[PR #1827] [MERGED] build(deps): bump megalinter/megalinter from 6.22.2 to 7.0.2 #2143

Closed
opened 2026-03-01 21:54:12 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1827
Author: @dependabot[bot]
Created: 5/29/2023
Status: Merged
Merged: 5/29/2023
Merged by: @mergify[bot]

Base: masterHead: dependabot/github_actions/megalinter/megalinter-7.0.2


📝 Commits (1)

  • 56d13da build(deps): bump megalinter/megalinter from 6.22.2 to 7.0.2

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/checks.yml (+1 -1)

📄 Description

Bumps megalinter/megalinter from 6.22.2 to 7.0.2.

Release notes

Sourced from megalinter/megalinter's releases.

MegaLinter v7.0.2

What's Changed

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)

... (truncated)

Changelog

Sourced from megalinter/megalinter's changelog.

[v7.0.2] - 2023-05-27

  • Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner)
    • Dead link to configuration.md
    • Regex issue with megalinter-reports

[v7.0.0] - 2023-05-27

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1827 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/29/2023 **Status:** ✅ Merged **Merged:** 5/29/2023 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/github_actions/megalinter/megalinter-7.0.2` --- ### 📝 Commits (1) - [`56d13da`](https://github.com/nektos/act/commit/56d13dadd0dbd555c3e7562ff2d493aae94dfb19) build(deps): bump megalinter/megalinter from 6.22.2 to 7.0.2 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/checks.yml` (+1 -1) </details> ### 📄 Description Bumps [megalinter/megalinter](https://github.com/megalinter/megalinter) from 6.22.2 to 7.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/megalinter/megalinter/releases">megalinter/megalinter's releases</a>.</em></p> <blockquote> <h2>MegaLinter v7.0.2</h2> <h2>What's Changed</h2> <p>To upgrade to MegaLinter v7, run <code>npx mega-linter-runner@latest --upgrade</code> , comment <a href="https://redirect.github.com/oxsecurity/megalinter/issues/2692">here</a> if you have any issue :)</p> <ul> <li> <p>MAJOR Updates</p> <ul> <li><a href="https://megalinter.io/latest/config-variables-security/">SECURED_ENV_VARIABLES</a> &amp; core scoped configuration by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2601">oxsecurity/megalinter#2601</a> <ul> <li>New configuration variables <strong>SECURED_ENV_VARIABLES</strong> and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter</li> <li>Read <a href="https://megalinter.io/latest/config-variables-security/">documentation</a> to enhance security using MegaLinter</li> </ul> </li> <li>Use <strong>relative file paths</strong> to call linters by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/1877">oxsecurity/megalinter#1877</a> <ul> <li>This can be a breaking change for customizations, post an issue if you see a problem !</li> </ul> </li> </ul> </li> <li> <p>New linters</p> <ul> <li>Add linter <a href="https://github.com/greglook/cljstyle">cljstyle</a>, Clojure formatter, by <a href="https://github.com/practicalli-john"><code>@​practicalli-john</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2115">oxsecurity/megalinter#2115</a></li> <li>Add <a href="https://github.com/kubescape/kubescape">kubescape</a>, kubernetes linter, by <a href="https://github.com/muandane"><code>@​muandane</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2531">oxsecurity/megalinter#2531</a></li> <li>Add <a href="https://vale.sh/">Vale</a>, a powerful enforcer of writing style, by <a href="https://github.com/wesley-dean-flexion"><code>@​wesley-dean-flexion</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2406">oxsecurity/megalinter#2406</a></li> </ul> </li> <li> <p>Removed linters</p> <ul> <li>KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors)</li> <li>REPOSITORY_GOODCHECK: Not open-source anymore</li> <li>SPELL_MISSPELL: Not maintained anymore (last commit in 2018)</li> <li>TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV</li> <li>TERRAFORM_KICS: Replaced by REPOSITORY_KICS</li> </ul> </li> <li> <p>Medias</p> <ul> <li>Article: <a href="https://cloud.google.com/workflows/docs/use-workflows-json-schema-with-ide">Use the Workflows JSON schema in your IDE</a>, by <a href="https://cloud.google.com/">Google Cloud</a></li> <li>Video: <a href="https://www.youtube.com/watch?v=oegOSmVegiQ&amp;t=1510s">Ortelius Architecture Meeting</a>, with a review of MegaLinter, by <a href="https://github.com/sbtaylor15">Steve Taylor</a> from <a href="https://ortelius.io/">Ortelius</a></li> <li>Web site: <a href="https://www.my-devops-lab.com/tools">my-devops-lab.com</a></li> </ul> </li> <li> <p>Linter enhancements &amp; fixes</p> <ul> <li><a href="https://megalinter.io/latest/descriptors/spell_cspell/">cspell</a> <ul> <li>Fix corrective .cspell.json file generated from cspell output