Release v10.2.0 · oxsecurity/megalinter

What's Changed

Core
- Outside CI, PARALLEL_PROCESS_NUMBER now defaults to the number of cores minus one, so your machine stays responsive while MegaLinter runs. CI runs still use every core, and setting the variable still overrides the default (#9216)
Linters enhancements
- GROOVY_NPM_GROOVY_LINT upgraded to npm-groovy-lint v19: up to 18 times faster, and its default recommended preset now reports likely mistakes only (no style or layout rules) (#9411)
  - To get style and layout findings back, set "extends": "advanced" (or "all") in your .groovylintrc.json, see the migration guide
- CLOJURE_CLJ_KONDO now lints all your Clojure files in a single clj-kondo run, with the new default list_of_files lint mode (#9029)
  - Cross-namespace checks, such as calls with a wrong number of arguments to a function defined in another file, are now reported without a clj-kondo cache
  - The console log and reports now show clj-kondo's warnings count, and its errors count when errors are found, instead of a single error for any failing run
  - clj-kondo now runs with --cache false: it no longer writes into your repository's .clj-kondo/.cache folder during the run, and no longer reads a cache built beforehand. To use such a cache, for example one built with --dependencies, set CLOJURE_CLJ_KONDO_COMMAND_REMOVE_ARGUMENTS: ["--cache", "false"]
  - To lint each file separately as before, set CLOJURE_CLJ_KONDO_CLI_LINT_MODE: file
Fixes
- With SARIF_REPORTER: true, findings the linter marks as suppressed in its SARIF output (for example # nosemgrep) no longer count as errors or warnings, and no longer appear in the console log, text reports and PR/MR comments. The SARIF reports still contain them. Fixes #9373
- Improved security: R_LINTR, POWERSHELL_POWERSHELL, POWERSHELL_POWERSHELL_FORMATTER and ARM_ARM_TTK now handle file names containing quotes or special characters safely (#9404)
  - Files whose name contains control characters (such as a line break) are now skipped by these linters, with a warning in the log
- EXTENDS now sends GITHUB_TOKEN only to https://raw.githubusercontent.com, to read configs in private repositories. A URL that merely starts with that text no longer receives it. See GHSA-rq55-6pj8-6v8v
  - Only extend from URLs hosted on an account or server owned by your organization, see Configuration
- SPELL_LYCHEE now applies the .lycheeignore rules MegaLinter finds outside the repository root (for example in .github/linters with LINTER_RULES_PATH). Fixes #9281
- Custom flavors including trivy no longer fail to build when the trivy vulnerability database mirror mirror.gcr.io is unavailable. Fixes #9254
  - The database download now tries mirror.gcr.io, ghcr.io and public.ecr.aws in turn, and waits between retries
  - Choose other mirrors with the new TRIVY_DB_REPOSITORY variable of the custom flavor builder workflow, see Custom flavors
  - A failed image build now fails the build step of the action, instead of a later No such object error when pushing the image
- Go linters such as GO_GOLANGCI_LINT now work when MegaLinter runs as a non-root user (MEGALINTER_UID / MEGALINTER_GID): Go module and build caches go to the user's home folder, unless you set GOMODCACHE / GOCACHE yourself. Fixes #9280
- A linter stopped by a signal (negative return code, such as an out-of-memory kill) now fails in file lint mode instead of reporting SUCCESS with 0 errors, and a PRE_COMMANDS / POST_COMMANDS entry with continue_if_failed: false stops the run. Fixes #9257
- GitLab and Git environment variables such as GIT_STRATEGY no longer trigger a false removed-linter warning. Removed MegaLinter options and linter selections still warn. Fixes #9024
- Pull request runs in private repositories no longer crash with a git traceback when the checkout does not persist credentials: MegaLinter warns, explains how to enable the git diff mode (persist-credentials: true or GIT_AUTHORIZATION_BEARER) and lints the whole codebase. Fixes #9104
- FAIL_IF_UPDATED_SOURCES is now reliable. Fixes #9103
  - A warning is shown when its value is neither true nor false (for example an empty CI variable), and the console log tells whether the option is active
  - The failure reason, naming the linters that updated sources, is shown even when other linters failed too
  - It takes precedence over DISABLE_ERRORS: true: the exit code is 1, as the summary says
  - Sources updated by project lint mode linters and by POST_COMMANDS now fail the run too, and set the has_updated_sources output
- The Email reporter no longer sends a mail for a successful run without updated sources unless EMAIL_REPORTER_SEND_SUCCESS is true, and the File.io reporter skips such runs when FILEIO_REPORTER_SEND_SUCCESS is true, as documented (#9219)
- CLOJURE_CLJ_KONDO now really forwards EXCLUDED_DIRECTORIES and ADDITIONAL_EXCLUDED_DIRECTORIES in project lint mode: they were never applied before, so files in folders like node_modules or .wireit could be reported (#9029)
  - The directories are passed as a merged :output {:exclude-files [...]} inline configuration, so your own :output :exclude-files patterns in .clj-kondo/config.edn are kept
  - Disable the forwarding with CLOJURE_CLJ_KONDO_FORWARD_EXCLUDED_DIRECTORIES: false
- The .mega-linter.yml JSON Schema is no longer rejected by strict JSON Schema validators with Invalid anchor value: the invalid $id values are removed from the configuration and descriptor schemas. Fixes #9177
- Project lint mode no longer overrides the paths defined in the linters' own configuration: since v10, folders such as vendor/ were analyzed again by linters like phpcs, phpstan or editorconfig-checker, making runs slow and noisy. Fixes #8955
  - Linters that analyze the current folder by default are no longer passed .: eslint, biome, standard, ruff, ruff format, flake8, rubocop, phplint, jscpd, gherkin-lint, dart analyze, cljstyle and editorconfig-checker (which honours .gitignore again)
  - Linters requiring a path receive . only when their configuration does not define the paths to analyze: phpcs (<file>), phpstan (paths), psalm (<projectFiles>), php-cs-fixer (Finder in()), pylint and mypy (files), pyright (include), cfn-lint (templates), checkov (directory) and cspell (files)
  - The <LINTER_KEY>_COMMAND_REMOVE_ARGUMENTS: "." workaround is no longer needed
- With IGNORE_GITIGNORED_FILES: true (default), the directories ignored by git are now forwarded to project lint mode linters with EXCLUDED_DIRECTORIES: a gitignored vendor/ or build/ folder is no longer analyzed by phpcs, trivy, checkov... (#9199)
  - A gitignored directory sharing its name with a tracked one (ex: /lib/ build output and src/lib sources) is only sent to the linters receiving exact paths, so your tracked sources stay analyzed
