Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

• Core

• New linters

• Media

• Linters enhancements

• Fixes

• Reporters

• Doc

• Flavors

• CI

• mega-linter-runner

• Linter versions upgrades (N)

[v8.3.0] - 2024-11-23

• Core
  • Display command log (truncated to 250 chars) even when LOG_LEVEL is not DEBUG
  • Allow to replace an ENV var value with the value of another ENV var before calling a PRE_COMMAND (helps for tflint run from GitHub Enterprise)
  • Fix handling of git submodule paths

• Fixes
  • trivy: retry in case of BLOB_UNKNOWN while downloading vulnerability list

• Reporters
  • Fix UpdatedSourcesReporter when APPLY_FIXES is list (array)
  • Fix AzureCommentReporter when the repo is not found: fallback using BUILD_REPOSITORY_ID. (+ disable space replacement in repo name with AZURE_COMMENT_REPORTER_REPLACE_WITH_SPACES: false)

• CI
  • Fix Docker mirroring job for release context
  • Remove max parallel jobs for release linters workflow

• Linter versions upgrades (13)
  • cfn-lint from 1.19.0 to 1.20.0
  • checkov from 3.2.298 to 3.2.311
  • csharpier from 0.29.2 to 0.30.2
  • markdownlint from 0.42.0 to 0.43.0
  • phpstan from 2.0.1 to 2.0.2
  • ruff from 0.7.4 to 0.8.0
  • spectral from 6.14.1 to 6.14.2
  • stylua from 0.20.0 to 2.0.0
  • syft from 1.16.0 to 1.17.0
  • trivy-sbom from 0.57.0 to 0.57.1
  • trivy from 0.57.0 to 0.57.1
  • trufflehog from 3.83.7 to 3.84.1
  • vale from 3.9.0 to 3.9.1

[v8.2.0] - 2024-11-17

• Media
  • 10 MegaLinter Tips and Tricks Unlock its Full Potential by Wes Dean
  • MegaLinter Performance Tuning for Maximum Efficiency by Wes Dean

• Linters enhancements
  • detekt Enable SARIF output + count errors
  • lintr: Support files in subdirectories, fix unit tests
  • phpcs: Activate APPLY_FIXES
  • Salesforce linters: Add SF_CLI_DISABLE_AUTOUPDATE for SF CLI JIT plugins
  • trivy: handle retry if failed to download Java DB is detected
  • tsqllint Re-enabled after .net 8 and security updates

• Fixes
  • Add message in PR comment if FAIL_IF_UPDATED_SOURCES is triggered
  • Fix linting errors in GitHub Actions template

• Reporters
  • UpdatedSourcesReporter will git commit & push fixed files to source branch if APPLY_FIXES is set
  • Fix AzureCommentReporter not adding comments to PR
  • Fix AzureCommentReporter fails when target repo contains spaces

• Doc
  • Updated documentation with Azure central pipeline use case
  • Update DevSkim documentation to show a valid exclusion config file
  • Note about risky rules and how to fix rule violations with PHP-CS-Fixer

• CI
  • Also prune volumes before pulling and pushing to docker hub
  • Externalize mirroring from ghcr.io to docker hub in another workflow to avoid memory issues
  • Squash docker images to have less layers and size
  • Comment jobs related to GitHub Worker images, as CodeTotal is not actively maintained
  • Make gitpod workflow not blocking until uv install is fixed
  • Update stale comment
  • Try several times to embed trivy db during Docker build, as a workaround to the random failures
  • Wait 10 secondes instead of 1 before retrying a failing test method, to avoid race conditions

• Linter versions upgrades (104)
  • actionlint from 1.7.3 to 1.7.4
  • ansible-lint from 24.9.2 to 24.10.0
  • bicep_linter from 0.30.23 to 0.31.92
  • cfn-lint from 1.16.1 to 1.19.0
  • checkov from 3.2.257 to 3.2.298
  • checkstyle from 10.18.2 to 10.20.1
  • clippy from 0.1.81 to 0.1.82
  • clj-kondo from 2024.09.27 to 2024.11.14
  • cspell from 8.15.1 to 8.16.0
  • devskim from 1.0.33 to 1.0.44
  • djlint from 1.35.2 to 1.36.1
  • dotnet-format from 8.0.110 to 8.0.111
  • gitleaks from 8.20.1 to 8.21.2
  • golangci-lint from 1.61.0 to 1.62.0
  • ktlint from 1.3.1 to 1.4.1
  • lightning-flow-scanner from 2.34.0 to 2.36.0
  • lychee from 0.16.1 to 0.17.0
  • mypy from 1.11.2 to 1.13.0
  • perlcritic from 1.152 to 1.156
  • phpcs from 3.10.3 to 3.11.1
  • phplint from 9.5.3 to 9.5.4
  • phpstan from 1.12.6 to 2.0.1
  • pmd from 7.6.0 to 7.7.0
  • pyright from 1.1.384 to 1.1.389
  • revive from 1.4.0 to 1.5.1
  • roslynator from 0.9.1.0 to 0.9.3.0
  • rubocop from 1.66.1 to 1.68.0
  • ruff from 0.6.9 to 0.7.4
  • secretlint from 8.4.0 to 9.0.0
  • sfdx-scanner-apex from 4.6.0 to 4.7.0
  • sfdx-scanner-aura from 4.6.0 to 4.7.0
  • sfdx-scanner-lwc from 4.6.0 to 4.7.0
  • shfmt from 3.9.0 to 3.10.0
  • snakemake from 8.21.0 to 8.25.3
  • spectral from 6.13.1 to 6.14.1
  • sqlfluff from 3.2.3 to 3.2.5
  • syft from 1.14.0 to 1.16.0
  • terraform-fmt from 1.9.5 to 1.9.8
  • terragrunt from 0.67.5 to 0.68.14
  • tflint from 0.53.0 to 0.54.0
  • trivy-sbom from 0.56.2 to 0.57.0
  • trivy from 0.56.2 to 0.57.0
  • trufflehog from 3.82.11 to 3.83.7
  • tsqllint from 1.15.3.0 to 1.16.0.0
  • v8r from 4.1.0 to 4.2.0
  • vale from 3.7.1 to 3.9.0

[v8.1.0] - 2024-10-13

• Core
  • Allow to tag PRE_COMMANDS to run them before loading plugins, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3944
  • Replace usage of setup.py with a pyproject.toml package install, by @echoix in #3893
  • Allow to add custom messages at the end of PR / MR MegaLinter Summary using variable JOB_SUMMARY_ADDITIONAL_MARKDOWN

• New linters
  • New LUA linter: selene, by @AlejandroSuero in https://github.com/oxsecurity/megalinter/pull/3978
  • New LUA formatter: stylua, by @AlejandroSuero in https://github.com/oxsecurity/megalinter/pull/3985

• Linters enhancements
  • Trivy
    • Embed vulnerability database in Docker Image for running trivy on internet-free network
    • Retry 5 times after 3 seconds in case of TooManyRequests when downloading vulnerability database
    • If the retries did not succeed, call trivy with --skip-db-update --skip-check-update (not ideal but better than nothing)
  • Bash/Perl: Support shell scripts with no extension and only support perl shebangs at the beginning of a file in https://github.com/oxsecurity/megalinter/pull/4076

• Fixes
  • APPLY_FIXES and for PHP_PHPCSFIXER linter, by @llaville in #3963
  • Add debug traces to investigate reporters activation
  • Add more traces for ApiReporter
  • Activate ApiReporter by default

• Reporters
  • Fix ApiReporter not called in MegaLinter flavors

• Doc
  • Fix Grafana Home Dashboard to add missing criteria
  • Update PRE_COMMANDS documentation to describe all properties
  • Update Grafana documentation to fix secrets typo

• CI
  • Free space in release job to avoid no space left on device, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3914
  • Add pytest-rerunfailures to improve CI control jobs success, by @AlejandroSuero in https://github.com/oxsecurity/megalinter/pull/3993
  • Send GITHUB_TOKEN to trivy-action
  • Workaround to avoid to reach Docker Hub rate limits: Build & push first on ghcr.io, then login to docker hub, then push to docker hub

• Linter versions upgrades
  • actionlint from 1.7.1 to 1.7.3
  • ansible-lint from 24.7.0 to 24.9.2
  • bandit from 1.7.9 to 1.7.10
  • bicep_linter from 0.29.47 to 0.30.23
  • black from 24.8.0 to 24.10.0
  • cfn-lint from 1.10.3 to 1.16.1
  • checkov from 3.2.232 to 3.2.257
  • checkstyle from 10.17.0 to 10.18.2
  • clippy from 0.1.80 to 0.1.81
  • clj-kondo from 2024.08.01 to 2024.09.27
  • cpplint from 1.6.1 to 2.0.0
  • csharpier from 0.29.0 to 0.29.2
  • cspell from 8.14.1 to 8.15.1
  • detekt from 1.23.6 to 1.23.7
  • djlint from 1.34.1 to 1.35.2
  • dotnet-format from 8.0.108 to 8.0.110
  • eslint from 8.57.0 to 8.57.1
  • gitleaks from 8.18.4 to 8.20.1
  • golangci-lint from 1.60.1 to 1.61.0
  • kics from 2.1.2 to 2.1.3
  • lightning-flow-scanner from 2.33.0 to 2.34.0
  • lychee from 0.15.1 to 0.16.1
  • markdownlint from 0.41.0 to 0.42.0
  • mypy from 1.11.1 to 1.11.2
  • npm-groovy-lint from 14.6.0 to 15.0.2
  • php-cs-fixer from 3.62.0 to 3.64.0
  • phpcs from 3.10.2 to 3.10.3
  • phplint from 9.4.1 to 9.5.3
  • phpstan from 1.11.11 to 1.12.6
  • pmd from 7.4.0 to 7.6.0
  • psalm from Psalm.5.25.0@ to Psalm.5.26.1@
  • pylint from 3.2.6 to 3.3.1
  • pyright from 1.1.376 to 1.1.384
  • revive from 1.3.9 to 1.4.0
  • roslynator from 0.8.9.0 to 0.9.1.0
  • rubocop from 1.65.1 to 1.66.1
  • ruff from 0.6.1 to 0.6.9
  • scalafix from 0.12.1 to 0.13.0
  • secretlint from 8.2.4 to 8.4.0
  • sfdx-scanner-apex from 4.4.0 to 4.6.0
  • sfdx-scanner-aura from 4.4.0 to 4.6.0
  • sfdx-scanner-lwc from 4.4.0 to 4.6.0
  • shfmt from 3.8.0 to 3.9.0
  • snakemake from 8.18.1 to 8.21.0
  • spectral from 6.11.1 to 6.13.1
  • sqlfluff from 3.1.0 to 3.2.3
  • standard from 17.1.0 to 17.1.2
  • stylelint from 16.8.2 to 16.10.0
  • swiftlint from 0.56.1 to 0.57.0
  • syft from 1.11.0 to 1.14.0
  • terraform-fmt from 1.9.4 to 1.9.5
  • terragrunt from 0.66.8 to 0.67.5
  • terrascan from 1.18.11 to 1.19.9
  • trivy-sbom from 0.54.1 to 0.56.2
  • trivy from 0.54.1 to 0.56.2
  • trufflehog from 3.81.10 to 3.82.8
  • v8r from 4.0.1 to 4.1.0
  • vale from 3.7.0 to 3.7.1

[v8.0.0] - 2024-08-19

• Reporters
  • New ApiReporter (can be used to build Grafana dashboards), by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3540

• Removed deprecated linters, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3854
  • CSS_SCSSLINT: Project discontinued and advising to use stylelint
  • OPENAPI_SPECTRAL: Replaced by API_SPECTRAL (same linter but more formats handled)
  • SQL_SQL_LINT: Project no longer maintained

• Core
  • Hide to linters by default all environment variables that contain TOKEN, USERNAME or PASSWORD, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3881
  • Allow to override CLI_LINT_MODE when defined as project, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3772
  • Allow to use absolute paths for LINTER_RULES_PATH, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3775
  • Allow to update variables from PRE/POST Commands using output_variables property, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3861

• Media
  • MegaLinter: un linter pour les gouverner tous (FR), by Guillaume Arnaud from WeScale
  • MegaLinter, by Stéphane Robert, from 3DS OutScale
  • 30 Seconds to Setup MegaLinter: Your Go-To Tool for Automated Code Quality, by Peng Cao |

• Linters enhancements
  • bandit Call bandit with quiet mode to generate less logs, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3892
  • grype Count number of errors returned by Grype, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3906
  • yamllint Fix yamllint default format to avoid special characters or GitHub sections in text logs, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3898

• Fixes
  • terrascan fixed errors and removed redundant code, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3767
  • dotnet-format various performance improvements and ability to specify sln or proj paths, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3741
  • swiftlint Remove deprecated argument --path
  • Salesforce linters: Disable SF CLI auto update warning, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3883

• Doc
  • Add images and links to Git, CI/CD & other tools integrations at the beginning of the README, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3885
  • Create README animated GIF presentation of MegaLinter, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3910
  • Format mkdocs search index in place, by @echoix in https://github.com/oxsecurity/megalinter/pull/3890
  • Use consistent spelling of 'flavor', by @InputUsername in https://github.com/oxsecurity/megalinter/pull/3789

• CI
  • Fix docker warnings, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3853
    • FromAsCasing: 'as' and 'FROM' keywords' casing do not match
    • NoEmptyContinuation: Empty continuation line
    • SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data
  • Port Beta workflows to use docker/metadata-action, by @echoix in https://github.com/oxsecurity/megalinter/pull/3860
  • AutoUpdate linters: Always create a PR if the job has been started manually, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3863
  • Add skip_checkout: true to default MegaLinter GitHub Action template
  • Remove path filters in deploy-DEV workflow as it is a required check by @echoix in https://github.com/oxsecurity/megalinter/pull/3894

• mega-linter-runner
  • Add new rules to upgrade to MegaLinter v8, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3896
  • Replace glob-promise by glob library, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3902
    • Minimum NodeJs version is now 20.x

• Linter versions upgrades
  • ansible-lint from 24.6.1 to 24.7.0
  • bicep_linter from 0.28.1 to 0.29.47
  • black from 24.4.2 to 24.8.0
  • cfn-lint from 1.5.0 to 1.10.3
  • checkov from 3.2.174 to 3.2.232
  • clippy from 0.1.79 to 0.1.80
  • clj-kondo from 2024.05.24 to 2024.08.01
  • csharpier from 0.28.2 to 0.29.0
  • cspell from 8.10.4 to 8.14.1
  • dotnet-format from 8.0.106 to 8.0.108
  • flake8 from 7.1.0 to 7.1.1
  • golangci-lint from 1.59.1 to 1.60.1
  • grype from 0.79.2 to 0.79.5
  • jsonlint from 14.0.3 to 16.0.0
  • kics from 2.1.1 to 2.1.2
  • kubeconform from 0.6.6 to 0.6.7
  • lightning-flow-scanner from 2.28.0 to 2.33.0
  • mypy from 1.10.1 to 1.11.1
  • php-cs-fixer from 3.59.3 to 3.62.0
  • phpcs from 3.10.1 to 3.10.2
  • phpstan from 1.11.9 to 1.11.11
  • pmd from 7.3.0 to 7.4.0
  • prettier from 3.3.2 to 3.3.3
  • protolint from 0.50.2 to 0.50.5
  • pylint from 3.2.5 to 3.2.6
  • pyright from 1.1.370 to 1.1.376
  • revive from 1.3.7 to 1.3.9
  • rstcheck from 6.2.1 to 6.2.4
  • rubocop from 1.64.1 to 1.65.1
  • ruff from 0.5.1 to 0.6.1
  • sfdx-scanner-apex from 4.3.2 to 4.4.0
  • sfdx-scanner-aura from 4.3.2 to 4.4.0
  • sfdx-scanner-lwc from 4.3.2 to 4.4.0
  • snakemake from 8.15.2 to 8.18.1
  • stylelint from 16.6.1 to 16.8.2
  • swiftlint from 0.55.1 to 0.56.1
  • syft from 1.8.0 to 1.11.0
  • terraform-fmt from 1.9.0 to 1.9.4
  • terragrunt from 0.59.6 to 0.66.8
  • tflint from 0.52.0 to 0.53.0
  • trivy-sbom from 0.53.0 to 0.54.1
  • trivy from 0.53.0 to 0.54.1
  • trufflehog from 3.79.0 to 3.81.9
  • v8r from 3.1.0 to 4.0.1
  • vale from 3.6.0 to 3.7.0

[v7.13.0] - 2024-07-06

• New linters
  • Add ls-lint, file and folder linter, by @scolladon in https://github.com/oxsecurity/megalinter/pull/3681

• Core
  • Handle renovate version comments in build script, by @echoix in https://github.com/oxsecurity/megalinter/pull/3617 , https://github.com/oxsecurity/megalinter/pull/3627 , https://github.com/oxsecurity/megalinter/pull/3643 , https://github.com/oxsecurity/megalinter/pull/3699 , https://github.com/oxsecurity/megalinter/pull/3700
  • Update base image to python:3.12.4-alpine3.20
  • Use dotnet8-sdk available in the main repository, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3696

• Media
  • Introducing MegaLinter: Streamlining Code Quality Checks Across Multiple Languages, by Cloud Tuned
  • Infrastructure as Code GitHub Codespace Template, by Luke Murray
  • Video: How to: Secrets scanning, by Hackitect's playground

• Linters enhancements
  • Add SARIF support (v2) for all PHP linters by @llaville in https://github.com/oxsecurity/megalinter/pull/3745 , https://github.com/oxsecurity/megalinter/pull/3729
  • Add python package Pygments to rst-lint venv, by @bobidle in https://github.com/oxsecurity/megalinter/pull/3631
  • CSharpier added ability to override config filename and path, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3664
  • xmllint added support for xsd files, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3665

• Fixes
  • Improve support for single argument in get_list_args function, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3589
  • ansible-lint Improved activation by checking for .ansible-lint config file, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3697
  • DevSkim fixed fatal errors when scanning and ability to override config path, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3673
  • GitLeaks add missing schema properties, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3675
  • Powershell Error table truncation improvements, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3620
  • Powershell added missing schema property POWERSHELL_POWERSHELL_FORMATTER_OUTPUT_ENCODING, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3678
  • syft use scan instead of deprecated packages arg, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3613
  • tflint added missing schema property TERRAFORM_TFLINT_SECURED_ENV, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3679
  • tflint fixed deprecated argument and other improvements to default .tflint.hcl template, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3688
  • xmllint added missing schema properties XML_XMLLINT_AUTOFORMAT and XML_XMLLINT_INDENT, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3677
  • yamllint fix error/warning count to work with different log output formats, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3612

• Doc
  • Update documentation icons by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3625

• Flavors
  • Add gherkin-lint in c_cpp flavor, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3698

• CI
  • Bump actions/checkout from 3 to 4, by @KristjanESPERANTO in https://github.com/oxsecurity/megalinter/pull/2994
  • Reduce dependabot PR frequency to weekly by @echoix in https://github.com/oxsecurity/megalinter/pull/3642

• Linter versions upgrades
  • ansible-lint from 24.2.3 to 24.6.1
  • bandit from 1.7.8 to 1.7.9
  • bash-exec from 5.2.21 to 5.2.26
  • bicep_linter from 0.27.1 to 0.28.1
  • cfn-lint from 0.87.4 to 1.5.0
  • checkov from 3.2.122 to 3.2.174
  • clang-format from 17.0.5 to 17.0.6
  • clippy from 0.1.78 to 0.1.79
  • cspell from 8.8.3 to 8.10.4
  • editorconfig-checker from 3.0.1 to 3.0.3
  • flake8 from 7.0.0 to 7.1.0
  • git_diff from 2.43.4 to 2.45.2
  • gitleaks from 8.18.2 to 8.18.4
  • golangci-lint from 1.59.0 to 1.59.1
  • grype from 0.78.0 to 0.79.2
  • helm from 3.14.2 to 3.14.3
  • jscpd from 4.0.4 to 4.0.5
  • kics from 2.0.1 to 2.1.1
  • ktlint from 1.2.1 to 1.3.1
  • lightning-flow-scanner from 2.26.0 to 2.28.0
  • markdown-table-formatter from 1.6.0 to 1.6.1
  • mypy from 1.10.0 to 1.10.1
  • npm-package-json-lint from 7.1.0 to 8.0.0
  • php-cs-fixer from 3.58.1 to 3.59.3
  • phplint from 9.3.1 to 9.4.1
  • phpstan from 1.11.3 to 1.11.7
  • pmd from 7.1.0 to 7.3.0
  • prettier from 3.3.0 to 3.3.2
  • protolint from 0.49.7 to 0.50.2
  • psalm from Psalm.5.24.0@ to Psalm.5.25.0@
  • pylint from 3.2.2 to 3.2.5
  • pyright from 1.1.365 to 1.1.370
  • ruff from 0.4.10 to 0.5.1
  • sfdx-scanner-apex from 3.25.0 to 4.3.2
  • sfdx-scanner-aura from 3.25.0 to 4.3.2
  • sfdx-scanner-lwc from 3.25.0 to 4.3.2
  • snakemake from 8.12.0 to 8.15.2
  • sqlfluff from 3.0.7 to 3.1.0
  • swiftlint from 0.54.0 to 0.55.1
  • syft from 1.5.0 to 1.8.0
  • terraform-fmt from 1.8.4 to 1.9.0
  • terragrunt from 0.58.13 to 0.59.6
  • tflint from 0.51.1 to 0.52.0
  • trivy-sbom from 0.51.4 to 0.53.0
  • trivy from 0.51.4 to 0.53.0
  • trufflehog from 3.77.0 to 3.79.0
  • v8r from 3.0.0 to 3.1.0
  • vale from 3.4.2 to 3.6.0
  • xmllint from 21108 to 21207

[v7.12.0] - 2024-06-02

• Core
  • Add new logs (at debug level) on each linter activation/deactivation
  • Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues
  • Upgrade to Java 21 except for npm-groovy-lint that requires Java 17

• Media
  • Add blog post 5 ways MegaLinter upped our DevSecOps game to the list of English articles by @wesley-dean-flexion in https://github.com/oxsecurity/megalinter/pull/3596

• Linters
  • Add PHP fixer by @llaville in https://github.com/oxsecurity/megalinter/pull/3598
  • API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #3387
  • Disable SQL_TSQLLINT until security issues are solved. Related to https://github.com/tsqllint/tsqllint/issues/333
  • PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of https://github.com/llaville/sarif-php-sdk
  • Php psalm improvement by @llaville in https://github.com/oxsecurity/megalinter/pull/3541
  • KOTLIN_KTLINT now supports list_of_files mode, and has better error counting
  • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project

