What's Changed

• Enhance INTEGRATION.md with a toc and ordering by @jammsen in #1118
• DL3041, DL3033: Handle RPM package epoch by @m-ildefons in #1121
• DL3009: Allow either cache or tmpfs mounts by @m-ildefons in #1123
• added new rule DL3062 to check go install by @Danil42Russia in #1111
• DL3041, DL3033: Handle RPM package with plus sign by @samcranford in #1125
• relax dependencies by @m-ildefons in #1128
• fixup release workflow by @m-ildefons in #1129

New Contributors

• @jammsen made their first contribution in #1118
• @Danil42Russia made their first contribution in #1111
• @samcranford made their first contribution in #1125

Full Changelog: v2.13.1...v2.14.0

What's Changed

• build(deps): bump actions/cache from 3.0.4 to 3.0.11 by @dependabot[bot] in #888
• build(deps): bump cachix/install-nix-action from 17 to 18 by @dependabot[bot] in #890
• build(deps): bump cachix/cachix-action from 10 to 12 by @dependabot[bot] in #894
• docs: use cabal instead of stack in readme by @m-ildefons in #903
• DL3011: fixup changes in AST by @m-ildefons in #902
• fix: false positive in DL3022 by @swarnimarun in #900
• Correct documentation example for failure-threshold by @ericcornelissen in #901
• update hadolint's config json schema to support latest properties by @omissis in #910
• Update INTEGRATION.md steps for pre-commit by @tangyfruits in #908
• chore: fix typos in rule descriptions by @AndreyBozhko in #912
• Add LABEL org.opencontainers.image.source="https://github.com/hadolin… by @marwin1991 in #927
• DL3014: Fix false positive on double quiet by @m-ildefons in #913
• Update README.md by @ding-ma in #918
• Spelling by @jsoref in #936
• fix: misidentification of pipenv (#366) by @kthy in #940
• build(deps): bump cachix/install-nix-action from 18 to 20 by @dependabot[bot] in #944
• build(deps): bump actions/cache from 3.0.11 to 3.3.1 by @dependabot[bot] in #946
• build(deps): bump docker/build-push-action from 3 to 4 by @dependabot[bot] in #931
• build(deps): bump svenstaro/upx-action from 2.0.1 to 2.2.0 by @dependabot[bot] in #922
• delete rule DL3005 by @deronnax in #964
• docs: Add new section for Ignoring Rules in README by @tanmay-pnaik in #1008
• docs: Add Table of Contents for README by @tanmay-pnaik in #1007
• DL3060 should be suppressed if cache mounts are used by @slimslenderslacks in #1003
• Improve parsing of gem install flag patterns to reduce false positives by @mkusaka in #954
• fix: fp in DL3006 by @swarnimarun in #942
• docs: Update TOC with Ignoring Rules section by @tanmay-pnaik in #1013
• build(deps): bump svenstaro/upx-action from 2.2.0 to 2.3.0 by @dependabot[bot] in #959
• Pragma: Allow comments following inline by @m-ildefons in #1059
• build(deps): bump actions/cache from 3.3.1 to 4.2.0 by @dependabot[bot] in #1063
• Ignore unsatisfiable shellcheck error 1091 by @ghoneycutt in #1020
• build(deps): bump cachix/install-nix-action from 26 to 30 by @dependabot[bot] in #1045
• build(deps): bump actions/checkout from 3 to 4 by @dependabot[bot] in #1046
• build(deps): bump cachix/cachix-action from 14 to 15 by @dependabot[bot] in #1047
• build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot[bot] in #1048
• Fix casing in Dockerfile by @JEnglandOhalo in #1093
• fix: replace actor with repository_owner in ghcr login by @aweiher in #1086
• Fix GitHub Actions badge in README.md by @PeterDaveHello in #1072
• Add SC1091 to yaml Schema by @psmey in #1088
• DL3048 accepting LABEL keys that contain underscore(s) or slash(es) by @mschmeitz in #1034
• Improve DL3009 rule to properly handle all apt-based package managers by @PeterDaveHello in #1074
• Replace cryptonite with cryptohash-sha1 by @anuraaga in #1090
• build(deps): bump actions/cache from 4.2.0 to 4.2.3 by @dependabot[bot] in #1082
• fix(DL3041): Prevent false negatives for packages which include a dash in their package name by @egfx-notifications in #1098
• fix character escaping in checkstyle formatter by @m-ildefons in #1104
• build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @dependabot[bot] in #1115
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1113
• build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1114
• Added CI integration instructions for Azure Devops by @joelbourbon in #1112
• Release v2.13.1 by @m-ildefons in #1116