  - Disable it with the new FORWARD_GITIGNORED_DIRECTORIES: false variable
- Your own exclusions are kept when MegaLinter forwards EXCLUDED_DIRECTORIES to project lint mode linters: the forwarded directories used to replace the exclusions defined in the linter's own configuration, so folders you left out were analyzed again. Fixes #8955
  - Exclusions from your config file are now kept for phplint (exclude), pylint (ignore), black (extend-exclude), flake8 (extend-exclude), isort (extend_skip), bandit (.bandit exclude), nbqa (exclude), djlint (extend_exclude), robocop (exclude), npm-groovy-lint (ignorepattern), rumdl (exclude) and jsonlint (patterns)
  - The tools' own default exclusions are kept for ansible-lint, cspell, pylint and gherkin-lint
  - csharpier keeps honouring .gitignore, v8r your ignorePatternFiles, yamllint an ignore inherited through extends or an ignore-from-file, and StyLua the file patterns of .styluaignore and .gitignore (and .luau files are linted again)
  - The config file passed in your <LINTER_KEY>_ARGUMENTS is read too, and an exclusion argument you already pass there (ex: phpcs --ignore=) is merged with the forwarded directories instead of being overridden
- phpstan no longer reports unknown classes when MegaLinter forwards EXCLUDED_DIRECTORIES: the forwarded directories are excluded from analysis only, so the symbols of your scanDirectories (ex: vendor-bin/*/vendor) are found again. Fixes #8955
- robocop now receives your robocop.toml through --config: the -c argument sent before is robocop's --configure option (#9216)
- betterleaks keeps the configuration given in BETTERLEAKS_CONFIG, GITLEAKS_CONFIG or their *_CONFIG_TOML variants when MegaLinter forwards EXCLUDED_DIRECTORIES (#9216)
- Fixed lint modes that never worked. Fixes #9030
  - RST_RST_LINT_CLI_LINT_MODE: project now lints the .rst files of the workspace, instead of failing with rst-lint's usage message
  - TEKTON_TEKTON_LINT_CLI_LINT_MODE: project now lints the .yml and .yaml files of the workspace (or the globs of your .tektonlintrc.yaml), instead of failing with No paths match glob "". EXCLUDED_DIRECTORIES are applied too
  - CLOUDFORMATION_CFN_LINT_CLI_LINT_MODE: project now lints the .json, .yaml and .yml files of the workspace (or the templates of your .cfnlintrc), instead of failing with Template references a directory, not a file
  - ENV_DOTENV_LINTER_CLI_LINT_MODE: project now lints the .env files of the workspace and its subfolders, instead of failing with dotenv-linter's usage message. EXCLUDED_DIRECTORIES are applied at any nesting level
  - REPOSITORY_LS_LINT and SALESFORCE_CODE_ANALYZER_FLOW only accept the project lint mode: in file or list_of_files mode they analyzed no file at all. If you set REPOSITORY_LS_LINT_CLI_LINT_MODE to another mode, remove it
mega-linter-runner
- --container-engine container: run MegaLinter with Apple's native macOS container engine (Apple Silicon only, no Docker Desktop needed): https://github.com/apple/container (#8956)
- Node.js 22.18+ or 24.11+ is now required (was 22.0+): upgrade Node.js if npx mega-linter-runner reports an unsupported engine. This comes with a security upgrade of the simple-git dependency
Agent Skills
- megalinter-fix now explains how to fix clj-kondo :type-mismatch and :constant-condition findings, and the difference between the top-level :exclude-files and :output :exclude-files clj-kondo settings (#9029)
Dev
- The runtime image tests (mega-linter-runner/test/runtime-image.test.js) run GO_GOLANGCI_LINT on a fixture with an external dependency (.automation/test/golang_runtime_deps), so the Go module cache is exercised as root and non-root (#9326)
- The build now fails when a JSON Schema in megalinter/descriptors/schemas/ is not compliant with its draft-07 meta-schema, or declares an $id holding a JSON Pointer fragment (validate_json_schemas in .automation/build.py) (#9180)
- CLOJURE_CLJ_KONDO test fixtures are split into good/ and bad/ folders, so the project lint mode tests no longer lint the failing files, and .wireit poison fixtures now guard the excluded directories forwarding, at root and nested levels (#9029)
- Linter tests now really run the non-default lint modes of linters whose name contains a hyphen (clj-kondo, cfn-lint, rst-lint, tekton-lint...) or is overridden (eslint ES, nbqa mypy): LinterTestRoot set <DESCRIPTOR>_<LINTER-NAME>_CLI_LINT_MODE instead of the linter key, so the override was ignored. A new assertion fails the test when the requested lint mode is not applied (#9030)
  - Test fixtures of CLOUDFORMATION_CFN_LINT, EDITORCONFIG_EDITORCONFIG_CHECKER, ENV_DOTENV_LINTER, GHERKIN_GHERKIN_LINT and GROOVY_NPM_GROOVY_LINT are split into good/ and bad/ folders, so the project lint mode tests no longer lint the failing files
  - TEKTON_TEKTON_LINT gets a .wireit poison fixture guarding its new excluded directories forwarding, and ENV_DOTENV_LINTER root and nested ones
  - The .editorconfig of the EDITORCONFIG_EDITORCONFIG_CHECKER fixtures moves into good/ and bad/, so the linter is activated in the split folders, and the TYPESCRIPT_ES / TYPESCRIPT_STANDARD fixtures no longer fail on their own eslint.config.js in project lint mode
- CljKondoLinter forwards excluded directories through :output :exclude-files instead of a top-level :exclude-files vector (an invalid value), and no longer skips the forwarding when a --config file is passed, which was always the case since the default TEMPLATES/.clj-kondo/config.edn is used when the repository has none (#9029)
- --lint moved from cli_lint_extra_args_after to the per-mode cli_lint_mode_*_extra_args_after properties, because clj-kondo assigns every following argument to the last option: the forwarded --config must come before it (#9029)
- New descriptor property cli_lint_mode_project_config_paths_regex: a regex searched in the resolved linter config file; when it matches, cli_lint_mode_project_extra_args_after is not sent, as it would override the paths defined in the config. Every project-mode . was reviewed against the tools' docs/source (rules in .claude/rules/descriptors.md) (#9199)
- Megalinter.get_gitignored_directories() extracts the ignored directories from the git ls-files --directory output (skipping the ones inside an excluded directory, capped to MAX_GITIGNORED_DIRECTORIES_BYTES), and get_unambiguous_gitignored_directories() keeps for {{DIR}} templates only the ones whose path suffix no tracked directory shares; Linter.compute_project_exclude_directories() forwards them through project_gitignored_name_directories / project_gitignored_directories (#9199)
- cli_lint_mode_project_config_paths_regex is searched in the config file with XML comments removed, so a commented-out <file> or <projectFiles> does not count (#9199)
