chore(deps): update dependency mega-linter-runner to v9 by renovate[bot] · Pull Request #6191 · oxsecurity/megalinter

renovate · 2025-09-20T10:04:21Z

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence
mega-linter-runner	`8.8.0` -> `9.0.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

oxsecurity/megalinter (mega-linter-runner)

`v9.0.0`

Compare Source

Core
- Create your own Megalinter Custom Flavors to dramatically improve your performances
  - See documentation for usage
  - Use npx mega-linter-runner@beta --custom-flavor-setup to initialize repo
  - Suggest new flavors in reporters with a mega-linter-runner including the list of linters
- New LLM Advisor: call external LLMs to get hints to solve linter errors, available in:
  - Console Reporter
  - Text Reporter
  - Git platforms PR/MR comments Reporter
- Use ghcr.io docker images by default because of rate limits on docker.io
- Use uv to create the venv folder for pip-installed linters
- Add copilot instructions for GitHub Copilot
- Update base image to python:3.13-alpine3.21 (also embeds go 1.24)
Disabled linters
- puppet-lint: Disabled Until fix is provided for puppetlabs/puppet-lint#251
- checkov: Disabled until fix is provided for bridgecrewio/checkov#7263
Removed linters
- markdown-link-check has been removed because lychee can be used instead, and has much better performances
Linters enhancements
- PHP-CS-Fixer is able to run on PHP 8.4 without error (change default configuration) by @llaville
- cspell: Filter output lines that do not contain found issues
- hadolint: Extend DOCKERFILE_HADOLINT_FILE_NAMES_REGEX to include the purpose.Dockerfile convention eg service.Dockerfile.
- sqlfluff: Handle fixing of issues
Fixes
- When linter is docker based, force --platform=linux/amd64 so it works when running locally on Mac
- Added checking of *.pyi and *.ipynb files to the ruff and ruff-format linters
Reporters
- New default display for Pull Request comments, with expandable sections containing the first 1000 lines of the output log. Former display remains available by defining REPORTERS_MARKDOWN_SUMMARY_TYPE=table
- Markdown summary reporter:
  - Write a file for Github integration if GITHUB_STEP_SUMMARY is set
  - Truncate less linter output lines
- Text reporter: Change the output file names to put the linter name first, then the status
- Enhance display of markdown summary
Doc
- Update documentation in all megalinter descriptor files to improve accuracy and consistency
- Fix incorrect information in linters documentation and descriptors
- Remove dead links
- Add linter description (linter_text) in all linter descriptor, to generate a more exhaustive documentation.
- Update contributing guide to explain how to manage python dependencies in the codebase
Flavors
- Do not suggest flavors that have more linters than the current one
CI
- Update default MegaLinter CI/CD workflows to disable LLM_ADVISOR in case of bot pull requests
mega-linter-runner
- Add all CI/CD providers in the --install command
- Use ghcr.io docker images by default
- New parameter --container-engine allowing to use podman as runner
- mega-linter-runner --upgrade: Handle upgrade of github actions to their latest version
- mega-linter-runner --upgrade: Upgrades MegaLinter actions and images to v9
Linter versions upgrades (68)
- ansible-lint from 25.5.0 to 25.9.0
- bandit from 1.8.3 to 1.8.6
- bicep_linter from 0.36.1 to 0.37.4
- black from 25.1.0 to 25.9.0
- cfn-lint from 1.36.0 to 1.39.1
- checkstyle from 10.25.0 to 11.0.1
- clang-format from 19.1.4 to 20.1.8
- clippy from 0.1.87 to 0.1.90
- clj-kondo from 2025.06.05 to 2025.09.19
- csharpier from 1.0.2 to 1.1.2
- cspell from 9.1.1 to 9.2.1
- dartanalyzer from 3.8.1 to 3.8.3
- devskim from 1.0.59 to 1.0.67
- dotnet-format from 9.0.106 to 9.0.110
- editorconfig-checker from 3.3.0 to 3.4.0
- flake8 from 7.2.0 to 7.3.0
- git_diff from 2.47.2 to 2.49.1
- gitleaks from 8.27.2 to 8.28.0
- golangci-lint from 2.1.6 to 2.4.0
- grype from 0.94.0 to 0.100.0
- hadolint from 2.12.0 to 2.13.1
- helm from 3.16.3 to 3.18.4
- htmlhint from 1.5.1 to 1.7.1
- kics from 2.1.10 to 2.1.13
- ktlint from 1.6.0 to 1.7.1
- kubescape from 3.0.34 to 3.0.41
- lightning-flow-scanner from 3.23.0 to 3.29.0
- mypy from 1.16.0 to 1.18.2
- npm-groovy-lint from 15.2.0 to 15.2.1
- npm-package-json-lint from 8.0.0 to 9.0.0
- php-cs-fixer from 3.75.0 to 3.87.2
- phpcs from 3.13.1 to 4.0.0
- phpstan from 2.1.17 to 2.1.28
- pmd from 7.14.0 to 7.17.0
- powershell from 7.5.1 to 7.5.3
- powershell_formatter from 7.5.1 to 7.5.3
- prettier from 3.5.3 to 3.6.2
- protolint from 0.55.6 to 0.56.4
- psalm from Psalm.6.12.0@ to Psalm.6.13.1@
- pylint from 3.3.7 to 3.3.8
- pyright from 1.1.402 to 1.1.405
- revive from 1.10.0 to 1.12.0
- roslynator from 0.10.1.0 to 0.10.2.0
- rubocop from 1.76.1 to 1.80.2
- ruff-format from 0.11.13 to 0.13.1
- ruff from 0.11.13 to 0.13.1
- secretlint from 10.1.0 to 11.2.4
- selene from 0.28.0 to 0.29.0
- shellcheck from 0.10.0 to 0.11.0
- shfmt from 3.11.0 to 3.12.0
- snakefmt from 0.11.0 to 0.11.2
- snakemake from 9.5.1 to 9.11.4
- sqlfluff from 3.4.1 to 3.4.2
- stylelint from 16.20.0 to 16.24.0
- swiftlint from 0.59.1 to 0.61.0
- syft from 1.27.1 to 1.33.0
- terraform-fmt from 1.12.2 to 1.13.2
- terragrunt from 0.81.6 to 0.87.2
- tflint from 0.58.0 to 0.59.1
- trivy-sbom from 0.63.0 to 0.66.0
- trivy from 0.63.0 to 0.66.0
- trufflehog from 3.89.1 to 3.90.8
- v8r from 5.0.0 to 5.1.0
- vale from 3.11.2 to 3.12.0
- xmllint from 21304 to 21308