• Fixes
  • Change golangci-lint lint mode to project, by @wandering-tales in https://github.com/oxsecurity/megalinter/pull/3509
  • Disable sql-lint as it is no longer maintained
  • Add new entries findUnusedCode and findUnusedBaselineEntry in default psalm.xml configuration file for PHP_PSALM linter. Related to https://github.com/oxsecurity/megalinter/issues/3538
  • fix(pylint): overgeneral-exceptions fully qualified name by @gardar in https://github.com/oxsecurity/megalinter/pull/3576
  • Update ktlint descriptor to support list_of_files and better error counting by @Yann-J in https://github.com/oxsecurity/megalinter/pull/3575
  • Sync PowerShell version in arm.megalinter-descriptor.yml by @echoix in https://github.com/oxsecurity/megalinter/pull/3586
  • Adjust find commands to clean up files in same step by @echoix in https://github.com/oxsecurity/megalinter/pull/3588
  • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3590

• Doc
  • Handle disabled_reason property in descriptors
  • Sort enums in json schema, by @echoix in https://github.com/oxsecurity/megalinter/pull/3595

• Flavors

• CI
  • Build: take in account disabled linters for workflow auto-update
  • Remove useless package-lock.json that was in python tests folder
  • Fix SARIF_REPORTER that was wrongly sent to true to format & fix test methods
  • Build: Write ARG lines at the top of Dockerfiles if they are used by FROM variables
  • Remove Github Actions Workflow telemetry to improve performances
  • Update Docker image for Gitpod to run on Ubuntu Noble, by @echoix
  • Update makefile bootstrap config (gitpod or local) to use uv for package installation, by @echoix
  • Use uv to install Python deps for CI by @echoix in https://github.com/oxsecurity/megalinter/pull/3561
  • Use a single find command to delete pycache files by @echoix in https://github.com/oxsecurity/megalinter/pull/3562
  • Sort schema enums by @echoix in https://github.com/oxsecurity/megalinter/pull/3595

• Linter versions upgrades
  • actionlint from 1.6.27 to 1.7.1
  • ansible-lint from 24.2.2 to 24.2.3
  • bicep_linter from 0.26.170 to 0.27.1
  • black from 24.4.0 to 24.4.2
  • cfn-lint from 0.86.4 to 0.87.4
  • checkov from 3.2.74 to 3.2.122
  • checkstyle from 10.15.0 to 10.17.0
  • clippy from 0.1.77 to 0.1.78
  • clj-kondo from 2024.03.13 to 2024.05.24
  • csharpier from 0.28.1 to 0.28.2
  • cspell from 8.7.0 to 8.8.3
  • detekt from 1.23.5 to 1.23.6
  • dotnet-format from 8.0.104 to 8.0.106
  • editorconfig-checker from 2.7.2 to 3.0.1
  • git_diff from 2.43.0 to 2.43.4
  • golangci-lint from 1.57.2 to 1.59.0
  • grype from 0.77.0 to 0.78.0
  • jscpd from 3.5.10 to 4.0.4
  • kics from 2.0.0 to 2.0.1
  • kubeconform from 0.6.4 to 0.6.6
  • lightning-flow-scanner from 2.22.0 to 2.24.0
  • luacheck from 1.1.2 to 1.2.0
  • lychee from 0.14.3 to 0.15.1
  • markdown-link-check from 3.12.1 to 3.12.2
  • markdown-table-formatter from 1.5.0 to 1.6.0
  • markdownlint from 0.39.0 to 0.41.0
  • mypy from 1.9.0 to 1.10.0
  • npm-groovy-lint from 14.4.1 to 14.6.0
  • phpcs from 3.9.1 to 3.10.1
  • phplint from 9.1.2 to 9.3.1
  • phpstan from 1.10.67 to 1.11.0 to 1.11.3
  • pmd from 6.55.0 to 7.1.0
  • powershell from 7.4.1 to 7.4.2
  • powershell_formatter from 7.4.1 to 7.4.2
  • prettier from 3.2.5 to 3.3.0
  • proselint from 0.13.0 to 0.14.0
  • protolint from 0.49.6 to 0.49.7
  • psalm from Psalm.5.23.1@ to Psalm.5.24.0@
  • pylint from 3.1.0 to 3.2.2
  • pyright from 1.1.359 to 1.1.365
  • roslynator from 0.8.6.0 to 0.8.9.0
  • rubocop from 1.63.3 to 1.64.1
  • ruff from 0.4.1 to 0.4.7
  • scalafix from 0.12.0 to 0.12.1
  • secretlint from 8.2.3 to 8.2.4
  • sfdx-scanner-apex from 3.23.0 to 3.25.0
  • sfdx-scanner-aura from 3.23.0 to 3.25.0
  • sfdx-scanner-lwc from 3.23.0 to 3.25.0
  • snakefmt from 0.10.1 to 0.10.2
  • snakemake from 8.10.8 to 8.12.0
  • sqlfluff from 3.0.5 to 3.0.7
  • stylelint from 16.4.0 to 16.6.1
  • syft from 1.2.0 to 1.5.0
  • tekton-lint from 1.0.2 to 1.1.0
  • terraform-fmt from 1.8.1 to 1.8.4
  • terragrunt from 0.57.5 to 0.58.10
  • tflint from 0.50.3 to 0.51.1
  • trivy-sbom from 0.50.2 to 0.51.4
  • trivy from 0.50.2 to 0.51.4
  • trufflehog from 3.73.0 to 3.77.0
  • vale from 3.4.0 to 3.4.2
  • xmllint from 21107 to 21108

[v7.11.1] - 2024-04-23

• Fixes
  • Implement fallback in case git diff does not work with merge-base

• Linter versions upgrades
  • stylelint from 16.3.1 to 16.4.0

[v7.11.0] - 2024-04-23

• Core
  • Allow to override the number of parallel cores used, with variable PARALLEL_PROCESS_NUMBER, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3428
  • Upgrade base python image from 3.12.2-alpine3.19 to 3.12.3-alpine3.19
  • Upgrade PHP 8.1 to 8.3 by @llaville in https://github.com/oxsecurity/megalinter/pull/3464
  • Add descriptor pre / post commands, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/3468
  • Allow merge lists with EXTENDS, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/3469

• Media

• New linters
  • Add Kotlin detekt linter, by @enciyo in https://github.com/oxsecurity/megalinter/pull/3408

• Reporters
  • Add ruff sarif support, by @Skitionek in https://github.com/oxsecurity/megalinter/pull/3486

• Fixes
  • Fix listing of modified files, by @vkucera in https://github.com/oxsecurity/megalinter/pull/3472. Fixes https://github.com/oxsecurity/megalinter/issues/2125.
  • Fix conflict between prettier and yamllint about spaces, by @apeyrat in https://github.com/oxsecurity/megalinter/pull/3426
  • Ensure trufflehog does not auto-update itself, by @wandering-tales in https://github.com/oxsecurity/megalinter/pull/3430
  • Salesforce linters: use sf + default Flow Scanner rules, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3435
  • Disable JSON_ESLINT_PLUGIN_JSONC until https://github.com/ota-meshi/eslint-plugin-jsonc/issues/328 is fixed
  • Upgrade tar in mega-linter-runner
  • secretlint: remove default .secretlintignore that was never used but .gitignore is used instead. Fixes #3328
  • Add jpeg, xlsx to .gitleaks.toml, by @rasa in https://github.com/oxsecurity/megalinter/pull/3434
  • Fix Json Schema, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3470
  • Remove TEMPLATES/.secretlintignore, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/3476

• Doc
  • Update R2DevOps logo, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3436
  • Update Roslynator repo url and logo, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3444
  • Fix clang-format documentation links to point to the correct version. Fixes #3452, by @daltonv in https://github.com/oxsecurity/megalinter/pull/3453
  • Add copy to clipboard button in code block (documentation), by @nikkii86 in https://github.com/oxsecurity/megalinter/pull/3491

• Flavors
  • Add C & C++ linters in Python flavor by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3456

• CI
  • Make SPELL_LYCHEE non blocking for internal CI jobs
  • Remove old unused automerge workflows by @echoix in https://github.com/oxsecurity/megalinter/pull/3432
  • Add consistent python3/python handling at build.sh, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/3475

• Linter versions upgrades
  • ansible-lint from 24.2.0 to 24.2.2
  • bicep_linter from 0.25.53 to 0.26.170
  • black from 24.2.0 to 24.4.0
  • cfn-lint from 0.86.0 to 0.86.4
  • checkov from 3.2.34 to 3.2.74
  • checkstyle from 10.14.0 to 10.15.0
  • clippy from 0.1.76 to 0.1.77
  • clj-kondo from 2024.03.05 to 2024.03.13
  • csharpier from 0.27.3 to 0.28.1
  • cspell from 8.6.0 to 8.7.0
  • devskim from 1.0.32 to 1.0.33
  • dotnet-format from 8.0.102 to 8.0.104
  • eslint-plugin-jsonc from 2.13.0 to 2.15.1
  • golangci-lint from 1.56.2 to 1.57.2
  • grype from 0.74.7 to 0.77.0
  • kics from 1.7.13 to 2.0.0
  • lightning-flow-scanner from 2.18.0 to 2.22.0
  • markdown-link-check from 3.11.2 to 3.12.1
  • npm-groovy-lint from 14.2.3 to 14.4.1
  • phpcs from 3.9.0 to 3.9.1
  • phpstan from 1.10.60 to 1.10.67
  • protolint from 0.48.0 to 0.49.6
  • psalm from Psalm.5.23.0@ to Psalm.5.23.1@
  • pyright from 1.1.353 to 1.1.359
  • roslynator from 0.8.3.0 to 0.8.6.0
  • rstcheck from 6.2.0 to 6.2.1
  • rubocop from 1.62.0 to 1.63.3
  • ruff from 0.3.2 to 0.4.1
  • secretlint from 8.1.2 to 8.2.3
  • sfdx-scanner-apex from 3.21.0 to 3.23.0
  • sfdx-scanner-aura from 3.21.0 to 3.23.0
  • sfdx-scanner-lwc from 3.21.0 to 3.23.0
  • snakefmt from 0.10.0 to 0.10.1
  • snakemake from 8.5.5 to 8.10.8
  • spectral from 6.11.0 to 6.11.1
  • sqlfluff from 2.3.5 to 3.0.5
  • stylelint from 16.2.1 to 16.3.1
  • syft from 1.0.1 to 1.2.0
  • tekton-lint from 1.0.0 to 1.0.2
  • terraform-fmt from 1.7.4 to 1.8.1
  • terragrunt from 0.55.13 to 0.57.5
  • trivy-sbom from 0.49.1 to 0.50.2
  • trivy from 0.49.1 to 0.50.2
  • trufflehog from 3.69.0 to 3.73.0
  • vale from 3.2.2 to 3.4.0

[v7.10.0] - 2024-03-10

• Core
  • Update dotnet linters to .NET 8, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/3182

• Media
  • How to use MegaLinter with Jenkins, by Darin Pope / Cloudbees

• Fixes
  • Trivy: use misconfig instead of the deprecated config scanner, updating the default arguments, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/3376
  • Update calls to sfdx-scanner to output a CSV file for Aura & LWC, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3398
  • Kics: fixed error count in the summary table, by @TommyE123 in https://github.com/oxsecurity/megalinter/pull/3402
  • Fix issue with EXTENDS using private repository by sending GITHUB_TOKEN as HTTP auth header, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3404
  • Fix SPELL_VALE_CONFIG_FILE not working (handle the override of linter CONFIG_FILE if the linter is activated only if some files are found), by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3409

• CI
  • Enable dependabot updates for devcontainer and other Docker directories, by @echoix in https://github.com/oxsecurity/megalinter/pull/3390

• Doc
  • Removed obsolete warning for semgrep as the issue has been fixed, by @Jayllyz in https://github.com/oxsecurity/megalinter/pull/3374
  • docs: fix docs in TrivySbomLinter.py, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/3377S

• Linter versions upgrades
  • actionlint from 1.6.26 to 1.6.27
  • bandit from 1.7.7 to 1.7.8
  • bicep_linter from 0.25.3 to 0.25.53
  • black from 24.1.1 to 24.2.0
  • cfn-lint from 0.85.1 to 0.86.0
  • checkov from 3.2.20 to 3.2.21
  • checkstyle from 10.13.0 to 10.14.0
  • clj-kondo from 2023.12.15 to 2024.03.05
  • csharpier from 0.27.2 to 0.27.3
  • cspell from 8.3.2 to 8.6.0
  • devskim from 1.0.28 to 1.0.32
  • dotnet-format from 7.0.115 to 8.0.102
  • eslint from 8.56.0 to 8.57.0
  • golangci-lint from 1.56.1 to 1.56.2
  • grype from 0.74.5 to 0.74.7
  • helm from 3.13.2 to 3.14.2
  • kics from 1.7.12 to 1.7.13
  • ktlint from 1.1.1 to 1.2.1
  • lightning-flow-scanner from 2.16.0 to 2.18.0
  • mypy from 1.8.0 to 1.9.0
  • npm-groovy-lint from 14.2.1 to 14.2.3
  • phpcs from 3.8.1 to 3.9.0
  • phpstan from 1.10.57 to 1.10.60
  • powershell from 7.4.0 to 7.4.1
  • powershell_formatter from 7.4.0 to 7.4.1
  • protolint from 0.47.5 to 0.48.0
  • psalm from Psalm.5.21.1@ to Psalm.5.23.0@
  • pylint from 3.0.3 to 3.1.0
  • pyright from 1.1.350 to 1.1.353
  • rubocop from 1.60.2 to 1.62.0
  • ruff from 0.2.1 to 0.3.2
  • scalafix from 0.11.1 to 0.12.0
  • secretlint from 8.1.1 to 8.1.2
  • shellcheck from 0.9.0 to 0.10.0
  • snakemake from 8.4.8 to 8.5.5
  • syft from 0.104.0 to 1.0.1
  • terraform-fmt from 1.7.3 to 1.7.4
  • terragrunt from 0.55.1 to 0.55.13
  • trufflehog from 3.67.5 to 3.69.0
  • vale from 3.0.5 to 3.2.2
  • xmllint from 21106 to 21107
  • yamllint from 1.34.0 to 1.35.1

[v7.9.0] - 2024-02-11

• Core
  • Upgrade actions/checkout and stefanzweifel/git-auto-commit-action in generator template workflow, by @Jayllyz in #3327
  • Upgrade base python image to python:3.12.2-alpine3.19

• Fixes
  • Format powershell linter output into terminal-wide table, and count errors, by @efrecon in #3318
  • Allow active_only_if_file_found to work in specified subdirectory (_DIRECTORY), fixes #2873, by @TimothyEarley in #3323
  • Activate CI servers reporters only if we find a related default env variable, by @nvuillam in #3321

• Doc
  • Update copyright year to 2024, by @Jayllyz in #3339

• CI
  • Free more disk space before docker build
  • Upgrade peter-evans/create-pull-request from v5 to v6 in GitHub Actions workflows

• Linter versions upgrades
  • ansible-lint from 6.22.2 to 24.2.0
  • bandit from 1.7.6 to 1.7.7
  • bicep_linter from 0.24.24 to 0.25.3
  • black from 23.12.1 to 24.1.1
  • cfn-lint from 0.84.0 to 0.85.1
  • checkov from 3.1.67 to 3.2.20
  • checkstyle from 10.12.7 to 10.13.0
  • clippy from 0.1.75 to 0.1.76
  • csharpier from 0.27.0 to 0.27.2
  • eslint-plugin-jsonc from 2.12.2 to 2.13.0
  • gitleaks from 8.18.1 to 8.18.2
  • golangci-lint from 1.55.2 to 1.56.1
  • grype from 0.63.1 to 0.74.5
  • lychee from 0.14.1 to 0.14.3
  • markdownlint from 0.38.0 to 0.39.0
  • npm-groovy-lint from 14.2.0 to 14.2.1
  • phplint from 9.1.0 to 9.1.2
  • phpstan from 1.10.56 to 1.10.57
  • prettier from 3.2.4 to 3.2.5
  • psalm from Psalm.5.20.0@ to Psalm.5.21.1@
  • puppet-lint from 4.2.3 to 4.2.4
  • pyright from 1.1.347 to 1.1.350
  • revive from 1.3.6 to 1.3.7
  • roslynator from 0.8.2.0 to 0.8.3.0
  • rubocop from 1.60.1 to 1.60.2
  • ruff from 0.1.14 to 0.2.1
  • secretlint from 8.1.0 to 8.1.1
  • sfdx-scanner-apex from 3.20.0 to 3.21.0
  • sfdx-scanner-aura from 3.20.0 to 3.21.0
  • sfdx-scanner-lwc from 3.20.0 to 3.21.0
  • shfmt from 3.7.0 to 3.8.0
  • snakefmt from 0.9.0 to 0.10.0
  • snakemake from 8.2.3 to 8.4.8
  • stylelint from 16.2.0 to 16.2.1
  • syft from 0.101.1 to 0.104.0
  • terraform-fmt from 1.7.0 to 1.7.3
  • terragrunt from 0.54.20 to 0.55.1
  • tflint from 0.50.1 to 0.50.3
  • trivy-sbom from 0.48.3 to 0.49.1
  • trivy from 0.48.3 to 0.49.1
  • trufflehog from 3.63.10 to 3.67.5
  • v8r from 2.1.0 to 3.0.0
  • yamllint from 1.33.0 to 1.34.0

[v7.8.0] - 2024-01-21

• Reporters
  • New reporter MARKDOWN_SUMMARY_REPORTER, allows saving MegaLinter results summary as a markdown file. This file can be further utilised to add comments on the pull request (PR) from Jenkins and other continuous integration (CI) tools by @saishivarcr in https://github.com/oxsecurity/megalinter/pull/3250
  • New reporter BITBUCKET_COMMENT_REPORTER allowing to post MegaLinter results as comments on Bitbucket pull requests by @saishivarcr in https://github.com/oxsecurity/megalinter/pull/3256

• Core
  • mega-linter-runner: Remove container by default, except of no-remove-container option is sent by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3203
  • Upgrade base image from python:3.11.6-alpine3.18 to python:3.11.7-alpine3.18, by @echoix in #3212
  • Upgrade to python 3.12.0 by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3006
  • Upgrade actions/upload-artifact@v3 to actions/upload-artifact@v4 in default workflows by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3225
  • mega-linter-runner: Improve check if running as script or module, by @echoix in #3233

• Media
  • (FR) MegaLinter presentation at DevCon 20 / Programmez Magazine, by Nicolas Vuillamy

• Fixes
  • tekton-lint is now published as @ibm/tekton-lint, by @echoix in #3210
  • PHP PHIVE: Use keys.openpgp.org and fingerprint for phive key verification, by @echoix in #3230
  • Undowngrade sass linters, by @echoix in #3260
  • Upgrade lychee default configuration to handle breaking change between 0.13.0 and 0.14.0
  • Hadolint: support both Containerfile and Dockerfile by @sanmai-NL in https://github.com/oxsecurity/megalinter/pull/3217

• Doc
  • Upgrade url to PHP CodeSniffer, as now the original repo is not maintained anymore by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3201

• CI
  • Use docker/metadata-action for deploy-DEV.yml workflow, by @echoix in #3193

• Linter versions upgrades
  • ansible-lint from 6.22.1 to 6.22.2
  • bash-exec from 5.2.15 to 5.2.21
  • bicep_linter from 0.23.1 to 0.24.24 on 2023-12-14
  • black from 23.11.0 to 23.12.1 on 2023-12-23
  • cfn-lint from 0.83.4 to 0.84.0
  • checkov from 3.1.27 to 3.1.67
  • checkstyle from 10.12.6 to 10.12.7
  • clippy from 0.1.74 to 0.1.75 on 2023-12-28
  • clj-kondo from 2023.10.20 to 2023.12.15 on 2023-12-15
  • csharpier from 0.26.4 to 0.27.0
  • cspell from 8.1.3 to 8.3.2
  • devskim from 1.0.23 to 1.0.28
  • djlint from 1.34.0 to 1.34.1 on 2023-12-22
  • dotnet-format from 7.0.114 to 7.0.115
  • eslint-plugin-jsonc from 2.10.0 to 2.12.2
  • eslint from 8.55.0 to 8.56.0 on 2023-12-16
  • flake8 from 6.1.0 to 7.0.0
  • git_diff from 2.40.1 to 2.43.0
  • helm from 3.11.3 to 3.13.2
  • isort from 5.13.0 to 5.13.2 on 2023-12-13
  • kics from 1.7.11 to 1.7.12 on 2023-12-22
  • ktlint from 1.0.1 to 1.1.1
  • lychee from 0.13.0 to 0.14.1
  • mypy from 1.7.1 to 1.8.0 on 2023-12-22
  • npm-groovy-lint from 13.0.2 to 14.2.0
  • phpcs from 3.8.0 to 3.8.1
  • phplint from 9.0.6 to 9.1.0 on 2023-12-17
  • phpstan from 1.10.48 to 1.10.56
  • prettier from 3.1.0 to 3.2.4
  • protolint from 0.46.3 to 0.47.5
  • psalm from Psalm.5.17.0@ to Psalm.5.20.0@
  • pylint from 3.0.2 to 3.0.3 on 2023-12-13
  • pyright from 1.1.339 to 1.1.347
  • revive from 1.3.4 to 1.3.6
  • roslynator from 0.8.1.0 to 0.8.2.0
  • rubocop from 1.58.0 to 1.60.1
  • ruff from 0.1.7 to 0.1.14 on 2023-12-13
  • secretlint from 8.0.0 to 8.1.0 on 2023-12-28
  • sfdx-scanner-apex from 3.19.0 to 3.20.0
  • sfdx-scanner-aura from 3.19.0 to 3.20.0
  • sfdx-scanner-lwc from 3.19.0 to 3.20.0
  • snakefmt from 0.8.5 to 0.9.0
  • snakemake from 7.32.4 to 8.2.3
  • stylelint from 15.11.0 to 16.2.0
  • syft from 0.98.0 to 0.101.1 on 2023-12-22
  • tekton-lint from 0.6.0 to 1.0.0
  • terraform-fmt from 1.6.5 to 1.7.0
  • terragrunt from 0.54.0 to 0.54.20
  • terrascan from 1.18.3 to 1.18.8 on 2023-12-16
  • terrascan from 1.18.8 to 1.18.11 on 2023-12-30
  • tflint from 0.49.0 to 0.50.0 on 2023-12-30
  • tflint from 0.50.0 to 0.50.1
  • trivy-sbom from 0.48.0 to 0.48.1 on 2023-12-18
  • trivy-sbom from 0.48.1 to 0.48.2
  • trivy-sbom from 0.48.2 to 0.48.3
  • trivy from 0.48.0 to 0.48.1 on 2023-12-18
  • trivy from 0.48.1 to 0.48.2
  • trivy from 0.48.2 to 0.48.3
  • trufflehog from 3.63.2 to 3.63.3 on 2023-12-14
  • trufflehog from 3.63.3 to 3.63.4 on 2023-12-15
  • trufflehog from 3.63.4 to 3.63.6 on 2023-12-22
  • trufflehog from 3.63.6 to 3.63.7 on 2023-12-23
  • trufflehog from 3.63.7 to 3.63.9
  • trufflehog from 3.63.9 to 3.63.10
  • vale from 2.30.0 to 3.0.5

[v7.7.0] - 2023-12-09

• Core
  • Update base java apk package to openjdk 17 by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3160
  • Update dotnet linters to .NET 7 by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2402

• Media
  • Try using MegaLinter (article in japanese) by Takashi Minayaga

• New linters
  • Add clang-format c & cpp formatting linter including "apply fix" support
  • Add Roslynator C# linter by @bdovaz in https://github.com/oxsecurity/megalinter/pull/3155

• Fixes
  • Call jscpd with --gitignore to ignore copy-pastes in files matching .gitignore
  • cpplint: Dynamically add the list of extensions from list of files in --extensions parameter
  • Fix mkdocs generation + CI control job by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3135
  • Add semgrep ruleset to validation schema by @wesley-dean-flexion in https://github.com/oxsecurity/megalinter/pull/3164
  • Downgrade stylelint to avoid crash with not v16 compliant dependencies
  • Fix count of yaml-lint errors
  • Remove openssl reinstall, as base image has updated version from alpine 3.18.5 by @echoix in https://github.com/oxsecurity/megalinter/pull/3181

• CI
  • Add arguments to make use of pytest-xdist, by @echoix

• Linter versions upgrades
  • ansible-lint from 6.22.0 to 6.22.1
  • bandit from 1.7.5 to 1.7.6
  • cfn-lint from 0.83.3 to 0.83.4
  • checkov from 3.0.39 to 3.1.25
  • checkstyle from 10.12.5 to 10.12.6
  • csharpier from 0.26.2 to 0.26.4
  • cspell from 8.0.0 to 8.1.3
  • dotnet-format from 6.0.417 to 7.0.114
  • eslint from 8.54.0 to 8.55.0
  • gitleaks from 8.18.0 to 8.18.1
  • isort from 5.12.0 to 5.13.0
  • lightning-flow-scanner from 2.15.0 to 2.16.0
  • luacheck from 1.1.1 to 1.1.2
  • markdown-table-formatter from 1.4.0 to 1.5.0
  • markdownlint from 0.37.0 to 0.38.0
  • mypy from 1.7.0 to 1.7.1
  • npm-groovy-lint from 12.1.0 to 13.0.2
  • phpcs from 3.7.2 to 3.8.0
  • phplint from 9.0.4 to 9.0.6
  • phpstan from 1.10.42 to 1.10.48
  • psalm from Psalm.5.15.0@ to Psalm.5.17.0@
  • puppet-lint from 4.2.1 to 4.2.3
  • pyright from 1.1.336 to 1.1.339
  • roslynator from 0.8.0.0 to 0.8.1.0
  • rubocop from 1.57.2 to 1.58.0
  • ruff from 0.1.6 to 0.1.7
  • secretlint from 7.1.0 to 8.0.0
  • semgrep from 1.50.0 to 1.52.0
  • sfdx-scanner-apex from 3.18.0 to 3.19.0
  • sfdx-scanner-aura from 3.18.0 to 3.19.0
  • sfdx-scanner-lwc from 3.18.0 to 3.19.0
  • syft from 0.97.1 to 0.98.0
  • terraform-fmt from 1.6.4 to 1.6.5
  • terragrunt from 0.53.4 to 0.54.0
  • trivy from 0.47.0 to 0.48.0
  • trufflehog from 3.63.0 to 3.63.2
  • vale from 2.29.7 to 2.30.0

[v7.6.0] - 2023-11-19

• Major enhancements
  • New flavor c_cpp: New flavor for pure C/C++ projects, by @daltonv in https://github.com/oxsecurity/megalinter/pull/3067
  • New flavor formatters: Contains only formatter linters, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3071
  • Add Salesforce Lightning Flow Scanner, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3092

• Core
  • Allow to use value any to always activate a linter who as a _DIRECTORY variable. Example: KUBERNETES_DIRECTORY: any, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3058
  • Update base Docker image to python:3.11.6-alpine3.18

• Fixes
  • Fix issue Gitleaks --no-git does not work anymore, #2945, in #3112
  • Fix way to install powershell on Alpine linux image
  • Fix issue with VS Code devcontainer not building #3114
  • Fix Default Workflow to handle latest ActionLint rules, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3130
  • Write checkov SARIF report results_sarif.sarif in REPORT_FOLDER, by @gmeligio in https://github.com/oxsecurity/megalinter/pull/3121
  • Updated lintr config template to use linters_with_defaults() (formerly with_defaults())
  • Fix csharp installation dependencies, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3075
  • Fix powershell installation by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3126

• Doc
  • Update lintr links to their current locations, by @echoix in #3122
  • Update Pylint links to their current locations, by @echoix in #3116
  • Add R2DevOps way to setup MegaLinter on Gitlab, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/3129

• CI
  • Upgrade pymdown-extensions and markdown, by @BryanQuigley in #3053
  • Use docker/metadata-action for some internal CI, by @echoix in #3110
  • Call docker buildx prune instead of docker builder prune, by @echoix in #3127
  • Set schedule earlier for auto-update-linters.yml, allow manual runs, by @echoix in https://github.com/oxsecurity/megalinter/pull/3066
  • Add mike to dev/requirements.txt, by @echoix in https://github.com/oxsecurity/megalinter/pull/3070
  • Modernize dependabot.yml in correct directories, by @echoix in https://github.com/oxsecurity/megalinter/pull/3093
  • Fix devcontainer Dockerfile typo (fixes #3114) by @daltonv in https://github.com/oxsecurity/megalinter/pull/3115

• Linter versions upgrades
  • ansible-lint from 6.21.1 to 6.22.0
  • bicep_linter from 0.22.6 to 0.23.1
  • black from 23.10.1 to 23.11.0
  • cfn-lint from 0.83.0 to 0.83.3
  • checkov from 3.0.12 to 3.0.39
  • checkstyle from 10.12.4 to 10.12.5
  • clippy from 0.1.73 to 0.1.74
  • csharpier from 0.25.0 to 0.26.2
  • cspell from 7.3.8 to 8.0.0
  • dotnet-format from 6.0.416 to 6.0.417
  • eslint from 8.52.0 to 8.54.0
  • golangci-lint from 1.55.1 to 1.55.2
  • kics from 1.7.10 to 1.7.11
  • kubeconform from 0.6.3 to 0.6.4
  • mypy from 1.6.1 to 1.7.0
  • npm-groovy-lint from 11.1.1 to 12.1.0
  • npm-package-json-lint from 7.0.0 to 7.1.0
  • phpstan from 1.10.39 to 1.10.42
  • powershell from 7.3.9 to 7.4.0
  • powershell_formatter from 7.3.9 to 7.4.0
  • prettier from 3.0.3 to 3.1.0
  • protolint from 0.46.2 to 0.46.3
  • pyright from 1.1.333 to 1.1.336
  • ruff from 0.1.3 to 0.1.6
  • secretlint from 7.0.7 to 7.1.0
  • semgrep from 1.46.0 to 1.50.0
  • sfdx-scanner-apex from 3.17.0 to 3.18.0
  • sfdx-scanner-aura from 3.17.0 to 3.18.0
  • sfdx-scanner-lwc from 3.17.0 to 3.18.0
  • swiftlint from 0.53.0 to 0.54.0
  • syft from 0.94.0 to 0.97.1
  • terraform-fmt from 1.6.2 to 1.6.4
  • terragrunt from 0.53.0 to 0.53.4
  • tflint from 0.48.0 to 0.49.0
  • trivy-sbom from 0.46.1 to 0.47.0
  • trivy from 0.46.1 to 0.47.0
  • trufflehog from 3.61.0 to 3.63.0
  • vale from 2.29.5 to 2.29.7
  • xmllint from 21104 to 21106
  • yamllint from 1.32.0 to 1.33.0

[v7.5.0] - 2023-10-29

• Core
  • mega-linter-runner: Convert to ES6 and upgrade npm dependencies. Node 18 minimum version is now required.
  • Allow to define COMPILER_ONLY virtual package as cargo dependency in descriptors to embed rust compiler in the Dockerfile
  • Optimize @generated marker scanning (#2654)
  • Upgrade to python 3.12.0

• Media
  • Achieve Code Consistency: MegaLinter Integration in Azure DevOps, by Don Koning on Microsoft Tech Community

• Fixes
  • build.py: Remove exclusivity between pip, gem & cargo packages
  • Salesforce linters: Switch sfdx-cli to @salesforce/cli
  • Fixed issue with actionlint throwing an error on if statements in the generated workflow file
  • Added default .devskim.json to mitigate errors introduced when no config exists

• Doc
  • Display list of articles from newest to oldest
  • Fix incorrect environment variable in djlint docs
  • Improve lychee documentation to add an example of .lycheeignore

• CI
  • Add the other maintainers globally to the CODEOWNERS file (#3008)
  • Free disk space earlier in the process to avoid failure during docker build
  • Set flavors-stats.json as a generated file in .gitattributes (#3023)
  • Update and fix our ChatOps automations to only run on pull request comments, by @echoix in #3034
  • Use App::cpm to install perlcritic faster, and clean .perl-cpm cache, by @echoix in #3036
  • Add failure message in ChatOps build-command and Slash dispatcher, by @echoix in #3037

• Linter versions upgrades
  • ansible-lint from 6.20.0 6.21.1
  • bicep_linter from 0.21.1 to 0.22.6
  • black from 23.9.1 to 23.10.1
  • cfn-lint from 0.80.2 to 0.83.0
  • checkov from 2.4.48 to 3.0.12
  • checkstyle from 10.12.3 to 10.12.4
  • clippy from 0.1.72 to 0.1.73
  • clj-kondo from 2023.09.07 to 2023.10.20
  • cspell from 7.3.6 to 7.3.8
  • devskim from 1.0.22 to 1.0.23
  • dotnet-format from 6.0.414 to 6.0.416
  • editorconfig-checker from 2.7.1 to 2.7.2
  • eslint-plugin-jsonc from 2.9.0 to 2.10.0
  • eslint from 8.49.0 to 8.52.0
  • golangci-lint from 1.54.2 to 1.55.1
  • kics from 1.7.8 to 1.7.10
  • ktlint from 1.0.0 to 1.0.1
  • mypy from 1.5.1 to 1.6.1
  • perlcritic from 1.150 to 1.152
  • phpstan from 1.10.35 to 1.10.39
  • powershell from 7.3.7 to 7.3.9
  • powershell_formatter from 7.3.7 to 7.3.9
  • protolint from 0.46.0 to 0.46.2
  • puppet-lint from 4.2.0 to 4.2.1
  • pylint from 2.17.5 to 3.0.2
  • pyright from 1.1.327 to 1.1.333
  • rubocop from 1.56.3 to 1.57.2
  • ruff from 0.1.2 to 0.1.3
  • ruff from 0.0.290 to 0.1.2
  • semgrep from 1.41.0 to 1.46.0
  • sfdx-scanner-apex from 3.16.0 to 3.17.0
  • sfdx-scanner-aura from 3.16.0 to 3.17.0
  • sfdx-scanner-lwc from 3.16.0 to 3.17.0
  • snakefmt from 0.8.4 to 0.8.5
  • sqlfluff from 2.3.2 to 2.3.5
  • stylelint from 15.10.3 to 15.11.0
  • swiftlint from 0.52.4 to 0.53.0
  • syft from 0.91.0 to 0.94.0
  • terraform-fmt from 1.5.7 to 1.6.2
  • terragrunt from 0.51.4 to 0.53.0
  • trivy-sbom from 0.45.1 to 0.46.1
  • trivy from 0.45.1 to 0.46.1
  • trufflehog from 3.56.1 to 3.61.0
  • v8r from 2.0.0 to 2.1.0
  • vale from 2.29.0 to 2.29.5

[v7.4.0] - 2023-09-22

• Core
  • Upgrade python to 3.11.5

• Media
  • Maximize your code consistency with Megalinter by Tor Ivar Asbølmo on codewithme.cloud
  • MegaLinter in Azure DevOps by James Cook

• Fixes
  • Fix IGNORE_GITIGNORED_FILES not working anymore , by @iisisrael
  • Fix v7 issue when using MEGALINTER_FILES_TO_LINT ( thanks @pfiaux !)
  • Fix Ignore symlink files when VALIDATE_ALL_CODEBASE is false
  • Fix rstcheck options & install

• Doc
  • Secretlint logo - reduce size to 150 and remove background
  • Replace https://megalinter.io/flavors with https://megalinter.io/latest/flavors to avoid lychee 404 error

• CI
  • Workflow job name changed from build to megalinter to prevent conflicts with other workflows
  • Add support for master branch in TEMPLATES/mega-linter.yml, by @rasa

• Deprecations
  • Deprecate SCSS LINT as not maintained anymore (https://github.com/sds/scss-lint#notice-consider-other-tools-before-adopting-scss-lint)

• Linter versions upgrades
  • actionlint from 1.6.25 to 1.6.26
  • ansible-lint from 6.17.2 to 6.20.0
  • bicep_linter from 0.20.4 to 0.21.1
  • black from 23.7.0 to 23.9.1
  • cfn-lint from 0.79.6 to 0.80.2
  • checkov from 2.3.360 to 2.4.10
  • checkstyle from 10.12.2 to 10.12.3
  • chktex from 1.7.6 to 1.7.8
  • clippy from 0.1.71 to 0.1.72
  • clj-kondo from 2023.07.13 to 2023.09.07
  • cspell from 6.31.3 to 7.3.6
  • devskim from 1.0.18 to 1.0.22
  • djlint from 1.32.1 to 1.34.0
  • dotnet-format from 6.0.413 to 6.0.414
  • editorconfig-checker from 2.7.0 to 2.7.1
  • eslint from 8.46.0 to 8.49.0
  • git_diff from 2.38.5 to 2.40.1
  • gitleaks from 8.17.0 to 8.18.0
  • golangci-lint from 1.54.0 to 1.54.2
  • helm from 3.10.2 to 3.11.3
  • jscpd from 3.5.9 to 3.5.10
  • kics from 1.7.5 to 1.7.8
  • ktlint from 0.50.0 to 1.0.0
  • kubescape from 2.3.6 to 2.9.0
  • markdownlint from 0.35.0 to 0.36.0
  • mypy from 1.4.1 to 1.5.1
  • phpstan from 1.10.28 to 1.10.35
  • powershell from 7.3.6 to 7.3.7
  • powershell_formatter from 7.3.6 to 7.3.7
  • prettier from 3.0.1 to 3.0.3
  • protolint from 0.45.0 to 0.46.0
  • psalm from Psalm.5.14.1@ to Psalm.5.15.0@
  • puppet-lint from 4.0.1 to 4.2.0
  • pyright from 1.1.321 to 1.1.327
  • revive from 1.3.2 to 1.3.4
  • rstcheck from 6.1.2 to 6.2.0
  • rstfmt from 0.0.13 to 0.0.14
  • rubocop from 1.56.0 to 1.56.3
  • ruff from 0.0.284 to 0.0.290
  • scalafix from 0.11.0 to 0.11.1
  • semgrep from 1.34.1 to 1.41.0
  • sfdx-scanner-apex from 3.15.0 to 3.16.0
  • sfdx-scanner-aura from 3.15.0 to 3.16.0
  • sfdx-scanner-lwc from 3.15.0 to 3.16.0
  • snakemake from 7.32.3 to 7.32.4
  • spectral from 6.10.1 to 6.11.0
  • sqlfluff from 2.2.1 to 2.3.2
  • stylelint from 15.10.2 to 15.10.3
  • syft from 0.86.1 to 0.91.0
  • terraform-fmt from 1.5.4 to 1.5.7
  • terragrunt from 0.48.6 to 0.51.3
  • terrascan from 1.18.2 to 1.18.3
  • tflint from 0.47.0 to 0.48.0
  • trivy-sbom from 0.44.0 to 0.45.1
  • trivy from 0.44.0 to 0.45.1
  • trufflehog from 3.47.0 to 3.56.1
  • vale from 2.28.1 to 2.29.0
  • xmllint from 21004 to 21104

[v7.3.0] - 2023-08-10

• Features
  • Allow to define linter_key_COMMAND_REMOVE_ARGUMENTS to remove a command line argument internally added by MegaLinter

• Fixes
  • Replace https://megalinter.io/config-file by https://megalinter.io/latest/config-file to avoid lychee 404 detection
  • Improve docs for posting comments to PRs in GitHub Enterprise

• CodeTotal
  • Redis reporter: Return URL of linter icons when available, in property iconPngUrl
  • Allow to run CodeTotal with a single command npx mega-linter-runner@latest --codetotal , that opens CodeTotal in Web Browser once started

• Linter versions upgrades
  • bicep_linter from 0.19.5 to 0.20.4
  • cfn-lint from 0.79.2 to 0.79.6
  • checkov from 2.3.343 to 2.3.360
  • checkstyle from 10.12.1 to 10.12.2
  • cspell from 6.31.2 to 6.31.3
  • devskim from 1.0.1 to 1.0.18
  • dotnet-format from 6.0.412 to 6.0.413
  • eslint from 8.45.0 to 8.46.0
  • flake8 from 6.0.0 to 6.1.0
  • golangci-lint from 1.53.3 to 1.54.0
  • kics from 1.7.4 to 1.7.5
  • phpstan from 1.10.26 to 1.10.28
  • prettier from 3.0.0 to 3.0.1
  • psalm from Psalm.5.13.1@ to Psalm.5.14.1@
  • puppet-lint from 4.0.0 to 4.0.1
  • pyright from 1.1.318 to 1.1.321
  • rubocop from 1.55.0 to 1.56.0
  • ruff from 0.0.280 to 0.0.284
  • secretlint from 7.0.3 to 7.0.7
  • semgrep from 1.33.2 to 1.34.1
  • sfdx-scanner-apex from 3.14.0 to 3.15.0
  • sfdx-scanner-aura from 3.14.0 to 3.15.0
  • sfdx-scanner-lwc from 3.14.0 to 3.15.0
  • snakemake from 7.31.0 to 7.32.3
  • spectral from 6.10.0 to 6.10.1
  • sqlfluff from 2.1.4 to 2.2.1
  • syft from 0.85.0 to 0.86.1
  • terraform-fmt from 1.5.3 to 1.5.4
  • terragrunt from 0.48.4 to 0.48.6
  • terrascan from 1.18.1 to 1.18.2
  • trivy-sbom from 0.43.1 to 0.44.0
  • trivy from 0.43.1 to 0.44.0
  • trufflehog from 3.45.1 to 3.47.0

[v7.2.1] - 2023-07-26

• Fixes
  • Fix TAP reporter (3 real dots instead if 3 dots character)
  • Call trufflehog with --only-verified to avoid false positives in .git/config

• Linter versions upgrades
  • cfn-lint from 0.78.2 to 0.79.2
  • checkov from 2.3.340 to 2.3.343
  • pylint from 2.17.4 to 2.17.5
  • rubocop from 1.54.2 to 1.55.0
  • snakemake from 7.30.2 to 7.31.0
  • spectral from 6.8.0 to 6.10.0
  • sqlfluff from 2.1.3 to 2.1.4
  • trufflehog from 3.44.0 to 3.45.1

[v7.2.0] - 2023-07-25

• New linters
  • Add Lychee - links and email addresses checker, by @DariuszPorowski in #2673
  • Add grype security linter
  • Add trufflehog security linter

• New flavor dotnetweb: dotnet flavor linters + Javascript & Typescript linters

• Media
  • 8 Tools to Scan Node.js Applications for Security Vulnerability, by Chandan Kumar on GeekFlare.com
  • Shift Left Just Become Easier (Black Hat Arsenal Session)

• Core
  • MegaLinter Server for CodeTotal
  • Improvements to Gitpod workspace and addition of Makefile for automation, by @ThomasSanson in https://github.com/oxsecurity/megalinter/pull/2737

• Fixes
  • Handle reporter crashes without making all ML crash
  • Devskim: Remove default --ignore-globs argument
  • mypy: Use /tmp as cache folder by default with ENV MYPY_CACHE_DIR=/tmp in Dockerfile
  • Fix hadolint to use its default configuration file properly, by @KihyeokK in https://github.com/oxsecurity/megalinter/pull/2763
  • Remove linters not in flavor before calling reporters
  • Undowngrade devskim, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2748
  • Add ts-standard linter for ts standard, by @janderssonse in https://github.com/oxsecurity/megalinter/pull/2746
  • Remove additional --update for apk in Dockerfile by @PeterDaveHello in https://github.com/oxsecurity/megalinter/pull/2619
  • Fix V8R config arg usage (#2756), by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2819

• Reporters
  • New Redis reporter (beta)

• CI
  • Clean docker build cache to avoid no space left on device during Build Dev job

• Linter versions upgrades
  • actionlint from 1.6.24 to 1.6.25
  • ansible-lint from 6.16.2 to 6.17.2
  • bicep_linter from 0.17.1 to 0.19.5
  • black from 23.3.0 to 23.7.0
  • cfn-lint from 0.77.10 to 0.78.2
  • checkov from 2.3.285 to 2.3.340
  • checkstyle from 10.12.0 to 10.12.1
  • clippy from 0.1.70 to 0.1.71
  • clj-kondo from 2023.05.26 to 2023.07.13
  • csharpier from 0.24.2 to 0.25.0
  • cspell from 6.31.1 to 6.31.2
  • devskim from 0.7.104 to 1.0.11
  • djlint from 1.30.2 to 1.32.1
  • dotnet-format from 6.0.408 to 6.0.412
  • eslint-plugin-jsonc from 2.8.0 to 2.9.0
  • eslint from 8.42.0 to 8.45.0
  • gitleaks from 8.16.4 to 8.17.0
  • golangci-lint from 1.53.2 to 1.53.3
  • grype from 0.63.1 to 0.63.1
  • kics from 1.7.1 to 1.7.4
  • ktlint from 0.49.1 to 0.50.0
  • kubeconform from 0.6.2 to 2.3.6
  • markdownlint from 0.34.0 to 0.37.0
  • mypy from 1.3.0 to 1.4.1
  • npm-package-json-lint from 6.4.0 to 7.0.0
  • phpstan from 1.10.18 to 1.10.26
  • powershell from 7.3.4 to 7.3.6
  • powershell_formatter from 7.3.4 to 7.3.6
  • prettier from 2.8.8 to 3.0.0
  • protolint from 0.44.0 to 0.45.0
  • psalm from Psalm.5.12.0@ to Psalm.5.13.1@
  • pyright from 1.1.313 to 1.1.318
  • rubocop from 1.52.0 to 1.54.2
  • ruff from 0.0.272 to 0.0.280
  • secretlint from 6.2.3 to 7.0.3
  • semgrep from 1.26.0 to 1.33.2
  • sfdx-scanner-apex from 3.13.0 to 3.14.0
  • sfdx-scanner-aura from 3.13.0 to 3.14.0
  • sfdx-scanner-lwc from 3.13.0 to 3.14.0
  • shfmt from 3.6.0 to 3.7.0
  • snakemake from 7.26.0 to 7.30.2
  • sqlfluff from 2.1.1 to 2.1.3
  • stylelint from 15.10.0 to 15.10.0
  • swiftlint from 0.52.2 to 0.52.4
  • syft from 0.83.0 to 0.85.0
  • terraform-fmt from 1.4.6 to 1.5.3
  • terragrunt from 0.46.3 to 0.51.4
  • tflint from 0.46.1 to 0.47.0
  • trivy from 0.42.1 to 0.43.1
  • vale from 2.27.0 to 2.28.1