- PhpCsFixerLinter no longer drops . itself (the descriptor regex does it), and JsCpdLinter rebases the configured path entries when it generates its config in the report folder (#9199)
- PHP_PHPCS regression fixture: .automation/test/php/good/phpcs.xml lists the files to analyze, and out_of_config_paths.inc (not collected by MegaLinter) fails the project lint mode test if . overrides them (#9199)
- Descriptor property cli_lint_mode_project_exclude_config_key now reads TOML, JSON (with comments), INI and YAML configs, accepts a list of alternative key paths and a * wildcard segment, splits comma separated string values (kept whole for | joined regexes), and also reads the config passed in ARGUMENTS (#9216)
  - New descriptor properties: cli_lint_mode_project_exclude_config_files (workspace configs discovered by the tool itself), cli_lint_mode_project_exclude_conflicting_args (user arguments disabling the forwarding) and cli_lint_mode_project_exclude_ignore_file_merge_all_seeds
  - With ignore file forwarding, cli_lint_mode_project_exclude_config_key lists the user's ignore files, re-passed instead of cli_lint_mode_project_exclude_ignore_file_pass_existing
- PhpstanLinter generates excludePaths: analyse: instead of a plain list (analyseAndScan), YamllintLinter follows the extends chain and supports ignore-from-file, PhpCsFixerLinter guards exclude() against non-Finder iterables, and MegaLinter.get_parallel_process_number() holds the default parallelism (#9216)
- The PSScriptAnalyzer install step of the POWERSHELL descriptor now uses -ErrorAction Stop, so a PowerShell Gallery failure breaks the Docker build instead of silently producing an image without Invoke-ScriptAnalyzer (#9334)
CI
- Dependabot no longer opens version or security update PRs for the pip, uv, bundler, gomod and cargo test fixtures under .automation/test/: they must stay outdated, in particular the .wireit poison fixtures guarding the excluded directories forwarding (#9168)
- New close-frozen-fixture-prs.yml workflow: Dependabot security updates ignore the dependabot.yml ignore rules, so it closes the Dependabot PRs that only bump frozen fixtures (bad/ and .wireit/ folders under .automation/test/), and flags the PRs mixing them with other updates (#9322)
- Renovate now keeps the test fixtures under .automation/test/ up to date (good/, fix/... folders) in one weekly grouped PR, and only skips the frozen bad/ and .wireit/ fixtures (#9322)
- One Python version everywhere: .python-version is the single reference (#9392)
  - Every python base image (main, flavors, linters, server, quick and custom-flavor Dockerfiles) is pinned to the same patch instead of a floating 3.14 tag
  - CI workflows read it through python-version-file, and the local make bootstrap fallback launcher follows it
  - Renovate bumps .python-version and every base image in one Python PR, patches apart from minor upgrades
  - The image build sets UV_PYTHON_DOWNLOADS=never, so a mismatch fails the build instead of silently bundling another Python
- Renovate keeps typescript on v6: TypeScript 7 drops the JavaScript compiler API that typescript-eslint needs (#8404)
- ApexGuru rate limits no longer fail CI test jobs: when Salesforce's ApexGuru service answers 429 Too Many Requests, the SALESFORCE_CODE_ANALYZER_APEXGURU success, failure and SARIF tests are skipped instead of failed (#8947)
  - Only in CI (utils.is_ci()): local test runs still fail, so a real regression stays visible
  - Per-linter test jobs (deploy-DEV-linters.yml, deploy-BETA-linters.yml) now pass GITHUB_ACTIONS to the test container
- test-agent-plugins.yml validation script now accepts both the {"plugins": [...], "errors": [...]} wrapper and the bare-array shape the GitHub Copilot CLI's plugins list --json can return, fixing a crash of the "Validate agent plugins manifests" check (#8979)
- REPOSITORY_DUSTILOCK is now non-blocking in MegaLinter's own .mega-linter.yml: dustilock reports any PyPI lookup error (such as intermittent 503 responses) as a package "available for public registration", which failed the "Run against all code base - DEV" job on unrelated PRs (#9076)
- Renovate and Dependabot now apply the same waiting rule: 7 days after a release, none for security updates (#9217)
  - GitHub Actions are updated by Dependabot only (Renovate's github-actions manager is disabled): Renovate can not date SHA-pinned digest updates, so they stayed pending forever and duplicated Dependabot's PRs
  - Renovate lock file maintenance is disabled: a lock file refresh has no release date, so it could never pass the 7-day check
  - Dependabot now also updates the actions of flavors/custom-builder/action.yml
Linter versions upgrades (61)
- ansible-lint from 26.8.0 to 26.10.1
- bicep_linter from 0.46.1 to 0.48.1
- biome from 2.5.11 to 2.6.3
- black from 26.5.1 to 26.10.1
- cfn-lint from 1.55.1 to 1.58.0
- checkov from 3.3.15 to 3.3.30
- clippy from 0.1.98 to 0.1.99
- clj-kondo from 2025.01.16 to 2026.10.20
- cspell from 10.1.1 to 10.4.0
- djlint from 1.44.2 to 1.47.0
- dotnet-format from 10.0.302 to 10.0.303
- editorconfig-checker from 3.11.1 to 4.0.2
- eslint from 10.9.1 to 10.13.0
- flake8 from 7.3.0 to 7.4.1
- golangci-lint from 2.13.2 to 2.15.0
- grype from 0.118.0 to 0.121.0
- isort from 8.0.1 to 9.0.2
- jscpd from 5.0.16 to 5.4.2
- kingfisher from 2.0.0 to 2.14.0
- kubescape from 4.0.9 to 4.0.16
- ls-lint from 2.3.1 to 2.3.2
- npm-groovy-lint from 18.0.0 to 19.0.0
- php-cs-fixer from 3.95.23 to 3.95.27
- phplint from 9.7.2 to 9.8.0
- phpstan from 2.2.9 to 2.3.2
- pmd from 7.26.0 to 7.28.0
- powershell from 7.6.5 to 7.6.8
- powershell_formatter from 7.6.5 to 7.6.8
- prettier from 3.9.6 to 3.9.10
- protolint from 0.57.0 to 0.58.0
- psalm from Psalm.6.16.1@ to Psalm.6.20.1@
- pylint from 4.0.7 to 4.1.3
- pyright from 1.1.413 to 1.1.414
- raku from 2026.03 to 2026.09
- revive from 1.16.0 to 1.17.1
- robocop from 9.0.0 to 9.1.2
- rubocop from 1.90.0 to 1.92.1
- ruff from 0.16.5 to 0.17.2
- ruff-format from 0.16.5 to 0.17.2
- rumdl from 0.2.62 to 0.3.0
- scalafix from 0.14.7 to 0.14.9
- secretlint from 13.0.5 to 13.0.7
- semgrep from 1.175.0 to 1.182.1
- shfmt from 3.13.1 to 3.14.1
- snakefmt from 2.0.3 to 2.1.0
- snakemake from 9.26.1 to 9.27.1
- spectral from 6.16.3 to 6.17.0
- sqlfluff from 4.3.0 to 4.4.0
- stylelint from 17.14.1 to 17.16.0
- stylua from 2.5.2 to 2.6.0
- syft from 1.51.1 to 1.55.0
- tekton-lint from 1.2.0 to 1.2.4
- terraform-fmt from 1.16.0 to 1.17.0
- terragrunt from 1.1.4 to 1.2.1
- tflint from 0.64.0 to 0.65.0
- tofu-fmt from 1.12.6 to 1.13.2
- tofu-validate from 1.12.6 to 1.13.2
- trivy from 0.74.0 to 0.76.1
- trivy-sbom from 0.74.0 to 0.76.1
- trufflehog from 3.97.1 to 3.99.7
- vale from 3.18.0 to 3.24.0

