v9.6.0

What's Changed

• Breaking changes

  • Linters can no longer be run via a sibling Docker image at runtime. The cli_docker_image, cli_docker_image_version and cli_docker_args descriptor properties (and the matching <LINTER>_DOCKER_IMAGE_VERSION variable) have been removed, and MegaLinter no longer mounts /var/run/docker.sock (in mega-linter-runner, the GitHub Action action.yml files, and the Docker daemon previously bundled in flavor images). This closes the host-privilege escalation surface that the mounted Docker socket exposed. The only linter that used this mechanism was SWIFT_SWIFTLINT, now installed natively (see below). (#8216)
  • SWIFT_SWIFTLINT is now installed from the static swiftlint-static binary instead of running the ghcr.io/realm/swiftlint container. It runs natively on the Alpine image with no Docker socket required. SourceKit-dependent rules are disabled in this build and reported to the console when encountered; pure-syntax style rules are unaffected. (#8216)
  • @eslint/eslintrc shim removed from JavaScript/TypeScript/JSX/TSX Docker images (was only needed for legacy FlatCompat); MegaLinter's bundled test fixtures use native flat config. (#7869)
  • ESLint linters now force migration off .eslintrc.*: JAVASCRIPT_ES, TYPESCRIPT_ES, JSX_ESLINT, TSX_ESLINT activate when they find any eslint.config.* or any deprecated .eslintrc.* / package.json#eslintConfig. In the legacy case the linter does not call ESLint at all — it emits a single hard failure with a migration message so the build stays red until the config is migrated to flat config. See the ESLint flat-config migration guide. To opt out, set DISABLE_LINTERS or DISABLE to exclude the affected linter/descriptor. (#7869)
  • JSON_ESLINT_PLUGIN_JSONC removed: upstream bug ota-meshi/eslint-plugin-jsonc#328 blocks ESLint v10 compatibility and will not be fixed. Use JSON_JSONLINT, JSON_PRETTIER, or JSON_V8R for JSON validation instead. (#7869)

• Core

  • New linter descriptor property common_linter_errors: declare known non-lint failure patterns (config issue, remote service down, missing credentials…) and the guidance message shown to users, directly in YAML — no custom Python class needed. (#7907)
  • Skipped-linters summary now explains why a linter was skipped by an activation rule, including the variable to set to activate it (e.g. MARKDOWN_RUMDL: MARKDOWN_DEFAULT_STYLE=markdownlint (set MARKDOWN_DEFAULT_STYLE=rumdl to activate)), fixing #8017.

• New linters

  • Add betterleaks linter for repository secrets scanning — successor to gitleaks with higher recall (98.6% vs 70.4%), lower false-positive rates, and 4–5× faster scanning via BPE-based detection and CEL filter expressions (#8186)

• Disabled linters

  • SALESFORCE_SFDX_SCANNER_APEX, SALESFORCE_SFDX_SCANNER_AURA and SALESFORCE_SFDX_SCANNER_LWC — disabled because sfdx-scanner 4.12.0 crashes on Node.js 22+ (TypeError: Cannot read properties of undefined (reading 'prototype'), caused by the removal of SlowBuffer.prototype), which is shipped with Alpine 3.24. These linters were already deprecated; use the SALESFORCE_CODE_ANALYZER_APEX / SALESFORCE_CODE_ANALYZER_AURA / SALESFORCE_CODE_ANALYZER_LWC variants instead (#8080).

• Deprecated linters

  • REPOSITORY_GITLEAKS — deprecated in favour of REPOSITORY_BETTERLEAKS (same author, fully compatible config, significantly better detection). Will be removed in the next major release. Disable it by adding REPOSITORY_GITLEAKS to DISABLE_LINTERS in your .mega-linter.yml. (#8186)

• Removed linters

  • JSON_ESLINT_PLUGIN_JSONC — permanently broken by upstream bug (see Breaking changes) (#7869)

• Linters enhancements

  • REPOSITORY_CHECKOV: in pull-request mode, scan only the files modified in the PR instead of the whole repository (#7119)

