Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump megalinter docker tag to v7 #608

Merged
merged 1 commit into from
Aug 7, 2023

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Aug 6, 2023

MegaLinter recently added support for arrays to *_CLI_EXECUTABLE in v7.0.0. Leverage this feature to run the version of ESLint installed in our project via Yarn in lieu of the version of ESLint in the MegaLinter Docker image via npm. This avoids many complications that arise from ESLint being unable to access Yarn dependencies and allows us to stop running ESLint in project mode as a workaround. Reorder pre-commit hooks so that Yarn hooks precede MegaLinter hooks since yarn install must now be run before MegaLinter so that ESLint can run.

Disable newly added linter ts-standard since we use Prettier, which is incompatible with StandardJS.

Apply new Prettier v3 formatting.

Configure newly added link checker Lychee to ignore email addresses to prevent false positives on GitHub Actions, which contain @ symbols. Increase network request retry limit from the default of 3 to 4 to avoid false positives.

Mend Renovate

This PR contains the following updates:

Package Type Update Change
MegaLinter devDependencies major v6.22.2 -> v7.2.1

Release Notes

oxsecurity/megalinter (MegaLinter)

v7.2.1

Compare Source

  • Fixes

    • Fix TAP reporter (3 real dots instead if 3 dots character)
    • Call trufflehog with --only-verified to avoid false positives in .git/config
  • Linter versions upgrades

v7.2.0

Compare Source

v7.1.0

Compare Source

v7.0.4

Compare Source

  • Core

    • Allow to define linterkey_UNSECURED_ENV_VARIABLES for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT)
  • Documentation

    • Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by @​ruzickap in #​2706
  • Linter versions upgrades

v7.0.3

Compare Source

  • Linter enhancements & fixes

    • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.
  • Core

    • Secure PRE_COMMANDS and POST_COMMANDS by default
    • Can be disabled with secured_env: false in the command definition
    • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression
  • Linter versions upgrades

v7.0.2

Compare Source

  • Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner)
    • Dead link to configuration.md
    • Regex issue with megalinter-reports

v7.0.1

Compare Source

v7.0.0

Compare Source

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Aug 6, 2023
@Kurt-von-Laven Kurt-von-Laven force-pushed the renovate/megalinter branch 2 times, most recently from b93dfeb to f83c3e8 Compare August 7, 2023 04:01
MegaLinter recently added support for arrays to `*_CLI_EXECUTABLE` in
v7.0.0. Leverage this feature to run the version of ESLint installed in
our project via Yarn in lieu of the version of ESLint in the MegaLinter
Docker image via npm. This avoids many complications that arise from
ESLint being unable to access Yarn dependencies and allows us to stop
running ESLint in project mode as a workaround. Reorder pre-commit hooks
so that Yarn hooks precede MegaLinter hooks since `yarn install` must
now be run before MegaLinter so that ESLint can run.

Disable newly added linter ts-standard since we use Prettier, which is
incompatible with StandardJS.

Apply new Prettier v3 formatting.

Configure newly added link checker Lychee to ignore email addresses to
prevent false positives on GitHub Actions, which contain "@" symbols.
Increase network request retry limit from the default of 3 to 4 to avoid
false positives.

| datasource | package                          | from    | to     |
| ---------- | -------------------------------- | ------- | ------ |
| docker     | oxsecurity/megalinter-javascript | v6.22.2 | v7.2.1 |
@Kurt-von-Laven Kurt-von-Laven merged commit 1325c3f into ScribeMD:main Aug 7, 2023
6 checks passed
@renovate-bot renovate-bot deleted the renovate/megalinter branch August 7, 2023 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Development

Successfully merging this pull request may close these issues.

2 participants