Pull Requests

[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8903
Build(deps): Bump gitpython from 3.1.60 to 3.1.61 in /server by @dependabot[bot] in #8904
Build(deps): Bump gitpython from 3.1.60 to 3.1.61 in /.config/python/dev by @dependabot[bot] in #8905
Build(deps): Bump js-yaml from 5.2.3 to 5.4.1 in /mega-linter-runner by @dependabot[bot] in #8906
Build(deps): Bump open from 11.0.1 to 11.0.2 in /mega-linter-runner by @dependabot[bot] in #8907
chore(deps): update dependency graphql to v17 by @renovate[bot] in #8150
Properly scan files in a PR using Checkov by @bdovaz in #8910
chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.24 by @renovate[bot] in #8912
chore(deps): update mvdan/shfmt docker tag to v3.14.0 by @renovate[bot] in #8944
chore(deps): update dependency mocha to v12 by @renovate[bot] in #8946
chore(deps): update golang docker tag - autoclosed by @renovate[bot] in #8942
chore(deps): update dependency mongodb/kingfisher to v2.1.0 by @renovate[bot] in #8939
chore(deps): update jdkato/vale docker tag to v3.20.0 by @renovate[bot] in #8943
chore(deps): update dependency pmd/pmd to v7.27.0 by @renovate[bot] in #8940
chore(deps): update dependency ip-address to v10.7.0 by @renovate[bot] in #8936
chore(deps): update dependency jscpd to v5.1.2 by @renovate[bot] in #8937
chore(deps): update dependency cfn-lint to v1.56.0 by @renovate[bot] in #8933
fix(deps): update langchain to ~=4.4.0 by @renovate[bot] in #8945
chore(deps): update dependency rq to v2.12.0 by @renovate[bot] in #8941
chore(deps): update dependency langsmith to v0.12.1 - autoclosed by @renovate[bot] in #8938
chore(deps): update mstruebing/editorconfig-checker docker tag to v4 by @renovate[bot] in #8947
chore(deps): update dependency @biomejs/biome to v2.5.12 by @renovate[bot] in #8917
chore(deps): update dependency rumdl to v0.2.65 by @renovate[bot] in #8915
chore(deps): update dependency eslint-plugin-jest to v29.16.6 by @renovate[bot] in #8911
Add lintlang (AI_LINTLANG) to External Plugins Catalog by @roli-lpci in #8899
chore(deps): update dependency phpstan/phpstan to v2.2.13 by @renovate[bot] in #8922
chore(deps): update dependency pytest-rerunfailures to v16.6.1 by @renovate[bot] in #8924
chore(deps): update dependency ruff to v0.16.6 by @renovate[bot] in #8925
chore(deps): update dependency pylint to v4.0.8 by @renovate[bot] in #8923
chore(deps): update dependency zensical to v0.0.59 by @renovate[bot] in #8930
chore(deps): update trufflesecurity/trufflehog docker tag to v3.97.4 by @renovate[bot] in #8932
chore(deps): update dependency virtualenv to v21.7.8 by @renovate[bot] in #8929
chore(deps): update dependency cspell to v10.2.2 by @renovate[bot] in #8934
chore(deps): update typescript-eslint monorepo to v8.69.0 by @renovate[bot] in #8913
chore(deps): update dependency eslint to v10.10.0 by @renovate[bot] in #8948
chore(deps): update dependency djlint to v1.45.2 by @renovate[bot] in #8935
chore(deps): update dependency stylelint to v17.15.0 by @renovate[bot] in #8949
chore(deps): update dependency serialize-javascript to v7.1.1 - autoclosed by @renovate[bot] in #8928
chore(deps): update dependency semgrep to v1.175.1 by @renovate[bot] in #8927
chore(deps): update dependency rust-lang/rust to v1.98.1 by @renovate[bot] in #8926
chore(deps): update langchain (patch) by @renovate[bot] in #8921
Support loading config from a project-level .config subfolder by @MRDGH2821 in #8950
Build(deps): Bump yeoman-generator from 8.3.0 to 8.3.1 in /mega-linter-runner by @dependabot[bot] in #8951
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8920
chore(deps): update dependency semgrep to v1.176.1 by @renovate[bot] in #8916
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8952
chore(deps): update dependency checkov to v3.3.16 by @renovate[bot] in #8953
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8954
feat(mega-linter-runner): support Apple's native container engine on macOS by @snaquekiller in #8956
Fix CI: Copilot CLI plugin list shape and OpenTofu oras-go CVE by @nvuillam in #8979
chore(deps): update dependency ruff to v0.16.7 by @renovate[bot] in #8963
chore(deps): update dependency @salesforce/plugin-packaging to v3.0.7 by @renovate[bot] in #8962
chore(deps): update dependency zensical to v0.0.62 by @renovate[bot] in #8959
fix(deps): update dependency yeoman-generator to v9 by @renovate[bot] in #9011
chore(deps): update typescript-eslint monorepo to v8.70.0 by @renovate[bot] in #9010
chore(deps): update jdkato/vale docker tag to v3.21.0 by @renovate[bot] in #9009
chore(deps): update dependency vimeo/psalm to v6.17.1 by @renovate[bot] in #9007
chore(deps): update dependency snakemake to v9.27.0 by @renovate[bot] in #9006
chore(deps): update dependency semgrep to v1.177.0 by @renovate[bot] in #9005
chore(deps): update dependency rubocop to v1.91.0 by @renovate[bot] in #9004
chore(deps): update dependency pyjwt to v2.14.0 by @renovate[bot] in #9003
chore(deps): update dependency mongodb/kingfisher to v2.2.0 by @renovate[bot] in #9002
chore(deps): update dependency eslint-plugin-vue to v10.11.0 by @renovate[bot] in #9001
chore(deps): update dependency djlint to v1.46.1 by @renovate[bot] in #9000
chore(deps): update dependency bartlett/sarif-php-converters to v1.7.0 by @renovate[bot] in #8999
chore(deps): update dependency azure/bicep to v0.47.16 by @renovate[bot] in #8998
chore(deps): update dependency @eslint-react/eslint-plugin to v5.19.0 by @renovate[bot] in #8997
chore(deps): update alpine/terragrunt docker tag to v1.16.2 by @renovate[bot] in #8980
chore(deps): update dependency @biomejs/biome to v2.5.13 by @renovate[bot] in #8981
chore(deps): update dependency cfn-lint to v1.56.3 by @renovate[bot] in #8983
chore(deps): update dependency checkov to v3.3.17 by @renovate[bot] in #8984
chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.25 by @renovate[bot] in #8985
chore(deps): update dependency gitpython to v3.1.62 by @renovate[bot] in #8986
chore(deps): update dependency langsmith to v0.12.4 by @renovate[bot] in #8987
chore(deps): update dependency mocha to v12.0.1 by @renovate[bot] in #8988
chore(deps): update dependency open to v11.0.3 by @renovate[bot] in #8989
chore(deps): update dependency phpstan/phpstan to v2.2.14 by @renovate[bot] in #8990
chore(deps): update dependency pyright to v1.1.414 by @renovate[bot] in #8992
chore(deps): update dependency rumdl to v0.2.73 by @renovate[bot] in #8993
chore(deps): update dependency scalacenter/scalafix to v0.14.9 by @renovate[bot] in #8994
chore(deps): update mvdan/shfmt docker tag to v3.14.1 by @renovate[bot] in #8996
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8964
chore(deps): update dependency @ibm/tekton-lint to v1.2.4 by @renovate[bot] in #9012
chore(deps): update dependency cspell to v10.3.1 by @renovate[bot] in #8960
chore(deps): update dependency jscpd to v5.2.0 by @renovate[bot] in #8961
chore(deps): update dependency virtualenv to v21.7.9 by @renovate[bot] in #8958
chore(deps): lock file maintenance by @renovate[bot] in #8711
chore(deps): update langchain (patch) by @renovate[bot] in #8957
chore(deps): update dependency uvicorn to v0.53.0 by @renovate[bot] in #9014
chore(deps): update dependency powershell/powershell to v7.6.6 by @renovate[bot] in #8991
Build(deps): Bump yeoman-environment from 6.3.0 to 7.0.0 in /mega-linter-runner by @dependabot[bot] in #8969
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9015
chore(deps): update dependency virtualenv to v21.7.10 by @renovate[bot] in #9022
chore(deps): update docker/build-push-action digest to c3c9e26 by @renovate[bot] in #9016
chore(deps): update dependency jscpd to v5.2.1 by @renovate[bot] in #9019
chore(deps): update dependency langsmith to v0.12.5 by @renovate[bot] in #9020
chore(deps): update dependency vimeo/psalm to v6.17.2 by @renovate[bot] in #9021
chore(deps): update dependency cspell to v10.3.2 by @renovate[bot] in #9018
chore(deps): update dependency @biomejs/biome to v2.5.14 by @renovate[bot] in #9026
chore(deps): update dependency zensical to v0.0.63 by @renovate[bot] in #9045
chore(deps): update dependency rumdl to v0.2.74 by @renovate[bot] in #9046
Build(deps): Bump urllib3 from 2.7.0 to 2.8.0 in /.config/python/dev by @dependabot[bot] in #9042
chore(deps): update dependency ruff to v0.16.8 by @renovate[bot] in #9036
chore(deps): update dependency prettier to v3.9.8 by @renovate[bot] in #9035
chore(deps): update dependency langsmith to v0.12.6 by @renovate[bot] in #9034
chore(deps): update dependency virtualenv to v21.7.16 by @renovate[bot] in #9048
chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.26 by @renovate[bot] in #9047
Build(deps): Bump idna from 3.19 to 3.20 in /.config/python/dev by @dependabot[bot] in #9044
chore(deps): update dependency cspell to v10.3.3 by @renovate[bot] in #9032
chore(deps): update dependency @eslint-react/eslint-plugin to v5.19.1 by @renovate[bot] in #9017
chore(deps): update dependency @eslint-react/eslint-plugin to v5.20.2 by @renovate[bot] in #9054
chore(deps): update trufflesecurity/trufflehog docker tag to v3.97.5 by @renovate[bot] in #9053
chore(deps): update mstruebing/editorconfig-checker docker tag to v4.0.2 by @renovate[bot] in #9052
chore(deps): update golang docker tag to v1.27.1 by @renovate[bot] in #9051
chore(deps): update dependency djlint to v1.46.2 by @renovate[bot] in #9050
chore(deps): update alpine/terragrunt docker tag to v1.16.3 by @renovate[bot] in #9049
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9027
chore(deps): update dependency rubocop-rails to v2.38.0 by @renovate[bot] in #9066
chore(deps): update dependency mongodb/kingfisher to v2.5.0 by @renovate[bot] in #9064
chore(deps): update dependency eslint to v10.11.0 by @renovate[bot] in #9060
chore(deps): update dependency rumdl to v0.2.75 by @renovate[bot] in #9055
chore(deps): update dependency anchore/grype to v0.119.0 by @renovate[bot] in #9057
chore(deps): update dependency @salesforce/cli to v2.151.6 by @renovate[bot] in #9056
chore(deps): update dependency anchore/syft to v1.52.0 by @renovate[bot] in #9058
chore(deps): update dependency cfn-lint to v1.57.0 by @renovate[bot] in #9059
chore(deps): update dependency idna to v3.20 by @renovate[bot] in #9061
chore(deps): update dependency jscpd to v5.3.0 by @renovate[bot] in #9062
chore(deps): update dependency langsmith to v0.13.0 by @renovate[bot] in #9063
chore(deps): update dependency stylelint-scss to v7.3.0 by @renovate[bot] in #9067
chore(deps): update dependency virtualenv to v21.9.0 by @renovate[bot] in #9068
chore(deps): update dependency yq to v4.2.0 by @renovate[bot] in #9069
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.49.0 by @renovate[bot] in #9070
chore(deps): update dependency pymdown-extensions to v12 by @renovate[bot] in #9071
chore(deps): update dependency pytest-rerunfailures to v16.7 by @renovate[bot] in #9065
chore(deps): update dependency @eslint-react/eslint-plugin to v5.20.4 by @renovate[bot] in #9074
chore(deps): update jdkato/vale docker tag to v3.22.0 by @renovate[bot] in #9075
Make dustilock non-blocking in MegaLinter's own CI by @nvuillam in #9076
Improve clj-kondo integration and fix excluded directories by @robinlahtinen in #9029
chore(deps): update dependency @eslint-react/eslint-plugin to v5.20.5 by @renovate[bot] in #9077
chore(deps): update dependency vimeo/psalm to v6.18.0 by @renovate[bot] in #9078
chore(deps): update dependency jscpd to v5.3.1 by @renovate[bot] in #9079
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9073
chore(deps): update dependency virtualenv to v21.9.1 by @renovate[bot] in #9084
chore(deps): update dependency checkov to v3.3.19 by @renovate[bot] in #9083
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9082
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9108
chore(deps): update dependency rumdl to v0.2.78 by @renovate[bot] in #9101
chore(deps): update langchain (patch) by @renovate[bot] in #9088
chore(deps): update typescript-eslint monorepo to v8.70.1 by @renovate[bot] in #9080
chore(deps): lock file maintenance by @renovate[bot] in #9072
Build(deps): Bump pyjwt from 2.15.0 to 2.15.1 in /.config/python/dev by @dependabot[bot] in #9099
chore(deps): update dependency coursier/coursier to v2.1.26 by @renovate[bot] in #9031
Build(deps): Bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #8857
chore(deps): update docker/setup-buildx-action digest to f87e599 by @renovate[bot] in #9025
Build(deps): Bump pymdown-extensions from 12.0.1 to 12.1 in /.config/python/dev by @dependabot[bot] in #9098
Build(deps): Bump uvicorn from 0.53.0 to 0.54.0 in /server by @dependabot[bot] in #9091
Build(deps): Bump zensical from 0.0.63 to 0.0.67 in /.config/python/dev by @dependabot[bot] in #9097
chore(deps): update dependency pylint to v4.1.2 by @renovate[bot] in #9151
chore(deps): update dependency pymdown-extensions to v12.1 by @renovate[bot] in #9152
chore(deps): update dependency python-gitlab to v8.6.0 by @renovate[bot] in #9153
chore(deps): update dependency mongodb/kingfisher to v2.9.1 by @renovate[bot] in #9149
chore(deps): update dependency mgechev/revive to v1.17.0 by @renovate[bot] in #9148
chore(deps): update dependency markdown to v3.11 by @renovate[bot] in #9147
chore(deps): update alpine/terragrunt docker tag to v1.16.4 by @renovate[bot] in #9109
chore(deps): update dependency @biomejs/biome to v2.5.15 - autoclosed by @renovate[bot] in #9110
chore(deps): update dependency cfn-lint to v1.57.1 by @renovate[bot] in #9112
chore(deps): update dependency checkov to v3.3.22 by @renovate[bot] in #9113
chore(deps): update dependency cspell to v10.3.6 by @renovate[bot] in #9114
chore(deps): update dependency djlint to v1.46.4 by @renovate[bot] in #9115
chore(deps): update dependency eslint-plugin-vue to v10.11.1 by @renovate[bot] in #9116
chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.27 by @renovate[bot] in #9117