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-09-20T10:22:15Z

✅⚠️MegaLinter analysis: Success with warnings

⚠️ PYTHON / bandit - 68 errors

Run started:2025-09-20 10:47:00.058887

Test results:
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/blacklists/blacklist_imports.html#b404-import-subprocess
   Location: ./.automation/build.py:11:0
10	import shutil
11	import subprocess
12	import sys

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ''
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:3064:35
3063	                api_github_headers = {"content-type": "application/json"}
3064	                use_github_token = ""
3065	                if "GITHUB_TOKEN" in os.environ:

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ' (with GITHUB_TOKEN)'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:3068:39
3067	                    api_github_headers["authorization"] = f"Bearer {github_token}"
3068	                    use_github_token = " (with GITHUB_TOKEN)"
3069	                logging.info(

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3445:14
3444	        cwd=cwd,
3445	        shell=True,
3446	        executable=None if sys.platform == "win32" else which("bash"),
3447	    )
3448	    stdout = utils.clean_string(process.stdout)
3449	    logging.info(f"Format table results: ({process.returncode})\n" + stdout)
3450	
3451	
3452	def generate_version():
3453	    # npm version
3454	    logging.info("Updating npm package version…")

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b607_start_process_with_partial_path.html
   Location: ./.automation/build.py:3456:14
3455	    cwd_to_use = os.getcwd() + "/mega-linter-runner"
3456	    process = subprocess.run(
3457	        [
3458	            "npm",
3459	            "version",
3460	            "--newversion",
3461	            RELEASE_TAG,
3462	            "-no-git-tag-version",
3463	            "--no-commit-hooks",
3464	        ],
3465	        stdout=subprocess.PIPE,
3466	        universal_newlines=True,
3467	        cwd=cwd_to_use,
3468	        shell=True,
3469	    )
3470	    print(process.stdout)

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3468:14
3467	        cwd=cwd_to_use,
3468	        shell=True,
3469	    )
3470	    print(process.stdout)
3471	    print(process.stderr)
3472	    # Update python project version:
3473	    process = subprocess.run(
3474	        ["hatch", "version", RELEASE_TAG],
3475	        stdout=subprocess.PIPE,
3476	        text=True,
3477	        shell=True,
3478	        check=True,
3479	    )
3480	    # Update changelog
3481	    if UPDATE_CHANGELOG is True:
3482	        changelog_file = f"{REPO_HOME}/CHANGELOG.md"

