Skip to content

build(deps): bump megalinter/megalinter from 6.21.0 to 7.0.4#151

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/megalinter/megalinter-7.0.4
Closed

build(deps): bump megalinter/megalinter from 6.21.0 to 7.0.4#151
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/megalinter/megalinter-7.0.4

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 5, 2023

Bumps megalinter/megalinter from 6.21.0 to 7.0.4.

Release notes

Sourced from megalinter/megalinter's releases.

MegaLinter v7.0.4

What's Changed

MegaLinter is graciously provided by OX Security

Full Changelog: oxsecurity/megalinter@v7.0.3...v7.0.4

MegaLinter v7.0.3

What's Changed

  • Linter enhancements & fixes

    • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.
  • Core

    • Secure PRE_COMMANDS and POST_COMMANDS by default
    • Can be disabled with secured_env: false in the command definition
    • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression
  • Linter versions upgrades

MegaLinter is graciously provided by OX Security

Full Changelog: oxsecurity/megalinter@v7.0.2...v7.0.3

MegaLinter v7.0.2

What's Changed

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)

... (truncated)

Changelog

Sourced from megalinter/megalinter's changelog.

[v7.0.4] - 2023-05-31

  • Core

    • Allow to define linterkey_UNSECURED_ENV_VARIABLES for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT)
  • Documentation

  • Linter versions upgrades

[v7.0.3] - 2023-05-29

  • Linter enhancements & fixes

    • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.
  • Core

    • Secure PRE_COMMANDS and POST_COMMANDS by default
    • Can be disabled with secured_env: false in the command definition
    • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression
  • Linter versions upgrades

    • checkstyle from 10.11.0 to 10.12.0 on 2023-05-27
    • kubescape from 2.3.3 to 2.3.4 on 2023-05-28
    • checkov from 2.3.259 to 2.3.261 on 2023-05-28

[v7.0.2] - 2023-05-27

  • Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner)
    • Dead link to configuration.md
    • Regex issue with megalinter-reports

[v7.0.0] - 2023-05-27

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)

... (truncated)

Commits
  • 0d014ff Release MegaLinter v7.0.4
  • 1af426d [automation] Auto-update linters version, help and documentation (#2709)
  • a10d136 [automation] Auto-update linters version, help and documentation (#2708)
  • b137b09 [automation] Auto-update linters version, help and documentation (#2705)
  • 60306fe [automation] Auto-update linters version, help and documentation (#2704)
  • 5cd8a86 Allow to define _UNSECURED_ENV_VARIABLES for specific linters (#2703)
  • 429032d typo
  • d392674 Use markdown for video
  • b7dda67 Upgrade to v7 video
  • 2b1998e Release MegaLinter v7.0.3
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [megalinter/megalinter](https://github.com/megalinter/megalinter) from 6.21.0 to 7.0.4.
- [Release notes](https://github.com/megalinter/megalinter/releases)
- [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md)
- [Commits](oxsecurity/megalinter@v6.21.0...v7.0.4)

---
updated-dependencies:
- dependency-name: megalinter/megalinter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jun 5, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 12, 2023

Superseded by #153.

@dependabot dependabot bot closed this Jun 12, 2023
@dependabot dependabot bot deleted the dependabot/github_actions/megalinter/megalinter-7.0.4 branch June 12, 2023 05:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants