starred/act
1
0
Fork 0
mirror of https://github.com/nektos/act.git synced 2026-04-26 09:25:54 +03:00
Code Issues 289 Projects Releases 5 Packages Wiki Activity

[PR #1251] [CLOSED] build(deps): bump megalinter/megalinter from 5 to 6.0.2 #1863

New issue
Closed
opened 2026-03-01 21:53:00 +03:00 by kerem · 0 comments
kerem commented 2026-03-01 21:53:00 +03:00
Owner
Copy link

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1251
Author: @dependabot[bot]
Created: 7/11/2022
Status: ❌ Closed

Base: master ← Head: dependabot/github_actions/megalinter/megalinter-6.0.2

📝 Commits (1)

  • 4496d95 build(deps): bump megalinter/megalinter from 5 to 6.0.2

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/checks.yml (+1 -1)

📄 Description

Bumps megalinter/megalinter from 5 to 6.0.2.

Release notes

Sourced from megalinter/megalinter's releases.

MegaLinter v6.0.2

Internal CI fixes

MegaLinter v6.0.1

  • Quick fixes about internal CI & documentation

= https://github.com/oxsecurity/megalinter/releases/tag/v6.0.0

MegaLinter v6.0.0

  • Move Repo to OX Security

  • Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

  • Core architecture

    • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one
      • Correct SARIF files for known format errors
    • New config variable DISABLE_LINTERS_ERRORS to define a list of linters that will be considered as non blocking
    • Upgrade base docker image to python:3.10.4-alpine3.15
    • Rename default report folder from report to megalinter-reports
    • Display GitHub stars in linters summary table in documentation

  • Linters:

    • Add DevSkim security linter by Microsoft
    • Add dustilock to check for dependency confusion attacks with node and python packages
    • Add gitleaks to lint git repository
    • Add goodcheck as regex-based linter
    • Add PMD to lint java files (disabled for now)
    • Add semgrep as regex-based linter with many community rules
    • Add syft to generate SBOM (Software Bill Of Materials)
    • Add trivy security linter
    • Remove dockerfilelint, as it is not maintained anymore and hadolint contains all its rules
    • Remove rstfmt as it is not maintained anymore
    • SARIF management for:
      • bandit
      • checkov
      • checkstyle
      • cfn-lint
      • devskim
      • eslint
      • gitleaks
      • hadolint
      • ktlint
      • npm-groovy-lint
      • psalm
      • semgrep
      • secretlint
      • revive

... (truncated)

Changelog

Sourced from megalinter/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with megalinter/megalinter@beta in your GitHub Action mega-linter.yml file, or with megalinter/megalinter:beta docker image

  • Linter versions upgrades

[v6.0.0] - 2022-07-10

  • Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

  • Core architecture

    • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one
      • Correct SARIF files for known format errors
    • New config variable DISABLE_LINTERS_ERRORS to define a list of linters that will be considered as non blocking
    • Upgrade base docker image to python:3.10.4-alpine3.15
    • Rename default report folder from report to megalinter-reports
    • Display GitHub stars in linters summary table in documentation

  • Linters:

    • Add DevSkim security linter by Microsoft
    • Add dustilock to check for dependency confusion attacks with node and python packages
    • Add gitleaks to lint git repository
    • Add goodcheck as regex-based linter
    • Add PMD to lint java files (disabled for now)
    • Add semgrep as regex-based linter with many community rules
    • Add syft to generate SBOM (Software Bill Of Materials)
    • Add trivy security linter
    • Remove dockerfilelint, as it is not maintained anymore and hadolint contains all its rules
    • Remove rstfmt as it is not maintained anymore
    • SARIF management for:
      • bandit
      • checkov
      • checkstyle
      • cfn-lint
      • devskim
      • eslint
      • gitleaks
      • hadolint
      • ktlint
      • npm-groovy-lint
      • psalm
      • semgrep
      • secretlint