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b607_start_process_with_partial_path.html
   Location: ./.automation/build.py:3473:14
3472	    # Update python project version:
3473	    process = subprocess.run(
3474	        ["hatch", "version", RELEASE_TAG],
3475	        stdout=subprocess.PIPE,
3476	        text=True,
3477	        shell=True,
3478	        check=True,
3479	    )
3480	    # Update changelog

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3477:14
3476	        text=True,
3477	        shell=True,
3478	        check=True,
3479	    )
3480	    # Update changelog
3481	    if UPDATE_CHANGELOG is True:
3482	        changelog_file = f"{REPO_HOME}/CHANGELOG.md"
3483	        with open(changelog_file, "r", encoding="utf-8") as md_file:
3484	            changelog_content = md_file.read()

--------------------------------------------------
>> Issue: [B60

(Truncated to 5714 characters out of 43076)

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.2.37)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
    Error: File:[sh/megalinter_exec] is not executable

⚠️ REPOSITORY / grype - 31 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
NAME                           INSTALLED  FIXED IN  TYPE    VULNERABILITY        SEVERITY  EPSS           RISK   
ejs                            3.1.6      3.1.7     npm     GHSA-phwq-j96m-2c2q  Critical  93.5% (99th)   87.9   
tar                            6.0.1      6.1.1     npm     GHSA-3jfq-g458-7qm9  High      85.7% (99th)   67.3   
requests                       2.24.0     2.31.0    python  GHSA-j8r2-6x86-q33q  Medium    6.1% (90th)    3.4    
ip                             1.1.5                npm     GHSA-2p57-rm9w-gvfp  High      2.8% (85th)    2.2    
minimist                       1.2.5      1.2.6     npm     GHSA-xvch-5gv4-984h  Critical  1.2% (78th)    1.1    
ejs                            3.1.6      3.1.10    npm     GHSA-ghr5-ch3p-vcr6  Medium    1.3% (78th)    0.6    
tar                            6.0.1      6.1.9     npm     GHSA-5955-9wpr-37jh  High      0.6% (68th)    0.5    
node-fetch                     2.6.6      2.6.7     npm     GHSA-r683-j2x4-v87g  High      0.5% (65th)    0.4    
minimatch                      3.0.4      3.0.5     npm     GHSA-f8q6-p94x-37v3  High      0.5% (63rd)    0.3    
semver                         7.3.5      7.5.2     npm     GHSA-c2qf-rxjj-qqgw  High      0.4% (61st)    0.3    
braces                         3.0.2      3.0.3     npm     GHSA-grv7-fg5c-xmjg  High      0.2% (45th)    0.2    
ansi-regex                     3.0.0      3.0.1     npm     GHSA-93q8-gq69-wqmw  High      0.2% (44th)    0.2    
tar                            6.0.1      6.1.2     npm     GHSA-r628-mhmh-qjhw  High      0.2% (42nd)    0.2    
@octokit/request-error         2.1.0      5.1.1     npm     GHSA-xx4v-prfh-6cgc  Medium    0.3% (50th)    0.1    
@octokit/request               5.6.2      8.4.1     npm     GHSA-rmvr-2pp2-xj38  Medium    0.2% (47th)    0.1    
http-cache-semantics           4.1.0      4.1.1     npm     GHSA-rc47-6667-2j5j  High      0.2% (37th)    0.1    
ip                             1.1.5      1.1.9     npm     GHSA-78xj-cgh5-2h22  Low       0.4% (59th)    0.1    
tar                            6.0.1      6.2.1     npm     GHSA-f5x3-32g6-xq36  Medium    0.2% (42nd)    0.1    
tar                            6.1.11     6.2.1     npm     GHSA-f5x3-32g6-xq36  Medium    0.2% (42nd)    0.1    
cross-spawn                    7.0.3      7.0.5     npm     GHSA-3xgq-45jj-v275  High      0.1% (33rd)    < 0.1  
micromatch                     4.0.4      4.0.8     npm     GHSA-952p-6rrq-rcjv  Medium    0.1% (32nd)    < 0.1  
@octokit/plugin-paginate-rest  2.17.0     9.2.2     npm     GHSA-h5c3-5r3r-rr8q  Medium    0.1% (31st)    < 0.1  
requests                       2.24.0     2.32.4    python  GHSA-9hjg-9r4m-mvj7  Medium    < 0.1% (24th)  < 0.1  
debug                          4.2.0      4.3.1     npm     GHSA-gxpj-cx7g-858c  Low       < 0.1% (27th)  < 0.1  
tar                            6.0.1      6.1.7     npm     GHSA-9r2w-394v-53qc  High      < 0.1% (6th)   < 0.1  
word-wrap                      1.2.3      1.2.4     npm     GHSA-j8xg-fqg3-53r7  Medium    < 0.1% (12th)  < 0.1  
tar                            6.0.1      6.1.9     npm     GHSA-qq89-hq3f-393p  High      < 0.1% (4th)   < 0.1  
requests                       2.24.0     2.32.0    python  GHSA-9wx4-h78v-vm56  Medium    < 0.1% (8th)   < 0.1  
tmp                            0.0.33     0.2.4     npm     GHSA-52f5-9888-hmc6  Low       < 0.1% (9th)   < 0.1  
brace-expansion                1.1.11     1.1.12    npm     GHSA-v6h2-p8h4-qcjw  Low       < 0.1% (4th)   < 0.1  
brace-expansion                2.0.1      2.0.2     npm     GHSA-v6h2-p8h4-qcjw  Low       < 0.1% (4th)   < 0.1
[0030] ERROR discovered vulnerabilities at or above the severity threshold