by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2562">oxsecurity/megalinter#2562</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/javascript_eslint/">eslint</a> <ul> <li>Ensure ESLint actually runs in project mode (<a href="https://redirect.github.com/megalinter/megalinter/issues/1572">#1572</a>) by <a href="https://github.com/Kurt-von-Laven"><code>@​Kurt-von-Laven</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2455">oxsecurity/megalinter#2455</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/copypaste_jscpd/">jscpd</a> <ul> <li>Prevent jscpd to create output folder if the repo is not writable by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2556">oxsecurity/megalinter#2556</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/repository_gitleaks/">Gitleaks</a> <ul> <li>Add support to scan PR commits only on PRs when <code>VALIDATE_ALL_CODEBASE</code> is set to <code>false</code>, by <a href="https://github.com/DariuszPorowski"><code>@​DariuszPorowski</code></a> <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2504">#2504</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/repository_kics/">KICS</a> <ul> <li>Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2689">oxsecurity/megalinter#2689</a></li> <li>KICS can now output SARIF</li> <li>The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary</li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/kubernetes_kubeconform/">KubeConform</a> <ul> <li>Simplify kubeconform install &amp; get version by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2629">oxsecurity/megalinter#2629</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/php_phplint/">PHPLint</a> <ul> <li>Upgrade PHPLint to v9 by <a href="https://github.com/bdovaz"><code>@​bdovaz</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2638">oxsecurity/megalinter#2638</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/sql_sqlfluff/">sqlfluff</a> <ul> <li>Remove old options from SQLFluff config file by <a href="https://github.com/tunetheweb"><code>@​tunetheweb</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2560">oxsecurity/megalinter#2560</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/json_v8r/">v8r</a> <ul> <li>Allow use of configuration files with v8r by <a href="https://github.com/bdovaz"><code>@​bdovaz</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/1982">oxsecurity/megalinter#1982</a></li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md">megalinter/megalinter's changelog</a>.</em></p> <blockquote> <h2>[v7.0.2] - 2023-05-27</h2> <ul> <li>Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner) <ul> <li>Dead link to configuration.md</li> <li>Regex issue with megalinter-reports</li> </ul> </li> </ul> <h2>[v7.0.0] - 2023-05-27</h2> <p>To upgrade to MegaLinter v7, run <code>npx mega-linter-runner@latest --upgrade</code> , comment <a href="https://redirect.github.com/oxsecurity/megalinter/issues/2692">here</a> if you have any issue :)</p> <ul> <li> <p>MAJOR Updates</p> <ul> <li><a href="https://megalinter.io/latest/config-variables-security/">SECURED_ENV_VARIABLES</a> &amp; core scoped configuration by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2601">oxsecurity/megalinter#2601</a> <ul> <li>New configuration variables <strong>SECURED_ENV_VARIABLES</strong> and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter</li> <li>Read <a href="https://megalinter.io/latest/config-variables-security/">documentation</a> to enhance security using MegaLinter</li> </ul> </li> <li>Use <strong>relative file paths</strong> to call linters by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/1877">oxsecurity/megalinter#1877</a> <ul> <li>This can be a breaking change for customizations, post an issue if you see a problem !</li> </ul> </li> </ul> </li> <li> <p>New linters</p> <ul> <li>Add linter <a href="https://github.com/greglook/cljstyle">cljstyle</a>, Clojure formatter, by <a href="https://github.com/practicalli-john"><code>@​practicalli-john</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2115">oxsecurity/megalinter#2115</a></li> <li>Add <a href="https://github.com/kubescape/kubescape">kubescape</a>, kubernetes linter, by <a href="https://github.com/muandane"><code>@​muandane</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2531">oxsecurity/megalinter#2531</a></li> <li>Add <a href="https://vale.sh/">Vale</a>, a powerful enforcer of writing style, by <a href="https://github.com/wesley-dean-flexion"><code>@​wesley-dean-flexion</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2406">oxsecurity/megalinter#2406</a></li> </ul> </li> <li> <p>Removed linters</p> <ul> <li>KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors)</li> <li>REPOSITORY_GOODCHECK: Not open-source anymore</li> <li>SPELL_MISSPELL: Not maintained anymore (last commit in 2018)</li> <li>TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV</li> <li>TERRAFORM_KICS: Replaced by