Release MegaLinter v7.7.0

oxsecurity · Dec 9, 2023 · 7e042c7 · 7e042c7
1 parent 371bcec
commit 7e042c7
Show file tree

Hide file tree

Showing 167 changed files with 3,270 additions and 3,007 deletions.
diff --git a/.automation/generated/linter-licenses.json b/.automation/generated/linter-licenses.json
@@ -9,6 +9,7 @@
     "checkmake": "MIT",
     "checkov": "Apache-2.0",
     "checkstyle": "LGPL-2.1",
+    "clang-format": "Other",
     "clippy": "Other",
     "clj-kondo": "EPL-1.0",
     "cljstyle": "EPL-1.0",

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,8 +9,25 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-linter.yml file, or with `oxsecurity/megalinter:beta` docker image
 
 - Core
-  - Update base java apk package to openjdk 17 by @nvuillam in <https://github.com/oxsecurity/megalinter/pull/3160>
-  - Update dotnet linters to .NET 7 by @bdovaz in <https://github.com/oxsecurity/megalinter/pull/2402>
+
+- Media
+
+- New linters
+
+- Fixes
+
+- Doc
+
+- CI
+
+- Linter versions upgrades
+<!-- linter-versions-end -->
+
+## [v7.7.0] - 2023-12-09
+
+- Core
+  - Update base java apk package to openjdk 17 by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3160
+  - Update dotnet linters to .NET 7 by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2402
 
 - Media
   - [Try using MegaLinter (article in japanese)](https://future-architect.github.io/articles/20231129a/?s=03) by [Takashi Minayaga](https://future-architect.github.io/authors/%E5%AE%AE%E6%B0%B8%E5%B4%87%E5%8F%B2)
@@ -22,92 +39,53 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
 - Fixes
   - Call jscpd with `--gitignore` to ignore copy-pastes in files matching `.gitignore`
   - cpplint: Dynamically add the list of extensions from list of files in --extensions parameter
-  - Fix mkdocs generation + CI control job by @nvuillam in <https://github.com/oxsecurity/megalinter/pull/3135>
-  - Add semgrep ruleset to validation schema by @wesley-dean-flexion in <https://github.com/oxsecurity/megalinter/pull/3164>
+  - Fix mkdocs generation + CI control job by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3135
+  - Add semgrep ruleset to validation schema by @wesley-dean-flexion in https://github.com/oxsecurity/megalinter/pull/3164
   - Downgrade stylelint to avoid crash with not v16 compliant dependencies
   - Fix count of yaml-lint errors
+  - Remove openssl reinstall, as base image has updated version from alpine 3.18.5 by @echoix in https://github.com/oxsecurity/megalinter/pull/3181
 