• Fixes

  • REPOSITORY_BETTERLEAKS: default scan now runs in filesystem (dir) mode instead of auto-switching to git-history (git) mode when a git repository is detected. betterleaks does not read the global git safe.directory config, so git mode failed with fatal: detected dubious ownership in repository in CI environments (e.g. GitHub Actions /github/workspace). Git-history mode is still used for the opt-in REPOSITORY_BETTERLEAKS_PR_COMMITS_SCAN feature. (#8186)
  • REPOSITORY_BETTERLEAKS: added --verbose so detected findings (file, line and rule) are reported instead of only the leaks found: N summary, matching gitleaks behavior. Secret values stay redacted via --redact. (#8186)
  • REPOSITORY_OSV_SCANNER: exit code 128 ("No package sources found") is now treated as a clean pass instead of a failure — osv-scanner returns this code when the repo contains no lockfiles/manifests/SBOMs, which is not a vulnerability finding (#7917).
  • Fix intermittent ansible-lint load-failure[not-found] error on github_conf/branch_protection_rules.json caused by a race condition with checkov running in parallel. Checkov's transient GitHub-conf directory is now written to a hidden path (.megalinter_github_conf) that project-mode linters skip, eliminating the conflict (#8092).
  • Complete the Alpine 3.24 upgrade across the whole image and fix how alpine version is detected. Docker images now build on the python:3.14-alpine3.24 base image (#8080).
  • Avoid DeprecationWarning / future breakage on Python 3.14 by no longer passing count and flags as positional arguments to re.sub (#8211).
  • Exclude REPORT_OUTPUT_FOLDER from linting when configured as an absolute path inside the workspace (e.g. /tmp/lint/megalinter-reports), fixing #7845.
  • Fix command injection in Roslynator linter (DOTNET_ROSLYNATOR) where a crafted .csproj filename could break out of dotnet restore arguments and execute arbitrary shell commands. The command is now invoked via argv list instead of a shell string. Reported by Francesco Sabiu. (#7857)
  • Fix IndexError when building the single-linter Docker image for a linter whose activation depends on a file (e.g. SPELL_VALE requires .vale.ini): python -m megalinter.run --linterversion now bypasses activation filtering since the per-linter image is built for that linter unconditionally.
  • Fix make bootstrap appearing to hang because exported Make color variables re-evaluated tput during recursive make invocations. (#8090)
  • Allow MegaLinter containers to run in an opt-in non-root mode matching the host UID:GID on POSIX systems, avoiding root-owned generated files on the host (#1975).
  • Restore missing examples in the Dart descriptor that were dropped from the generated documentation (#7913).

• Reporters

  • Update Bitbucket pipeline generator template to trigger builds on pull requests from any branch, by @yermulnik in #7421

• Doc

  • Add pnpm installation and usage documentation for JavaScript and TypeScript linters (#8177)
  • Update Docker pull counters in README badges and flavors-stats.json with latest ghcr.io stats
  • Bump peter-evans/create-pull-request to v8 in the documented workflow examples (#8089)

• mega-linter-runner

  • Add --user-map / --no-user-map to control whether the MegaLinter container runs in non-root mode. On POSIX systems --user-map uses the current host UID:GID; on other hosts it falls back to 1000:1000. (#8120)
  • Add --no-prompt flag to mega-linter-runner --upgrade for non-interactive upgrades (#8093)
  • Mark mega-linter-runner/index.js as executable in git (#8091)

• Dev

  • Add specialized Claude Code sub-agents (pr-monitor, security-analyst, version-bumper) and assign cost-effective models to mechanical tasks, to speed up and reduce the token cost of contributor workflows (#7906).
  • Add the /fix-issue Claude Code skill for end-to-end GitHub issue fixes (gather context, implement on a branch, open a PR, watch CI) (#7848).
  • Stop generating per-linter Dockerfiles for linters marked disabled: true in their descriptor. The matching images were already excluded from the build matrix (linters_matrix.json) and never published, so the on-disk linters/<linter>/Dockerfile was dead code. Deleted the 8 corresponding stale Dockerfile directories.
  • Make the build's config-schema write atomic with a retry (write to a temp file then os.replace), so a transient file lock from an editor's JSON language server or antivirus no longer crashes the build with OSError: [Errno 22] on Windows.
  • Move the .devcontainer setup from the Dockerfile to a JSON configuration file (#7865).
  • Update the Python version in the devcontainer image (#7853).

• CI

  • Build the real { linter, platform, runner } job list directly in get-linters-matrix for the DEV and BETA linter workflows, instead of a linter×runner cross-product filtered at runtime by job_enabled. Removes the Prepare step and the no-op jobs while preserving selection logic (#8133, #8134).
  • Track image-runtime shell scripts (setup-runtime-user, megalinter_exec) in the image-build path filters by renaming them to .sh, so changes to them correctly trigger image rebuilds; generated images now use root-independent command wrappers instead of shell aliases (#8213).
  • Suppress the new ref-version-mismatch audit introduced by zizmor 1.25.0 for the project's pinned uses: action references. The SHA pins are correct (the supply-chain property); only the inline # vX comments lag behind exact subversions, and renovate maintains the hashes.
  • Simplify the workflow trigger condition to prevent duplicate runs for pushes from forks.
  • Fix the deploy-dev workflow (#8154).
  • Remove unused QEMU setup from workflows (#8132).
  • Prevent FromAsCasing build warning in generated Dockerfiles (#8094).
  • Fix the documentation release workflow (#7837).

• Linter versions upgrades (58)

  • bash-exec from 5.3.3 to 5.3.9
  • betterleaks from 1.5.0 to 1.6.0
  • bicep_linter from 0.43.8 to 0.44.1
  • black from 26.3.1 to 26.5.1
  • cfn-lint from 3.14 to 1.52.0
  • checkov from 3.2.529 to 3.3.2
  • clang-format from 21.1.2 to 22.1.3
  • clippy from 0.1.95 to 0.1.96
  • code-analyzer-apex from 5.12.0 to 5.13.0
  • code-analyzer-aura from 5.12.0 to 5.13.0
  • code-analyzer-lwc from 5.12.0 to 5.13.0
  • cppcheck from 2.18.3 to 2.21.0
  • cspell from 10.0.0 to 10.0.1
  • dartanalyzer from 3.11.6 to 3.12.2
  • djlint from 1.36.4 to 1.39.4
  • dotnet-format from 10.0.108 to 10.0.301
  • editorconfig-checker from 3.6.1 to 3.7.0
  • eslint from 10.3.0 to 10.5.0
  • git_diff from 2.52.0 to 2.54.0
  • grype from 0.112.0 to 0.115.0
  • jscpd from 4.1.1 to 5.0.11
  • kingfisher from 1.99.0 to 1.104.0
  • kubeconform from 0.7.0 to 0.8.0
  • kubescape from 4.0.8 to 4.0.9
  • markdownlint from 0.48.0 to 0.49.0
  • npm-package-json-lint from 10.4.0 to 10.4.1
  • php-cs-fixer from 3.95.2 to 3.95.11
  • phplint from 9.7.1 to 9.7.2
  • phpstan from 2.1.54 to 2.2.2
  • pmd from 7.24.0 to 7.25.0
  • powershell from 7.6.1 to 7.6.3
  • powershell_formatter from 7.6.1 to 7.6.3
  • prettier from 3.8.3 to 3.8.4
  • pylint from 4.0.5 to 4.0.6
  • pyright from 1.1.409 to 1.1.410
  • robocop from 8.2.8 to 8.3.2
  • rubocop from 1.86.2 to 1.88.0
  • ruff from 0.15.13 to 0.15.20
  • ruff-format from 0.15.13 to 0.15.20
  • rumdl from 0.1.93 to 0.2.24
  • scalafix from 0.14.6 to 0.14.7
  • semgrep from 1.163.0 to 1.168.0
  • snakefmt from 1.1.0 to 2.0.3
  • snakemake from 9.21.0 to 9.23.1
  • sqlfluff from 4.2.1 to 4.2.2
  • stylelint from 17.11.0 to 17.13.0
  • stylua from 2.4.1 to 2.5.2
  • swiftlint from 0.63.2 to 0.65.0
  • syft from 1.44.0 to 1.46.0
  • tekton-lint from 1.1.0 to 1.2.0
  • terraform-fmt from 1.15.2 to 1.15.6
  • terragrunt from 1.0.4 to 1.0.8
  • tflint from 0.62.1 to 0.63.1
  • trivy from 0.70.0 to 0.71.2
  • trivy-sbom from 0.70.0 to 0.71.2
  • trufflehog from 3.95.3 to 3.95.6
  • v8r from 6.0.0 to 6.1.0
  • vale from 3.14.2 to 3.15.1

Pull Requests

• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7838
• Fix doc release workflow by @nvuillam in #7837
• chore(deps-dev): bump eslint from 10.3.0 to 10.4.0 in /mega-linter-runner by @dependabot[bot] in #7839
• chore(deps): update dependency black to v26.5.0 by @renovate[bot] in #7840
• chore(deps): update dependency johnnymorganz/stylua to v2.5.2 by @renovate[bot] in #7841
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7842
• chore(deps): update dependency rubocop-rails to v2.35.1 by @renovate[bot] in #7843
• fix: exclude REPORT_OUTPUT_FOLDER when set to an absolute workspace path (#7845) by @nvuillam in #7847
• chore(deps): update dependency click to v8.4.0 by @renovate[bot] in #7844
• chore(deps): update alpine/terragrunt docker tag to v1.15.3 by @renovate[bot] in #7849
• Claude /fix-issue skill by @nvuillam in #7848
• feat: collect and update Docker image download counts, update README badges by @nvuillam in #7850
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7846
• chore(deps): update dependency stylelint to v17.11.1 by @renovate[bot] in #7851
• chore(deps): update dependency jscpd to v4.2.0 by @renovate[bot] in #7852
• Update python version in devcontainer image by @bdovaz in #7853
• chore(deps): update dependency python-multipart to v0.0.29 by @renovate[bot] in #7854
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7855
• fix: prevent command injection in Roslynator linter by using argv list for dotnet restore by @nvuillam in #7857
• chore(deps): update dependency black to v26.5.1 by @renovate[bot] in #7858
• chore(deps): update dependency jscpd to v4.2.1 by @renovate[bot] in #7859
• chore(deps): update dependency phpstan/phpstan to v2.1.55 by @renovate[bot] in #7861
• chore(deps): update dependency jscpd to v4.2.2 by @renovate[bot] in #7860
• fix(deps): update dependency which to v7 by @renovate[bot] in #7762
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7856
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.7.9 by @renovate[bot] in #7862
• chore(deps): update dependency rubocop-rails to v2.35.2 by @renovate[bot] in #7863
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7868
• chore(deps): update dependency cfn-lint to v1.51.1 by @renovate[bot] in #7874
• chore(deps): update dependency rumdl to v0.1.96 by @renovate[bot] in #7864
• chore(deps): update dependency mongodb/kingfisher to v1.100.0 by @renovate[bot] in #7885
• chore(deps): update dependency snakefmt to v2 by @renovate[bot] in #7892
• chore(deps): update node.js to v24.16.0 by @renovate[bot] in #7891
• chore(deps): update dependency v8r to v6.1.0 by @renovate[bot] in #7890
• chore(deps): update dependency sfdx-hardis to v7.14.1 by @renovate[bot] in #7889
• chore(deps): update dependency selene to 0.31.0 by @renovate[bot] in #7888
• chore(deps): update dependency rq to v2.9.0 by @renovate[bot] in #7887
• chore(deps): update dependency pyjwt to v2.13.0 by @renovate[bot] in #7886
• chore(deps): update typescript-eslint monorepo to v8.59.4 by @renovate[bot] in #7881
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.2 by @renovate[bot] in #7882
• chore(deps): update langchain (patch) by @renovate[bot] in #7880
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.16 by @renovate[bot] in #7879
• chore(deps): update dependency ruff to v0.15.14 by @renovate[bot] in #7878
• chore(deps): update dependency powershell/powershell to v7.6.2 by @renovate[bot] in #7877
• chore(deps): update dependency jscpd to v4.2.3 by @renovate[bot] in #7876
• chore(deps): update dependency click to v8.4.1 by @renovate[bot] in #7875
• chore(deps): update docker/build-push-action digest to f9f3042 by @renovate[bot] in #7873
• chore(deps): update actions/stale digest to eb5cf3a by @renovate[bot] in #7872
• chore(deps): update dependency dart to v3.12.0 by @renovate[bot] in #7867
• Scan only the files modified in a PR with checkov by @bdovaz in #7119
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7893
• chore(deps): update dependency eslint to v10.4.0 by @renovate[bot] in #7884
• chore(deps): update docker/metadata-action digest to 80c7e94 by @renovate[bot] in #7895
• chore(deps): update docker/login-action digest to 650006c by @renovate[bot] in #7894
• chore(deps): update dependency idna to v3.16 by @renovate[bot] in #7899
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.3 by @renovate[bot] in #7898
• chore(deps): update salesforce packages (minor) by @renovate[bot] in #7883
• chore(deps): update dependency mongodb/kingfisher to v1.101.0 by @renovate[bot] in #7900
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7897
• chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #7901
• feat: introduce sub-agents and optimize model assignments by @nvuillam in #7906
• feat: add common_linter_errors property for known non-lint failures and guidance by @nvuillam in #7907
• chore(deps): update dependency pytest-rerunfailures to v16.3 by @renovate[bot] in #7910
• fix(descriptors): restore missing examples in dart descriptor by @nvuillam in #7913
• chore(deps): lock file maintenance by @renovate[bot] in #7914
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7905
• chore(deps): update dependency fastapi to v0.136.3 by @renovate[bot] in #7909
• chore(deps): update dependency semver to v7.8.1 by @renovate[bot] in #7916
• chore(deps): update dependency langchain_community to v0.4.2 by @renovate[bot] in #7915
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.4 by @renovate[bot] in #7918
• chore(deps): update dependency skaji/cpm to v1.1.1 by @renovate[bot] in #7920
• chore(deps): update dependency @salesforce/plugin-packaging to v2.28.2 by @renovate[bot] in #7919
• chore(deps): update dependency stylelint to v17.12.0 by @renovate[bot] in #7921
• chore(deps): update dependency rumdl to v0.2.0 by @renovate[bot] in #7911
• chore(deps): update dependency uvicorn to v0.48.0 by @renovate[bot] in #7922
• chore(deps): lock file maintenance by @renovate[bot] in #7923
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7924
• chore(deps): update alpine/terragrunt docker tag to v1.15.4 by @renovate[bot] in #7908
• chore(deps): bump yeoman-environment from 6.0.0 to 6.0.1 in /.automation/test/repository_grype/bad in the npm_and_yarn group across 1 directory by @dependabot[bot] in #7930
• chore(deps): update dependency rumdl to v0.2.2 and fix security vulnerabilities by @renovate[bot] in #7934
• Chore/eslint10 cleanup by @opravil-jan in #7869
• chore(deps): lock file maintenance by @renovate[bot] in #7935
• chore(deps): update docker/setup-qemu-action digest to 0611638 by @renovate[bot] in #7939
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7931
• chore(deps): update dependency rubocop-rails to v2.35.3 by @renovate[bot] in #7937
• chore(deps): update dependency phpstan/phpstan to v2.1.56 by @renovate[bot] in #7928
• chore(deps): update ghcr.io/realm/swiftlint docker tag to v0.63.3 by @renovate[bot] in #7943
• chore(deps): update dependency @salesforce/plugin-packaging to v2.28.3 by @renovate[bot] in #7933
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.5 by @renovate[bot] in #7940
• chore(deps): update dependency cfn-lint to v1.51.2 by @renovate[bot] in #7941
• chore(deps): update mstruebing/editorconfig-checker docker tag to v3.7.0 by @renovate[bot] in #7926
• chore(deps): update salesforce packages (minor) by @renovate[bot] in #7944
• chore(deps): update dependency dart to v3.12.1 by @renovate[bot] in #7927
• chore(deps): update dependency @ibm/tekton-lint to v1.2.0 by @renovate[bot] in #7925
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7946
• chore(deps): update redis docker tag to v8.8.0 by @renovate[bot] in #7938
• chore(deps): update dependency snakefmt to v2.0.1 by @renovate[bot] in #7942
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7947
• chore(deps): update dependency semgrep to v1.164.0 by @renovate[bot] in #7945
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7948
• chore(deps): update dependency langsmith to v0.8.6 by @renovate[bot] in #7950
• chore(deps): update dependency jsonpickle to v4.1.2 by @renovate[bot] in #7949
• Move .devcontainer setup from Dockerfile to json file by @bdovaz in #7865
• chore(deps): update dependency ruff to v0.15.15 by @renovate[bot] in #7952
• chore(deps): update dependency rumdl to v0.2.3 by @renovate[bot] in #7953
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7954
• chore(deps): update dependency jscpd to v4.2.4 by @renovate[bot] in #7951
• chore(deps): update dependency phpstan/phpstan to v2.2.1 by @renovate[bot] in #7956
• chore(deps): update dependency kubescape/kubescape to v4.0.9 by @renovate[bot] in #7957
• chore(deps): update dependency idna to v3.17 by @renovate[bot] in #7955
• chore(deps): update alpine/terragrunt docker tag to v1.15.5 by @renovate[bot] in #7969
• chore(deps): update langchain (patch) by @renovate[bot] in #7972
• chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.3 by @renovate[bot] in #7971
• chore(deps): update dependency eslint-plugin-prettier to v5.5.6 by @renovate[bot] in #7970
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.6 by @renovate[bot] in #7968
• chore(deps): update dependency langsmith to v0.8.7 by @renovate[bot] in #7974
• chore(deps): update dependency pyright to v1.1.410 by @renovate[bot] in #7976
• chore(deps): update dependency python-multipart to v0.0.30 by @renovate[bot] in #7977
• chore(deps): update dependency rust-lang/rust to v1.96.0 by @renovate[bot] in #7986
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.17 by @renovate[bot] in #7981
• chore(deps): bump redis from 7.4.0 to 8.0.0 in /server by @dependabot[bot] in #7960
• chore(deps): bump redis from 7.4.0 to 8.0.0 in /.config/python/dev by @dependabot[bot] in #7961
• chore(deps): bump python-gitlab from 8.3.0 to 8.4.0 in /.config/python/dev by @dependabot[bot] in #7964
• chore(deps): bump langsmith from 0.8.7 to 0.8.8 in /.config/python/dev by @dependabot[bot] in #7967
• chore(deps): update dependency checkov to v3.2.530 by @renovate[bot] in #7973
• chore(deps): update dependency pip to v26.1.2 by @renovate[bot] in #7975
• chore(deps): update dependency rumdl to v0.2.4 by @renovate[bot] in #7978
• chore(deps): update dependency snakemake to v9.21.1 by @renovate[bot] in #7979
• chore(deps): update dependency tmp to v0.2.7 by @renovate[bot] in #7980
• chore(deps): update dependency mongodb/kingfisher to v1.102.0 by @renovate[bot] in #7982
• chore(deps): update dependency pmd/pmd to v7.25.0 by @renovate[bot] in #7983
• chore(deps): update dependency python-gitlab to v8.4.0 by @renovate[bot] in #7984
• chore(deps): update dependency rubocop to v1.87.0 by @renovate[bot] in #7985
• chore(deps): update dependency virtualenv to v21.4.2 by @renovate[bot] in #7987
• chore(deps): update node.js to v24.16.0 by @renovate[bot] in #7988
• chore(deps): update typescript-eslint monorepo to v8.60.0 by @renovate[bot] in #7989
• chore(deps): update dependency redis to v8 by @renovate[bot] in #7990
• chore(deps): lock file maintenance by @renovate[bot] in #7991
• chore(deps): update dependency eslint-plugin-jsonc to v3.2.0 by @renovate[bot] in #7992
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #7958
• chore(deps): lock file maintenance by @renovate[bot] in #7995
• chore(deps): update dependency aquasecurity/trivy to v0.71.0 by @renovate[bot] in #8001