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1251 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 7/11/2022 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/github_actions/megalinter/megalinter-6.0.2` --- ### 📝 Commits (1) - [`4496d95`](https://github.com/nektos/act/commit/4496d951e356930051784929c63f176f9a07f601) build(deps): bump megalinter/megalinter from 5 to 6.0.2 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/checks.yml` (+1 -1) </details> ### 📄 Description Bumps [megalinter/megalinter](https://github.com/megalinter/megalinter) from 5 to 6.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/megalinter/megalinter/releases">megalinter/megalinter's releases</a>.</em></p> <blockquote> <h2>MegaLinter v6.0.2</h2> <p>Internal CI fixes</p> <h2>MegaLinter v6.0.1</h2> <ul> <li>Quick fixes about internal CI &amp; documentation</li> </ul> <p>= <a href="https://github.com/oxsecurity/megalinter/releases/tag/v6.0.0">https://github.com/oxsecurity/megalinter/releases/tag/v6.0.0</a></p> <h2>MegaLinter v6.0.0</h2> <ul> <li> <p>Move Repo to OX Security</p> <ul> <li>Github: <a href="https://github.com/oxsecurity/megalinter">https://github.com/oxsecurity/megalinter</a></li> <li>Documentation: <a href="https://oxsecurity.github.io/megalinter/">https://oxsecurity.github.io/megalinter/</a></li> <li>OX Security home page: <a href="https://www.ox.security/">https://www.ox.security/</a></li> </ul> </li> <li> <p>Breaking changes: you must run <code>npx mega-linter-runner --upgrade</code> to use MegaLinter v6</p> </li> <li> <p>Core architecture</p> <ul> <li>New reporter <strong>SARIF_REPORTER</strong> that aggregates all SARIF output files into a single one <ul> <li>Correct SARIF files for known format errors</li> </ul> </li> <li>New config variable <strong>DISABLE_LINTERS_ERRORS</strong> to define a list of linters that will be considered as non blocking</li> <li>Upgrade base docker image to python:3.10.4-alpine3.15</li> <li>Rename default report folder from <code>report</code> to <code>megalinter-reports</code></li> <li>Display GitHub stars in linters summary table in documentation</li> </ul> </li> <li> <p>Linters:</p> <ul> <li>Add <a href="https://github.com/microsoft/DevSkim">DevSkim</a> security linter by Microsoft</li> <li>Add <a href="https://github.com/Checkmarx/dustilock">dustilock</a> to check for dependency confusion attacks with node and python packages</li> <li>Add <a href="https://github.com/zricethezav/gitleaks">gitleaks</a> to lint git repository</li> <li>Add <a href="https://github.com/sider/goodcheck">goodcheck</a> as regex-based linter</li> <li>Add <a href="https://pmd.github.io/">PMD</a> to lint java files (disabled for now)</li> <li>Add <a href="https://github.com/returntocorp/semgrep">semgrep</a> as regex-based linter with many community rules</li> <li>Add <a href="https://github.com/anchore/syft">syft</a> to generate SBOM (Software Bill Of Materials)</li> <li>Add <a href="https://github.com/aquasecurity/trivy">trivy</a> security linter</li> <li>Remove <strong>dockerfilelint</strong>, as it is not maintained anymore and hadolint contains all its rules</li> <li>Remove <strong>rstfmt</strong> as it is not maintained anymore</li> <li>SARIF management for: <ul> <li>bandit</li> <li>checkov</li> <li>checkstyle</li> <li>cfn-lint</li> <li>devskim</li> <li>eslint</li> <li>gitleaks</li> <li>hadolint</li> <li>ktlint</li> <li>npm-groovy-lint</li> <li>psalm</li> <li>semgrep</li> <li>secretlint</li> <li>revive</li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md">megalinter/megalinter's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>, and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2>[Unreleased] (beta, main branch content)</h2> <p>Note: Can be used with <code>megalinter/megalinter@beta</code> in your GitHub Action mega-linter.yml file, or with <code>megalinter/megalinter:beta</code> docker image</p> <ul> <li>Linter versions upgrades</li> </ul> <!