 - CI
   - Add arguments to make use of pytest-xdist, by @echoix
 
 - Linter versions upgrades
-  - [checkov](https://www.checkov.io/) from 3.0.39 to **3.0.40** on 2023-11-19
-  - [phpstan](https://phpstan.org/) from 1.10.42 to **1.10.43** on 2023-11-19
-  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 12.1.0 to **12.1.1** on 2023-11-19
-  - [checkov](https://www.checkov.io/) from 3.0.40 to **3.1.4** on 2023-11-21
-  - [gitleaks](https://github.com/gitleaks/gitleaks) from 8.18.0 to **8.18.1** on 2023-11-21
-  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.63.0 to **3.63.1** on 2023-11-21
-  - [terragrunt](https://terragrunt.gruntwork.io) from 0.53.4 to **0.53.5** on 2023-11-21
-  - [checkov](https://www.checkov.io/) from 3.1.4 to **3.1.7** on 2023-11-21
-  - [phpstan](https://phpstan.org/) from 1.10.43 to **1.10.44** on 2023-11-21
-  - [puppet-lint](http://puppet-lint.com/) from 4.2.1 to **4.2.2** on 2023-11-21
-  - [checkov](https://www.checkov.io/) from 3.1.7 to **3.1.9** on 2023-11-21
-  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.63.1 to **3.63.2** on 2023-11-21
-  - [psalm](https://psalm.dev) from Psalm.5.15.0@ to **Psalm.5.16.0@** on 2023-11-22
-  - [puppet-lint](http://puppet-lint.com/) from 4.2.2 to **4.2.3** on 2023-11-22
-  - [pyright](https://github.com/Microsoft/pyright) from 1.1.336 to **1.1.337** on 2023-11-22
-  - [csharpier](https://csharpier.com/) from 0.26.2 to **0.26.3** on 2023-11-23
-  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 12.1.1 to **12.1.2** on 2023-11-23
-  - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.7.0 to **1.7.1** on 2023-11-23
-  - [checkov](https://www.checkov.io/) from 3.1.9 to **3.1.10** on 2023-11-23
-  - [terragrunt](https://terragrunt.gruntwork.io) from 0.53.5 to **0.53.6** on 2023-11-23
-  - [checkov](https://www.checkov.io/) from 3.1.10 to **3.1.11** on 2023-11-24
-  - [lightning-flow-scanner](https://github.com/Lightning-Flow-Scanner) from 2.15.0 to **2.16.0** on 2023-11-24
-  - [markdown-table-formatter](https://www.npmjs.com/package/markdown-table-formatter) from 1.4.0 to **1.5.0** on 2023-11-25
-  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 12.1.2 to **12.2.0** on 2023-11-26
-  - [checkov](https://www.checkov.io/) from 3.1.11 to **3.1.14** on 2023-11-26
-  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 12.2.0 to **13.0.0** on 2023-11-26
-  - [checkov](https://www.checkov.io/) from 3.1.14 to **3.1.15** on 2023-11-26
-  - [secretlint](https://github.com/secretlint/secretlint) from 7.1.0 to **7.2.0** on 2023-11-27
-  - [phpstan](https://phpstan.org/) from 1.10.44 to **1.10.45** on 2023-11-27
-  - [checkov](https://www.checkov.io/) from 3.1.15 to **3.1.17** on 2023-11-27
-  - [phpstan](https://phpstan.org/) from 1.10.45 to **1.10.46** on 2023-11-28
-  - [checkov](https://www.checkov.io/) from 3.1.17 to **3.1.18** on 2023-11-28
-  - [terragrunt](https://terragrunt.gruntwork.io) from 0.53.6 to **0.53.7** on 2023-11-28
-  - [terragrunt](https://terragrunt.gruntwork.io) from 0.53.7 to **0.53.8** on 2023-11-29
-  - [pyright](https://github.com/Microsoft/pyright) from 1.1.337 to **1.1.338** on 2023-11-29
-  - [checkov](https://www.checkov.io/) from 3.1.18 to **3.1.19** on 2023-11-29
-  - [secretlint](https://github.com/secretlint/secretlint) from 7.2.0 to **8.0.0** on 2023-11-29
-  - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.22.0 to **6.22.1** on 2023-11-29
-  - [semgrep](https://semgrep.dev/) from 1.50.0 to **1.51.0** on 2023-11-29
-  - [syft](https://github.com/anchore/syft) from 0.97.1 to **0.98.0** on 2023-11-29
-  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 0.83.3 to **0.83.4** on 2023-12-04
-  - [csharpier](https://csharpier.com/) from 0.26.3 to **0.26.4** on 2023-12-04
-  - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 6.0.417 to **7.0.114** on 2023-12-04
-  - [roslynator](https://github.com/JosefPihrt/Roslynator) from 0.8.0.0 to **0.8.1.0** on 2023-12-04
-  - [eslint](https://eslint.org) from 8.54.0 to **8.55.0** on 2023-12-04
-  - [phplint](https://github.com/overtrue/phplint) from 9.0.4 to **9.0.6** on 2023-12-04
-  - [phpstan](https://phpstan.org/) from 1.10.46 to **1.10.47** on 2023-12-04
-  - [psalm](https://psalm.dev) from Psalm.5.16.0@ to **Psalm.5.17.0@** on 2023-12-04
-  - [ruff](https://github.com/astral-sh/ruff) from 0.1.6 to **0.1.7** on 2023-12-04
-  - [checkov](https://www.checkov.io/) from 3.1.19 to **3.1.21** on 2023-12-04
-  - [rubocop](https://rubocop.org/) from 1.57.2 to **1.58.0** on 2023-12-04
-  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.0.0 to **8.1.2** on 2023-12-04
-  - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.6.4 to **1.6.5** on 2023-12-04
-  - [checkov](https://www.checkov.io/) from 3.1.21 to **3.1.23** on 2023-12-05
