Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #7

Merged
merged 1 commit into from
Jun 4, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 14, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
docker/login-action action digest 70fccc7 -> 0d4c9c5
oxsecurity/megalinter action minor v7.11.1 -> v7.12.0

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v7.12.0

Compare Source

  • Core

    • Add new logs (at debug level) on each linter activation/deactivation
    • Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues
    • Upgrade to Java 21 except for npm-groovy-lint that requires Java 17
  • Media

  • Linters

    • Add PHP fixer by @​llaville in #​3598
    • API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #​3387
    • Disable SQL_TSQLLINT until security issues are solved. Related to tsqllint/tsqllint#333
    • PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of https://github.com/llaville/sarif-php-sdk
    • Php psalm improvement by @​llaville in #​3541
    • KOTLIN_KTLINT now supports list_of_files mode, and has better error counting
    • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project
  • Reporters

  • Fixes

    • Change golangci-lint lint mode to project, by @​wandering-tales in #​3509
    • Disable sql-lint as it is no longer maintained
    • Add new entries findUnusedCode and findUnusedBaselineEntry in default psalm.xml configuration file for PHP_PSALM linter. Related to #​3538
    • fix(pylint): overgeneral-exceptions fully qualified name by @​gardar in #​3576
    • Update ktlint descriptor to support list_of_files and better error counting by @​Yann-J in #​3575
    • Sync PowerShell version in arm.megalinter-descriptor.yml by @​echoix in #​3586
    • Adjust find commands to clean up files in same step by @​echoix in #​3588
    • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project by @​nvuillam in #​3590
  • Doc

    • Handle disabled_reason property in descriptors
    • Sort enums in json schema, by @​echoix in #​3595
  • Flavors

  • CI

    • Build: take in account disabled linters for workflow auto-update
    • Remove useless package-lock.json that was in python tests folder
    • Fix SARIF_REPORTER that was wrongly sent to true to format & fix test methods
    • Build: Write ARG lines at the top of Dockerfiles if they are used by FROM variables
    • Remove Github Actions Workflow telemetry to improve performances
    • Update Docker image for Gitpod to run on Ubuntu Noble, by @​echoix
    • Update makefile bootstrap config (gitpod or local) to use uv for package installation, by @​echoix
    • Use uv to install Python deps for CI by @​echoix in #​3561
    • Use a single find command to delete pycache files by @​echoix in #​3562
    • Sort schema enums by @​echoix in #​3595
  • Linter versions upgrades


Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 3 0 0.06s
✅ COPYPASTE jscpd yes no 1.38s
✅ REPOSITORY checkov yes no 12.59s
✅ REPOSITORY gitleaks yes no 0.18s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 12.36s
✅ REPOSITORY kics yes no 4.48s
✅ REPOSITORY secretlint yes no 0.97s
✅ REPOSITORY trivy yes no 9.32s
✅ REPOSITORY trivy-sbom yes no 8.2s
✅ REPOSITORY trufflehog yes no 3.78s
✅ YAML prettier 3 0 0.84s
✅ YAML v8r 3 0 3.62s
✅ YAML yamllint 3 0 0.32s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

Copy link

github-actions bot commented May 14, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 2 0 0.02s
✅ COPYPASTE jscpd yes no 1.29s
✅ REPOSITORY checkov yes no 12.29s
✅ REPOSITORY gitleaks yes no 0.14s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 13.07s
✅ REPOSITORY kics yes no 4.29s
✅ REPOSITORY secretlint yes no 0.85s
✅ REPOSITORY trivy yes no 6.16s
✅ REPOSITORY trivy-sbom yes no 3.89s
✅ REPOSITORY trufflehog yes no 3.01s
✅ YAML prettier 2 0 0.63s
✅ YAML v8r 2 0 3.22s
✅ YAML yamllint 2 0 0.33s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

Copy link

codecov bot commented May 14, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.85%. Comparing base (02a093f) to head (12e2b0c).
Report is 3 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff            @@
##               main       #7   +/-   ##
=========================================
  Coverage     92.85%   92.85%           
  Complexity        6        6           
=========================================
  Files             2        2           
  Lines            28       28           
=========================================
  Hits             26       26           
  Misses            2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot force-pushed the renovate/github-actions branch from 7807ac5 to 9c9e4cd Compare May 21, 2024 09:17
@renovate renovate bot changed the title chore(deps): update github-actions chore(deps): update github-actions - autoclosed May 21, 2024
@renovate renovate bot closed this May 21, 2024
@renovate renovate bot deleted the renovate/github-actions branch May 21, 2024 10:00
@renovate renovate bot restored the renovate/github-actions branch May 27, 2024 20:21
@renovate renovate bot changed the title chore(deps): update github-actions - autoclosed chore(deps): update github-actions May 27, 2024
@renovate renovate bot reopened this May 27, 2024
@renovate renovate bot force-pushed the renovate/github-actions branch from 9c9e4cd to 3454163 Compare May 28, 2024 02:28
@renovate renovate bot changed the title chore(deps): update github-actions chore(deps): update docker/login-action digest to db77945 May 28, 2024
@renovate renovate bot changed the title chore(deps): update docker/login-action digest to db77945 chore(deps): update docker/login-action digest to 0d4c9c5 May 29, 2024
@renovate renovate bot force-pushed the renovate/github-actions branch from 3454163 to 09602b5 Compare May 29, 2024 14:28
@renovate renovate bot changed the title chore(deps): update docker/login-action digest to 0d4c9c5 chore(deps): update github-actions Jun 3, 2024
@renovate renovate bot force-pushed the renovate/github-actions branch from 09602b5 to 12e2b0c Compare June 3, 2024 14:40
@jabberwoc jabberwoc merged commit 45718f7 into main Jun 4, 2024
8 checks passed
@renovate renovate bot deleted the renovate/github-actions branch June 4, 2024 18:18
@jabberwoc
Copy link
Contributor

🎉 This PR is included in version 1.1.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant