v0.0.20

Improvements/Fixes

• Remove nancy from the list of auto-recommended linters.
• Use hermetic python3 stems rather than python when invoking parsers

Full Changelog: v0.0.19...v0.0.20

v0.0.19

Improvements/Fixes

• Fix trivy PATH setup
• Fix action git-blame-ignore-revs on Linux

Full Changelog: v0.0.18...v0.0.19

v0.0.18

New

• New formatter: txtpbfmt
• New action: npm-check-pre-push

Improvements/Fixes

• Fix trivy parsing when there are no vulnerabilities
• Bump LLVM version for clang-tidy and clang-format
• Update known good version for go linters
• Fix run_linter_from for tfsec
• Forward proxy env vars to runtimes if set
• Forward NODE_OPTIONS to node runtime if set
• Expand terrascan to work for multiple languages and filetypes
• Add python-interface as a python filetype
• Make osv-scanner diagnostics more concise
• Fix off-by-one errors for newer versions of ruff
• Enable trufflehog by default instead of gitleaks and fix trufflehog command
• Improve testing framework to keep security linters more up to date
• Improve messaging when running truck-check-pre-push-always
• Run npm install as a pre-push hook before running tests
• Make checkov a security linter
• Recommend enabling security linters by default

New Contributors

• @Ryang20718 made their first contribution in #292
• @pat-trunk-io made their first contribution in #298

Full Changelog: v0.0.17...v0.0.18

v0.0.17

New

• New linter: sourcery (see notes on authentication)
• New linter: pyright
• New security linter: terrascan
• New formatter: terragrunt (more subcommands coming soon)
• New actions: npm-check and yarn-check

Improvements/Fixes

• Fix linter definition for buf-breaking
• Update buildifier download for new release schema
• Use suggest_if to clarify conditions for linter auto recommendation
• Use sandbox_type to clarify linter sandbox construction
• Use brakeman's native sarif support
• Bump ansible-lint known_good_version to account for breaking ansible-compat API changes

Full Changelog: v0.0.16...v0.0.17

v0.0.16

New

• New security linter: gokart

Improvements/Fixes

• Fix trufflehog to make it batchable
• Use configs repo for repo linting
• Fix cspell to respect sandboxed config
• Add .buildifier.json as a valid buildifier config

New Contributors

• @gejustin made their first contribution in #250

Full Changelog: v0.0.15...v0.0.16

v0.0.15

New

• New security linter: trufflehog
• New formatter: DJLint

Improvements/Fixes

• Remove bad hadoline macOS arm64 download

New Contributors

• @fsargent made their first contribution in #236

Full Changelog: v0.0.14...v0.0.15

v0.0.14

New

• New security linter: osv-scanner
• New linter: checkov
• New linter: stylua
• New formatter: gofumpt
• New formatter: golines
• New action: trunk-check-pre-commit
• New sample action: hello-world-python
• Add trivy config subcommand
• Add devcontainer support for Github Codespaces

Improvements/Fixes

• Fix clippy to update the local cache and not update lockfiles
• Add runtime definitions, default lint ignores, and default environments
• Identify security linters and subcommands as is_security: true
• Improve linter upgrade validation and testing fidelity
• Support newer download URL schemas for kube-linter
• Improve versioning and plugin installs for commitlint
• Provide a default config for cspell that reduces flakiness
• Add hadolint macOS arm64 native binaries
• Add support for python 3.11 runtime
• Fix flake8 issue_url to accommodate all issue codes
• Fix script for trunk-check-pre-push-always to better locate trunk
• Fix custom parser to accept ruff@0.0.260 output
• Deprecate linter terraform-validate (use terraform)

New Contributors

• @tomlazar made their first contribution in #210
• @fergusdixon made their first contribution in #223

Full Changelog: v0.0.13...v0.0.14

v0.0.13

New

• Add all trunk default file types to plugins repo
• New action: trunk-check-pre-push-always to run during non-interactive contexts
• New linter: tfsec

Improvements/Fixes

• Make sure cargo clippy never updates Cargo.lock
• Fix run command for trunk-announce during rebase
• Fix shellcheck in sandbox runs
• Auto-init with yamllint and ruff instead of flake8
• Testing and linter validation support for cspell, circleci, codespell, nancy, oxipng, sqlfmt
• Add direct config .gitleaksignore for gitleaks

New Contributors

• @ivan-toriya made their first contribution in #186
• @puzzler7 made their first contribution in #199

Full Changelog: v0.0.12...v0.0.13

v0.0.12

• New linter ruff-nbqa: Runs Ruff on jupyter notebooks.
• Fix Ruff autofix parsing.
• Flake8 now considers the pyproject.toml file.

v0.0.11

v0.0.11