0	0.45s
✅ PYTHON	isort	1	0	0	0.28s
✅ PYTHON	mypy	1		0	2.42s
⚠️ PYTHON	pylint	1		2	2.43s
⚠️ PYTHON	pyright	1		2	8.72s
✅ PYTHON	ruff	1	0	0	0.17s
✅ REPOSITORY	checkov	yes		no	15.49s
✅ REPOSITORY	gitleaks	yes		no	0.16s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.23s
✅ REPOSITORY	secretlint	yes		no	1.6s
✅ REPOSITORY	trivy	yes		no	5.62s
✅ REPOSITORY	trivy-sbom	yes		no	4.11s
✅ REPOSITORY	trufflehog	yes		no	2.96s
⚠️ SPELL	lychee	6		2	0.49s
✅ YAML	prettier	4	0	0	0.84s
✅ YAML	v8r	4		0	7.61s
✅ YAML	yamllint	4		0	0.26s

See detailed report in MegaLinter reports

_MegaLinter is graciously provided by _