[v7.1.0] - 2023-06-11

• Core
  • Upgrade base image to python:3.11.4-alpine3.17, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2738

• Linter enhancements & fixes
  • cljstyle: Remove default value for configuration file name, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2717
  • golangci-lint : Add autofix capability using --fix argument, by @seaneagan in https://github.com/oxsecurity/megalinter/pull/2700

• Linter versions upgrades
  • cfn-lint from 0.77.5 to 0.77.7
  • checkov from 2.3.267 to 2.3.285
  • clippy from 0.1.69 to 0.1.70
  • clj-kondo from 2023.05.18 to 2023.05.26
  • djlint from 1.30.0 to 1.30.2
  • eslint from 8.41.0 to 8.42.0
  • gitleaks from 8.16.3 to 8.16.4
  • golangci-lint from 1.52.2 to 1.53.2
  • kubeconform from 0.6.1 to 0.6.2
  • kubescape from 2.3.4 to 2.3.5
  • luacheck from 1.1.0 to 1.1.1
  • markdownlint from 0.33.0 to 0.34.0
  • phpstan from 1.10.15 to 1.10.18
  • pyright from 1.1.311 to 1.1.313
  • rubocop from 1.51.0 to 1.52.0
  • ruff from 0.0.270 to 0.0.272
  • scalafix from 0.10.4 to 0.11.0
  • semgrep from 1.24.0 to 1.26.0
  • sfdx-scanner-apex from 3.12.0 to 3.13.0
  • sfdx-scanner-aura from 3.12.0 to 3.13.0
  • sfdx-scanner-lwc from 3.12.0 to 3.13.0
  • stylelint from 15.6.2 to 15.7.0
  • syft from 0.82.0 to 0.83.0
  • terragrunt from 0.45.17 to 0.46.3
  • trivy from 0.41.0 to 0.42.1

[v7.0.4] - 2023-05-31

• Core
  • Allow to define linterkey_UNSECURED_ENV_VARIABLES for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT)

• Documentation
  • Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by @ruzickap in https://github.com/oxsecurity/megalinter/pull/2706

• Linter versions upgrades
  • checkov from 2.3.261 to 2.3.267
  • djlint from 1.29.0 to 1.30.0
  • pyright from 1.1.310 to 1.1.311
  • semgrep from 1.23.0 to 1.24.0
  • standard from 17.0.0 to 17.1.0
  • terragrunt from 0.45.16 to 0.45.17

[v7.0.3] - 2023-05-29

• Linter enhancements & fixes
  • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.

• Core
  • Secure PRE_COMMANDS and POST_COMMANDS by default
  • Can be disabled with secured_env: false in the command definition
  • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression

• Linter versions upgrades
  • checkstyle from 10.11.0 to 10.12.0
  • kubescape from 2.3.3 to 2.3.4
  • checkov from 2.3.259 to 2.3.261

[v7.0.2] - 2023-05-27

• Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner)
  • Dead link to configuration.md
  • Regex issue with megalinter-reports

[v7.0.0] - 2023-05-27

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)

• MAJOR Updates
  • SECURED_ENV_VARIABLES & core scoped configuration by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2601
    • New configuration variables SECURED_ENV_VARIABLES and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter
    • Read documentation to enhance security using MegaLinter
  • Use relative file paths to call linters by @nvuillam in https://github.com/oxsecurity/megalinter/pull/1877
    • This can be a breaking change for customizations, post an issue if you see a problem !

• New linters
  • Add linter cljstyle, Clojure formatter, by @practicalli-john in https://github.com/oxsecurity/megalinter/pull/2115
  • Add kubescape, kubernetes linter, by @muandane in https://github.com/oxsecurity/megalinter/pull/2531
  • Add Vale, a powerful enforcer of writing style, by @wesley-dean-flexion in https://github.com/oxsecurity/megalinter/pull/2406

• Removed linters
  • KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors)
  • REPOSITORY_GOODCHECK: Not open-source anymore
  • SPELL_MISSPELL: Not maintained anymore (last commit in 2018)
  • TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV
  • TERRAFORM_KICS: Replaced by REPOSITORY_KICS

• Medias
  • Article: Use the Workflows JSON schema in your IDE, by Google Cloud
  • Video: Ortelius Architecture Meeting, with a review of MegaLinter, by Steve Taylor from Ortelius
  • Web site: my-devops-lab.com

• Linter enhancements & fixes
  • cspell
    • Fix corrective .cspell.json file generated from cspell output by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2562
  • eslint
    • Ensure ESLint actually runs in project mode (#1572) by @Kurt-von-Laven in https://github.com/oxsecurity/megalinter/pull/2455
  • jscpd
    • Prevent jscpd to create output folder if the repo is not writable by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2556
  • Gitleaks
    • Add support to scan PR commits only on PRs when VALIDATE_ALL_CODEBASE is set to false, by @DariuszPorowski #2504
  • KICS
    • Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2689
    • KICS can now output SARIF
    • The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary
  • KubeConform
    • Simplify kubeconform install & get version by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2629
  • PHPLint
    • Upgrade PHPLint to v9 by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2638
  • sqlfluff
    • Remove old options from SQLFluff config file by @tunetheweb in https://github.com/oxsecurity/megalinter/pull/2560
  • v8r
    • Allow use of configuration files with v8r by @bdovaz in https://github.com/oxsecurity/megalinter/pull/1982

• Core
  • Upgrade base Docker image to python:3.11.3-alpine3.17 by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2537
  • Allow simultaneous regex filtering at descriptor and linter levels by @nvuillam & @seaneagan in https://github.com/oxsecurity/megalinter/pull/2669
  • Allow MEGALINTER_CONFIG to contain a full path to a MegaLinter config file by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2649
  • Fix issue preventing plugins to work with flavors by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2532
  • Fix crash in case of unreachable symlinks by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2538
  • mega-linter-runner: Use --platform also for docker run by @nvuillam , @Kurt-Von-Laven & @cam-barts in https://github.com/oxsecurity/megalinter/pull/2690
  • Replace deprecated distutils.copy_tree by shutil.copytree

• Reporters
  • SARIF_REPORTER
    • Add option to skip def_ws prefix in sarif reports by @janderssonse in https://github.com/oxsecurity/megalinter/pull/2383
    • update schema to pass official SARIF validator by @DariuszPorowski in https://github.com/oxsecurity/megalinter/pull/2645
  • CONFIG_REPORTER
    • Add support for idea plugins auto-install by @waterfoul in https://github.com/oxsecurity/megalinter/pull/2553
  • CONSOLE_REPORTER
    • Updated cases in console/log output to use ⚠ Warning Sign (U+26A0) instead of ◬ White Up-Pointing Triangle with Dot (U+25EC), by @Doommius
  • GITLAB_COMMENT_REPORTER
    • Enhancement & fixes for GitlabCommentReporter by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2564
      • New var GITLAB_COMMENT_REPORTER_OVERWRITE_COMMENT to allow to disable the overwrite of existing MegaLinter comment in case of new run
      • In case of overwrite activated (by default), fetch all Merge Request comments, not the first 20.
      • Display a different message in log when a Merge Request comment is created or updated.
  • AZURE_COMMENT_REPORTER
    • Downgrade Azure DevOps pipy package to avoid crash by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2576

• Documentation
  • Improve documentation pages split by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2688
    • Now Installation and Configuration menus have their own child menus
  • Doc about how to use fine grained PAT by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2662
  • Fixed incorrect link in Azure to Gitlab reporters pages. by @Doommius in https://github.com/oxsecurity/megalinter/pull/2613
  • Added bitbucket job template + Fix icon in console logs by @Doommius in https://github.com/oxsecurity/megalinter/pull/2617
  • Exclude licenses pages from online search results by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2665
  • Improve HTML tables display by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2670
  • Remove ASCII characters from linters helps displayed in MegaLinter documentation

• Internal CI
  • Upgrade GitHub Actions to change automated comments and increase timeout by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2536
  • Use Github Permissions instead of PAT by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2652
  • Update GitHub Actions workflows environments by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2657
  • Automate External Plugins table generation using .automation/plugins.yml file by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2667
  • Fix MegaLinter build issue by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2539
  • Fix for trivy-action (new naming for input) by @DariuszPorowski in https://github.com/oxsecurity/megalinter/pull/2541
  • Fix /build slash command to checkout the correct PR branch by @echoix in https://github.com/oxsecurity/megalinter/pull/2542
  • Fix local run of python test cases by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2565
  • Fix mkdocs documentation generation by downgrading mkdocs-glightbox to 0.3.2 by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2582
  • Do not push to docker from dev PRs by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2639
  • Update stale workflow: remove trigger on comments and explicit permissions by @echoix in https://github.com/oxsecurity/megalinter/pull/2641
  • Decouple updating docker pull stats from building docs by @echoix in https://github.com/oxsecurity/megalinter/pull/2677
  • Review MegaLinter's own cspell word list for outdated exclusions by @echoix in https://github.com/oxsecurity/megalinter/pull/2676
  • Run stale workflow only on schedule, by @echoix in https://github.com/oxsecurity/megalinter/pull/2641
  • Add explicit permissions to stale workflow, by @echoix in https://github.com/oxsecurity/megalinter/pull/2641

• Linter versions upgrades
  • actionlint from 1.6.23 to 1.6.24
  • ansible-lint from 6.14.4 to 6.16.2
  • bicep_linter from 0.15.31 to 0.17.1
  • cfn-lint from 0.76.1 to 0.77.5
  • checkov from 2.3.149 to 2.3.259
  • checkstyle from 10.9.3 to 10.11.0
  • clippy from 0.1.68 to 0.1.69
  • clj-kondo from 2023.03.17 to 2023.05.18
  • csharpier from 0.23.0 to 0.24.2
  • djlint from 1.19.16 to 1.29.0
  • dotnet-format from 6.0.407 to 6.0.408
  • eslint-plugin-jsonc from 2.7.0 to 2.8.0
  • eslint from 8.37.0 to 8.41.0
  • git_diff from 2.38.4 to 2.38.5
  • gitleaks from 8.16.1 to 8.16.3
  • jscpd from 3.5.4 to 3.5.9
  • jsonlint from 14.0.2 to 14.0.3
  • kics from 1.6.13 to 1.7.1
  • ktlint from 0.48.2 to 0.49.1
  • kubeconform from 0.5.0 to 0.6.1
  • kubescape from 2.3.1 to 2.3.3
  • markdown-link-check from 3.10.3 to 3.11.2
  • mypy from 1.1.1 to 1.3.0
  • phplint from 5.5 to 9.0.4
  • phpstan from 1.10.10 to 1.10.15
  • pmd from 6.48.0 to 6.55.0
  • powershell from 7.3.3 to 7.3.4
  • powershell_formatter from 7.3.3 to 7.3.4
  • prettier from 2.8.7 to 2.8.8
  • protolint from 0.43.1 to 0.44.0
  • psalm from Psalm.5.9.0@ to Psalm.5.12.0@
  • puppet-lint from 3.3.0 to 4.0.0
  • pylint from 2.17.2 to 2.17.4
  • pyright from 1.1.301 to 1.1.310
  • revive from 1.3.1 to 1.3.2
  • rubocop from 1.49.0 to 1.51.0
  • ruff from 0.0.260 to 0.0.270
  • semgrep from 1.16.0 to 1.23.0
  • sfdx-scanner-apex from 3.11.0 to 3.12.0
  • sfdx-scanner-aura from 3.11.0 to 3.12.0
  • sfdx-scanner-lwc from 3.11.0 to 3.12.0
  • snakefmt from 0.8.3 to 0.8.4
  • snakemake from 7.25.0 to 7.26.0
  • spectral from 6.6.0 to 6.8.0
  • sqlfluff from 2.0.2 to 2.1.1
  • stylelint from 15.4.0 to 15.6.2
  • swiftlint from 0.51.0 to 0.52.2
  • syft from 0.76.0 to 0.82.0
  • terraform-fmt from 1.4.4 to 1.4.6
  • terragrunt from 0.45.0 to 0.45.11
  • terrascan from 1.18.0 to 1.18.1
  • tflint from 0.45.0 to 0.46.1
  • trivy from 0.39.0 to 0.41.0
  • v8r from 1.0.0 to 2.0.0
  • vale from 2.24.0 to 2.27.0
  • xmllint from 21003 to 21004
  • yamllint from 1.30.0 to 1.32.0

[v6.22.2] - 2023-04-03

• Core
  • Fix failure of AzureCommentReporter when there is no pull request found in ENV vars
  • Fix HTML comment appearing in Azure Pull Request mail notifications

• Linter versions upgrades
  • ansible-lint from 6.14.3 to 6.14.4
  • checkov from 2.3.145 to 2.3.149
  • pylint from 2.17.1 to 2.17.2
  • rubocop from 1.48.1 to 1.49.0

[v6.22.1] - 2023-04-02

• Core
  • Changed vars in AzureCommentReporter to reflects official Azure DevOps naming convention + fallback to keep backward compatibility, see #2509
  • Update AzureCommentReport to have only one MegaLinter thread instead of a new one for each run of MegaLinter

• Documentation
  • Updated usage scenario for Azure DevOps, see #2509

• Linter versions upgrades
  • checkov from 2.3.141 to 2.3.145
  • phpstan from 1.10.9 to 1.10.10
  • rstfmt from 0.0.12 to 0.0.13

[v6.22.0] - 2023-04-01

• New linters
  • Add ruff, by @lars-reimann in https://github.com/oxsecurity/megalinter/pull/2458

• Linter enhancements & fixes
  • Pin markdown-link-check to 3.10.3 until tcort/markdown-link-check#246 is fixed, by @Kurt-von-Laven (#2498).

• Core
  • Fix MegaLinter doc version & url displayed in logs, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2485

  • Use megalinter-bot to create apply fixes commits, by @lars-reimann, @nvuillam and @megalinter-bot :)

    • If you are an existing user of MegaLinter, you must update your github actions workflows to add the following parameters to stefanzweifel/git-auto-commit-action@v4 :

    yaml commit_user_name: megalinter-bot commit_user_email: nicolas.vuillamy@ox.security

    • You can also use any github username and email you like :)

• Documentation
  • Close parentheses in ci_light flavour doc by @moverperfect in https://github.com/oxsecurity/megalinter/pull/2494

• Linter versions upgrades
  • black from 23.1.0 to 23.3.0
  • cfn-lint from 0.75.1 to 0.76.1
  • checkov from 2.3.120 to 2.3.141
  • eslint from 8.36.0 to 8.37.0
  • kics from 1.6.12 to 1.6.13
  • markdown-link-check from 3.11.0 to 3.10.3
  • phpstan from 1.10.8 to 1.10.9
  • psalm from Psalm.5.8.0@ to Psalm.5.9.0@
  • pyright from 1.1.300 to 1.1.301
  • ruff from 0.0.255 to 0.0.260
  • semgrep from 1.15.0 to 1.16.0
  • sfdx-scanner-apex from 3.10.0 to 3.11.0
  • sfdx-scanner-aura from 3.10.0 to 3.11.0
  • sfdx-scanner-lwc from 3.10.0 to 3.11.0
  • stylelint from 15.3.0 to 15.4.0
  • swiftlint from 0.50.3 to 0.51.0
  • syft from 0.75.0 to 0.76.0
  • terraform-fmt from 1.4.2 to 1.4.4
  • trivy from 0.38.3 to 0.39.0

[v6.21.0] - 2023-03-26

• New linters
  • Add helm lint, by @ThomasSanson in https://github.com/oxsecurity/megalinter/pull/2386

• Medias
  • Video: Code quality - Ep01 - MegaLinter, one linter to rule them all, by @devpro
  • Video: DevSecOps Webinar using MegaLinter, by 5.15 Technologies
  • Video: (FR) Coding Tech - L'importance de la CI/CD dans le développement de logiciels, by @GridexX from R2DevOps
  • Article: (FR) MegaLinter, votre meilleur ami pour un code de qualité, by @ThomasSanson

• Linter enhancements & fixes
  • phpcs: Add regex in descriptor to be able to extract the number of found errors, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2453
  • Replace babel-eslint with @babel/eslint-parser, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2445
  • Use docker image to install phpstan, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2469
  • Avoid cspell error on readonly workspaces, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2474
  • Allow bandit to use pyproject.toml, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2475
  • Bring back stylelint-config-sass-guidelines package, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2477
  • Display only errors in markdown-link-check logs for better readability, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2479

• Core
  • Run CI linter jobs only on Pull requests to avoid doubling jobs

• Documentation
  • mega-linter-runner: doc fix for env list of values, see #2448, by @DariuszPorowski in https://github.com/oxsecurity/megalinter/pull/2449

• Linter versions upgrades
  • ansible-lint from 6.14.1 to 6.14.3
  • bandit from 1.7.4 to 1.7.5
  • cfn-lint from 0.74.1 to 0.75.1
  • checkov from 2.3.70 to 2.3.120
  • checkstyle from 10.8.0 to 10.9.3
  • clippy from 0.1.67 to 0.1.68
  • clj-kondo from 2023.02.17 to 2023.03.17
  • cspell from 6.28.0 to 6.31.1
  • dotnet-format from 6.0.406 to 6.0.407
  • eslint-plugin-jsonc from 2.6.0 to 2.7.0
  • eslint from 8.35.0 to 8.36.0
  • gitleaks from 8.16.0 to 8.16.1
  • jscpd from 3.5.3 to 3.5.4
  • jsonlint from 14.0.1 to 14.0.2
  • kics from 1.6.11 to 1.6.12
  • markdown-link-check from 3.10.3 to 3.11.0
  • phpstan from 1.10.5 to 1.10.8
  • prettier from 2.8.4 to 2.8.7
  • psalm from Psalm.5.7.7@ to Psalm.5.8.0@
  • pylint from 2.16.4 to 2.17.1
  • pyright from 1.1.296 to 1.1.300
  • revive from 1.2.5 to 1.3.1
  • rstcheck from 6.1.1 to 6.1.2
  • rubocop from 1.48.0 to 1.48.1
  • semgrep from 1.14.0 to 1.15.0
  • snakefmt from 0.8.1 to 0.8.3
  • snakemake from 7.24.0 to 7.25.0
  • sqlfluff from 1.4.5 to 2.0.2
  • stylelint from 15.2.0 to 15.3.0
  • syft from 0.74.0 to 0.75.0
  • terraform-fmt from 1.3.9 to 1.4.2
  • terragrunt from 0.44.4 to 0.45.0
  • trivy from 0.38.1 to 0.38.3
  • v8r from 0.14.0 to 1.0.0
  • yamllint from 1.29.0 to 1.30.0

[v6.20.1] - 2023-03-07

• Fixes
  • Fix issue with running on Mac m1 no longer working, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2430
  • Fix Container images errors when pulling, by @echoix in https://github.com/oxsecurity/megalinter/pull/2435
  • Fix Pre npm install not resolving, by @echoix in https://github.com/oxsecurity/megalinter/pull/2435
  • Add build date in Beta docker images, by @nvuillam
  • Correct misleading error message in GitlabCommentReporter.py, see #2420
  • Fix GitlabCommentReporter wrong variables names, check #2423

• Core
  • Improve config test, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2426

• Doc
  • Add article Level up your Unity Packages with CI/CD, by @RunningMattress in https://github.com/oxsecurity/megalinter/pull/2436
  • Correct minor docs error by @moverperfect in https://github.com/oxsecurity/megalinter/pull/2440

• Linter versions upgrades
  • ansible-lint from 6.14.0 to 6.14.1
  • bicep_linter from 0.14.85 to 0.15.31
  • cfn-lint from 0.74.0 to 0.74.1
  • checkov from 2.3.59 to 2.3.70
  • csharpier from 0.22.1 to 0.23.0
  • jsonlint from 13.0.1 to 14.0.1
  • mypy from 1.0.1 to 1.1.1
  • phpstan from 1.10.3 to 1.10.5
  • protolint from 0.43.0 to 0.43.1
  • puppet-lint from 3.2.0 to 3.3.0
  • pylint from 2.16.3 to 2.16.4
  • rubocop from 1.47.0 to 1.48.0
  • stylelint from 14.16.1 to 15.2.0

[v6.20.0] - 2023-03-05

• Core
  • Upgrade base docker image from python:3.10.4-alpine3.16 to python:3.11.1-alpine3.17
  • Build: remove folder contents before generating Dockerfile files for each linter in generate_linter_dockerfiles(), by @bdovaz in #2294
  • Build: remove folder contents before generating test classes for each linter in generate_linter_test_classes(), by @bdovaz in #2294
  • Build: automatically update the linter list used in the matrix of several of the workflows, by @bdovaz in #2294
  • Test: create a testing architecture for format/autofix linters, by @bdovaz in #2294
  • Test: create or adapt input files for format/autofix tests, by @bdovaz in #2294
  • Test: created specific test folders for linters that need them because they can't share them, by @bdovaz in #2294
  • Added rubocop-rake RubyGem for linting Rake files with RuboCop