REPOSITORY_KICS</li> </ul> </li> <li> <p>Medias</p> <ul> <li>Article: <a href="https://cloud.google.com/workflows/docs/use-workflows-json-schema-with-ide">Use the Workflows JSON schema in your IDE</a>, by <a href="https://cloud.google.com/">Google Cloud</a></li> <li>Video: <a href="https://www.youtube.com/watch?v=oegOSmVegiQ&amp;t=1510s">Ortelius Architecture Meeting</a>, with a review of MegaLinter, by <a href="https://github.com/sbtaylor15">Steve Taylor</a> from <a href="https://ortelius.io/">Ortelius</a></li> <li>Web site: <a href="https://www.my-devops-lab.com/tools">my-devops-lab.com</a></li> </ul> </li> <li> <p>Linter enhancements &amp; fixes</p> <ul> <li><a href="https://megalinter.io/latest/descriptors/spell_cspell/">cspell</a> <ul> <li>Fix corrective .cspell.json file generated from cspell output by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2562">oxsecurity/megalinter#2562</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/javascript_eslint/">eslint</a> <ul> <li>Ensure ESLint actually runs in project mode (<a href="https://redirect.github.com/megalinter/megalinter/issues/1572">#1572</a>) by <a href="https://github.com/Kurt-von-Laven"><code>@​Kurt-von-Laven</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2455">oxsecurity/megalinter#2455</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/copypaste_jscpd/">jscpd</a> <ul> <li>Prevent jscpd to create output folder if the repo is not writable by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2556">oxsecurity/megalinter#2556</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/repository_gitleaks/">Gitleaks</a> <ul> <li>Add support to scan PR commits only on PRs when <code>VALIDATE_ALL_CODEBASE</code> is set to <code>false</code>, by <a href="https://github.com/DariuszPorowski"><code>@​DariuszPorowski</code></a> <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2504">#2504</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/repository_kics/">KICS</a> <ul> <li>Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2689">oxsecurity/megalinter#2689</a></li> <li>KICS can now output SARIF</li> <li>The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary</li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/kubernetes_kubeconform/">KubeConform</a> <ul> <li>Simplify kubeconform install &amp; get version by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2629">oxsecurity/megalinter#2629</a></li> </ul> </li> <li><a href="https://megalinter.io/latest/descriptors/php_phplint/">PHPLint</a></li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/oxsecurity/megalinter/commit/e99bc276c361c2f68c4976a5f86f7421c2c4d606"><code>e99bc27</code></a> Release MegaLinter v7.0.2</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/862fb049894e231ab19c281a853bdd66a6b7a7b6"><code>862fb04</code></a> Quick fix mega-linter-runner --upgrade (<a href="https://redirect.github.com/megalinter/megalinter/issues/2693">#2693</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/8c92ca3cd548dec08716d2151776a7cc06cd4f99"><code>8c92ca3</code></a> Release MegaLinter v7.0.1</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/4d7aae08422e927e536218141751e93a9bd9174f"><code>4d7aae0</code></a> Fix release workflow</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/02d61243f331ae88676e8c43b7e8a0b79dfb253c"><code>02d6124</code></a> Release MegaLinter v7.0.0</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/32de34d40d7655d5dc167415f881653a25077f31"><code>32de34d</code></a> Allow SECURED_ENV_VARIABLES to accept regular expressions (<a href="https://redirect.github.com/megalinter/megalinter/issues/2691">#2691</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/e29d894209de9a8c48e44fd925d94f6e7a62e09c"><code>e29d894</code></a> Move KICS to REPOSITORY descriptor (<a href="https://redirect.github.com/megalinter/megalinter/issues/2689">#2689</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/98f73b5c39af3cff94b608d6b53f4da11fe6629a"><code>98f73b5</code></a> mega-linter-runner: Use --platform also for docker run (<a href="https://redirect.github.com/megalinter/megalinter/issues/2690">#2690</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/ad631b85863ba8466e26b2d11121a9d0e7bd6781"><code>ad631b8</code></a> Fix permissions</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/86a8394de25a3ed890b402e0b553ceb46e5c0df1"><code>86a8394</code></a> Improve documentation pages split (<a href="https://redirect.github.com/megalinter/megalinter/issues/2688">#2688</a>)</li> <li>Additional commits viewable in <a href="https://github.com/megalinter/megalinter/compare/v6.22.2...v7.0.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=megalinter/megalinter&package-manager=github_actions&previous-version=6.22.2&new-version=7.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:54:12 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#2143
No description provided.