• chore(deps): update dependency cfn-lint to v1.51.3 by @renovate[bot] in #7998
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.7 by @renovate[bot] in #7993
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.18 by @renovate[bot] in #7999
• chore(deps): update eslint monorepo to v10.4.1 by @renovate[bot] in #7996
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8003
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8005
• chore(deps): update dependency checkov to v3.2.532 by @renovate[bot] in #7994
• chore(deps): update dependency aiohttp to v3.14.0 by @renovate[bot] in #8000
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.8 by @renovate[bot] in #8004
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8007
• chore(deps): update trufflesecurity/trufflehog docker tag to v3.95.5 by @renovate[bot] in #8011
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8016
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8044
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #8051
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.19 by @renovate[bot] in #8029
• chore(deps): update golang docker tag to v1.26.4 by @renovate[bot] in #8030
• chore(deps): update dependency anchore/grype to v0.114.0 by @renovate[bot] in #8034
• chore(deps): update typescript-eslint monorepo to v8.60.1 by @renovate[bot] in #8033
• chore(deps): update dependency graphql to v16.14.1 by @renovate[bot] in #8021
• chore(deps): update dependency overtrue/phplint to v9.7.2 by @renovate[bot] in #8023
• chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.4 by @renovate[bot] in #8020
• chore(deps): update dependency checkov to v3.2.533 by @renovate[bot] in #8019
• chore(deps): update dependency cfn-lint to v1.51.4 by @renovate[bot] in #8018
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.11 by @renovate[bot] in #8010
• chore(deps): update cspell monorepo to v10.0.1 by @renovate[bot] in #8009
• chore(deps): update dependency rumdl to v0.2.9 by @renovate[bot] in #8027
• chore(deps): update actions/checkout digest to df4cb1c by @renovate[bot] in #8008
• chore(deps): update dependency snakemake to v9.22.0 by @renovate[bot] in #8002
• fix(deps): update langchain to ~=1.1.0 by @renovate[bot] in #8042
• chore(deps): update dependency robotframework-robocop to v8.2.10 by @renovate[bot] in #8025
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8055
• chore(deps): update dependency ruff to v0.15.16 by @renovate[bot] in #8026
• chore(deps): update dependency rubocop-rspec to v3.10.2 by @renovate[bot] in #8036
• chore(deps): update dependency idna to v3.18 by @renovate[bot] in #8014
• chore(deps): update dependency uvicorn to v0.49.0 by @renovate[bot] in #8038
• chore(deps): update dependency langsmith to v0.8.9 by @renovate[bot] in #8022
• chore(deps): update salesforce packages to v2.137.7 by @renovate[bot] in #8041
• chore(deps): update ghcr.io/terraform-linters/tflint docker tag to v0.63.1 by @renovate[bot] in #8039
• chore(deps): update dependency sqlfluff to v4.2.2 by @renovate[bot] in #8028
• chore(deps): update dependency python-multipart to v0.0.32 by @renovate[bot] in #8024
• chore(deps): bump rq from 2.9.0 to 2.9.1 in /server by @dependabot[bot] in #8046
• chore(deps): update salesforce packages to v2.28.6 by @renovate[bot] in #8032
• chore(deps): update phpstan packages to v2.2.2 by @renovate[bot] in #8031
• chore(deps): update dependency anchore/syft to v1.45.1 by @renovate[bot] in #8012
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8056
• chore(deps): bump langchain-core from 1.4.0 to 1.4.1 in /.config/python/dev by @dependabot[bot] in #8052
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8062
• chore(deps): update dependency djlint to v1.39.0 by @renovate[bot] in #8035
• chore(deps): lock file maintenance by @renovate[bot] in #8043
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8063
• chore(deps): update langchain (patch) by @renovate[bot] in #8058
• chore(deps): update dependency azure/bicep to v0.44.1 by @renovate[bot] in #8059
• chore(deps): update dependency eslint-plugin-vue to v10.9.2 by @renovate[bot] in #8057
• chore(deps): update dependency semgrep to v1.166.0 by @renovate[bot] in #8037
• chore(deps): update ghcr.io/yannh/kubeconform docker tag to v0.8.0 by @renovate[bot] in #8040
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.21 by @renovate[bot] in #8076
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.17 by @renovate[bot] in #8074
• chore(deps): bump langchain-openai from 1.2.2 to 1.3.2 in /.config/python/dev by @dependabot[bot] in #8070
• chore(deps): bump langsmith from 0.8.9 to 0.8.15 in /.config/python/dev by @dependabot[bot] in #8071
• chore(deps): bump beautifulsoup4 from 4.14.3 to 4.15.0 in /.config/python/dev by @dependabot[bot] in #8073
• fix(deps): update langchain to ~=1.3.2 by @renovate[bot] in #8078
• chore(deps): update alpine docker tag to v3.24 by @renovate[bot] in #8077
• chore(deps): update dependency stylelint-scss to v7.2.0 by @renovate[bot] in #8060
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8075
• Update Dockerfiles to use Python 3.14-alpine3.24 and Alpine 3.24 by @nvuillam in #8080
• chore(deps): bump aiohttp from 3.14.0 to 3.14.1 in /.config/python/dev by @dependabot[bot] in #8072
• chore(deps): update dependency dart to v3.12.2 by @renovate[bot] in #8082
• chore(deps): update dependency djlint to v1.39.2 by @renovate[bot] in #8083
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.8.18 by @renovate[bot] in #8085
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8086
• chore(deps): update dependency aiohttp to v3.14.1 - autoclosed by @renovate[bot] in #8081