• Fixes
  • Correctly generate class names and test class files for each linter when the linter descriptor defines the attribute "name", by @bdovaz in #2294
  • Removed the default powershell templates TEMPLATES/.powershell-formatter.psd1 and TEMPLATES/.powershell-psscriptanalyzer.psd1. Having these templates caused all rules to be ignored as the settings aren't incremental but absolute, by @bdovaz in #2294
  • Added cli_lint_fix_arg_name parameter to dotnet format descriptor as without it, autofix doesn't work, by @bdovaz in #2294
  • Created BicepLinter class to add DOTNET_SYSTEM_GLOBALIZATION_INVARIANT environment variable to avoid problems with ICU packages, by @bdovaz in #2294
  • Modified npm-groovy-lint descriptor to add --failon parameter to only fail with error and not info which is the default value, by @bdovaz in #2294
  • Added cli_lint_fix_arg_name parameter to powershell formatter descriptor as without it, autofix doesn't work, by @bdovaz in #2294
  • Created ProtolintLinter class to fix the problem that returns exit code 1 when it encounters a problem to correct even though it corrects it correctly, by @bdovaz in #2294
  • Concatenate --output parameter correctly to xmllint linter, by @bdovaz in #2294
  • Modified the .pre-commit-hooks.yaml for megalinter-full so the containername argument is correctly split between two lines, by @drbothen #2411
  • Avoid jscpd default config to detect copy pastes in image files
  • Move utilstest to megalinter folder to avoid import issues
  • Replace deprecated spectral package, by @bdovaz in by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2340
  • Generate correct urls for packages with fixed versions, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2339

• Documentation
  • Change swiftlint example that did not correctly reflect the --fix parameter, by @bdovaz in #2294
  • Change in TSX eslint descriptor the urls as they were not correct, by @bdovaz in #2294
  • Change in TYPESCRIPT eslint descriptor the urls as they were not correct, by @bdovaz on #2294
  • Use mkdocs-glightbox to allow to click on images and display them in full screen

• CI
  • Use docker/build-push-action to build docker images and akhilerm/tag-push-action to release by retagging and pushing beta images instead of rebuilding them
  • Authenticate to GitHub API during docker build to avoid reaching limits
  • Remove apk go package install in images where possible to decrease image sizes, by @echoix in https://github.com/oxsecurity/megalinter/pull/2318
  • Create a slash PR bot to run ./build.sh command manually on PRs, by @echoix in #2353 and #2381
  • Limit parallel execution of large job matrix in the workflows with max-parallel in order to keep runners available for other jobs, by @echoix in #2397

• Linter versions upgrades
  • ansible-lint from 6.12.1 to 6.14.0
  • bash-exec from 5.1.16 to 5.2.15
  • bicep_linter from 0.14.46 to 0.14.85
  • cfn-lint from 0.72.10 to 0.74.0
  • checkmake from 0.2.1 to 0.2.0
  • checkov from 2.1.244 to 2.3.18
  • checkstyle from 10.7.0 to 10.8.0
  • clj-kondo from 2023.01.20 to 2023.02.17
  • cspell from 6.21.0 to 6.28.0
  • djlint from 1.19.13 to 1.19.16
  • dotnet-format from 6.0.405 to 6.0.406
  • dustilock from 0.0.0 to 1.2.0
  • editorconfig-checker from 2.4.0 to 2.7.0
  • eslint from 8.33.0 to 8.35.0
  • git_diff from 2.36.4 to 2.38.4
  • gitleaks from 8.15.3 to 8.16.0
  • golangci-lint from 1.51.0 to 1.51.2
  • jscpd from 3.3.26 to 3.5.3
  • jsonlint from 11.7.0 to 13.0.1
  • kics from 1.6.9 to 1.6.11
  • mypy from 0.991 to 1.0.1
  • perlcritic from 1.148 to 1.150
  • phpcs from 3.7.1 to 3.7.2
  • phpstan from 1.9.14 to 1.10.3
  • powershell_formatter from 7.3.2 to 7.3.3
  • powershell from 7.3.2 to 7.3.3
  • prettier from 2.8.3 to 2.8.4
  • protolint from 0.42.2 to 0.43.0
  • psalm from Psalm.5.6.0@ to Psalm.5.7.7@
  • puppet-lint from 3.0.1 to 3.2.0
  • pylint from 2.16.1 to 2.16.3
  • pyright from 1.1.270 to 1.1.296
  • rubocop from 1.44.1 to 1.47.0
  • secretlint from 6.2.0 to 6.2.3
  • semgrep from 1.9.0 to 1.14.0
  • sfdx-scanner-apex from 3.8.0 to 3.10.0
  • sfdx-scanner-aura from 3.8.0 to 3.10.0
  • sfdx-scanner-lwc from 3.8.0 to 3.10.0
  • snakemake from 7.21.0 to 7.24.0
  • spectral from 5.9.2 to 6.6.0
  • syft from 0.70.0 to 0.74.0
  • terraform-fmt from 1.3.7 to 1.3.9
  • terragrunt from 0.43.2 to 0.44.4
  • terrascan from 1.16.0 to 1.18.0
  • tflint from 0.44.1 to 0.45.0
  • trivy from 0.35.0 to 0.38.1
  • xmllint from 20914 to 21003

[v6.19.0] - 2023-02-05

• Core
  • Deploy additional Docker images to GitHub Container Registry, by @lars-reimann in #2117
  • Build: Disable generate_documentation_all_users as we use github-dependents-info

• Evolutions
  • Support xmllint autofix, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2244 (requires definition of XML_XMLLINT_AUTOFORMAT: true)

• Fixes
  • Change name of config file for powershell formatter to avoid collision with powershell linter config, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/2231
  • Enhance find SARIF json in stdout output
  • Pass --show-context, --show-suggestions, and --no-must-find-files to CSpell for friendlier UX, by @Kurt-von-Laven in #2275.
  • Only run npm-package-json-lint when package.json is present, by @Kurt-von-Laven in #2280.
  • Fix local files with extends, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2236
  • Remove downgrading of ansible-lint, by @gotit96 in https://github.com/oxsecurity/megalinter/pull/2257
  • Tag some automatically updated files as generated files, by @echoix in https://github.com/oxsecurity/megalinter/pull/2285
  • Fix Sarif Reporter in Azure Devops with space in project name, by @EtienneDeneuve in https://github.com/oxsecurity/megalinter/pull/2301
  • Pass extra args for friendlier CSpell UX (#2271), by @Kurt-von-Laven in https://github.com/oxsecurity/megalinter/pull/2275

• Documentation
  • Configure jsonschema documentation formatting (see Descriptor schema, Configuration schema), by @echoix in #2270
  • Update CONTRIBUTING.md and add documentation improvements hints, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2228
  • Add Powershell linters rules url, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/2242
  • Fix syft logo, by @pjungermann in https://github.com/oxsecurity/megalinter/pull/2282
  • Fix docker run documentation, by @davidjeddy in https://github.com/oxsecurity/megalinter/pull/2258

• Linter versions upgrades
  • actionlint from 1.6.22 to 1.6.23
  • ansible-lint from 6.7.0 to 6.12.1
  • bicep_linter from 0.13.1 to 0.14.6
  • black from 22.12.0 to 23.1.0
  • cfn-lint from 0.72.6 to 0.72.10
  • checkstyle from 10.6.0 to 10.7.0
  • clippy from 0.1.66 to 0.1.67
  • clj-kondo from 2022.12.10 to 2023.01.20
  • csharpier from 0.21.0 to 0.22.1
  • cspell from 6.18.1 to 6.21.0
  • devskim from 0.7.101 to 0.7.104
  • djlint from 1.19.11 to 1.19.13
  • dotnet-format from 000 to 6.0.405
  • eslint from 8.31.0 to 8.33.0
  • git_diff from 2.36.3 to 2.36.4
  • gitleaks from 8.15.2 to 8.15.3
  • golangci-lint from 1.50.1 to 1.51.0
  • isort from 5.11.4 to 5.12.0
  • kics from 1.6.7 to 1.6.9
  • ktlint from 0.48.1 to 0.48.2
  • perlcritic from 1.146 to 1.148
  • phpstan from 1.9.7 to 1.9.14
  • powershell from 7.3.1 to 7.3.2
  • powershell_formatter from 7.3.1 to 7.3.2
  • prettier from 2.8.1 to 2.8.3
  • psalm from Psalm.dev-master@ to Psalm.5.6.0@
  • pylint from 2.15.10 to 2.16.1
  • revive from 1.2.4 to 1.2.5
  • rstfmt from 0.0.11 to 0.0.12
  • rubocop from 1.42.0 to 1.44.1
  • scss-lint from 0.59.0 to 0.60.0
  • secretlint from 6.0.2 to 6.2.0
  • semgrep from 1.3.0 to 1.9.0
  • snakefmt from 0.8.0 to 0.8.1
  • snakemake from 7.19.1 to 7.21.0
  • syft from 0.65.0 to 0.70.0
  • terraform-fmt from 1.3.6 to 1.3.7
  • terragrunt from 0.42.3 to 0.43.2
  • tflint from 0.44.0 to 0.44.1
  • tsqllint from 1.15.1.0 to 1.15.3.0
  • v8r from 0.13.1 to 0.14.0
  • yamllint from 1.28.0 to 1.29.0

[v6.18.0] - 2023-01-07

• New linters
  • Add CSharpier linter, by @bdovaz in #2185 and #2198

• Core
  • Upgrade to dotnet 6.0, by @lexstatic in #1680
    • dotnet-format requires .sln, .csproj or .vbproj in the repo
  • Switch to docker buildx, by @bdovaz in #2199
  • Drone CI enhancements, by @NebulaOnion in #2195
    • Config generator tool now supports Drone CI
    • Added information about how to change trigger rules for Drone CI workflow
  • Unify the drawing of badges in documentation, by @bdovaz in #2220

• Fixes
  • Don't write output files if REPORT_OUTPUT_FOLDER is none
  • Fix Perl linter skipping files

• New MegaLinter plugins
  • linkcheck: Plugin to check and validate Markdown links, by @shiranr
  • salt-lint: Checks Salt State files (SLS) for best practices and behavior that could potentially be improved, by @grimmjo

• New article talking about MegaLinter: Writing documentation as a champ in engineering teams (deleted), by @gijsreyn

• Linter versions upgrades
  • cfn-lint from 0.72.5 to 0.72.6
  • checkstyle from 10.5.0 to 10.6.0
  • csharpier from 0.16.0 to 0.21.0
  • cspell from 6.18.0 to 6.18.1
  • devskim from 0.6.9 to 0.7.101
  • djlint from 1.19.10 to 1.19.11
  • eslint-plugin-jsonc from 2.5.0 to 2.6.0
  • eslint from 8.30.0 to 8.31.0
  • kics from 1.6.6 to 1.6.7
  • ktlint from 0.48.0 to 0.48.1
  • markdownlint from 0.32.2 to 0.33.0
  • phplint from 5.4 to 5.5
  • phpstan from 1.9.4 to 1.9.7
  • rubocop from 1.41.1 to 1.42.0
  • secretlint from 5.3.0 to 6.0.2
  • semgrep from 1.2.1 to 1.3.0
  • sfdx-scanner from 3.7.1 to 3.8.0
  • stylelint from 14.16.0 to 14.16.1
  • syft from 0.64.0 to 0.65.0
  • tsqllint from 1.14.5.0 to 1.15.1.0

[v6.17.0] - 2022-12-27

• New linters
  • Add PowerShell formatter, by @bdovaz (#2176)

• Documentation
  • Improve meta tags in HTML documentation
  • Clarify how npm-package-json-lint files can be ignored, by @bdovaz (#2184)

• Linter versions upgrades
  • djlint from 1.19.9 to 1.19.10
  • dotenv-linter from 3.2.0 to 3.3.0
  • powershell_formatter from 5.1.22621 to 7.3.1
  • tflint from 0.43.0 to 0.44.0

[v6.16.0] - 2022-12-24

• New linters
  • Add npm-package-json-lint linter, by @bdovaz (#2150)

• Evolutions
  • Upgrade to alpine 3.16
  • Disable php7 & upgrade php8 to php81
  • Add Makefile linters to documentation flavor
  • PowershellLinter autofix capability, by @bdovaz (#2175)
  • Allow local files with EXTENDS configuration, by @bdovaz (#2151)
  • Add Trivy config file parameters, by @bdovaz (#2154)

• Fixes
  • Change reporter text for better UX, by @ashokm (#2168)
  • Remove workspace prefix from aggregate sarif report, by @janderssonse (#2119)
  • CSpell file name linting doesn't use (custom) CSpell configuration (#2058)
  • HTML email not rendering correctly (#2120). Set REPORTERS_MARKDOWN_TYPE to simple to avoid external images in PR/MR markdown comments.
  • mega-linter-runner: Fix Value for container-name of type String required, by @AlbanAndrieu (#2123
  • Use warning emoji in reporters, by @ashokm (#2156)
  • Fix branding to use the correct 'OX Security' name, by @ashokm

• Doc
  • Enclose System.TeamProject in Azure Pipelines, by @ashokm (#2131)
  • Better contributing docs, by @bdovaz (#2162)

• Linter versions upgrades
  • bicep_linter from 0.12.40 to 0.13.1
  • black from 22.10.0 to 22.12.0
  • cfn-lint from 0.72.0 to 0.72.5
  • checkstyle from 10.4 to 10.5.0
  • clippy from 0.1.65 to 0.1.66
  • clj-kondo from 2022.10.14 to 2022.12.10
  • cspell from 6.14.3 to 6.18.0
  • djlint from 1.19.7 to 1.19.9
  • eslint from 8.28.0 to 8.29.0 to 8.30.0
  • git_diff from 2.34.5 to 2.36.3
  • gitleaks from 8.15.0 to 8.15.2
  • isort from 5.10.1 to 5.11.4
  • kics from 1.6.5 to 1.6.6
  • ktlint from 0.47.1 to 0.48.0
  • luacheck from 1.0.0 to 1.1.0
  • perlcritic from 1.140 to 1.146
  • phplint from 3.0 to 5.4
  • phpstan from 1.9.2 to 1.9.4
  • powershell from 7.3.0 to 7.3.1
  • prettier from 2.8.0 to 2.8.1
  • psalm from Psalm.4.x-dev@ to Psalm.dev-master@
  • pylint from 2.15.6 to 2.15.9
  • rubocop from 1.39.0 to 1.41.1
  • semgrep from 0.122.0 to 1.2.1
  • sfdx-scanner-apex from 3.6.2 to 3.7.1
  • sfdx-scanner-aura from 3.6.2 to 3.7.1
  • sfdx-scanner-lwc from 3.6.2 to 3.7.1
  • shellcheck from 0.8.0 to 0.9.0
  • snakefmt from 0.7.0 to 0.8.0
  • snakemake from 7.18.2 to 7.19.1
  • sqlfluff from 1.4.2 to 1.4.5
  • stylelint from 14.15.0 to 14.16.0
  • swiftlint from 0.50.0 to 0.50.3
  • syft from 0.62.1 to 0.64.0
  • terraform-fmt from 1.3.5 to 1.3.6
  • terragrunt from 0.40.2 to 0.42.3
  • terrascan from 1.17.0 to 1.16.0
  • tflint from 0.42.1 to 0.43.0
  • trivy from 0.29.2 to 0.35.0
  • v8r from 0.13.0 to 0.13.1

[v6.15.0] - 2022-11-23

• Switch to https://megalinter.io
• Initial Drone CI documentation
• Automatically generate "Used by" markdown documentation with github-dependents-info
• Add Docker container documentation

• Linter versions upgrades
  • bicep_linter from 0.12.1 to 0.12.40
  • cfn-lint from 0.70.1 to 0.72.0
  • coffeelint from 5.2.10 to 5.2.11
  • cspell from 6.14.0 to 6.14.3
  • djlint from 1.19.4 to 1.19.7
  • eslint from 8.27.0 to 8.28.0
  • flake8 from 5.0.4 to 6.0.0
  • hadolint from 2.10.0 to 2.12.0
  • kics from 1.6.3 to 1.6.5
  • mypy from 0.982 to 0.991
  • phpstan from 1.9.1 to 1.9.2
  • powershell from 7.2.7 to 7.3.0
  • prettier from 2.7.1 to 2.8.0
  • protolint from 0.41.0 to 0.42.2
  • psalm from Psalm.5.x-dev@ to Psalm.4.x-dev@
  • pylint from 2.15.5 to 2.15.6
  • rstcheck from 6.1.0 to 6.1.1
  • rubocop from 1.38.0 to 1.39.0
  • semgrep from 0.120.0 to 0.122.0
  • snakefmt from 0.6.1 to 0.7.0
  • snakemake from 7.18.1 to 7.18.2
  • sqlfluff from 1.4.1 to 1.4.2
  • stylelint from 14.14.1 to 14.15.0
  • swiftlint from 0.46.5 to 0.50.0
  • syft from 0.60.3 to 0.62.1
  • terraform-fmt from 1.3.4 to 1.3.5
  • terragrunt from 0.40.0 to 0.40.2
  • terrascan from 1.16.0 to 1.17.0

[v6.14.0] - 2022-11-06

• Core
  • Replace set-output usage with GITHUB_OUTPUT to handle Github deprecation notice
  • Allow PRE_COMMANDS to be defined within a python venv (#2017)
  • Correct behavior of EXTENDS property in .megalinter.yml config file (#1516)
  • Fix flavor suggestion message in reporters

• New MegaLinter plugin: mustache: Plugin to validate Logstash pipeline definition files using mustache, by Yann Jouanique

• Linters
  • Bring back rstfmt RestructuredText formatter
  • Add the SPELL_*_FILE_EXTENSIONS parameter for each SPELL type linter. If set, it will use this value to filter instead of the default behavior which is to parse the files of all other linters executed (#1997).
  • Allow cspell to also analyze file names (new variable SPELL_CSPELL_ANALYZE_FILE_NAMES) (#2009)
  • Fix bicep version regex

• Linter versions upgrades
  • actionlint from 1.6.21 to 1.6.22
  • bicep_linter from 0.11.1 to to 0.12.1
  • cfn-lint from 0.68.1 to 0.70.1
  • checkstyle from 10.3.4 to 10.4
  • clippy from 0.1.64 to 0.1.65
  • cspell from 6.12.0 to 6.14.0
  • djlint from 1.19.2 to 1.19.4
  • eslint-plugin-jsonc from 2.4.0 to 2.5.0
  • eslint from 8.26.0 to 8.27.0
  • kics from 1.6.2 to 1.6.3
  • kubeconform from 0.4.12 to 0.5.0
  • npm-groovy-lint from 11.0.0 to 11.1.1
  • phpstan from 1.8.10 to 1.9.1
  • revive from 0.0.0 to 1.2.4
  • rstfmt from 0.0.10 to 0.0.11
  • rubocop from 1.37.0 to 1.38.0
  • secretlint from 5.2.4 to 5.3.0
  • semgrep from 0.118.0 to 0.120.0
  • sfdx-scanner-apex from 2.13.9 to 3.6.2
  • sfdx-scanner-aura from 2.13.9 to 3.6.2
  • sfdx-scanner-lwc from 2.13.9 to 3.6.2
  • snakemake from 7.16.1 to 7.18.1
  • sqlfluff from 1.3.2 to 1.4.1
  • stylelint from 14.14.0 to 14.14.1
  • syft from 0.59.0 to 0.60.3
  • terraform-fmt from 1.3.3 to 1.3.4
  • terragrunt from 0.39.2 to 0.40.0
  • tflint from 0.41.0 to 0.42.1
  • yamllint from 1.26.3 to 1.26.3

[v6.13.0] - 2022-10-24

• New cupcake flavor with 78 instead of 108 linters
• Don't add literal double quote character to filenames in mega-linter-runner (#1942).
• Remove default npm-groovy-lint extra arguments (#1872)
• Replace yaml.load by yaml.safe_load for better security

• Linter versions upgrades
  • cfn-lint from 0.67.0 to 0.68.1
  • clj-kondo from 2022.10.05 to 2022.10.14
  • djlint from 1.19.1 to 1.19.2
  • eslint from 8.25.0 to 8.26.0
  • git_diff from 2.34.4 to 2.34.5
  • gitleaks from 8.14.1 to 8.15.0
  • golangci-lint from 1.50.0 to 1.50.1
  • phpstan from 1.8.9 to 1.8.10
  • powershell from 7.2.6 to 7.2.7
  • puppet-lint from 3.0.0 to 3.0.1
  • pylint from 2.15.4 to 2.15.5
  • rubocop from 1.36.0 to 1.37.0
  • semgrep from 0.117.0 to 0.118.0
  • snakemake from 7.16.0 to 7.16.1
  • syft from 0.58.0 to 0.59.0
  • terraform-fmt from 1.3.2 to 1.3.3
  • terragrunt from 0.39.1 to 0.39.2
  • terrascan from 1.15.2 to 1.16.0

[v6.12.0] - 2022-10-16

• Add Makefile linter in go flavor
• Fix invalid Docker container names in .pre-commit-hooks.yaml (#1932)
• Correct removeContainer casing in runner (#1917)
• Fix use of TERRAFORM_KICS_ARGUMENTS (#1947)
• Use -p argument for pyright custom config file path (#1946)
• Fix incorrect link to pytype for pyright (#1967)
• Deduplicate SHOW_ELAPSED_TIME properties to address v8r error (#1962)

• Linter versions upgrades
  • actionlint from 1.6.16 to 1.6.21
  • ansible-lint from 6.7.0 to 6.7.0
  • bicep_linter from 0.10.61 to 0.11.1
  • black from 22.8.0 to 22.10.0
  • cfn-lint from 0.66.0 to 0.67.0
  • clj-kondo from 2022.09.08 to 2022.10.05
  • djlint from 1.18.0 to 1.19.1
  • eslint from 8.24.0 to 8.25.0
  • gitleaks from 8.13.0 to 8.14.1
  • golangci-lint from 1.49.0 to 1.50.0
  • kics from 1.6.1 to 1.6.2
  • mypy from 0.981 to 0.982
  • npm-groovy-lint from 10.1.0 to 11.0.0
  • phpstan from 1.8.6 to 1.8.9
  • puppet-lint from 2.5.2 to 3.0.0
  • pylint from 2.15.3 to 2.15.4
  • scalafix from 0.10.3 to 0.10.4
  • semgrep from 0.115.0 to 0.117.0
  • snakemake from 7.14.2 to 7.16.0
  • stylelint from 14.13.0 to 14.14.0
  • terraform-fmt from 1.3.1 to 1.3.2
  • terragrunt from 0.39.0 to 0.39.1

[v6.11.1] - 2022-10-03

• Remove no-space-check from MegaLinter default .pylintrc file (#1923)

[v6.11.0] - 2022-10-02

• Linters
  • Add bicep linter (#1898)
  • Add quotes to arm-ttk linter command (#1879)
  • Add Makefile linter in java flavor

• Core
  • Improve support for devcontainers by using Python base image
    • Fixed Python version in devcontainer from 3.9 -> 3.10
    • Fix build command on linux (thanks a lot to Edouard Choinière for the investigation and solution !)
  • Azure Comments reporter - Change status when all tests pass (#1915)

• Doc
  • Document the -f argument to mega-linter-runner (#1895)
  • Fix a typo in documentation of bash-exec linter (#1892)

