search

wesley-dean-flexion / sync_github_org_team

Tool to manage a team consisting of all users in a GitHub organization
0 stars 0 forks source link

Bump oxsecurity/megalinter from 7.11.0 to 7.11.1 #2

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps oxsecurity/megalinter from 7.11.0 to 7.11.1.

Release notes

Sourced from oxsecurity/megalinter's releases.

v7.11.1

What's Changed

MegaLinter is graciously provided by OX Security

Full Changelog: https://github.com/oxsecurity/megalinter/compare/v7.11.0...v7.11.1

Changelog

Sourced from oxsecurity/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

  • Core

    • Add new logs (at debug level) on each linter activation/deactivation
    • Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues
    • Upgrade to Java 21 except for npm-groovy-lint that requires Java 17

  • Media

  • Linters

    • API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #3387

  • Reporters

  • Fixes

    • Change golangci-lint lint mode to project
    • Disable sql-lint as it is no longer maintained

  • Doc

    • Handle disabled_reason property in descriptors

  • Flavors

  • CI

    • Build: take in account disabled linters for workflow auto-update
    • Remove useless package-lock.json that was in python tests folder
    • Fix SARIF_REPORTER that was wrongly sent to true to format & fix test methods

  • Linter versions upgrades

    • phpcs from 3.9.1 to 3.9.2 on 2024-04-23
    • csharpier from 0.28.1 to 0.28.2 on 2024-04-26
    • roslynator from 0.8.6.0 to 0.8.7.0 on 2024-04-26
    • black from 24.4.0 to 24.4.2 on 2024-04-26
    • mypy from 1.9.0 to 1.10.0 on 2024-04-26
    • pyright from 1.1.359 to 1.1.360 on 2024-04-26
    • ruff from 0.4.1 to 0.4.2 on 2024-04-26
    • grype from 0.77.0 to 0.77.1 on 2024-04-26
    • syft from 1.2.0 to 1.3.0 on 2024-04-26
    • trivy-sbom from 0.50.2 to 0.50.4 on 2024-04-26
    • trivy from 0.50.2 to 0.50.4 on 2024-04-26
    • trufflehog from 3.73.0 to 3.74.0 on 2024-04-26
    • snakemake from 8.10.8 to 8.11.0 on 2024-04-26

... (truncated)

Commits
  • 03986e6 Release MegaLinter v7.11.1
  • 4199f64 [automation] Auto-update linters version, help and documentation (#3504)
  • eac233f Implement fallback in case git diff does not work with merge-base (#3503)
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)