• chore(deps): update dependency graphql to v16.14.2 by @renovate[bot] in #8088
• chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.7 by @renovate[bot] in #8087
• Make mega-linter-runner/index.js executable in git by @Wuodan in #8091
• Bump peter-evans/create-pull-request to v8 in workflow examples by @Wuodan in #8089
• chore(deps): lock file maintenance by @renovate[bot] in #8118
• chore(deps): update python docker tag to v3.14.6 by @renovate[bot] in #8107
• chore(deps): update typescript-eslint monorepo to v8.61.0 by @renovate[bot] in #8116
• chore(deps): update dependency virtualenv to v21.4.3 by @renovate[bot] in #8106
• chore(deps): update salesforce packages (minor) by @renovate[bot] in #8115
• chore(deps): update dependency stylelint to v17.13.0 by @renovate[bot] in #8112
• chore(deps): update dependency snakemake to v9.23.0 by @renovate[bot] in #8111
• chore(deps): update dependency sfdx-hardis to v7.16.2 by @renovate[bot] in #8110
• chore(deps): update dependency eslint-plugin-n to v18.1.0 by @renovate[bot] in #8109
• chore(deps): update dependency checkov to v3.3.1 by @renovate[bot] in #8108
• chore(deps): update dependency semver to v7.8.4 by @renovate[bot] in #8105
• chore(deps): update dependency scalacenter/scalafix to v0.14.7 by @renovate[bot] in #8104
• chore(deps): update dependency rumdl to v0.2.17 by @renovate[bot] in #8103
• chore(deps): update dependency ruff to v0.15.17 by @renovate[bot] in #8102
• chore(deps): update dependency rubocop-rails to v2.35.4 by @renovate[bot] in #8101
• chore(deps): update dependency robotframework-robocop to v8.2.11 by @renovate[bot] in #8100
• chore(deps): update dependency prettier to v3.8.4 by @renovate[bot] in #8099
• chore(deps): update dependency jscpd to v4.2.5 by @renovate[bot] in #8098
• chore(deps): update alpine/terragrunt docker tag to v1.15.6 by @renovate[bot] in #8096
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8095
• Prevent FromAsCasing warning in Dockerfiles by @Wuodan in #8094
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8129
• chore(deps): update dependency rubocop to v1.88.0 by @renovate[bot] in #8126
• chore(deps): update eslint monorepo to v10.5.0 by @renovate[bot] in #8127
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.9.0 by @renovate[bot] in #8124
• chore(deps): update dependency fastapi to v0.137.1 by @renovate[bot] in #8125
• chore(deps): update dependency langsmith to v0.8.16 by @renovate[bot] in #8122
• chore(deps): update dependency pylint to v4.0.6 by @renovate[bot] in #8123
• chore(deps): update dependency aquasecurity/trivy to v0.71.1 by @renovate[bot] in #8013
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8131
• chore(deps): update dependency cfn-lint to v1.51.5 by @renovate[bot] in #8121
• chore(deps): update dependency virtualenv to v21.5.1 by @renovate[bot] in #8113
• chore(deps): update jdkato/vale docker tag to v3.15.1 by @renovate[bot] in #8114
• chore(deps): update dependency langsmith to v0.8.18 by @renovate[bot] in #8135
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8136
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8138
• Remove unused QEMU from workflows by @Wuodan in #8132
• Run megalinter as non-root in container by @Wuodan in #8120
• Fix mega-linter-runner upgrade CLI test timeout by @Wuodan in #8093
• feat(bitbucket): Update generator template to match pull requests by @yermulnik in #7421
• chore(deps): update dependency aquasecurity/trivy to v0.71.2 by @renovate[bot] in #8139
• (automation) simplify BETA linter job matrix by @Wuodan in #8134
• (automation) simplify DEV linter job matrix by @Wuodan in #8133
• chore(deps): update salesforce packages to v2.139.6 by @renovate[bot] in #8148
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8153
• chore(deps): update actions/checkout action to v7 by @renovate[bot] in #8149
• chore(deps): update node.js to v24.17.0 by @renovate[bot] in #8147
• Fix deploy-dev workflow by @nvuillam in #8154
• chore(deps): update dependency ruff to v0.15.18 by @renovate[bot] in #8157
• chore(deps): update dependency powershell/powershell to v7.6.3 by @renovate[bot] in #8156
• chore(deps): update dependency semgrep to v1.167.0 by @renovate[bot] in #8146
• chore(deps): update dependency robotframework-robocop to v8.3.2 by @renovate[bot] in #8145
• chore(deps): update dependency sfdx-hardis to v7.16.3 by @renovate[bot] in #8158
• chore(deps): update dependency fastapi to v0.137.2 by @renovate[bot] in #8140
• chore(deps): lock file maintenance by @renovate[bot] in #8128
• chore(deps): bump ghcr.io/devcontainers/features/node from 2.0.0 to 2.1.0 by @dependabot[bot] in #8161
• chore(deps): bump rq from 2.9.1 to 2.10.0 in /server by @dependabot[bot] in #8164
• chore(deps): update dependency mongodb/kingfisher to v1.103.0 by @renovate[bot] in #8144
• chore(deps): bump giturlparse from 0.14.0 to 0.15.0 in /.config/python/dev by @dependabot[bot] in #8165
• chore(deps): bump fastapi from 0.137.2 to 0.138.0 in /server by @dependabot[bot] in #8162
• chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.10 by @renovate[bot] in #8155
• chore(deps): update dependency markdownlint-cli to v0.49.0 by @renovate[bot] in #8160
• chore(deps): update trufflesecurity/trufflehog docker tag to v3.95.6 by @renovate[bot] in #8141
• chore(deps): bump langchain-core from 1.4.7 to 1.4.8 in /.config/python/dev by @dependabot[bot] in #8166
• chore(deps): update salesforce packages to v2.29.4 by @renovate[bot] in #8159
• chore(deps): update typescript-eslint monorepo to v8.61.1 by @renovate[bot] in #8142
• chore(deps): bump fastapi from 0.137.2 to 0.138.0 in /.config/python/dev by @dependabot[bot] in #8163