chore(deps): update dependency isort to v9.0.2 by @renovate[bot] in #9118
chore(deps): update dependency jsonpickle to v4.1.3 by @renovate[bot] in #9120
chore(deps): update dependency phpstan/phpstan to v2.2.16 by @renovate[bot] in #9121
chore(deps): update dependency prettier to v3.9.9 by @renovate[bot] in #9122
chore(deps): update dependency python to v3.14.8 by @renovate[bot] in #9124
chore(deps): update dependency zensical to v0.0.67 by @renovate[bot] in #9127
chore(deps): update redis docker tag to v8.10.2 by @renovate[bot] in #9128
chore(deps): update salesforce packages (patch) by @renovate[bot] in #9129
chore(deps): update secretlint monorepo to v13.0.7 by @renovate[bot] in #9130
chore(deps): update trufflesecurity/trufflehog docker tag to v3.97.9 by @renovate[bot] in #9131
chore(deps): update dependency @eslint-react/eslint-plugin to v5.23.5 by @renovate[bot] in #9132
chore(deps): update dependency @stoplight/spectral-cli to v6.17.0 by @renovate[bot] in #9134
chore(deps): update dependency anchore/grype to v0.120.0 by @renovate[bot] in #9135
chore(deps): update dependency anchore/syft to v1.54.0 by @renovate[bot] in #9136
chore(deps): update dependency ansible-lint to v26.9.0 by @renovate[bot] in #9137
chore(deps): update dependency aquasecurity/trivy to v0.75.0 by @renovate[bot] in #9138
chore(deps): update dependency betterleaks/betterleaks to v1.9.0 by @renovate[bot] in #9139
chore(deps): update dependency eslint to v10.12.0 by @renovate[bot] in #9140
chore(deps): update dependency eslint-plugin-n to v18.4.1 by @renovate[bot] in #9141
chore(deps): update dependency fastapi to v0.142.2 by @renovate[bot] in #9142
chore(deps): update dependency flake8 to v7.4.1 by @renovate[bot] in #9143
chore(deps): update dependency golangci/golangci-lint to v2.14.0 by @renovate[bot] in #9145
chore(deps): update dependency jscpd to v5.4.0 by @renovate[bot] in #9146
chore(deps): update dependency robotframework-robocop to v9.1.0 by @renovate[bot] in #9154
chore(deps): update dependency rubocop-github to v0.29.0 by @renovate[bot] in #9155
chore(deps): update dependency rust-lang/rust to v1.99.0 by @renovate[bot] in #9156
chore(deps): update dependency sqlfluff to v4.4.0 by @renovate[bot] in #9157
chore(deps): update dependency stylelint to v17.16.0 by @renovate[bot] in #9158
chore(deps): update dependency vimeo/psalm to v6.19.1 by @renovate[bot] in #9160
chore(deps): update dependency virtualenv to v21.14.5 by @renovate[bot] in #9161
chore(deps): update dependency yq to v4.4.0 by @renovate[bot] in #9162
chore(deps): update jdkato/vale docker tag to v3.24.0 by @renovate[bot] in #9163
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-google to v0.40.0 by @renovate[bot] in #9164
Build(deps): Bump langsmith from 0.13.0 to 0.14.4 in /.config/python/dev by @dependabot[bot] in #9171
chore(deps): update dependency @salesforce/cli to v2.153.5 by @renovate[bot] in #9133
chore(deps): update yoheimuta/protolint docker tag to v0.58.0 by @renovate[bot] in #9166
chore(deps): update dependency gitpython to v3.2.0 by @renovate[bot] in #9144
chore(deps): update typescript-eslint monorepo to v8.71.0 by @renovate[bot] in #9165
Ignore pip, uv, bundler, gomod and cargo test fixtures in Dependabot by @nvuillam in #9168
Fix Renovate version extraction for rakudo-pkg by @nvuillam in #9178
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9167
chore(deps): update dependency nxadm/rakudo-pkg to v2026.08 by @renovate[bot] in #9150
Fix invalid $id values in configuration and descriptor JSON Schemas by @nvuillam in #9180
chore(deps): update dependency phpstan/phpstan to v2.2.17 by @renovate[bot] in #9181
chore(deps): update dependency ruff to v0.16.10 by @renovate[bot] in #9125
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9179
chore(deps): update dependency @eslint-react/eslint-plugin to v5.24.4 by @renovate[bot] in #9182
chore(deps): update dependency zensical to v0.0.68 by @renovate[bot] in #9183
chore(deps): update dependency aiohttp to v3.14.4 by @renovate[bot] in #9184
Stop overriding linter config paths in project lint mode by @nvuillam in #9199
chore(deps): update trufflesecurity/trufflehog docker tag to v3.99.2 by @renovate[bot] in #9197
chore(deps): update dependency mongodb/kingfisher to v2.11.1 by @renovate[bot] in #9196
chore(deps): update dependency black to v26.10.1 by @renovate[bot] in #9195
chore(deps): update dependency azure/bicep to v0.48.1 by @renovate[bot] in #9194
chore(deps): update dependency @salesforce/plugin-packaging to v3.0.13 by @renovate[bot] in #9190
Keep user-configured exclusions when forwarding excluded directories by @nvuillam in #9216
chore(deps): update dependency prettier to v3.9.10 by @renovate[bot] in #9203
chore(deps): update dependency cfn-lint to v1.57.2 by @renovate[bot] in #9202
chore(deps): update typescript-eslint monorepo to v8.71.1 by @renovate[bot] in #9193
Build(deps): Bump orjson from 3.12.0 to 3.13.0 in /.config/python/dev by @dependabot[bot] in #9214
Build(deps): Bump fastapi from 0.142.2 to 0.143.0 in /.config/python/dev by @dependabot[bot] in #9211
Build(deps): Bump pymdown-extensions from 12.1 to 12.2 in /.config/python/dev by @dependabot[bot] in #9210
Build(deps): Bump langchain-core from 1.6.6 to 1.6.9 in /.config/python/dev by @dependabot[bot] in #9208
Build(deps): Bump fastapi from 0.142.2 to 0.143.0 in /server by @dependabot[bot] in #9207
Build(deps): Bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #9206
Build(deps): Bump zensical from 0.0.68 to 0.0.69 in /.config/python/dev by @dependabot[bot] in #9205
Build(deps): Bump langsmith from 0.14.4 to 0.14.7 in /.config/python/dev by @dependabot[bot] in #9212
Ignore CVE-2026-56851 (golang.org/x/text precis) in trivy scans by @nvuillam in #9220
Fix FAIL_IF_UPDATED_SOURCES reliability and private repo diff crash by @nvuillam in #9219
fix: avoid removed-linter notices for unrelated environment variables by @ThomasSanson in #9185
Align Renovate and Dependabot waiting rules by @nvuillam in #9217
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9201
Run the requested lint mode in tests of linters with a hyphen in their name by @nvuillam in #9221
Build(deps): Bump yq from 4.4.0 to 4.4.3 in /.config/python/dev by @dependabot[bot] in #9223
chore(deps): update dependency anchore/syft to v1.54.1 by @renovate[bot] in #9226
chore(deps): update dependency anchore/grype to v0.120.1 by @renovate[bot] in #9225
Build(deps): Bump langchain-google-genai from 4.4.0 to 4.4.1 in /.config/python/dev by @dependabot[bot] in #9224
Build(deps): Bump yeoman-environment from 7.2.0 to 8.2.0 in /mega-linter-runner by @dependabot[bot] in #9209
Build(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 in /flavors/custom-builder by @dependabot[bot] in #9222
chore(deps): update dependency @eslint-react/eslint-plugin to v5.24.10 by @renovate[bot] in #9218
chore(deps): update dependency mgechev/revive to v1.17.1 by @renovate[bot] in #9230
Build(deps): Bump langchain-openai from 1.6.7 to 1.7.0 in /.config/python/dev by @dependabot[bot] in #9213
Add Blinter (BATCH_BLINTER) to the external plugin catalog by @tboy1337 in #9227
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9233
Add glsec (GITLAB_GLSEC) to External Plugins Catalog by @predictor2718 in #9187
chore(deps): update dependency rumdl to v0.2.79 by @renovate[bot] in #9232
chore(deps): update dependency aiohttp to v3.14.5 by @renovate[bot] in #9231
chore(deps): update dependency jscpd to v5.4.1 by @renovate[bot] in #9229
chore(deps): update dependency eslint-plugin-jest to v29.16.11 by @renovate[bot] in #9228
chore(deps): update dependency vimeo/psalm to v6.19.2 by @renovate[bot] in #9238
chore(deps): update dependency pylint to v4.1.3 by @renovate[bot] in #9237
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9236
chore(deps): update dependency ip-address to v10.7.4 by @renovate[bot] in #9235
chore(deps): update alpine/terragrunt docker tag to v1.16.5 by @renovate[bot] in #9234
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9241
chore(deps): update dependency virtualenv to v21.14.7 by @renovate[bot] in #9239
chore(deps): update dependency yq to v4.4.5 by @renovate[bot] in #9240
chore(deps): update dependency zensical to v0.0.69 by @renovate[bot] in #9242
chore(deps): update dependency @eslint-react/eslint-plugin to v5.26.1 by @renovate[bot] in #9243
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9247
chore(deps): update dependency ansible-lint to v26.10.0 by @renovate[bot] in #9244
chore(deps): update dependency @eslint-react/eslint-plugin to v5.26.5 by @renovate[bot] in #9246
fix(ci): clear security scan, zizmor and kubescape failures blocking main by @nvuillam in #9282
Build(deps): Bump jsonpickle from 4.1.3 to 4.1.4 in /.config/python/dev by @dependabot[bot] in #9272
Build(deps): Bump giturlparse from 0.15.0 to 0.16.0 in /.config/python/dev by @dependabot[bot] in #9264
chore(deps): update dependency bartlett/sarif-php-converters to v1.8.1 by @renovate[bot] in #9245
chore(deps): update dependency @eslint-react/eslint-plugin to v5.28.2 by @renovate[bot] in #9298
chore(deps): update dependency @salesforce/cli to v2.155.7 by @renovate[bot] in #9299
chore(deps): update dependency aquasecurity/trivy to v0.76.0 by @renovate[bot] in #9300
chore(deps): update dependency cspell to v10.4.0 by @renovate[bot] in #9301
chore(deps): update dependency eslint to v10.13.0 by @renovate[bot] in #9302
chore(deps): update dependency eslint-plugin-jest to v29.17.0 by @renovate[bot] in #9303
chore(deps): update dependency eslint-plugin-n to v18.5.0 by @renovate[bot] in #9304
chore(deps): update dependency golangci/golangci-lint to v2.15.0 by @renovate[bot] in #9307
chore(deps): update dependency johnnymorganz/stylua to v2.6.0 by @renovate[bot] in #9308
chore(deps): update dependency mongodb/kingfisher to v2.13.0 by @renovate[bot] in #9309
chore(deps): update dependency phpstan/phpstan to v2.3.1 by @renovate[bot] in #9311
chore(deps): update dependency pymdown-extensions to v12.3 by @renovate[bot] in #9312
chore(deps): update dependency rubocop to v1.92.0 by @renovate[bot] in #9313
chore(deps): update dependency ruff to v0.17.1 by @renovate[bot] in #9314
chore(deps): update dependency rumdl to v0.3.0 by @renovate[bot] in #9315
fix(deps): update dependency langchain-openai to ~=1.7.2 by @renovate[bot] in #9321
chore(deps): update dependency semgrep to v1.181.0 by @renovate[bot] in #9316
Build(deps): Bump the uv group across 4 directories with 1 update by @dependabot[bot] in #9284
Build(deps): Bump the pip group across 4 directories with 1 update by @dependabot[bot] in #9283
Build(deps): Bump fastapi from 0.143.0 to 0.148.0 in /.config/python/dev by @dependabot[bot] in #9269
chore(deps): update dependency langsmith to v0.14.11 by @renovate[bot] in #9248
chore(deps): update typescript-eslint monorepo to v8.71.2 by @renovate[bot] in #9249
chore(deps): update dependency @salesforce/plugin-packaging to v3.0.14 by @renovate[bot] in #9252
chore(deps): update dependency @coffeelint/cli to v5.2.12 by @renovate[bot] in #9286
chore(deps): update dependency ansible-lint to v26.10.1 by @renovate[bot] in #9287
chore(deps): update dependency eslint-plugin-prettier to v5.5.7 by @renovate[bot] in #9289
chore(deps): update dependency fastapi to v0.143.5 by @renovate[bot] in #9290
chore(deps): update dependency markdown to v3.11.2 by @renovate[bot] in #9293
chore(deps): update dependency overtrue/phplint to v9.7.3 by @renovate[bot] in #9294
chore(deps): update dependency rust-lang/rust to v1.99.1 by @renovate[bot] in #9295
chore(deps): update dependency zensical to v0.0.71 by @renovate[bot] in #9296
chore(deps): update dependency nxadm/rakudo-pkg to v2026.09 by @renovate[bot] in #9310
chore(deps): update dependency sfdx-hardis to v8.19.0 by @renovate[bot] in #9317
chore(deps): update dependency snakefmt to v2.1.0 by @renovate[bot] in #9318
chore(deps): update dependency vimeo/psalm to v6.20.0 by @renovate[bot] in #9319
chore(deps): update dependency yeoman-generator to v10.2.0 by @renovate[bot] in #9320
fix(custom-flavors): fall back across trivy-db mirrors at build time by @nvuillam in #9324
chore(deps): freeze only bad/ and .wireit/ test fixtures, keep TypeScript on v6 by @nvuillam in #9322
Build(deps): Bump markdown from 3.11.1 to 3.11.2 in /.config/python/dev by @dependabot[bot] in #9274
chore(deps): update dependency virtualenv to v21 [security] by @renovate[bot] in #9333
chore(deps): update dependency pip to v26 [security] by @renovate[bot] in #9332
chore(deps): update dependency black to v26 [security] by @renovate[bot] in #9331
Build(deps): Bump markdown from 3.11.1 to 3.11.2 in /.config/python/dev by @dependabot[bot] in #9329
Build(deps): Bump fastapi from 0.148.0 to 0.150.0 in /.config/python/dev by @dependabot[bot] in #9327
chore(deps): update dependency fastapi to v0.150.0 by @renovate[bot] in #9305
chore(deps): update dependency loeffel-io/ls-lint to v2.3.2 by @renovate[bot] in #9292
Build(deps): Bump js-yaml from 5.4.3 to 5.5.0 in /mega-linter-runner by @dependabot[bot] in #9265
chore(deps): update dependency checkov to v3.3.29 by @renovate[bot] in #9253
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9250
chore(deps): update dependency tar to v7.5.21 [security] by @renovate[bot] in #9330
fix: count a linter stopped by a signal as failed (#9257) by @Patrick-Kappen in #9258
fix(lychee): apply .lycheeignore found outside the workspace root by @nvuillam in #9323
fix: send GITHUB_TOKEN only to the real raw.githubusercontent.com host on EXTENDS by @nvuillam in #9339
chore(deps): update dependency virtualenv to v21.14.13 [security] by @renovate[bot] in #9335
fix: honor SARIF_REPORTER_NORMALIZE_LINTERS_OUTPUT in combined SARIF report by @Patrick-Kappen in #9338
chore(deps): update dependency mongodb/kingfisher to v2.14.0 by @renovate[bot] in #9334