New Contributors

• @swarnimarun made their first contribution in #900
• @ericcornelissen made their first contribution in #901
• @omissis made their first contribution in #910
• @tangyfruits made their first contribution in #908
• @AndreyBozhko made their first contribution in #912
• @marwin1991 made their first contribution in #927
• @ding-ma made their first contribution in #918
• @jsoref made their first contribution in #936
• @kthy made their first contribution in #940
• @deronnax made their first contribution in #964
• @tanmay-pnaik made their first contribution in #1008
• @slimslenderslacks made their first contribution in #1003
• @mkusaka made their first contribution in #954
• @ghoneycutt made their first contribution in #1020
• @JEnglandOhalo made their first contribution in #1093
• @aweiher made their first contribution in #1086
• @psmey made their first contribution in #1088
• @mschmeitz made their first contribution in #1034
• @anuraaga made their first contribution in #1090
• @egfx-notifications made their first contribution in #1098
• @joelbourbon made their first contribution in #1112

Full Changelog: v2.12.0...v2.13.1

What's Changed

• build(deps): bump actions/cache from 3.0.4 to 3.0.11 by @dependabot in #888
• build(deps): bump cachix/install-nix-action from 17 to 18 by @dependabot in #890
• build(deps): bump cachix/cachix-action from 10 to 12 by @dependabot in #894

Full Changelog: v2.12.0...v2.12.1-beta

Full Changelog: v2.11.0...v2.12.0

• Try a newer GHC version for valid MacOS Ventura builds

What's Changed

• minor updates to environment variables by @sanyer in #811
• DL3022 support for copying from images by @Wirone in #815
• build(deps): bump cachix/install-nix-action from 16 to 17 by @dependabot in #820
• build(deps): bump actions/cache from 3.0.1 to 3.0.2 by @dependabot in #819
• unpin docker version in pre-commit hook by @foolioo in #814
• bugfix: config file key for output format by @m-ildefons in #829
• Update language-docker to 11.0.0 by @dgageot in #835
• Update language-docker to 11.0.0 by @dgageot in #836
• DL3049: Fix behaviour with multistage builds by @m-ildefons in #852
• DL3057: fix multiple warnings for multistage builds by @m-ildefons in #851
• Add SC3046 in hadolint JSON Schema by @nvuillam in #850
• DL3013: Fix false positives for VCS, http and local path packages (#389) by @Lunkentuss in #845
• bugfix: typo in DL3026Spec.hs by @cwimmer in #839
• build(deps): bump actions/cache from 3.0.2 to 3.0.4 by @dependabot in #844
• build(deps): bump docker/setup-buildx-action from 1 to 2 by @dependabot in #834
• build(deps): bump docker/build-push-action from 2 to 3 by @dependabot in #833
• build(deps): bump docker/login-action from 1 to 2 by @dependabot in #832
• build(deps): bump haskell/actions from 1 to 2 by @dependabot in #825
• docs: update link to Haskell by @chapeupreto in #860
• release: create checksums for release artifacts by @m-ildefons in #869
• Missing space in DL3047 by @austinpray-mixpanel in #875
• Allow rm yum cache clean up by @cronik in #880
• feature: global ignore pragma by @m-ildefons in #871
• Added formatting in README file by @vanta in #868
• fix(DL3029): allow BUILDPLATFORM and TARGETPLATFORM variables by @maxbrunet in #867
• Fix release process by @lorenzo in #898

New Contributors

• @sanyer made their first contribution in #811
• @Wirone made their first contribution in #815
• @foolioo made their first contribution in #814
• @dgageot made their first contribution in #835
• @cwimmer made their first contribution in #839
• @chapeupreto made their first contribution in #860
• @austinpray-mixpanel made their first contribution in #875
• @vanta made their first contribution in #868
• @maxbrunet made their first contribution in #867

Full Changelog: v2.10.0...v2.11.0

What's Changed

The highlight of this release is the support for ARM64 binaries.