⚠️ SPELL / lychee - 11 errors

[WARN ] WARNING: `--exclude-mail` is deprecated and will soon be removed; E-Mail is no longer checked by default. Use `--include-mail` to enable E-Mail checking.
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden
[404] https://plugins.jetbrains.com/plugin/11563-flake8-support | Network error: Not Found
[404] https://marketplace.visualstudio.com/items?itemName=ForceConfigControl.lightningflowscanner | Network error: Not Found
[404] https://raku.org/camelia-logo.png | Network error: Not Found
[TIMEOUT] https://www.gnu.org/software/bash/ | Timeout
[TIMEOUT] https://www.gnu.org/software/bash/manual/bash.html | Timeout
[TIMEOUT] https://www.nongnu.org/chktex/ | Timeout
[TIMEOUT] https://www.nongnu.org/chktex | Timeout
📝 Summary
---------------------
🔍 Total.........2357
✅ Successful....1884
⏳ Timeouts.........4
🔀 Redirected.......0
👻 Excluded.......458
❓ Unknown..........0
🚫 Errors..........11

Errors in megalinter/descriptors/html.megalinter-descriptor.yml
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[403] https://htmlhint.com/ | Network error: Forbidden

Errors in megalinter/descriptors/latex.megalinter-descriptor.yml
[TIMEOUT] https://www.nongnu.org/chktex | Timeout
[TIMEOUT] https://www.nongnu.org/chktex/ | Timeout

Errors in megalinter/descriptors/bash.megalinter-descriptor.yml
[TIMEOUT] https://www.gnu.org/software/bash/ | Timeout
[TIMEOUT] https://www.gnu.org/software/bash/manual/bash.html | Timeout

Errors in megalinter/descriptors/python.megalinter-descriptor.yml
[404] https://plugins.jetbrains.com/plugin/11563-flake8-support | Network error: Not Found

Errors in megalinter/descriptors/raku.megalinter-descriptor.yml
[404] https://raku.org/camelia-logo.png | Network error: Not Found

Errors in README.md
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden

Errors in mega-linter-runner/README.md
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)

Errors in megalinter/descriptors/salesforce.megalinter-descriptor.yml
[404] https://marketplace.visualstudio.com/items?itemName=ForceConfigControl.lightningflowscanner | Network error: Not Found

Errors in megalinter/descriptors/markdown.megalinter-descriptor.yml
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden

⚠️ MARKDOWN / markdownlint - 307 errors

.github/copilot-instructions.md:9 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/copilot-instructions.md:156 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/linters/valestyles/proselint/README.md:12:601 MD013/line-length Line length [Expected: 600; Actual: 755]
CHANGELOG.md:2021:87 MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/articles.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "They talk about MegaLinter"]
docs/badge.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Badge"]
docs/config-activation.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Activation and deactivation"]
docs/config-apply-fixes.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Apply fixes"]
docs/config-cli-lint-mode.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLI lint mode"]
docs/config-file.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: ".mega-linter.yml file"]
docs/config-filtering.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Filter linted files"]
docs/config-linters.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Linter specific variables"]
docs/config-postcommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Post-commands"]
docs/config-precommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Pre-commands"]
docs/config-variables-security.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Environment variables security"]
docs/config-variables.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Common variables"]
docs/configuration.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Configuration"]
docs/descriptors/action_actionlint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "actionlint"]
docs/descriptors/action.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ACTION"]
docs/descriptors/ansible_ansible_lint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ansible-lint"]
docs/descriptors/ansible_ansible_lint.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 795]
docs/descriptors/ansible.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ANSIBLE"]
docs/descriptors/api_spectral.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 746]
docs/descriptors/api.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "API"]
docs/descriptors/arm_arm_ttk.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "arm-ttk"]
docs/descriptors/arm.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ARM"]
docs/descriptors/bash_bash_exec.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bash-exec"]
docs/descriptors/bash_shellcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shellcheck"]
docs/descriptors/bash_shellcheck.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 785]
docs/descriptors/bash_shfmt.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shfmt"]
docs/descriptors/bash.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BASH"]
docs/descriptors/bicep_bicep_linter.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bicep_linter"]
docs/descriptors/bicep.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BICEP"]
docs/descriptors/c_clang_format.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "clang-format"]
docs/descriptors/c_clang_format.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/c_cppcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cppcheck"]
docs/descriptors/c_cpplint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cpplint"]
docs/descriptors/c.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "C"]
docs/descriptors/clojure_cljstyle.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cljstyle"]
docs/descriptors/clojure_cljstyle.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/clojure.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLOJURE"]
docs/descriptors/cloudformation_cfn_lint.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 865]
docs/descriptors/cloudformation.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLOUDFORMATION"]
docs/descriptors/coffee_coffeelint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "coffeelint"]
docs/descriptors/coffee_coffeelint.md:8:601 MD013/line

(Truncated to 5714 characters out of 38139)

⚠️ YAML / prettier - 6 errors

.automation/plugins.yml 99ms (unchanged)
.github/FUNDING.yml 5ms (unchanged)
.github/dependabot.yml 53ms (unchanged)
.github/linters/.cfnlintrc.yml 8ms (unchanged)
.github/linters/.checkov.yml 4ms (unchanged)
.github/linters/.golangci.yml 6ms (unchanged)
.github/linters/.hadolint.yml 5ms (unchanged)
.github/linters/.openapirc.yml 3ms (unchanged)
.github/linters/.protolintrc.yml 6ms (unchanged)
.github/linters/.ruby-lint.yml 3ms (unchanged)
.github/linters/.yamllint.yml 12ms (unchanged)
.github/linters/analysis_options.yml 12ms (unchanged)
.github/linters/valestyles/Microsoft/AMPM.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Accessibility.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Acronyms.yml 11ms (unchanged)
.github/linters/valestyles/Microsoft/Adverbs.yml 34ms (unchanged)
.github/linters/valestyles/Microsoft/Auto.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Avoid.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/ComplexWords.yml 23ms (unchanged)
.github/linters/valestyles/Microsoft/Contractions.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/Dashes.yml 10ms (unchanged)
.github/linters/valestyles/Microsoft/DateFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/DateNumbers.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/DateOrder.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Ellipses.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/FirstPerson.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Foreign.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Gender.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/GenderBias.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/GeneralURL.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingAcronyms.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingColons.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingPunctuation.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/Headings.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Hyphens.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Negative.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Ordinal.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/OxfordComma.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Passive.yml 12ms (unchanged)
.github/linters/valestyles/Microsoft/Percentages.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Quotes.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/RangeFormat.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/RangeTime.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Ranges.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Semicolon.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/SentenceLength.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Spacing.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Suspended.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Terms.yml 12ms (unchanged)
.github/linters/valestyles/Microsoft/URLFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Units.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Vocab.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/We.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Wordiness.yml 34ms (unchanged)
.github/linters/valestyles/proselint/Airlinese.yml 1ms (unchanged)
.github/linters/valestyles/proselint/AnimalLabels.yml 8ms (unchanged)
.github/linters/valestyles/proselint/Annotations.yml 3ms (unchanged)
.github/linters/valestyles/proselint/Apologizing.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Archaisms.yml 3ms (unchanged)
.github/linters/valestyles/proselint/But.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Cliches.yml 66ms (unchanged)
.github/linters/valestyles/proselint/CorporateSpeak.yml 6ms (unchanged)
.github/linters/valestyles/proselint/Currency.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Cursing.yml 4ms (unchanged)
.github/linters/valestyles/proselint/DateCase.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateMidnight.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateRedundancy.yml 3ms (unchanged)
.github/linters/valestyles/proselint/DateSpacing.yml 4ms (unchanged)
.github/linters/valestyles/proselint/DenizenLabels.yml 7ms (unchanged)
.github/linters/valestyles/proselint/Diacritical.yml 25ms (unchanged)
.github/linters/valestyles/proselint/GenderBias.yml 6ms (unchanged)
.github/linters/valestyles/proselint/GroupTerms.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Hedging.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Hyperbole.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Jargon.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTOffensive.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTTerms.yml 6ms (unchanged)
.github/linters/valestyles/proselint/Malapropisms.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Needless.yml 61ms (unchanged)
.github/linters/valestyles/proselint/Nonwords.yml 9ms (unchanged)
.github/linters/valestyles/proselint/Oxymorons.yml 10ms (unchanged)
.github/linters/valestyles/proselint/P-Value.yml 6ms (unchanged)
.github/linters/valestyles/proselint/RASSyndrome.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Skunked.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Spelling.yml 6ms (unchanged)
.github/linters/valestyles/proselint/Typography.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Uncomparables.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Very.yml 2ms (unchanged)
.github/release-drafter.yml 12ms (unchanged)
.gitpod.yml 2ms (unc