-- raw HTML omitted --> <h2>[v6.0.0] - 2022-07-10</h2> <ul> <li> <p>Breaking changes: you must run <code>npx mega-linter-runner --upgrade</code> to use MegaLinter v6</p> </li> <li> <p>Core architecture</p> <ul> <li>New reporter <strong>SARIF_REPORTER</strong> that aggregates all SARIF output files into a single one <ul> <li>Correct SARIF files for known format errors</li> </ul> </li> <li>New config variable <strong>DISABLE_LINTERS_ERRORS</strong> to define a list of linters that will be considered as non blocking</li> <li>Upgrade base docker image to python:3.10.4-alpine3.15</li> <li>Rename default report folder from <code>report</code> to <code>megalinter-reports</code></li> <li>Display GitHub stars in linters summary table in documentation</li> </ul> </li> <li> <p>Linters:</p> <ul> <li>Add <a href="https://github.com/microsoft/DevSkim">DevSkim</a> security linter by Microsoft</li> <li>Add <a href="https://github.com/Checkmarx/dustilock">dustilock</a> to check for dependency confusion attacks with node and python packages</li> <li>Add <a href="https://github.com/zricethezav/gitleaks">gitleaks</a> to lint git repository</li> <li>Add <a href="https://github.com/sider/goodcheck">goodcheck</a> as regex-based linter</li> <li>Add <a href="https://pmd.github.io/">PMD</a> to lint java files (disabled for now)</li> <li>Add <a href="https://github.com/returntocorp/semgrep">semgrep</a> as regex-based linter with many community rules</li> <li>Add <a href="https://github.com/anchore/syft">syft</a> to generate SBOM (Software Bill Of Materials)</li> <li>Add <a href="https://github.com/aquasecurity/trivy">trivy</a> security linter</li> <li>Remove <strong>dockerfilelint</strong>, as it is not maintained anymore and hadolint contains all its rules</li> <li>Remove <strong>rstfmt</strong> as it is not maintained anymore</li> <li>SARIF management for: <ul> <li>bandit</li> <li>checkov</li> <li>checkstyle</li> <li>cfn-lint</li> <li>devskim</li> <li>eslint</li> <li>gitleaks</li> <li>hadolint</li> <li>ktlint</li> <li>npm-groovy-lint</li> <li>psalm</li> <li>semgrep</li> <li>secretlint</li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/oxsecurity/megalinter/commit/598182695f278a860c5e0e35169b7992ea5957b5"><code>5981826</code></a> Release MegaLinter v6.0.2</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/4b49de1d57bbc6f58a977bb8827d26ab17f38c09"><code>4b49de1</code></a> Remove trivy in release process as it crashes</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/76dbebec46a6f29d9540718f081c512e36515c3f"><code>76dbebe</code></a> Fix format table after build</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/7f6e1cb9118a15c9abddaa8fc63d24b327f27175"><code>7f6e1cb</code></a> Release MegaLinter v6.0.1</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/b5d7496bef8a24093e9b88cdd37bbee6807406c6"><code>b5d7496</code></a> Fix CI workflows</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/eef2ec48d561dc402fb17f299f5694e5c3045c28"><code>eef2ec4</code></a> Add SARIF reporter in json schema</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/733119bda3538e2f0abcac1d97005350740915e6"><code>733119b</code></a> Fix