-  - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.47.0 to **0.48.0** on 2023-12-05
-  - [trivy](https://aquasecurity.github.io/trivy/) from 0.47.0 to **0.48.0** on 2023-12-05
-  - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.18.0 to **3.19.0** on 2023-12-05
-  - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.18.0 to **3.19.0** on 2023-12-05
-  - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.18.0 to **3.19.0** on 2023-12-05
-  - [checkov](https://www.checkov.io/) from 3.1.23 to **3.1.24** on 2023-12-05
-  - [semgrep](https://semgrep.dev/) from 1.51.0 to **1.52.0** on 2023-12-05
-  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 13.0.0 to **13.0.1** on 2023-12-06
-  - [pyright](https://github.com/Microsoft/pyright) from 1.1.338 to **1.1.339** on 2023-12-06
-  - [checkov](https://www.checkov.io/) from 3.1.24 to **3.1.25** on 2023-12-06
-  - [vale](https://vale.sh/) from 2.29.7 to **2.30.0** on 2023-12-06
-  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 13.0.1 to **13.0.2** on 2023-12-07
-  - [checkstyle](https://checkstyle.sourceforge.io) from 10.12.5 to **10.12.6** on 2023-12-07
-  - [checkov](https://www.checkov.io/) from 3.1.25 to **3.1.27** on 2023-12-07
-  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.1.2 to **8.1.3** on 2023-12-07
-  - [luacheck](https://luacheck.readthedocs.io) from 1.1.1 to **1.1.2** on 2023-12-09
-  - [markdownlint](https://github.com/DavidAnson/markdownlint) from 0.37.0 to **0.38.0** on 2023-12-09
-  - [phpcs](https://github.com/squizlabs/PHP_CodeSniffer) from 3.7.2 to **3.8.0** on 2023-12-09
-  - [phpstan](https://phpstan.org/) from 1.10.47 to **1.10.48** on 2023-12-09
-  - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.5 to **1.7.6** on 2023-12-09
-  - [isort](https://pycqa.github.io/isort/) from 5.12.0 to **5.13.0** on 2023-12-09
-  - [terragrunt](https://terragrunt.gruntwork.io) from 0.53.8 to **0.54.0** on 2023-12-09
-<!-- linter-versions-end -->
+  - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.22.0 to **6.22.1**
+  - [bandit](https://bandit.readthedocs.io/en/latest/) from 1.7.5 to **1.7.6**
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 0.83.3 to **0.83.4**
+  - [checkov](https://www.checkov.io/) from 3.0.39 to **3.1.25**
+  - [checkstyle](https://checkstyle.sourceforge.io) from 10.12.5 to **10.12.6**
+  - [csharpier](https://csharpier.com/) from 0.26.2 to **0.26.4**
+  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.0.0 to **8.1.3**
+  - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 6.0.417 to **7.0.114**
+  - [eslint](https://eslint.org) from 8.54.0 to **8.55.0**
+  - [gitleaks](https://github.com/gitleaks/gitleaks) from 8.18.0 to **8.18.1**
+  - [isort](https://pycqa.github.io/isort/) from 5.12.0 to **5.13.0**
+  - [lightning-flow-scanner](https://github.com/Lightning-Flow-Scanner) from 2.15.0 to **2.16.0**
+  - [luacheck](https://luacheck.readthedocs.io) from 1.1.1 to **1.1.2**
+  - [markdown-table-formatter](https://www.npmjs.com/package/markdown-table-formatter) from 1.4.0 to **1.5.0**
+  - [markdownlint](https://github.com/DavidAnson/markdownlint) from 0.37.0 to **0.38.0**
+  - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.7.0 to **1.7.1**
+  - [npm-groovy-lint](https://nvuillam.github.io/npm-groovy-lint/) from 12.1.0 to **13.0.2**
+  - [phpcs](https://github.com/squizlabs/PHP_CodeSniffer) from 3.7.2 to **3.8.0**
+  - [phplint](https://github.com/overtrue/phplint) from 9.0.4 to **9.0.6**
+  - [phpstan](https://phpstan.org/) from 1.10.42 to **1.10.48**
+  - [psalm](https://psalm.dev) from Psalm.5.15.0@ to **Psalm.5.17.0@**
+  - [puppet-lint](http://puppet-lint.com/) from 4.2.1 to **4.2.3**
+  - [pyright](https://github.com/Microsoft/pyright) from 1.1.336 to **1.1.339**
+  - [roslynator](https://github.com/JosefPihrt/Roslynator) from 0.8.0.0 to **0.8.1.0**
+  - [rubocop](https://rubocop.org/) from 1.57.2 to **1.58.0**
+  - [ruff](https://github.com/astral-sh/ruff) from 0.1.6 to **0.1.7**
+  - [secretlint](https://github.com/secretlint/secretlint) from 7.1.0 to **8.0.0**
+  - [semgrep](https://semgrep.dev/) from 1.50.0 to **1.52.0**
+  - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.18.0 to **3.19.0**
+  - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.18.0 to **3.19.0**
+  - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.18.0 to **3.19.0**
+  - [syft](https://github.com/anchore/syft) from 0.97.1 to **0.98.0**
+  - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.6.4 to **1.6.5**
+  - [terragrunt](https://terragrunt.gruntwork.io) from 0.53.4 to **0.54.0**
+  - [trivy](https://aquasecurity.github.io/trivy/) from 0.47.0 to **0.48.0**
+  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.63.0 to **3.63.2**
+  - [vale](https://vale.sh/) from 2.29.7 to **2.30.0**
 
 ## [v7.6.0] - 2023-11-19