chore(deps): update dependency @eslint-react/eslint-plugin to v5.28.3 by @renovate[bot] in #9340
Fix Go linters failing as non-root user (MEGALINTER_UID) because of root-owned GOPATH cache by @nvuillam in #9326
chore(deps): update dependency semgrep to v1.182.0 by @renovate[bot] in #9343
chore(deps): update trufflesecurity/trufflehog docker tag to v3.99.3 by @renovate[bot] in #9345
chore(deps): update dependency vimeo/psalm to v6.20.1 by @renovate[bot] in #9342
fix(security): clear image-wide trivy findings blocking Renovate PRs by @nvuillam in #9374
chore(deps): update dependency langsmith to v0.14.12 by @renovate[bot] in #9377
chore(deps): update dependency rubocop to v1.92.1 by @renovate[bot] in #9378
chore(deps): update dependency snakemake to v9.27.1 by @renovate[bot] in #9380
chore(deps): update dependency semgrep to v1.182.1 by @renovate[bot] in #9379
chore(deps): update dependency @biomejs/biome to v2.6.2 by @renovate[bot] in #9381
chore(deps): update dependency checkov to v3.3.30 by @renovate[bot] in #9376
fix(security): ignore marked ReDoS pulled by @salesforce/cli plugin-info by @nvuillam in #9384
chore(deps): update dependency @salesforce/cli to v2.156.7 by @renovate[bot] in #9382
fix(deps): update dependency fs-extra to v11 by @renovate[bot] in #9364
chore(deps): update dependency stylelint to v17 by @renovate[bot] in #9360
chore(deps): update typescript-eslint monorepo to v8.72.0 by @renovate[bot] in #9357
chore(deps): update dependency yeoman-environment to v8.5.0 by @renovate[bot] in #9355
chore(deps): update dependency cfn-lint to v1.58.0 by @renovate[bot] in #9351
chore(deps): update dependency anchore/grype to v0.121.0 by @renovate[bot] in #9349
chore(deps): update dependency @eslint-react/eslint-plugin to v5.28.5 by @renovate[bot] in #9346
Build(deps): Bump langchain-core from 1.6.9 to 1.6.12 in /.config/python/dev by @dependabot[bot] in #9270
chore(deps): update dependency anchore/syft to v1.55.0 by @renovate[bot] in #9350
chore(deps): update dependency fastapi to v0.159.1 by @renovate[bot] in #9353
chore(deps): update dependency mocha to v12 by @renovate[bot] in #9359
chore(deps): update dependency stylelint-config-sass-guidelines to v13 by @renovate[bot] in #9361
chore(deps): update dependency stylelint-config-standard to v39 by @renovate[bot] in #9362
fix(deps): update dependency which to v4 by @renovate[bot] in #9365
Build(deps): Bump langchain-anthropic from 1.7.5 to 1.7.6 in /.config/python/dev by @dependabot[bot] in #9273
chore(deps): update dependency djlint to v1.46.6 by @renovate[bot] in #9288
chore(deps): update test fixtures (patch) by @renovate[bot] in #9348
chore(deps): update dependency stylelint-config-standard to v40 by @renovate[bot] in #9363
fix(deps): update dependency yeoman-generator to v9 by @renovate[bot] in #9366
fix(deps): update dependency yosay to v3 by @renovate[bot] in #9368
fix(deps): update dependency yeoman-environment to v8 by @renovate[bot] in #9372
fix(deps): update test fixtures to v7 by @renovate[bot] in #9371
fix(deps): update dependency yeoman-generator to v10 by @renovate[bot] in #9367
fix(deps): update test fixtures (minor) by @renovate[bot] in #9358
fix(deps): update test fixtures to v6 by @renovate[bot] in #9370
chore(deps): update langchain (patch) by @renovate[bot] in #9297
chore(deps): update dependency clj-kondo/clj-kondo to v2026.10.20 by @renovate[bot] in #9352
chore(deps): update dependency @eslint-react/eslint-plugin to v5.28.6 by @renovate[bot] in #9387
chore(renovate): freeze the repository_syft good/good fixture by @nvuillam in #9388
chore(deps): update dependency overtrue/phplint to v9.8.0 by @renovate[bot] in #9354
chore(deps): update dependency ruff to v0.17.2 by @renovate[bot] in #9390
chore(deps): update dependency powershell/powershell to v7.6.8 by @renovate[bot] in #9389
chore(jscpd): ignore Dockerfiles and makefiles in the self-lint by @nvuillam in #9391
chore(python): use one Python version in every MegaLinter context by @nvuillam in #9392
chore(deps): update dependency aquasecurity/trivy to v0.76.1 by @renovate[bot] in #9375
chore(deps): update dependency jscpd to v5.4.2 by @renovate[bot] in #9341
chore(deps): update dependency skaji/cpm to v1.1.6 by @renovate[bot] in #9393
fix(sarif): do not count results marked as suppressed by @jmkle in #9383
chore(deps): update dependency zensical to v0.0.72 by @renovate[bot] in #9399
chore(deps): update dependency @eslint-react/eslint-plugin to v5.28.8 by @renovate[bot] in #9398
chore(deps): update dependency fastapi to v0.161.1 by @renovate[bot] in #9396
chore(deps): update dependency djlint to v1.47.0 by @renovate[bot] in #9395
chore(deps): update trufflesecurity/trufflehog docker tag to v3.99.4 by @renovate[bot] in #9394
chore(deps): update dependency fastapi to v0.162.0 by @renovate[bot] in #9401
chore(deps): update dependency robotframework-robocop to v9.1.2 by @renovate[bot] in #9400
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9336
fix(security): pass file paths to R and PowerShell linters as data by @nvuillam in #9404
fix(deps): update dependency glob to v14 [security] by @renovate[bot] in #9408
chore(deps): update trufflesecurity/trufflehog docker tag to v3.99.7 by @renovate[bot] in #9409
chore(deps): update dependency kubescape/kubescape to v4.0.16 by @renovate[bot] in #9410
chore(deps): update dependency langchain_core to v1.6.13 by @renovate[bot] in #9406
chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.50.0 by @renovate[bot] in #9402
chore(deps): upgrade npm-groovy-lint to v19.0.0 by @nvuillam in #9411
chore(deps): update dependency phpstan/phpstan to v2.3.2 by @renovate[bot] in #9412
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9405
Build(deps): Bump actions/setup-python from 7.0.0 to 7.1.0 by @dependabot[bot] in #9420
Build(deps): Bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 by @dependabot[bot] in #9419
Build(deps): Bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #9418
chore(deps): update dependency @biomejs/biome to v2.6.3 by @renovate[bot] in #9413
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9414
[automation] Auto-update linters version, help and documentation by @github-actions[bot] in #9421

New Contributors

@roli-lpci made their first contribution in #8899
@snaquekiller made their first contribution in #8956
@robinlahtinen made their first contribution in #9029
@tboy1337 made their first contribution in #9227
@predictor2718 made their first contribution in #9187
@Patrick-Kappen made their first contribution in #9258
@jmkle made their first contribution in #9383

⭐ If MegaLinter is useful to you, please give it a star on GitHub — it helps the project a lot!

Full Changelog: v10.1.0...v10.2.0

Navigation Menu

Repository navigation

v10.2.0

Choose a tag to compare

Sorry, something went wrong.

Sorry, something went wrong.

Uh oh!

No results found

What's Changed

Pull Requests

New Contributors

Contributors

Uh oh!