• Linter versions upgrades
  • ansible-lint from 6.6.0 to 6.7.0
  • cfn-lint from 0.65.0 to 0.66.0
  • checkov from 2.1.213 to 2.1.244
  • checkstyle from 10.3.3 to 10.3.4
  • clippy from 0.1.63 to 0.1.64
  • coffeelint from 5.2.9 to 5.2.10
  • cspell from 6.10.0 to 6.12.0
  • djlint from 1.16.0 to 1.18.0
  • eslint from 8.23.1 to 8.24.0
  • gitleaks from 8.12.0 to 8.13.0
  • jsonlint from 11.6.0 to 11.7.0
  • kics from 1.6.0 to 1.6.1
  • markdown-link-check from 3.10.2 to 3.10.3
  • mypy from 0.971 to 0.981
  • phpstan from 1.8.5 to 1.8.6
  • protolint from 0.40.0 to 0.41.0
  • scalafix from 0.10.2 to 0.10.3
  • semgrep from 0.113.0 to 0.115.0
  • snakemake from 7.14.0 to 7.14.2
  • sqlfluff from 1.3.1 to 1.3.2
  • stylelint from 14.12.0 to 14.13.0
  • syft from 0.56.0 to 0.58.0
  • terraform-fmt from 1.2.9 to 1.3.1
  • terragrunt from 0.38.12 to 0.39.0
  • tflint from 0.40.0 to 0.41.0

[v6.10.0] - 2022-09-19

• Add git-lfs in Docker image to handle large files in git repositories

• MegaLinter Docker images size improvements
  • Remove NPM cache
  • Remove Cargo cache
  • Remove rustup when clippy isn't embedded in the image
  • Remove npm packages useless files

• Linter versions upgrades
  • ansible-lint from 6.5.2 to 6.6.0
  • cfn-lint from 0.64.1 to 0.65.0
  • checkov from 2.1.201 to 2.1.213
  • cspell from 6.8.1 to 6.10.0
  • djlint from 1.12.3 to 1.16.0
  • eslint from 8.23.0 to 8.23.1
  • kics from 1.5.15 to 1.6.0
  • pylint from 2.15.2 to 2.15.3
  • scalafix from 0.10.1 to 0.10.2
  • semgrep from 0.112.1 to 0.113.0
  • sfdx-scanner-apex from 2.13.8 to 2.13.9
  • sfdx-scanner-aura from 2.13.8 to 2.13.9
  • sfdx-scanner-lwc from 2.13.8 to 2.13.9
  • stylelint from 14.11.0 to 14.12.0
  • syft from 0.55.0 to 0.56.0
  • terragrunt from 0.38.10 to 0.38.12
  • terragrunt from 0.38.9 to 0.38.10
  • yamllint from 1.27.1 to 1.28.0

[v6.9.1] - 2022-09-11

• Linters
  • Add python type checker pyright, by Microsoft
  • New linters with available SARIF output for SARIF Reporter
    • ansible-lint
    • shellcheck thanks to shellcheck-sarif
  • Use list_of_files Cli lint mode for checkstyle, to have unique SARIF output and improve performances
  • Use list_of_files Cli lint mode for golangci-lint and revive, to improve performances
  • Reactivate snakefmt

• Core
  • Improve build performances and docker images sizes (reduce from 117 to 36 layers)
    • Use BUILDKIT
    • Join RUN instructions
    • Optimize core Dockerfile items
    • Clean npm, python and cargo caches
  • Create a venv for each python-based linter to avoid issues with dependencies
  • Fix broken link to documentation when using v6

• Linter versions upgrades
  • ansible-lint from 6.0.2 to 6.5.2
  • cfn-lint from 0.63.2 to 0.64.1
  • checkov from 2.1.183 to 2.1.201
  • clj-kondo from 2022.08.03 to 2022.09.08
  • djlint from 1.12.1 to 1.12.3
  • gitleaks from 8.11.2 to 8.12.0
  • golangci-lint from 1.48.0 to 1.49.0
  • ktlint from 0.47.0 to 0.47.1
  • phpstan from 1.8.4 to 1.8.5
  • protolint from 0.39.0 to 0.40.0
  • pylint from 2.15.0 to 2.15.2
  • semgrep from 0.103.0 to 0.112.1
  • sqlfluff from 1.3.0 to 1.3.1
  • standard from 15.0.1 to 17.0.0
  • terraform-fmt from 1.2.8 to 1.2.9
  • tflint from 0.39.3 to 0.40.0

Note: MegaLinter 6.9.0 release has been cancelled: it was fine but the docker image sizes were not optimized enough.

[v6.8.0] - 2022-09-04

• Run MegaLinter pre-commit hooks serially (#1826).
• Replace deprecated StandardJS VS Code extension with the newer official version
• When SARIF_REPORTER is active, use sarif-fmt to convert SARIF into text for console and text reporters (#1822).
• Count checkstyle errors (#1820)

• Linter versions upgrades
  • black from 22.6.0 to 22.8.0
  • cfn-lint from 0.63.0 to 0.63.2
  • checkov from 2.1.160 to 2.1.183
  • checkstyle from 10.3.2 to 10.3.3
  • djlint from 1.12.0 to 1.12.1
  • kics from 1.5.14 to 1.5.15
  • phpstan from 1.8.2 to 1.8.4
  • rubocop from 1.35.1 to 1.36.0
  • snakemake from 7.13.0 to 7.14.0
  • syft from 0.54.0 to 0.55.0
  • terragrunt from 0.38.8 to 0.38.9

[v6.7.1] - 2022-08-28

• Fix Azure Comments reporter: Use BuildId to build artifacts url
• Fix actionlint install command

[v6.7.0] - 2022-08-28

• Linters
  • Add PMD java linter

• Azure Pipelines integration enhancements
  • Update installation instructions
  • Console reporter: manage collapsible groups for easier display & navigation in job logs (requires CI=true and TF_BUILD=true sent as env variables)
  • Azure comments reporter (see documentation)

• Performances improvements
  • When running linters in parallel, run in the same process only the linters from same descriptor and that can update the same sources (to avoid concurrency). Other linters can be run independently.
  • Define linter_speed of linter descriptors (default 3). Can be from 1 (super slow) to 5 (super fast). This is used to optimize the processing order of linters.

• Fixes
  • Fix: Properly match files_sub_directory as a prefix instead of partial string matching (#1765)
  • Match regex without workspace and sub_directory
  • Remove config variables that aren't applicable to linters analyzing all files or all other linters files

• Linter versions upgrades
  • cfn-lint from 0.62.0 to 0.63.0
  • checkov from 2.1.139 to 2.1.160
  • cspell from 6.8.0 to 6.8.1
  • djlint from 1.11.0 to 1.12.0
  • eslint from 8.22.0 to 8.23.0
  • gitleaks from 8.11.0 to 8.11.2
  • golangci-lint from 1.48.0 to 1.49.0
  • luacheck from 0.26.1 to 1.0.0
  • pylint from 2.14.5 to 2.15.0
  • rubocop from 1.35.0 to 1.35.1
  • secretlint from 5.2.3 to 5.2.4
  • snakemake from 7.12.1 to 7.13.0
  • terraform-fmt from 1.2.7 to 1.2.8
  • terragrunt from 0.38.7 to 0.38.8
  • tflint from 0.35.0 to 0.39.3

[v6.6.0] - 2022-08-21

• Fix flavors suggestions to ignore linters not relevant for such flavor (#1746)
• Update pre-commit hooks from v5 to v6 (#1755).
• Fix version in URL in logs produced by reporters
• Add Makefile linter within python flavor (#1760)
• Set DEFAULT_WORKSPACE as git safe directory per default #1766
• Improve documentation for TAP_REPORTER

• Linter versions upgrades
  • actionlint from 1.6.15 to 1.6.16
  • cfn-lint from 0.61.5 to 0.62.0
  • checkov from 2.1.127 to 2.1.139
  • cpplint from 1.6.0 to 1.6.1
  • cspell from 6.6.1 to 6.8.0
  • djlint from 1.9.5 to 1.11.0
  • eslint-plugin-jsonc from 2.3.1 to 2.4.0
  • gitleaks from 8.10.3 to 8.11.0
  • kics from 1.5.13 to 1.5.14
  • ktlint from 0.46.1 to 0.47.0
  • markdownlint from 0.32.1 to 0.32.2
  • sfdx-scanner-apex from 2.13.7 to 2.13.8
  • sfdx-scanner-aura from 2.13.7 to 2.13.8
  • sfdx-scanner-lwc from 2.13.7 to 2.13.8
  • sqlfluff from 1.2.1 to 1.3.0
  • stylelint from 14.10.0 to 14.11.0
  • syft from 0.53.4 to 0.54.0

[v6.5.0] - 2022-08-15

• npm-groovy-lint: Use Cli lint mode list_of_files for much better performances
• Disable proselint by default if .proselintrc file isn't found

• Linter versions upgrades
  • checkov from 2.1.121 to 2.1.127
  • eslint from 8.21.0 to 8.22.0
  • gitleaks from 8.10.2 to 8.10.3
  • npm-groovy-lint from 9.5.0 to 10.1.0
  • rstcheck from 6.0.0 to 6.1.0

[v6.4.0] - 2022-08-12

• Add REPOSITORY_CHECKOV in all flavors

• New config variables
  • MEGALINTER_FILES_TO_LINT: Comma-separated list of files to analyze. Using this variable will bypass other file listing methods (#808)
  • SKIP_CLI_LINT_MODES: Comma-separated list of cli_lint_modes. To use if you want to skip linters with some CLI lint modes (ex: file,project). Available values: file,cli_lint_mode,project.

• mega-linter-runner:
  • Allow MEGALINTER_FILES_TO_LINT to be sent as positional arguments
  • New argument --filesonly that sends SKIP_CLI_LINT_MODES=project
  • Example: mega-linter-runner --flavor python --release beta --filesonly megalinter/config.py megalinter/flavor_factory.py megalinter/MegaLinter.py

• Fixes
  • Fix SARIF when a run is missing a results list (#1725)
  • Fix missing quotes for Powershell script analyzer (#1728)

• Linter versions upgrades
  • cfn-lint from 0.61.4 to 0.61.5
  • checkov from 2.1.100 to 2.1.121
  • clippy from 0.1.62 to 0.1.63
  • cspell from 6.5.0 to 6.6.1
  • gitleaks from 8.10.1 to 8.10.1
  • powershell from 7.2.5 to 7.2.6
  • protolint from 0.38.3 to 0.39.0
  • rubocop from 1.33.0 to 1.35.0
  • snakemake from 7.12.0 to 7.12.1
  • stylelint from 14.9.1 to 14.10.0
  • terraform-fmt from 1.2.6 to 1.2.7
  • terragrunt from 0.38.6 to 0.38.7

[v6.3.0] - 2022-08-07

• Linters

  • Add REPOSITORY_CHECKOV to benefit from all checks and not only terraform ones. TERRAFORM_CHECKOV will be deprecated in a next major version
  • Add djlint (HTML_DJLINT) to lint HTML files (html, django, jinja, nunjucks, handlebars, golang, angular)
  • Upgrade jsonlint to use maintained package @prantlf/jsonlint]([https://www.npmjs.com/package/@prantlf/jsonlint) + use cli_lint_mode list_of_files to improve performances

• Core
  • Support for automatic removal of Docker container when linting is finished
  • Fix SARIF when endColumn is 0 (#1702)
  • Use dynamic REPORT_FOLDER value for output files for SALESFORCE and COPYPASTE descriptors
  • Fix collapsible sections in Gitlab console logs
  • Manage ignore files (like .secretlintignore or .eslintignore)
    • Define ignore argument for client in descriptors
    • Define ignore file name in descriptors (overridable with _IGNORE_FILE_NAME at runtime)
    • Update documentation generation to take in account this new configuration

• Linter versions upgrades
  • checkov from 2.1.83 to 2.1.98
  • clj-kondo from 2022.04.25 to 2022.08.03
  • eslint from 8.20.0 to 8.21.0
  • flake8 from 5.0.1 to 5.0.2
  • golangci-lint from 1.47.2 to 1.48.0
  • jsonlint from 1.6.3 to 11.6.0
  • kics from 1.5.12 to 1.5.13
  • rubocop from 1.32.0 to 1.33.0
  • syft from 0.52.0 to 0.53.4

[v6.2.1] - 2022-08-01

• Fix blocking bug in MegaLinter v6.2.0 core (#1684 and #1685)

• Linter versions upgrades
  • checkstyle from 10.3.1 to 10.3.2 on 2022-08-01
  • flake8 from 5.0.0 to 5.0.1 on 2022-08-01
  • checkov from 2.1.82 to 2.1.83 on 2022-08-01

[v6.2.0] - 2022-07-31

• Core
  • Fix mega-linter-runner --install template (#1662)
  • Use REPORT_OUTPUT_FOLDER: none to not generate report files
  • Add info in doc about CLI_LINT_MODE and about how to ignore files when cli_lint_mode is project
  • Fix bug that disables generation of megalinter.log file in most cases
  • Fixes about JSON Schema (#1621)
  • Remove redundant line separator after generated table (#1650)
  • Avoid flavor suggestion message when only REPOSITORY linters aren't found

• Linters
  • Add checkmake to lint Makefile
  • Disable SemGrep by default if REPOSITORY_SEMGREP_RULESETS isn't defined.
  • Avoid cspell to lint all files. Lint only other linter files (#1648)
  • Fix revive installation command
  • New default config for gitleaks with useDefault=true

• Linter versions upgrades
  • cfn-lint from 0.61.3 to 0.61.4 on 2022-07-30
  • checkov from 2.1.60 to 2.1.61 on 2022-07-19
  • checkov from 2.1.61 to 2.1.63 on 2022-07-20
  • checkov from 2.1.63 to 2.1.65 on 2022-07-21
  • checkov from 2.1.65 to 2.1.67 on 2022-07-21
  • checkov from 2.1.67 to 2.1.68 on 2022-07-23
  • checkov from 2.1.68 to 2.1.69 on 2022-07-24
  • checkov from 2.1.69 to 2.1.70 on 2022-07-24
  • checkov from 2.1.70 to 2.1.74 on 2022-07-25
  • checkov from 2.1.74 to 2.1.82 on 2022-07-30
  • cspell from 6.3.0 to 6.4.0 on 2022-07-19
  • cspell from 6.4.0 to 6.4.1 on 2022-07-24
  • cspell from 6.4.1 to 6.5.0 on 2022-07-30
  • flake8 from 4.0.1 to 5.0.0 on 2022-07-31
  • gitleaks from 8.8.12 to 8.9.0 on 2022-07-30
  • golangci-lint from 1.47.0 to 1.47.1 on 2022-07-19
  • golangci-lint from 1.47.1 to 1.47.2 on 2022-07-21
  • jscpd from 3.4.5 to 3.3.26 on 2022-07-19
  • markdown-table-formatter from 1.3.0 to 1.4.0 on 2022-07-25
  • markdownlint from 0.32.0 to 0.32.1 on 2022-07-25
  • mypy from 0.961 to 0.971 on 2022-07-19
  • phpstan from 1.8.1 to 1.8.2 on 2022-07-20
  • rubocop from 1.31.2 to 1.32.0 on 2022-07-21
  • sfdx-scanner-apex from 2.13.5 to 2.13.6 on 2022-07-21
  • sfdx-scanner-apex from 2.13.6 to 2.13.7 on 2022-07-30
  • sfdx-scanner-aura from 2.13.5 to 2.13.6 on 2022-07-21
  • sfdx-scanner-aura from 2.13.6 to 2.13.7 on 2022-07-30
  • sfdx-scanner-lwc from 2.13.5 to 2.13.6 on 2022-07-21
  • sfdx-scanner-lwc from 2.13.6 to 2.13.7 on 2022-07-30
  • snakemake from 7.8.5 to 7.9.0 on 2022-07-19
  • snakemake from 7.9.0 to 7.12.0 on 2022-07-30
  • syft from 0.51.0 to 0.52.0 on 2022-07-22
  • terraform-fmt from 1.2.5 to 1.2.6 on 2022-07-30
  • terragrunt from 0.38.5 to 0.38.6 on 2022-07-24

[v6.1.0] - 2022-07-19

• Improve console logs by using collapsible sections in GitHub Actions and Gitlab CI (disable by defining CONSOLE_REPORTER_SECTIONS: false)
• Define CLEAR_REPORT_FOLDER=true to empty report folder at the beginning of each run (#1502)
• Improve SARIF output
  • Replace CI paths in logs
  • Add missing required properties so SARIF is valid
  • Add MegaLinter information in SARIF linter runs
  • Allow to select linters to activate SARIF for, using SARIF_REPORTER_LINTERS
  • Fix issue when a linter is used in multiple SARIF lint results

• Linter versions upgrades
  • cfn-lint from 0.61.2 to 0.61.3 on 2022-07-19
  • checkov from 2.1.57 to 2.1.59 on 2022-07-18
  • checkov from 2.1.59 to 2.1.60 on 2022-07-19
  • cspell from 6.2.3 to 6.3.0 on 2022-07-18
  • eslint from 8.19.0 to 8.20.0 on 2022-07-17
  • golangci-lint from 1.46.2 to 1.47.0 on 2022-07-19
  • jscpd from 3.3.26 to 3.4.5 on 2022-07-19
  • markdownlint from 0.31.1 to 0.32.0 on 2022-07-17
  • pylint from 2.14.4 to 2.14.5 on 2022-07-18

[v6.0.5] - 2022-07-16

• Fix mega-linter-runner --upgrade so it also updates report folder to megalinter-reports in GitHub Actions Workflows #1609
• Fix documentation and templates to use megalinter-reports folder everywhere
• Workaround for python-markdown issue https://github.com/radude/mdx_truly_sane_lists/issues/9

• Linter versions upgrades
  • checkov from 2.1.54 to 2.1.56 on 2022-07-15
  • checkov from 2.1.56 to 2.1.57 on 2022-07-16
  • gitleaks from 8.8.7 to 8.8.12 on 2022-07-16
  • kics from 1.5.11 to 1.5.12 on 2022-07-16
  • protolint from 0.38.2 to 0.38.3 on 2022-07-15
  • sqlfluff from 1.2.0 to 1.2.1 on 2022-07-16
  • terraform-fmt from 1.2.4 to 1.2.5 on 2022-07-15
  • terragrunt from 0.38.4 to 0.38.5 on 2022-07-15

[v6.0.4] - 2022-07-14

• Fix count of errors when using SARIF reporter
• DevSkim: Ignore megalinter-reports by default (#1603)
• Load JSON when list of objects is defined in an ENV var (#1605)
• AutoFix pre_commands using npm install (1258)

• Linter versions upgrades
  • checkov from 2.1.43 to 2.1.54 on 2022-07-14
  • git_diff from 2.34.2 to 2.34.4 on 2022-07-14
  • phpstan from 1.8.0 to 1.8.1 on 2022-07-14
  • sqlfluff from 1.1.0 to 1.2.0 on 2022-07-14
  • syft from 0.50.0 to 0.51.0 on 2022-07-14

[v6.0.3] - 2022-07-11

• mega-linter-runner: Update query args when opening OX Security
• Fix mega-linter-runner doesn't default to v6 for flavors (1596)

[v6.0.0] - 2022-07-10

• Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

• Core architecture
  • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one
    • Correct SARIF files for known format errors
  • New config variable DISABLE_LINTERS_ERRORS to define a list of linters that will be considered as non blocking
  • Upgrade base docker image to python:3.10.4-alpine3.15
  • Rename default report folder from report to megalinter-reports
  • Display GitHub stars in linters summary table in documentation

• Linters:
  • Add DevSkim security linter by Microsoft
  • Add dustilock to check for dependency confusion attacks with node and python packages
  • Add gitleaks to lint git repository
  • Add goodcheck as regex-based linter
  • Add PMD to lint java files (disabled for now)
  • Add semgrep as regex-based linter with many community rules
  • Add syft to generate SBOM (Software Bill Of Materials)
  • Add trivy security linter
  • Remove dockerfilelint, as it'sn't maintained anymore and hadolint contains all its rules
  • Remove rstfmt as it'sn't maintained anymore
  • SARIF management for:
    • bandit
    • checkov
    • checkstyle
    • cfn-lint
    • devskim
    • eslint
    • gitleaks
    • hadolint
    • ktlint
    • npm-groovy-lint
    • psalm
    • semgrep
    • secretlint
    • revive
    • terrascan
    • tflint
    • trivy

• Descriptors:
  • New flavor Security
  • New descriptor repository: contains DevSkim, dustilock, gitleaks, secretlint, semgrep, syft, trivy
  • Remove CREDENTIALS and GIT descriptors

• mega-linter-runner
  • --upgrade option can now upgrade repos MegaLinter config to v6
  • Create/update local .gitignore file when installing / updating MegaLinter using mega-linter-runner
  • Propose to test ox.security service
  • Switch from npm to yarn

• Dev architecture
  • Manage offline run of bash build.sh for those who want to code in planes :)
  • Automate update of CHANGELOG.md after release (beta)
  • Accelerate internal CI testing performances

• Linter versions upgrades
  • actionlint from 1.6.13 to 1.6.15 on 2022-07-10
  • black from 22.3.0 to 22.6.0 on 2022-07-10
  • cfn-lint from 0.61.1 to 0.61.2 on 2022-07-10
  • checkov from 3.9 to 2.1.43 on 2022-07-10
  • checkstyle from 10.3 to 10.3.1 on 2022-07-10
  • clippy from 0.1.61 to 0.1.62 on 2022-07-10
  • cspell from 6.1.2 to 6.2.3 on 2022-07-10
  • eslint-plugin-jsonc from 2.3.0 to 2.3.1 on 2022-07-10
  • eslint from 8.18.0 to 8.19.0 on 2022-07-10
  • git_diff from 2.30.3 to 2.34.2 on 2022-07-10
  • phpstan from 1.7.15 to 1.8.0 on 2022-07-10
  • pylint from 2.14.3 to 2.14.4 on 2022-07-10
  • rubocop from 1.30.1 to 1.31.2 on 2022-07-10
  • secretlint from 4.1.0 to 5.2.3 on 2022-07-10
  • snakemake from 7.8.3 to 7.8.5 on 2022-07-10
  • spectral from 5.6.0 to 5.9.2 on 2022-07-10
  • sqlfluff from 1.0.0 to 1.1.0 on 2022-07-10
  • terraform-fmt from 1.2.3 to 1.2.4 on 2022-07-10
  • terragrunt from 0.38.1 to 0.38.4 on 2022-07-10
  • terrascan from 1.14.0 to 1.15.2 on 2022-07-10
  • v8r from 0.6.1 to 0.13.0 on 2022-07-10
  • yamllint from 1.26.3 to 1.27.1 on 2022-07-10

[v5.17.0] - 2022-07-10

• Message to propose users to upgrade to v6

[v5.16.1] - 2022-06-26

• Quick fix release management

[v5.16.0] - 2022-06-26

• Support for named Docker container.