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8167
• Fix bootstrap hangs caused by exported tput variables by @Wuodan in #8090
• chore(deps): update dependency jscpd to v5 by @renovate[bot] in #8117
• fix: resolve ansible-lint race condition by redirecting Checkov's transient GitHub config to a hidden directory by @nvuillam in #8168
• chore(deps): update dependency snakemake to v9.23.1 by @renovate[bot] in #8173
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.23 by @renovate[bot] in #8175
• chore(deps): update dependency snakefmt to v2.0.2 by @renovate[bot] in #8172
• chore(deps): update dependency npm-package-json-lint to v10.4.1 by @renovate[bot] in #8170
• chore(deps): update dependency jscpd to v5.0.10 by @renovate[bot] in #8169
• chore(deps): update dependency rumdl to v0.2.20 by @renovate[bot] in #8171
• fix: Explain why linters are skipped by activation rules (#8017) by @nvuillam in #8174
• feat: add pnpm doc for JavaScript and TypeScript linters by @nvuillam in #8177
• fix: Treat osv-scanner exit code 128 as success when no package sources found (#7917) by @nvuillam in #8178
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8176
• Update changelog by @nvuillam in #8179
• chore(deps): update dependency mongodb/kingfisher to v1.104.0 by @renovate[bot] in #8181
• chore(deps): update dependency rubocop-rails to v2.35.5 by @renovate[bot] in #8180
• chore(deps): update dependency langsmith to v0.9.0 by @renovate[bot] in #8184
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.9.1 by @renovate[bot] in #8183
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8185
• Add betterleaks linter by @nvuillam in #8186
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8189
• chore(deps): update dependency djlint to v1.39.4 by @renovate[bot] in #8187
• chore(deps): update dependency jscpd to v5.0.11 by @renovate[bot] in #8188
• chore(deps): update dependency click to v8.4.2 by @renovate[bot] in #8191
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8192
• chore(deps): update actions/setup-python digest to ece7cb0 by @renovate[bot] in #8190
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.24 by @renovate[bot] in #8200
• chore(deps): update ghcr.io/realm/swiftlint docker tag to v0.64.1 by @renovate[bot] in #8182
• chore(deps): update dependency checkov to v3.3.2 by @renovate[bot] in #8193
• chore(deps): update dependency langsmith to v0.9.1 by @renovate[bot] in #8194
• chore(deps): update dependency redis to v8.0.1 by @renovate[bot] in #8195
• chore(deps): update dependency skaji/cpm to v1.1.2 by @renovate[bot] in #8199
• chore(deps): update langchain (patch) by @renovate[bot] in #8201
• chore(deps): update salesforce packages (patch) by @renovate[bot] in #8202
• chore(deps): update dependency semgrep to v1.168.0 by @renovate[bot] in #8204
• chore(deps): update dependency sfdx-hardis to v7.17.0 by @renovate[bot] in #8205
• chore(deps): update salesforce packages (minor) by @renovate[bot] in #8206
• chore(deps): lock file maintenance by @renovate[bot] in #8209
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8210
• chore(deps): update dependency ruff to v0.15.20 by @renovate[bot] in #8196
• chore(deps): update dependency cfn-lint to v1.52.0 by @renovate[bot] in #8203
• chore(deps): update dependency rumdl to v0.2.23 by @renovate[bot] in #8197
• feat: remove runtime linter-via-Docker-image capability, migrate SwiftLint to static binary by @nvuillam in #8216
• fix(py314): avoid deprecated positional re.sub count and flags by @Wuodan in #8211
• chore(deps): bump fastapi from 0.138.0 to 0.138.1 in /server by @dependabot[bot] in #8217
• Renovate fix by @nvuillam in #8225
• fix(ci): track shell runtime scripts in image build changes by @Wuodan in #8213
• chore(deps): update dependency @eslint-react/eslint-plugin to v5.9.2 by @renovate[bot] in #8226
• chore(deps): update dependency snakefmt to v2.0.3 by @renovate[bot] in #8231
• chore(deps): update dependency fastapi to v0.138.1 by @renovate[bot] in #8227
• chore(deps): update dependency friendsofphp/php-cs-fixer to v3.95.11 by @renovate[bot] in #8228
• chore(deps): update dependency langsmith to v0.9.3 by @renovate[bot] in #8229
• chore(deps): update dependency rumdl to v0.2.24 by @renovate[bot] in #8230
• chore(deps): update langchain (patch) by @renovate[bot] in #8233
• chore(deps): update dependency anchore/grype to v0.115.0 by @renovate[bot] in #8234
• chore(deps): update dependency anchore/syft to v1.46.0 by @renovate[bot] in #8235
• chore(deps): update dependency eslint-plugin-import-x to v4.17.0 by @renovate[bot] in #8236
• chore(deps): update ghcr.io/betterleaks/betterleaks docker tag to v1.6.0 by @renovate[bot] in #8237
• chore(deps): update typescript-eslint monorepo to v8.62.0 by @renovate[bot] in #8238
• chore(deps): lock file maintenance by @renovate[bot] in #8239
• chore(deps): update dependency realm/swiftlint to v0.65.0 by @renovate[bot] in #8240
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.25 by @renovate[bot] in #8232
• [automation] Auto-update linters version, help and documentation by @github-actions[bot] in #8215
• Changelog by @nvuillam in #8241
• chore(ci): manual run of deploy linters beta job by @nvuillam in #8242
• chore(deps): update dependency semver to v7.8.5 by @renovate[bot] in #8198
• chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 in /.config/python/dev by @dependabot[bot] in #8222
• Skill prepare-release by @nvuillam in #8245

New Contributors

• @Wuodan made their first contribution in #8091
• @yermulnik made their first contribution in #7421

⭐ If MegaLinter is useful to you, please give it a star on GitHub, it helps the project a lot!

Full Changelog: v9.5.0...v9.6.0