CI</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/908b38385bf502d66be0d2732641ceec1d12b2e7"><code>908b383</code></a> Release MegaLinter v6.0.0</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/103c1db215a74c5ff7d663235dcf7295b37218c8"><code>103c1db</code></a> changelog</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/20b013c73c93b3704f05dad7215dce57f894144f"><code>20b013c</code></a> [automation] Auto-update linters version, help and documentation (<a href="https://github-redirect.dependabot.com/megalinter/megalinter/issues/1590">#1590</a>)</li> <li>Additional commits viewable in <a href="https://github.com/megalinter/megalinter/compare/v5...v6.0.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=megalinter/megalinter&package-manager=github_actions&previous-version=5&new-version=6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:53:00 +03:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
dependabot/go_modules/github.com/go-git/go-git/v5-5.18.0
dependabot/go_modules/dependencies-08815e2262
mergify/configuration-deprecated-update
dependabot/github_actions/dependencies-a3a104477f
chore/simplify-ci-and-makefile
dependabot/go_modules/golang.org/x/crypto-0.45.0
dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.4.0
panekj/ci/improve-jobs
fix-skip-non-yaml-files-in-dir
normalize-pull-rebuild-flags
fix-no-recurse-by-default
2517-poor-error-for-incomplete-action-step
2472-make-use-new-action-cache-the-new-default-for-downloading-actions
act-tart
act-lxc
act-oidc
act-dind
avoid-slash-in-actor
dependabot/go_modules/github.com/docker/docker-26.1.4incompatible
meta-keep-filetime
local-repository-action-cache
pr-merger
update-docker-deps
follow_local_action_symlink
boltdb-lock-in-handler
use-socket-path
no-pull-no-rebuild
path-issues
fix/env
feat/podman
refactor/testdata
v0.2.87
v0.2.86
v0.2.85
v0.2.84
v0.2.83
v0.2.82
v0.2.81
v0.2.80
v0.2.79
v0.2.78
v0.2.77
v0.2.76
v0.2.75
v0.2.74
v0.2.73
v0.2.72
v0.2.71
v0.2.70
v0.2.69
v0.2.68
v0.2.67
v0.2.66
v0.2.65
v0.2.64
v0.2.63
v0.2.62
v0.2.61
v0.2.60
v0.2.59
v0.2.58
v0.2.57
v0.2.56
v0.2.55
v0.2.54
v0.2.53
v0.2.52
v0.2.51
v0.2.50
v0.2.49
v0.2.48
v0.2.47
v0.2.46
v0.2.45
v0.2.44
v0.2.43
v0.2.42
v0.2.41
v0.2.40
v0.2.39
v0.2.38
v0.2.37
v0.2.36
v0.2.35
v0.2.34
v0.2.33
v0.2.32
v0.2.31
v0.2.30
v0.2.29
v0.2.28
v0.2.27
v0.2.26
v0.2.25
v0.2.24
v0.2.23
v0.2.22
v0.2.21
v0.2.20
v0.2.19
v0.2.18
v0.2.17
v0.2.16
v0.2.15
v0.2.14
v0.2.13
v0.2.12
v0.2.11
v0.2.10
v0.2.9
v0.2.8
v0.2.7
v0.2.6
v0.2.5
v0.2.4
v0.2.3
v0.2.2
v0.2.1
v0.2.0
v0.1.3
v0.1.2
v0.1.1
v0.1.0
v0.0.5
v0.0.4
v0.0.3
v0.0.2
v0.0.1
Labels
Clear labels   
area/action

   
area/cli

   
area/docs

   
area/image

   
area/runner

   
area/workflow

   
backlog

   
confirmed/not-planned

   
kind/bug

   
kind/discussion

   
kind/external

   
kind/feature-request

   
kind/question

   
meta/duplicate

   
meta/invalid

   
meta/need-more-info

   
meta/resolved

   
meta/wontfix

   
meta/workaround

   
needs-work

   
pull-request

Mirrored from GitHub Pull Request

  
review/not-planned

   
size/M

   
size/XL

   
size/XXL

   
stale

   
stale-exempt
No labels
area/action
area/cli
area/docs
area/image
area/runner
area/workflow
backlog
confirmed/not-planned
kind/bug
kind/discussion
kind/external
kind/feature-request
kind/question
meta/duplicate
meta/invalid
meta/need-more-info
meta/resolved
meta/wontfix
meta/workaround
needs-work
pull-request
review/not-planned
size/M
size/XL
size/XXL
stale
stale-exempt
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#1863
No description provided.