(Truncated to 5714 characters out of 11336)

⚠️ YAML / yamllint - 186 errors

.automation/plugins.yml
  1:1       warning  missing document start "---"  (document-start)

.github/FUNDING.yml
  3:1       warning  missing document start "---"  (document-start)

.github/dependabot.yml
  4:1       warning  missing document start "---"  (document-start)

.github/linters/.cfnlintrc.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/.checkov.yml
  2:1       warning  missing document start "---"  (document-start)

.github/linters/.golangci.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/.hadolint.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/.protolintrc.yml
  2:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/AMPM.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Accessibility.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Acronyms.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Adverbs.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Auto.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Avoid.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/ComplexWords.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Contractions.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Dashes.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/DateFormat.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/DateNumbers.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/DateOrder.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Ellipses.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/FirstPerson.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Foreign.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Gender.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/GenderBias.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/GeneralURL.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/HeadingAcronyms.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/HeadingColons.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/HeadingPunctuation.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Headings.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Hyphens.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Negative.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Ordinal.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/OxfordComma.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Passive.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Percentages.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Quotes.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/RangeFormat.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/RangeTime.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Ranges.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Semicolon.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/SentenceLength.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Spacing.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Suspended.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Terms.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/URLFormat.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Units.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Vocab.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/We.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft

(Truncated to 5714 characters out of 21075)

✅ Linters with no issues

black, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, pylint, ruff, secretlint, shellcheck, shfmt, spectral, syft, trivy, trivy-sbom, trufflehog, v8r, v8r, xmllint

See detailed reports in MegaLinter artifacts

chore(deps): update dependency mega-linter-runner to v9

4bd715e

renovate bot added the dependencies Pull requests that update a dependency file label Sep 20, 2025

renovate bot requested review from Kurt-von-Laven, bdovaz, echoix and nvuillam as code owners September 20, 2025 10:04

Merge 4bd715e into ff177bf

a19afd6

renovate bot temporarily deployed to dev September 20, 2025 10:04 Inactive

[MegaLinter] Apply linters fixes

5a5f1a1

nvuillam temporarily deployed to dev September 20, 2025 10:23 — with GitHub Actions Inactive

echoix approved these changes Sep 20, 2025

View reviewed changes

echoix merged commit 60af444 into main Sep 20, 2025
131 checks passed

echoix deleted the renovate/mega-linter-runner-9.x branch September 20, 2025 12:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency mega-linter-runner to v9#6191

chore(deps): update dependency mega-linter-runner to v9#6191
echoix merged 3 commits intomainfrom
renovate/mega-linter-runner-9.x

renovate bot commented Sep 20, 2025

Uh oh!

github-actions bot commented Sep 20, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate bot commented Sep 20, 2025

Release Notes

v9.0.0

Configuration

Uh oh!

github-actions bot commented Sep 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅⚠️MegaLinter analysis: Success with warnings

✅ Linters with no issues

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v9.0.0`

github-actions bot commented Sep 20, 2025 •

edited

Loading