• New release workflow with support for ARM binaries by @lorenzo in #803
• build(deps): bump actions/cache from 2.1.7 to 3.0.1 by @dependabot in #810

Full Changelog: v2.9.3...v2.10.0

What's Changed

• formatters: Add GNU style formatter by @m-ildefons in #801
• Upgrade the Dockerfile parser version

Full Changelog: v2.9.2...v2.9.3

What's Changed

• DL3061: fix false positive on pragmas by @m-ildefons in #797
• processing: apply onbuild rule wrapper per rule by @m-ildefons in #799

Full Changelog: v2.9.1...v2.9.2

What's Changed

• bugfix: display version string correctly by @m-ildefons in #732
• config: fix config file key trustedRegistries by @m-ildefons in #734
• DL3007: Do not error out when latest tag is used alongside a sha256 by @JohanLorenzo in #739
• options: disable ignore pragma by @m-ildefons in #748
• DL3021: Fix behavior with quotes in target path by @m-ildefons in #750
• Tests: Fix test suite for SARIF formatter by @m-ildefons in #754
• DL3061: Check for instruction order by @m-ildefons in #763
• Bring env var for trusted registries in sync with docs (#756) by @evhan in #759
• DL3038, DL3040, DL3041: Add support for microdnf by @Lunkentuss in #764
• DL3026: Trusted registries wildcard domains by @cronik in #767
• Switch to non-rate limited ghcr.io hosted container for pre-commit by @dbast in #770
• Add Super-Linter to Code Review docs by @johnnymetz in #762
• Remove duplicate extension by @Lunkentuss in #777
• Allow --platform=$BUILDPLATFORM by @StefanSchoof in #774
• dependencies: bump shellcheck and language docker by @m-ildefons in #780
• config: respect NO_COLOR specification by @m-ildefons in #778
• dependency: bump language-docker to 10.4.2 by @m-ildefons in #787
• documentation: fix and update readme by @m-ildefons in #789
• Add libtinfo-dev by @pkoch in #793

New Contributors

• @JohanLorenzo made their first contribution in #739
• @evhan made their first contribution in #759
• @Lunkentuss made their first contribution in #764
• @cronik made their first contribution in #767
• @dbast made their first contribution in #770
• @johnnymetz made their first contribution in #762
• @StefanSchoof made their first contribution in #774
• @pkoch made their first contribution in #793

Full Changelog: v2.8.0...v2.9.1

What's Changed

• bugfix: display version string correctly by @m-ildefons in #732
• config: fix config file key trustedRegistries by @m-ildefons in #734
• DL3007: Do not error out when latest tag is used alongside a sha256 by @JohanLorenzo in #739
• options: disable ignore pragma by @m-ildefons in #748
• DL3021: Fix behavior with quotes in target path by @m-ildefons in #750
• Tests: Fix test suite for SARIF formatter by @m-ildefons in #754
• DL3061: Check for instruction order by @m-ildefons in #763
• Bring env var for trusted registries in sync with docs (#756) by @evhan in #759
• DL3038, DL3040, DL3041: Add support for microdnf by @Lunkentuss in #764
• DL3026: Trusted registries wildcard domains by @cronik in #767
• Switch to non-rate limited ghcr.io hosted container for pre-commit by @dbast in #770
• Add Super-Linter to Code Review docs by @johnnymetz in #762
• Remove duplicate extension by @Lunkentuss in #777
• Allow --platform=$BUILDPLATFORM by @StefanSchoof in #774
• dependencies: bump shellcheck and language docker by @m-ildefons in #780
• config: respect NO_COLOR specification by @m-ildefons in #778
• dependency: bump language-docker to 10.4.2 by @m-ildefons in #787
• documentation: fix and update readme by @m-ildefons in #789

New Contributors

• @JohanLorenzo made their first contribution in #739
• @evhan made their first contribution in #759
• @Lunkentuss made their first contribution in #764
• @cronik made their first contribution in #767
• @dbast made their first contribution in #770
• @johnnymetz made their first contribution in #762
• @StefanSchoof made their first contribution in #774

Full Changelog: v2.8.0...v2.9.0