• Linter versions upgrades
  • checkov from 2.0.1230 to 2.1.0 on 2022-06-23
  • checkov from 2.1.0 to 2.1.5 on 2022-06-24
  • checkov from 2.1.5 to 2.1.7 on 2022-06-25
  • checkov from 2.1.7 to 3.9 on 2022-06-26
  • kics from 1.5.10 to 1.5.11 on 2022-06-23
  • protolint from 0.38.1 to 0.38.2 on 2022-06-26
  • sfdx-scanner-apex from 2.13.4 to 2.13.5 on 2022-06-23
  • sfdx-scanner-aura from 2.13.4 to 2.13.5 on 2022-06-23
  • sfdx-scanner-lwc from 2.13.4 to 2.13.5 on 2022-06-23
  • terragrunt from 0.38.0 to 0.38.1 on 2022-06-23

[v5.15.0] - 2022-06-23

• OX Security branding and pre-announcement
• Linter versions upgrades
  • cfn-lint from 0.61.0 to 0.61.1 on 2022-06-22
  • checkov from 2.0.1209 to 2.0.1210 on 2022-06-14
  • checkov from 2.0.1210 to 2.0.1212 on 2022-06-15
  • checkov from 2.0.1212 to 2.0.1217 on 2022-06-15
  • checkov from 2.0.1217 to 2.0.1218 on 2022-06-17
  • checkov from 2.0.1218 to 2.0.1219 on 2022-06-19
  • checkov from 2.0.1219 to 2.0.1226 on 2022-06-22
  • checkov from 2.0.1226 to 2.0.1230 on 2022-06-22
  • eslint from 8.17.0 to 8.18.0 on 2022-06-19
  • ktlint from 0.45.2 to 0.46.0 on 2022-06-19
  • ktlint from 0.46.0 to 0.46.1 on 2022-06-22
  • phpcs from 3.6.2 to 3.7.0 on 2022-06-14
  • phpcs from 3.7.0 to 3.7.1 on 2022-06-19
  • phpstan from 1.7.12 to 1.7.13 on 2022-06-14
  • phpstan from 1.7.13 to 1.7.14 on 2022-06-15
  • phpstan from 1.7.14 to 1.7.15 on 2022-06-22
  • powershell from 7.2.4 to 7.2.5 on 2022-06-22
  • prettier from 2.6.2 to 2.7.0 on 2022-06-15
  • prettier from 2.7.0 to 2.7.1 on 2022-06-17
  • pylint from 2.14.1 to 2.14.2 on 2022-06-15
  • pylint from 2.14.2 to 2.14.3 on 2022-06-19
  • snakefmt from 0.6.0 to 0.6.1 on 2022-06-14
  • snakemake from 7.8.2 to 7.8.3 on 2022-06-22
  • sql-lint from 0.0.19 to 0.0.20 on 2022-06-19
  • sql-lint from 0.0.20 to 1.0.0 on 2022-06-22
  • sqlfluff from 0.13.2 to 1.0.0 on 2022-06-19
  • terraform-fmt from 1.2.2 to 1.2.3 on 2022-06-17
  • terragrunt from 0.37.3 to 0.37.4 on 2022-06-15
  • terragrunt from 0.37.4 to 0.38.0 on 2022-06-19

[v5.14.0] - 2022-06-12

• Local plugins support & documentation
• Update R lintr documentation

• Linter versions upgrades
  • actionlint from 1.6.12 to 1.6.13 on 2022-05-20
  • cfn-lint from 0.60.0 to 0.60.1 on 2022-05-20
  • cfn-lint from 0.60.1 to 0.61.0 on 2022-06-01
  • checkov from 2.0.1141 to 2.0.1143 on 2022-05-17
  • checkov from 2.0.1143 to 2.0.1147 on 2022-05-20
  • checkov from 2.0.1147 to 2.0.1150 on 2022-05-22
  • checkov from 2.0.1150 to 2.0.1158 on 2022-05-24
  • checkov from 2.0.1158 to 2.0.1159 on 2022-05-24
  • checkov from 2.0.1159 to 2.0.1161 on 2022-05-25
  • checkov from 2.0.1161 to 2.0.1162 on 2022-05-27
  • checkov from 2.0.1162 to 2.0.1174 on 2022-05-30
  • checkov from 2.0.1174 to 2.0.1175 on 2022-05-31
  • checkov from 2.0.1175 to 2.0.1177 on 2022-05-31
  • checkov from 2.0.1177 to 2.0.1182 on 2022-05-31
  • checkov from 2.0.1182 to 2.0.1185 on 2022-06-02
  • checkov from 2.0.1185 to 2.0.1188 on 2022-06-03
  • checkov from 2.0.1188 to 2.0.1206 on 2022-06-08
  • checkov from 2.0.1206 to 2.0.1207 on 2022-06-09
  • checkov from 2.0.1207 to 2.0.1209 on 2022-06-10
  • checkstyle from 10.2 to 10.3 on 2022-05-30
  • clippy from 0.1.60 to 0.1.61 on 2022-05-20
  • coffeelint from 5.2.8 to 5.2.9 on 2022-05-17
  • cspell from 5.20.0 to 5.21.0 on 2022-05-20
  • cspell from 5.21.0 to 5.21.1 on 2022-05-21
  • cspell from 5.21.1 to 6.0.0 on 2022-05-22
  • cspell from 6.0.0 to 6.1.0 on 2022-05-31
  • cspell from 6.1.0 to 6.1.1 on 2022-06-03
  • cspell from 6.1.1 to 6.1.2 on 2022-06-09
  • eslint-plugin-jsonc from 2.2.1 to 2.3.0 on 2022-05-28
  • eslint from 8.15.0 to 8.16.0 on 2022-05-21
  • eslint from 8.16.0 to 8.17.0 on 2022-06-08
  • golangci-lint from 1.46.1 to 1.46.2 on 2022-05-20
  • graphql-schema-linter from 3.0.0 to 3.0.1 on 2022-05-22
  • kics from 1.5.8 to 1.5.9 on 2022-05-27
  • kics from 1.5.9 to 1.5.10 on 2022-06-09
  • mypy from 0.950 to 0.960 on 2022-05-27
  • mypy from 0.960 to 0.961 on 2022-06-08
  • phpstan from 1.6.8 to 1.6.9 on 2022-05-22
  • phpstan from 1.6.9 to 1.7.0 on 2022-05-24
  • phpstan from 1.7.0 to 1.7.1 on 2022-05-24
  • phpstan from 1.7.1 to 1.7.2 on 2022-05-27
  • phpstan from 1.7.11 to 1.7.12 on 2022-06-09
  • phpstan from 1.7.2 to 1.7.3 on 2022-05-30
  • phpstan from 1.7.3 to 1.7.6 on 2022-05-31
  • phpstan from 1.7.6 to 1.7.7 on 2022-05-31
  • phpstan from 1.7.7 to 1.7.8 on 2022-06-02
  • phpstan from 1.7.8 to 1.7.9 on 2022-06-03
  • phpstan from 1.7.9 to 1.7.11 on 2022-06-08
  • powershell from 7.2.3 to 7.2.4 on 2022-05-20
  • pylint from 2.13.9 to 2.14.0 on 2022-06-02
  • pylint from 2.14.0 to 2.14.1 on 2022-06-08
  • rstcheck from 5.0.0 to 6.0.0 on 2022-06-08
  • rubocop from 1.29.1 to 1.30.0 on 2022-05-27
  • rubocop from 1.30.0 to 1.30.1 on 2022-06-08
  • scalafix from 0.10.0 to 0.10.1 on 2022-06-10
  • sfdx-scanner-apex from 2.13.2 to 2.13.4 on 2022-05-27
  • sfdx-scanner-aura from 2.13.2 to 2.13.4 on 2022-05-27
  • sfdx-scanner-lwc from 2.13.2 to 2.13.4 on 2022-05-27
  • shfmt from 3.5.0 to 3.6.0 on 2022-05-24
  • snakemake from 7.6.2 to 7.7.0 on 2022-05-17
  • snakemake from 7.7.0 to 7.8.0 on 2022-05-24
  • snakemake from 7.8.0 to 7.8.1 on 2022-05-31
  • snakemake from 7.8.1 to 7.8.2 on 2022-06-08
  • sqlfluff from 0.13.1 to 0.13.2 on 2022-05-21
  • stylelint from 14.8.2 to 14.8.3 on 2022-05-22
  • stylelint from 14.8.3 to 14.8.4 on 2022-05-25
  • stylelint from 14.8.4 to 14.8.5 on 2022-05-27
  • stylelint from 14.8.5 to 14.9.0 on 2022-06-09
  • stylelint from 14.9.0 to 14.9.1 on 2022-06-11
  • terraform-fmt from 1.1.9 to 1.2.0 on 2022-05-20
  • terraform-fmt from 1.2.0 to 1.2.1 on 2022-05-24
  • terraform-fmt from 1.2.1 to 1.2.2 on 2022-06-03
  • terragrunt from 0.37.1 to 0.37.2 on 2022-06-09
  • terragrunt from 0.37.2 to 0.37.3 on 2022-06-12

[v5.13.0] - 2022-05-15

• Add gherkin-lint in dotnet flavor (#1435)
• Define pre-commit hooks (#569).
• Pin ansible-lint to 6.0.2 to fix pip dependency conflict between jsonschema versions (#1470).
• Use docker image for editorconfig-checker
• Update sqlfluff descriptor properties to enable error count(#1460)

• Linter versions upgrades
  • cfn-lint from 0.59.0 to 0.59.1 on 2022-05-03
  • cfn-lint from 0.59.1 to 0.60.0 on 2022-05-14
  • checkov from 2.0.1076 to 2.0.1079 on 2022-04-24
  • checkov from 2.0.1079 to 2.0.1084 on 2022-04-26
  • checkov from 2.0.1084 to 2.0.1088 on 2022-04-28
  • checkov from 2.0.1088 to 2.0.1098 on 2022-04-29
  • checkov from 2.0.1098 to 2.0.1100 on 2022-04-30
  • checkov from 2.0.1100 to 2.0.1102 on 2022-05-02
  • checkov from 2.0.1102 to 2.0.1108 on 2022-05-03
  • checkov from 2.0.1108 to 2.0.1110 on 2022-05-03
  • checkov from 2.0.1110 to 2.0.1113 on 2022-05-05
  • checkov from 2.0.1113 to 2.0.1118 on 2022-05-06
  • checkov from 2.0.1118 to 2.0.1119 on 2022-05-07
  • checkov from 2.0.1119 to 2.0.1120 on 2022-05-08
  • checkov from 2.0.1120 to 2.0.1121 on 2022-05-08
  • checkov from 2.0.1121 to 2.0.1140 on 2022-05-14
  • checkov from 2.0.1140 to 2.0.1141 on 2022-05-15
  • checkstyle from 10.1 to 10.2 on 2022-04-24
  • clj-kondo from 2022.04.08 to 2022.04.25 on 2022-04-30
  • coffeelint from 5.2.7 to 5.2.8 on 2022-04-26
  • cspell from 5.19.7 to 5.20.0 on 2022-05-03
  • editorconfig-checker from 2.3.5 to 2.4.0 on 2022-05-15
  • eslint from 8.14.0 to 8.15.0 on 2022-05-07
  • golangci-lint from 1.45.2 to 1.46.1 on 2022-05-14
  • graphql-schema-linter from 2.0.1 to 2.0.2 on 2022-05-06
  • graphql-schema-linter from 2.0.2 to 3.0.0 on 2022-05-07
  • kics from 1.5.6 to 1.5.7 on 2022-05-03
  • kics from 1.5.7 to 1.5.8 on 2022-05-14
  • luacheck from 0.26.0 to 0.26.1 on 2022-04-24
  • markdown-link-check from 3.10.0 to 3.10.2 on 2022-05-05
  • mypy from 0.942 to 0.950 on 2022-04-28
  • phpstan from 1.5.7 to 1.6.0 on 2022-04-26
  • phpstan from 1.6.0 to 1.6.2 on 2022-04-28
  • phpstan from 1.6.2 to 1.6.3 on 2022-04-29
  • phpstan from 1.6.3 to 1.6.4 on 2022-05-03
  • phpstan from 1.6.4 to 1.6.7 on 2022-05-05
  • phpstan from 1.6.7 to 1.6.8 on 2022-05-14
  • powershell from 7.2.2 to 7.2.3 on 2022-04-28
  • protolint from 0.37.1 to 0.38.1 on 2022-05-03
  • psalm from Psalm.4.x-dev@ to Psalm.5.x-dev@ on 2022-05-14
  • pylint from 2.13.7 to 2.13.8 on 2022-05-03
  • pylint from 2.13.8 to 2.13.9 on 2022-05-14
  • rubocop from 1.28.1 to 1.28.2 on 2022-04-26
  • rubocop from 1.28.2 to 1.29.0 on 2022-05-07
  • rubocop from 1.29.0 to 1.29.1 on 2022-05-14
  • sfdx-scanner-apex from 2.13.1 to 2.13.2 on 2022-05-05
  • sfdx-scanner-aura from 2.13.1 to 2.13.2 on 2022-05-05
  • sfdx-scanner-lwc from 2.13.1 to 2.13.2 on 2022-05-05
  • snakemake from 7.4.0 to 7.5.0 on 2022-04-28
  • snakemake from 7.5.0 to 7.6.0 on 2022-05-03
  • snakemake from 7.6.0 to 7.6.1 on 2022-05-05
  • snakemake from 7.6.1 to 7.6.2 on 2022-05-07
  • sqlfluff from 0.13.0 to 0.13.1 on 2022-05-07
  • stylelint from 14.7.1 to 14.8.0 on 2022-04-28
  • stylelint from 14.8.0 to 14.8.1 on 2022-04-30
  • stylelint from 14.8.1 to 14.8.2 on 2022-05-04
  • terragrunt from 0.36.10 to 0.37.1 on 2022-05-14
  • terragrunt from 0.36.7 to 0.36.8 on 2022-04-28
  • terragrunt from 0.36.8 to 0.36.9 on 2022-04-30
  • terragrunt from 0.36.9 to 0.36.10 on 2022-05-06
  • xmllint from 20913 to 20914 on 2022-05-14

[v5.12.0] - 2022-04-23

• Core
  • Fix git upgrade issue
  • New option FAIL_IF_UPDATED_SOURCES (#1389)

• Linter versions upgrades
  • actionlint from 1.6.11 to 1.6.12 on 2022-04-18
  • cfn-lint from 0.58.4 to 0.59.0 on 2022-04-18
  • checkov from 2.0.1047 to 2.0.1050 on 2022-04-11
  • checkov from 2.0.1050 to 2.0.1067 on 2022-04-18
  • checkov from 2.0.1067 to 2.0.1068 on 2022-04-18
  • checkov from 2.0.1068 to 2.0.1076 on 2022-04-22
  • coffeelint from 5.2.5 to 5.2.6 on 2022-04-11
  • coffeelint from 5.2.6 to 5.2.7 on 2022-04-22
  • eslint from 8.13.0 to 8.14.0 on 2022-04-23
  • git_diff from 2.30.2 to 2.30.3 on 2022-04-18
  • htmlhint from 1.1.3 to 1.1.4 on 2022-04-11
  • kics from 1.5.5 to 1.5.6 on 2022-04-18
  • npm-groovy-lint from 9.4.1 to 9.5.0 on 2022-04-18
  • phpstan from 1.5.4 to 1.5.6 on 2022-04-18
  • phpstan from 1.5.6 to 1.5.7 on 2022-04-22
  • pylint from 2.13.5 to 2.13.7 on 2022-04-22
  • rstcheck from 3.3.1 to 5.0.0 on 2022-04-18
  • rubocop from 1.27.0 to 1.28.1 on 2022-04-22
  • snakemake from 7.3.8 to 7.4.0 on 2022-04-22
  • sqlfluff from 0.12.0 to 0.13.0 on 2022-04-22
  • stylelint from 14.6.1 to 14.7.1 on 2022-04-18
  • terraform-fmt from 1.1.8 to 1.1.9 on 2022-04-22
  • terragrunt from 0.36.6 to 0.36.7 on 2022-04-18
  • tflint from 0.34.1 to 0.35.0 on 2022-04-18

[v5.11.0] - 2022-04-11

• Linters
  • Disable rstfmt as it's neither stable or maintained
  • markdown-links-check: allow 203 as valid return code

• Fixes
  • Github Comment Reporter: switch to using a hidden HTML comment to mark the comment, with the current workflow and jobid. This is more robust than the old method. ([#1355)
  • Allow to provide CI_ACTION_RUN_URL to build hlink for GitHub Comments reporter messages ([#1341)
  • Display plugin URL in MegaLinter output logs ([#1340)
  • Fix public glibc public key download
  • Fix no override and no default toolchain set when lint rust with clippy via github-action (#975)
  • Fix cspell FileNotFound error by creating subdirectories under report as required (#1397)

• Doc
  • Add instructions to upload artifacts when using MegaLinter with Jenkins

• Linter versions upgrades
  • actionlint from 1.6.10 to 1.6.11 on 2022-04-06
  • ansible-lint from 6.0.1 to 6.0.2 on 2022-03-24
  • bash-exec from 5.1.0 to 5.1.16 on 2022-03-22
  • black from 22.1.0 to 22.3.0 on 2022-03-30
  • cfn-lint from 0.58.3 to 0.58.4 on 2022-03-22
  • checkov from 2.0.1008 to 2.0.1016 on 2022-03-31
  • checkov from 2.0.1016 to 2.0.1021 on 2022-03-31
  • checkov from 2.0.1021 to 2.0.1024 on 2022-04-01
  • checkov from 2.0.1024 to 2.0.1030 on 2022-04-04
  • checkov from 2.0.1030 to 2.0.1037 on 2022-04-06
  • checkov from 2.0.1037 to 2.0.1045 on 2022-04-09
  • checkov from 2.0.1045 to 2.0.1046 on 2022-04-10
  • checkov from 2.0.1046 to 2.0.1047 on 2022-04-11
  • checkov from 2.0.975 to 2.0.977 on 2022-03-21
  • checkov from 2.0.977 to 2.0.980 on 2022-03-22
  • checkov from 2.0.980 to 2.0.983 on 2022-03-23
  • checkov from 2.0.983 to 2.0.995 on 2022-03-26
  • checkov from 2.0.995 to 2.0.999 on 2022-03-27
  • checkov from 2.0.999 to 2.0.1008 on 2022-03-30
  • checkstyle from 10.0 to 10.1 on 2022-03-27
  • clippy from 0.1.59 to 0.1.60 on 2022-04-09
  • clj-kondo from 2022.02.09 to 2022.04.08 on 2022-04-10
  • coffeelint from 5.2.4 to 5.2.5 on 2022-03-22
  • cspell from 5.19.2 to 5.19.3 on 2022-03-26
  • cspell from 5.19.3 to 5.19.4 on 2022-04-01
  • cspell from 5.19.4 to 5.19.5 on 2022-04-02
  • cspell from 5.19.5 to 5.19.6 on 2022-04-09
  • cspell from 5.19.6 to 5.19.7 on 2022-04-10
  • eslint from 8.11.0 to 8.12.0 on 2022-03-26
  • eslint from 8.12.0 to 8.13.0 on 2022-04-09
  • golangci-lint from 1.45.0 to 1.45.2 on 2022-03-26
  • hadolint from 2.9.1 to 2.9.3 on 2022-03-31
  • hadolint from 2.9.3 to 2.10.0 on 2022-04-10
  • htmlhint from 1.1.2 to 1.1.3 on 2022-03-30
  • kics from 1.5.4 to 1.5.5 on 2022-03-31
  • ktlint from 0.45.0 to 0.45.1 on 2022-03-22
  • ktlint from 0.45.1 to 0.45.2 on 2022-04-07
  • luacheck from 0.25.0 to 0.26.0 on 2022-03-26
  • mypy from 0.941 to 0.942 on 2022-03-26
  • phpstan from 1.4.10 to 1.5.0 on 2022-03-26
  • phpstan from 1.5.0 to 1.5.2 on 2022-03-30
  • phpstan from 1.5.2 to 1.5.3 on 2022-03-31
  • phpstan from 1.5.3 to 1.5.4 on 2022-04-04
  • prettier from 2.6.0 to 2.6.1 on 2022-03-26
  • prettier from 2.6.1 to 2.6.2 on 2022-04-04
  • pylint from 2.12.2 to 2.13.1 on 2022-03-26
  • pylint from 2.13.1 to 2.13.2 on 2022-03-27
  • pylint from 2.13.2 to 2.13.3 on 2022-03-30
  • pylint from 2.13.3 to 2.13.4 on 2022-03-31
  • pylint from 2.13.4 to 2.13.5 on 2022-04-07
  • rubocop from 1.26.0 to 1.26.1 on 2022-03-23
  • rubocop from 1.26.1 to 1.27.0 on 2022-04-09
  • scalafix from 0.9.34 to 0.10.0 on 2022-04-04
  • sfdx-scanner-apex from 2.13.0 to 2.13.1 on 2022-03-24
  • sfdx-scanner-aura from 2.13.0 to 2.13.1 on 2022-03-24
  • sfdx-scanner-lwc from 2.13.0 to 2.13.1 on 2022-03-24
  • snakemake from 7.2.1 to 7.3.0 on 2022-03-22
  • snakemake from 7.3.0 to 7.3.1 on 2022-03-24
  • snakemake from 7.3.1 to 7.3.2 on 2022-03-26
  • snakemake from 7.3.2 to 7.3.3 on 2022-03-30
  • snakemake from 7.3.3 to 7.3.4 on 2022-03-31
  • snakemake from 7.3.4 to 7.3.5 on 2022-03-31
  • snakemake from 7.3.5 to 7.3.6 on 2022-04-04
  • snakemake from 7.3.6 to 7.3.7 on 2022-04-06
  • snakemake from 7.3.7 to 7.3.8 on 2022-04-07
  • sqlfluff from 0.11.1 to 0.11.2 on 2022-03-26
  • sqlfluff from 0.11.2 to 0.12.0 on 2022-04-09
  • stylelint from 14.6.0 to 14.6.1 on 2022-03-26
  • terraform-fmt from 1.1.7 to 1.1.8 on 2022-04-09
  • terrascan from 1.13.2 to 1.14.0 on 2022-04-01

[v5.10.0] - 2022-03-20

• Linter versions upgrades
  • ansible-lint from 5.4.0 to 6.0.0 on 2022-03-16
  • ansible-lint from 6.0.0 to 6.0.1 on 2022-03-19
  • checkov from 2.0.939 to 2.0.940 on 2022-03-13
  • checkov from 2.0.940 to 2.0.943 on 2022-03-14
  • checkov from 2.0.943 to 2.0.949 on 2022-03-15
  • checkov from 2.0.949 to 2.0.962 on 2022-03-16
  • checkov from 2.0.962 to 2.0.969 on 2022-03-17
  • checkov from 2.0.969 to 2.0.970 on 2022-03-17
  • checkov from 2.0.970 to 2.0.975 on 2022-03-19
  • cspell from 5.19.0 to 5.19.1 on 2022-03-13
  • cspell from 5.19.1 to 5.19.2 on 2022-03-14
  • golangci-lint from 1.44.2 to 1.45.0 on 2022-03-19
  • hadolint from 2.7.0 to 2.9.1 on 2022-03-19
  • kics from 1.5.3 to 1.5.4 on 2022-03-17
  • ktlint from 0.44.0 to 0.45.0 on 2022-03-19
  • markdown-link-check from 3.9.3 to 3.10.0 on 2022-03-20
  • mypy from 0.940 to 0.941 on 2022-03-15
  • phpstan from 1.4.9 to 1.4.10 on 2022-03-14
  • powershell from 7.2.1 to 7.2.2 on 2022-03-17
  • prettier from 2.5.1 to 2.6.0 on 2022-03-17
  • snakemake from 7.2.0 to 7.2.1 on 2022-03-14
  • sqlfluff from 0.11.0 to 0.11.1 on 2022-03-17
  • stylelint from 14.5.3 to 14.6.0 on 2022-03-17
  • terragrunt from 0.36.3 to 0.36.5 on 2022-03-17
  • terragrunt from 0.36.5 to 0.36.6 on 2022-03-19

[v5.9.0] - 2022-03-13

• Linters
  • New linter kubeconform to validate Kubernetes manifests with updated schemas

• Core
  • Switch from JDK 8 to JDK 11
  • Use latest version of npm

• Flavors
  • Add shell linters to ci_light flavor (#1298)

• Fixes
  • Generate JSON Schema HTML Documentation when building documentation (#1287)
  • rubocop: remove --force-exclusion from auto-added parameters (#302)
  • terrascan: call terrascan init as a pre-command

• Linter versions upgrades
  • actionlint from 1.6.8 to 1.6.9 on 2022-02-25
  • actionlint from 1.6.9 to 1.6.10 on 2022-03-12
  • bandit from 1.7.2 to 1.7.3 on 2022-02-28
  • bandit from 1.7.3 to 1.7.4 on 2022-03-06
  • cfn-lint from 0.58.0 to 0.58.1 on 2022-02-21
  • cfn-lint from 0.58.1 to 0.58.2 on 2022-02-27
  • cfn-lint from 0.58.2 to 0.58.3 on 2022-03-09
  • checkov from 2.0.873 to 2.0.885 on 2022-02-21
  • checkov from 2.0.885 to 2.0.901 on 2022-02-25
  • checkov from 2.0.901 to 2.0.902 on 2022-02-25
  • checkov from 2.0.902 to 2.0.903 on 2022-02-27
  • checkov from 2.0.903 to 2.0.906 on 2022-02-28
  • checkov from 2.0.906 to 2.0.914 on 2022-03-03
  • checkov from 2.0.914 to 2.0.917 on 2022-03-04
  • checkov from 2.0.917 to 2.0.918 on 2022-03-06
  • checkov from 2.0.918 to 2.0.923 on 2022-03-08
  • checkov from 2.0.923 to 2.0.924 on 2022-03-08
  • checkov from 2.0.924 to 2.0.927 on 2022-03-09
  • checkov from 2.0.927 to 2.0.931 on 2022-03-10
  • checkov from 2.0.931 to 2.0.935 on 2022-03-11
  • checkov from 2.0.935 to 2.0.938 on 2022-03-12
  • checkov from 2.0.938 to 2.0.939 on 2022-03-13
  • checkstyle from 9.3 to 10.0 on 2022-03-03
  • clippy from 0.1.58 to 0.1.59 on 2022-02-25
  • clj-kondo from 2022.01.15 to 2022.02.09 on 2022-02-21
  • cpplint from 1.5.5 to 1.6.0 on 2022-02-20
  • cspell from 5.18.5 to 5.19.0 on 2022-03-13
  • eslint from 8.10.0 to 8.11.0 on 2022-03-12
  • eslint from 8.9.0 to 8.10.0 on 2022-02-27
  • kics from 1.5.2 to 1.5.3 on 2022-03-03
  • mypy from 0.931 to 0.940 on 2022-03-12
  • phpstan from 1.4.6 to 1.4.7 on 2022-03-03
  • phpstan from 1.4.7 to 1.4.8 on 2022-03-06
  • phpstan from 1.4.8 to 1.4.9 on 2022-03-11
  • protolint from 0.37.0 to 0.37.1 on 2022-02-27
  • rst-lint from 1.3.2 to 1.4.0 on 2022-02-25
  • rubocop from 1.25.1 to 1.26.0 on 2022-03-10
  • sfdx-scanner-apex from 2.12.0 to 2.13.0 on 2022-02-25
  • sfdx-scanner-aura from 2.12.0 to 2.13.0 on 2022-02-25
  • sfdx-scanner-lwc from 2.12.0 to 2.13.0 on 2022-02-25
  • snakefmt from 0.4.4 to 0.6.0 on 2022-03-04
  • snakemake from 6.15.5 to 7.0.0 on 2022-02-25
  • snakemake from 7.0.0 to 7.0.1 on 2022-02-27
  • snakemake from 7.0.1 to 7.0.3 on 2022-03-03
  • snakemake from 7.0.3 to 7.0.4 on 2022-03-04
  • snakemake from 7.0.4 to 7.1.0 on 2022-03-06
  • snakemake from 7.1.0 to 7.1.1 on 2022-03-08
  • snakemake from 7.1.1 to 7.2.0 on 2022-03-13
  • sqlfluff from 0.10.1 to 0.11.0 on 2022-03-08
  • stylelint from 14.5.1 to 14.5.3 on 2022-02-25
  • swiftlint from 0.46.2 to 0.46.3 on 2022-02-25
  • swiftlint from 0.46.3 to 0.46.4 on 2022-03-08
  • swiftlint from 0.46.4 to 0.46.5 on 2022-03-09
  • terraform-fmt from 1.1.6 to 1.1.7 on 2022-03-04
  • terragrunt from 0.36.1 to 0.36.2 on 2022-02-25
  • terragrunt from 0.36.2 to 0.36.3 on 2022-03-04
  • terrascan from 1.13.1 to 1.13.2 on 2022-02-25
  • tsqllint from 1.14.3.0 to 1.14.5.0 on 2022-02-21
  • xmllint from 20912 to 20913 on 2022-03-12

[v5.8.0] - 2022-02-18

• Linters
  • Improve ansible-lint performances by linting all project in one call, and count number of errors
  • Use project cli_lint_mode to improve performances
    • terrascan

• Fixes
  • Manage to use local certificate with Gitlab comments reporter using GITLAB_SSL_CERTIFICATE_PATH (#1239)
  • Fix GITLAB_ACCESS_TOKEN_MEGALINTER suggestion when trying to push comments to gitlab merge request
  • Gitlab Comments Reporter: allow to use certificates with variable GITLAB_CUSTOM_CERTIFICATE (or GITLAB_CERTIFICATE_PATH only if PRE_COMMANDS are used) (#1239)

• Core
  • Allow to check prop existence in active_only_if_file_found and apply to eslint descriptors (#1205)

• Doc
  • Update images with screen records gifs
  • Add publish artifact task in azure pipelines doc

• Linter versions upgrades
  • ansible-lint from 5.3.2 to 5.4.0 on 2022-02-13
  • checkov from 2.0.782 to 2.0.783 on 2022-02-03
  • checkov from 2.0.783 to 2.0.786 on 2022-02-03
  • checkov from 2.0.786 to 2.0.791 on 2022-02-05
  • checkov from 2.0.791 to 2.0.793 on 2022-02-06
  • checkov from 2.0.793 to 2.0.795 on 2022-02-06
  • checkov from 2.0.795 to 2.0.812 on 2022-02-09
  • checkov from 2.0.812 to 2.0.813 on 2022-02-09
  • checkov from 2.0.813 to 2.0.817 on 2022-02-10
  • checkov from 2.0.817 to 2.0.830 on 2022-02-13
  • checkov from 2.0.830 to 2.0.833 on 2022-02-14
  • checkov from 2.0.833 to 2.0.853 on 2022-02-16
  • checkov from 2.0.853 to 2.0.866 on 2022-02-18
  • checkov from 2.0.866 to 2.0.873 on 2022-02-18
  • cspell from 5.18.0 to 5.18.3 on 2022-02-05
  • cspell from 5.18.3 to 5.18.4 on 2022-02-09
  • cspell from 5.18.4 to 5.18.5 on 2022-02-16
  • eslint-plugin-jsonc from 2.1.0 to 2.2.1 on 2022-02-18
  • eslint from 8.8.0 to 8.9.0 on 2022-02-13
  • golangci-lint from 1.44.0 to 1.44.2 on 2022-02-18
  • kics from 1.5.1 to 1.5.2 on 2022-02-18
  • ktlint from 0.43.2 to 0.44.0 on 2022-02-16
  • markdownlint from 0.30.0 to 0.31.0 on 2022-02-06
  • markdownlint from 0.31.0 to 0.31.1 on 2022-02-09
  • phpstan from 1.4.5 to 1.4.6 on 2022-02-06
  • protolint from 0.36.0 to 0.37.0 on 2022-02-13
  • rubocop from 1.25.0 to 1.25.1 on 2022-02-03
  • snakemake from 6.15.1 to 6.15.2 on 2022-02-06
  • snakemake from 6.15.2 to 6.15.3 on 2022-02-09
  • snakemake from 6.15.3 to 6.15.4 on 2022-02-09
  • snakemake from 6.15.4 to 6.15.5 on 2022-02-10
  • sqlfluff from 0.10.0 to 0.10.1 on 2022-02-18
  • sqlfluff from 0.9.4 to 0.10.0 on 2022-02-13
  • stylelint from 14.3.0 to 14.4.0 on 2022-02-09
  • stylelint from 14.4.0 to 14.5.0 on 2022-02-13
  • stylelint from 14.5.0 to 14.5.1 on 2022-02-18
  • terraform-fmt from 1.1.4 to 1.1.5 on 2022-02-03
  • terraform-fmt from 1.1.5 to 1.1.6 on 2022-02-18
  • terrascan from 1.13.0 to 1.13.1 on 2022-02-13

[v5.7.1] - 2022-02-02

• Linter updates:
  • temporary disable snakefmt to allow latest versions of black and sqlfluff
  • cspell: Update .cspell default config with "version: "2.0", "noConfigSearch": true
  • Use list_of_files mode to improve performances
    • markdown-link-check
    • standard
    • stylelint

• Fixes
  • Remove extraheader in git repo when using Azure Pipelines (#1125)
  • Fix gitlab token error message (#1228)

• Linter versions upgrades
  • black from 21.12 to 22.1.0 on 2022-02-02
  • cfn-lint from 0.57.0 to 0.58.0 on 2022-02-01
  • checkov from 2.0.775 to 2.0.777 on 2022-01-31
  • checkov from 2.0.777 to 2.0.778 on 2022-02-01
  • checkov from 2.0.778 to 2.0.780 on 2022-02-02
  • checkov from 2.0.780 to 2.0.782 on 2022-02-02
  • cspell from 5.17.0 to 5.18.0 on 2022-01-31
  • kics from 1.5.0 to 1.5.1 on 2022-02-02
  • markdown-table-formatter from 1.2.0 to 1.3.0 on 2022-01-31
  • phpstan from 1.4.3 to 1.4.4 on 2022-02-01
  • phpstan from 1.4.4 to 1.4.5 on 2022-02-02
  • snakemake from 6.13.1 to 6.15.1 on 2022-02-02
  • sqlfluff from 0.9.3 to 0.9.4 on 2022-02-02
  • terragrunt from 0.36.0 to 0.36.1 on 2022-02-01

[v5.7.0] - 2022-01-30

• Core:
  • New reporter GITLAB_COMMENT_REPORTER allowing to post MegaLinter results as comments on Gitlab merge requests
  • CI: Update test method to check that the number of errors is correctly calculated (+ fix linter test cases)

• Linter updates:
  • Add configuration file option for SQLFluff (#1200)
  • secretlint: Use .gitignore as .secretlintignore if --secretlintignore isn't defined and .secretlintignore not found (#1207)
  • Update bash-exec documentation
  • Display correct number of errors in logs
    • actionlint
    • chktex
    • cpplint
    • htmlhint
    • perlcritic
    • sfdx-scanner
    • shellcheck
    • shfmt
  • Use list_of_files mode to improve performances
    • htmlhint
    • shellcheck
    • shfmt

• Fixes:
  • Fix v5 doc deployment when there is a new release (#1190)
  • Fix issue when using VALIDATE_ALL_CODEBASE: false on Azure Pipelines by defining auth header in CI env variable GIT_AUTHORIZATION_BEARER (#1125)
  • Fix tflint initialization so it uses configuration file when defined (#1134)

• Linter versions upgrades
  • bandit from 1.7.1 to 1.7.2 on 2022-01-26
  • checkov from 2.0.744 to 2.0.745 on 2022-01-23
  • checkov from 2.0.745 to 2.0.746 on 2022-01-24
  • checkov from 2.0.746 to 2.0.749 on 2022-01-24
  • checkov from 2.0.749 to 2.0.754 on 2022-01-24
  • checkov from 2.0.754 to 2.0.763 on 2022-01-26
  • checkov from 2.0.763 to 2.0.769 on 2022-01-28
  • checkov from 2.0.769 to 2.0.772 on 2022-01-29
  • checkov from 2.0.772 to 2.0.775 on 2022-01-30
  • checkstyle from 9.2.1 to 9.3 on 2022-01-30
  • coffeelint from 5.2.3 to 5.2.4 on 2022-01-28
  • cspell from 5.16.0 to 5.17.0 on 2022-01-28
  • dotenv-linter from 3.1.1 to 3.2.0 on 2022-01-24
  • eslint-plugin-jsonc from 2.0.0 to 2.1.0 on 2022-01-28
  • eslint from 8.7.0 to 8.8.0 on 2022-01-29
  • golangci-lint from 1.43.0 to 1.44.0 on 2022-01-26
  • htmlhint from 1.1.0 to 1.1.1 on 2022-01-23
  • htmlhint from 1.1.1 to 1.1.2 on 2022-01-28
  • markdown-link-check from 3.9.2 to 3.9.3 on 2022-01-29
  • phpstan from 1.4.2 to 1.4.3 on 2022-01-29
  • rubocop from 0.82.0 to 1.25.0 on 2022-01-29
  • shfmt from 3.2.1 to 3.5.0 on 2022-01-30
  • shfmt from 3.3.1 to 3.2.1 on 2022-01-30
  • snakemake from 6.13.1 to 6.14.0 on 2022-01-28
  • snakemake from 6.14.0 to 6.15.0 on 2022-01-29
  • snakemake from 6.15.0 to 6.13.1 on 2022-01-30
  • sqlfluff from 0.9.1 to 0.9.3 on 2022-01-28
  • stylelint from 14.2.0 to 14.3.0 on 2022-01-23
  • swiftlint from 0.46.0 to 0.46.2 on 2022-01-28
  • tsqllint from 1.14.0.0 to 1.14.3.0 on 2022-01-23

[v5.6.0] - 2022-01-22

• Add linters licenses to online documentation
• Fix issue when config vars are both from ENV and from config file (#1154)
• Fix issue of --files argument format when calling npm-groovy-lint (#1176)
• Fix wrong status in reports when DISABLE_ERRORS is used
• Increase memory size for node.js-based linters (#1149)
• Make python linters play nice with each other (#1182)

• Linter versions upgrades
  • coffeelint from 5.2.2 to 5.2.3 on 2022-01-09
  • phpstan from 1.3.0 to 1.3.3 on 2022-01-09
  • mypy from 0.930 to 0.931 on 2022-01-09
  • cspell from 5.14.0 to 5.15.1 on 2022-01-09
  • checkov from 2.0.702 to 2.0.708 on 2022-01-09
  • terraform-fmt from 1.1.2 to 1.1.3 on 2022-01-09
  • terrascan from 1.12.0 to 1.13.0 on 2022-01-09
  • npm-groovy-lint from 9.3.0 to 9.3.2 on 2022-01-09
  • sqlfluff from 0.9.0 to 0.9.1 on 2022-01-09
  • cfn-lint from 0.56.3 to 0.56.4 on 2022-01-11
  • npm-groovy-lint from 9.3.2 to 9.4.0 on 2022-01-11
  • snakemake from 6.12.3 to 6.13.0 on 2022-01-11
  • checkov from 2.0.708 to 2.0.709 on 2022-01-11
  • scalafix from 0.9.33 to 0.9.34 on 2022-01-12
  • snakemake from 6.13.0 to 6.13.1 on 2022-01-12
  • cspell from 5.15.1 to 5.15.2 on 2022-01-12
  • checkov from 2.0.709 to 2.0.710 on 2022-01-12
  • npm-groovy-lint from 9.4.0 to 9.4.1 on 2022-01-13
  • checkov from 2.0.710 to 2.0.712 on 2022-01-13
  • terragrunt from 0.35.16 to 0.35.18 on 2022-01-13
  • clj-kondo from 2021.12.19 to 2022.01.13 on 2022-01-14
  • clippy from 0.1.57 to 0.1.58 on 2022-01-14
  • checkov from 2.0.712 to 2.0.717 on 2022-01-14
  • phpstan from 1.3.3 to 1.4.0 on 2022-01-15
  • terragrunt from 0.35.18 to 0.35.19 on 2022-01-15
  • terragrunt from 0.35.19 to 0.35.20 on 2022-01-15
  • checkov from 2.0.717 to 2.0.718 on 2022-01-16
  • eslint from 8.6.0 to 8.7.0 on 2022-01-17
  • checkov from 2.0.718 to 2.0.720 on 2022-01-17
  • phpstan from 1.4.0 to 1.4.1 on 2022-01-18
  • checkov from 2.0.720 to 2.0.727 on 2022-01-18
  • clj-kondo from 2022.01.13 to 2022.01.15 on 2022-01-22
  • cfn-lint from 0.56.4 to 0.57.0 on 2022-01-22
  • markdown-link-check from 3.9.0 to 3.9.2 on 2022-01-22
  • phpstan from 1.4.1 to 1.4.2 on 2022-01-22
  • protolint from 0.35.2 to 0.36.0 on 2022-01-22
  • cspell from 5.15.2 to 5.16.0 on 2022-01-22
  • swiftlint from 0.45.1 to 0.46.0 on 2022-01-22
  • checkov from 2.0.727 to 2.0.744 on 2022-01-22
  • kics from 1.4.9 to 1.5.0 on 2022-01-22
  • terraform-fmt from 1.1.3 to 1.1.4 on 2022-01-22
  • terragrunt from 0.35.20 to 0.36.0 on 2022-01-22

[v5.5.0] - 2022-01-03

• Linter versions upgrades
  • checkov from 2.0.680 to 2.0.681 on 2021-12-21
  • stylelint from 14.1.0 to 14.2.0 on 2021-12-23
  • mypy from 0.920 to 0.930 on 2021-12-23
  • checkov from 2.0.681 to 2.0.687 on 2021-12-23
  • npm-groovy-lint from 9.1.0 to 9.2.0 on 2021-12-23
  • checkov from 2.0.687 to 2.0.690 on 2021-12-23
  • tflint from 0.34.0 to 0.34.1 on 2021-12-26
  • clj-kondo from 2021.06.18 to 2021.12.19 on 2021-12-29
  • npm-groovy-lint from 9.2.0 to 9.3.0 on 2021-12-29
  • checkstyle from 9.2 to 9.2.1 on 2021-12-29
  • cspell from 5.13.4 to 5.14.0 on 2021-12-29
  • checkov from 2.0.690 to 2.0.695 on 2021-12-29
  • phpstan from 1.2.0 to 1.3.0 on 2021-12-29
  • checkov from 2.0.695 to 2.0.701 on 2021-12-31
  • htmlhint from 1.0.0 to 1.1.0 on 2022-01-01
  • eslint from 8.5.0 to 8.6.0 on 2022-01-01
  • checkov from 2.0.701 to 2.0.702 on 2022-01-03

[v5.4.0] - 2021-12-21

• Linter versions upgrades
  • snakemake from 6.12.1 to 6.12.2 on 2021-12-09
  • checkov from 2.0.636 to 2.0.639 on 2021-12-09
  • checkov from 2.0.639 to 2.0.641 on 2021-12-09
  • terraform-fmt from 1.0.11 to 1.1.0 on 2021-12-09
  • snakemake from 6.12.2 to 6.12.3 on 2021-12-11
  • checkov from 2.0.641 to 2.0.648 on 2021-12-11
  • cspell from 5.13.2 to 5.13.3 on 2021-12-11
  • terragrunt from 0.35.13 to 0.35.14 on 2021-12-11
  • checkov from 2.0.648 to 2.0.649 on 2021-12-12
  • phpcs from 3.6.1 to 3.6.2 on 2021-12-14
  • sqlfluff from 0.8.2 to 0.9.0 on 2021-12-14
  • checkov from 2.0.649 to 2.0.659 on 2021-12-14
  • tflint from 0.33.2 to 0.34.0 on 2021-12-14
  • npm-groovy-lint from 9.0.0 to 9.1.0 on 2021-12-15
  • powershell from 7.2.0 to 7.2.1 on 2021-12-15
  • checkov from 2.0.659 to 2.0.660 on 2021-12-15
  • mypy from 0.910 to 0.920 on 2021-12-16
  • checkov from 2.0.660 to 2.0.662 on 2021-12-16
  • checkov from 2.0.662 to 2.0.668 on 2021-12-17
  • terraform-fmt from 1.1.0 to 1.1.1 on 2021-12-17
  • eslint from 8.4.1 to 8.5.0 on 2021-12-18
  • checkov from 2.0.668 to 2.0.672 on 2021-12-18
  • cspell from 5.13.3 to 5.13.4 on 2021-12-18
  • terraform-fmt from 1.1.1 to 1.1.2 on 2021-12-18
  • terragrunt from 0.35.14 to 0.35.16 on 2021-12-18
  • coffeelint from 5.2.1 to 5.2.2 on 2021-12-21
  • checkov from 2.0.672 to 2.0.680 on 2021-12-21
  • kics from 1.4.8 to 1.4.9 on 2021-12-21