Skip to content

build(deps): Bump megalinter/megalinter from 5 to 6.0.5 #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 18, 2022

Bumps megalinter/megalinter from 5 to 6.0.5.

Release notes

Sourced from megalinter/megalinter's releases.

MegaLinter v6.0.5

  • Fix mega-linter-runner --upgrade so it also updates report folder to megalinter-reports in GitHub Actions Workflows #1609

  • Fix documentation and templates to use megalinter-reports folder everywhere

  • Workaround for python-markdown issue radude/mdx_truly_sane_lists#9

  • Linter versions upgrades

    • checkov from 2.1.54 to 2.1.56 on 2022-07-15
    • checkov from 2.1.56 to 2.1.57 on 2022-07-16
    • gitleaks from 8.8.7 to 8.8.12 on 2022-07-16
    • kics from 1.5.11 to 1.5.12 on 2022-07-16
    • protolint from 0.38.2 to 0.38.3 on 2022-07-15
    • sqlfluff from 1.2.0 to 1.2.1 on 2022-07-16
    • terraform-fmt from 1.2.4 to 1.2.5 on 2022-07-15
    • terragrunt from 0.38.4 to 0.38.5 on 2022-07-15

MegaLinter v6.0.4

  • Fix count of errors when using SARIF reporter

  • DevSkim: Ignore megalinter-reports by default [(#1603)](oxsecurity/megalinter#1603)

  • Load JSON when list of objects is defined in an ENV var [(#1605)](oxsecurity/megalinter#1605)

  • AutoFix pre_commands using npm install (1258)

  • Linter versions upgrades

    • checkov from 2.1.43 to 2.1.54 on 2022-07-14
    • git_diff from 2.34.2 to 2.34.4 on 2022-07-14
    • phpstan from 1.8.0 to 1.8.1 on 2022-07-14
    • sqlfluff from 1.1.0 to 1.2.0 on 2022-07-14
    • syft from 0.50.0 to 0.51.0 on 2022-07-14

MegaLinter v6.0.3

  • mega-linter-runner: Update query args when opening OX Security
  • Fix mega-linter-runner doesn't default to v6 for flavors (1596)

MegaLinter v6.0.2

Internal CI fixes

MegaLinter v6.0.1

  • Quick fixes about internal CI & documentation

= https://github.com/oxsecurity/megalinter/releases/tag/v6.0.0

MegaLinter v6.0.0

... (truncated)

Changelog

Sourced from megalinter/megalinter's changelog.

[v6.0.5] - 2022-07-16

  • Fix mega-linter-runner --upgrade so it also updates report folder to megalinter-reports in GitHub Actions Workflows #1609

  • Fix documentation and templates to use megalinter-reports folder everywhere

  • Workaround for python-markdown issue radude/mdx_truly_sane_lists#9

  • Linter versions upgrades

    • checkov from 2.1.54 to 2.1.56 on 2022-07-15
    • checkov from 2.1.56 to 2.1.57 on 2022-07-16
    • gitleaks from 8.8.7 to 8.8.12 on 2022-07-16
    • kics from 1.5.11 to 1.5.12 on 2022-07-16
    • protolint from 0.38.2 to 0.38.3 on 2022-07-15
    • sqlfluff from 1.2.0 to 1.2.1 on 2022-07-16
    • terraform-fmt from 1.2.4 to 1.2.5 on 2022-07-15
    • terragrunt from 0.38.4 to 0.38.5 on 2022-07-15

[v6.0.4] - 2022-07-14

  • Fix count of errors when using SARIF reporter

  • DevSkim: Ignore megalinter-reports by default [(#1603)](oxsecurity/megalinter#1603)

  • Load JSON when list of objects is defined in an ENV var [(#1605)](oxsecurity/megalinter#1605)

  • AutoFix pre_commands using npm install (1258)

  • Linter versions upgrades

    • checkov from 2.1.43 to 2.1.54 on 2022-07-14
    • git_diff from 2.34.2 to 2.34.4 on 2022-07-14
    • phpstan from 1.8.0 to 1.8.1 on 2022-07-14
    • sqlfluff from 1.1.0 to 1.2.0 on 2022-07-14
    • syft from 0.50.0 to 0.51.0 on 2022-07-14

[v6.0.3] - 2022-07-11

  • mega-linter-runner: Update query args when opening OX Security
  • Fix mega-linter-runner doesn't default to v6 for flavors (1596)

[v6.0.0] - 2022-07-10

  • Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

  • Core architecture

    • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one
      • Correct SARIF files for known format errors
    • New config variable DISABLE_LINTERS_ERRORS to define a list of linters that will be considered as non blocking
    • Upgrade base docker image to python:3.10.4-alpine3.15
    • Rename default report folder from report to megalinter-reports
    • Display GitHub stars in linters summary table in documentation
  • Linters:

    • Add DevSkim security linter by Microsoft
    • Add dustilock to check for dependency confusion attacks with node and python packages

... (truncated)

Commits
  • 09bd8a3 Release MegaLinter v6.0.5
  • 2a28322 [automation] Auto-update linters version, help and documentation (#1613)
  • 7b31977 Add missing repository url (#1567)
  • 1856d70 Upgrade gitleaks (#1611)
  • a911824 [automation] Auto-update linters version, help and documentation (#1612)
  • 309d9f8 Fix CI : workaround for python-markdown latest version issue
  • f416e3d Fix CI
  • d97607a Fix CI & use megalinter-reports in README & templates
  • a0beb1a Update report folder into megalinter-reports (#1610)
  • fe80279 [automation] Auto-update linters version, help and documentation (#1608)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [megalinter/megalinter](https://github.com/megalinter/megalinter) from 5 to 6.0.5.
- [Release notes](https://github.com/megalinter/megalinter/releases)
- [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md)
- [Commits](oxsecurity/megalinter@v5...v6.0.5)

---
updated-dependencies:
- dependency-name: megalinter/megalinter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 18, 2022

The following labels could not be found: github-actions, dependencies.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 20, 2022

Superseded by #14.

@dependabot dependabot bot closed this Jul 20, 2022
@dependabot dependabot bot deleted the dependabot/github_actions/dev/megalinter/megalinter-6.0.5 branch July 20, 2022 04:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants