MegaLinter

Version updated for oxsecurity/megalinter to version v7.11.0.

• This publisher is shown as ‘verified’ by GitHub.
• This action is used across all versions by 1,032 repositories.

Go to the GitHub Marketplace to find the latest changes.

Release notes

What’s Changed

• Core

  • Allow to override the number of parallel cores used, with variable PARALLEL_PROCESS_NUMBER, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3428
  • Upgrade base python image from 3.12.2-alpine3.19 to 3.12.3-alpine3.19
  • Upgrade PHP 8.1 to 8.3 by @llaville in https://github.com/oxsecurity/megalinter/pull/3464
  • Add descriptor pre / post commands, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/3468
  • Allow merge lists with EXTENDS, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/3469

• Media

• New linters

  • Add Kotlin detekt linter, by @enciyo in https://github.com/oxsecurity/megalinter/pull/3408

• Reporters

  • Add ruff sarif support, by @Skitionek in https://github.com/oxsecurity/megalinter/pull/3486

• Fixes

  • Fix listing of modified files, by @vkucera in https://github.com/oxsecurity/megalinter/pull/3472. Fixes https://github.com/oxsecurity/megalinter/issues/2125.
  • Fix conflict between prettier and yamllint about spaces, by @apeyrat in https://github.com/oxsecurity/megalinter/pull/3426
  • Ensure trufflehog does not auto-update itself, by @wandering-tales in https://github.com/oxsecurity/megalinter/pull/3430
  • Salesforce linters: use sf + default Flow Scanner rules, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3435
  • Disable JSON_ESLINT_PLUGIN_JSONC until https://github.com/ota-meshi/eslint-plugin-jsonc/issues/328 is fixed
  • Upgrade tar in mega-linter-runner
  • secretlint: remove default .secretlintignore that was never used but .gitignore is used instead. Fixes #3328
  • Add jpeg, xlsx to .gitleaks.toml, by @rasa in https://github.com/oxsecurity/megalinter/pull/3434
  • Fix Json Schema, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3470
  • Remove TEMPLATES/.secretlintignore, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/3476

• Doc

  • Update R2DevOps logo, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3436
  • Update Roslynator repo url and logo, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3444
  • Fix clang-format documentation links to point to the correct version. Fixes #3452, by @daltonv in https://github.com/oxsecurity/megalinter/pull/3453
  • Add copy to clipboard button in code block (documentation), by @nikkii86 in https://github.com/oxsecurity/megalinter/pull/3491

• Flavors

  • Add C & C++ linters in Python flavor by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3456

• CI

  • Make SPELL_LYCHEE non blocking for internal CI jobs
  • Remove old unused automerge workflows by @echoix in https://github.com/oxsecurity/megalinter/pull/3432
  • Add consistent python3/python handling at build.sh, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/3475

• Linter versions upgrades

  • ansible-lint from 24.2.0 to 24.2.2
  • bicep_linter from 0.25.53 to 0.26.170
  • black from 24.2.0 to 24.4.0
  • cfn-lint from 0.86.0 to 0.86.4
  • checkov from 3.2.34 to 3.2.74
  • checkstyle from 10.14.0 to 10.15.0
  • clippy from 0.1.76 to 0.1.77
  • clj-kondo from 2024.03.05 to 2024.03.13
  • csharpier from 0.27.3 to 0.28.1
  • cspell from 8.6.0 to 8.7.0
  • devskim from 1.0.32 to 1.0.33
  • dotnet-format from 8.0.102 to 8.0.104
  • eslint-plugin-jsonc from 2.13.0 to 2.15.1
  • golangci-lint from 1.56.2 to 1.57.2
  • grype from 0.74.7 to 0.77.0
  • kics from 1.7.13 to 2.0.0
  • lightning-flow-scanner from 2.18.0 to 2.22.0
  • markdown-link-check from 3.11.2 to 3.12.1
  • npm-groovy-lint from 14.2.3 to 14.4.1
  • phpcs from 3.9.0 to 3.9.1
  • phpstan from 1.10.60 to 1.10.67
  • protolint from 0.48.0 to 0.49.6
  • psalm from Psalm.5.23.0@ to Psalm.5.23.1@
  • pyright from 1.1.353 to 1.1.359
  • roslynator from 0.8.3.0 to 0.8.6.0
  • rstcheck from 6.2.0 to 6.2.1
  • rubocop from 1.62.0 to 1.63.3
  • ruff from 0.3.2 to 0.4.1
  • secretlint from 8.1.2 to 8.2.3
  • sfdx-scanner-apex from 3.21.0 to 3.23.0
  • sfdx-scanner-aura from 3.21.0 to 3.23.0
  • sfdx-scanner-lwc from 3.21.0 to 3.23.0
  • snakefmt from 0.10.0 to 0.10.1
  • snakemake from 8.5.5 to 8.10.8
  • spectral from 6.11.0 to 6.11.1
  • sqlfluff from 2.3.5 to 3.0.5
  • stylelint from 16.2.1 to 16.3.1
  • syft from 1.0.1 to 1.2.0
  • tekton-lint from 1.0.0 to 1.0.2
  • terraform-fmt from 1.7.4 to 1.8.1
  • terragrunt from 0.55.13 to 0.57.5
  • trivy-sbom from 0.49.1 to 0.50.2
  • trivy from 0.49.1 to 0.50.2
  • trufflehog from 3.69.0 to 3.73.0
  • vale from 3.2.2 to 3.4.0

New Contributors

• @apeyrat made their first contribution in https://github.com/oxsecurity/megalinter/pull/3426
• @wandering-tales made their first contribution in https://github.com/oxsecurity/megalinter/pull/3430
• @enciyo made their first contribution in https://github.com/oxsecurity/megalinter/pull/3408
• @Skitionek made their first contribution in https://github.com/oxsecurity/megalinter/pull/3486
• @nikkii86 made their first contribution in https://github.com/oxsecurity/megalinter/pull/3491

_MegaLinter is graciously provided by _

Full Changelog: https://github.com/oxsecurity/megalinter/compare/v7.10.0...v7.11.0

• oxsecurity
• GitHub Actions