⬆️ Updates nvuillam/mega-linter action to v8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
nvuillam/mega-linter	action	major	v4 -> v8

---

Release Notes

nvuillam/mega-linter (nvuillam/mega-linter)

v8

Compare Source

• Core

  • Allow to tag PRE_COMMANDS to run them before loading plugins, by @​nvuillam in oxsecurity/megalinter#3944
  • Replace usage of setup.py with a pyproject.toml package install, by @​echoix in #​3893
  • Allow to add custom messages at the end of PR / MR MegaLinter Summary using variable JOB_SUMMARY_ADDITIONAL_MARKDOWN

• New linters

  • New LUA linter: selene, by @​AlejandroSuero in oxsecurity/megalinter#3978
  • New LUA formatter: stylua, by @​AlejandroSuero in oxsecurity/megalinter#3985

• Linters enhancements

  • Trivy
    • Embed vulnerability database in Docker Image for running trivy on internet-free network
    • Retry 5 times after 3 seconds in case of TooManyRequests when downloading vulnerability database
    • If the retries did not succeed, call trivy with --skip-db-update --skip-check-update (not ideal but better than nothing)
  • Bash/Perl: Support shell scripts with no extension and only support perl shebangs at the beginning of a file in oxsecurity/megalinter#4076

• Fixes

  • Add debug traces to investigate reporters activation
  • Add more traces for ApiReporter
  • Activate ApiReporter by default

• Reporters

  • Fix ApiReporter not called in MegaLinter flavors

• Doc

  • Fix Grafana Home Dashboard to add missing criteria
  • Update PRE_COMMANDS documentation to describe all properties
  • Update Grafana documentation to fix secrets typo

• CI

  • Free space in release job to avoid no space left on device, by @​nvuillam in oxsecurity/megalinter#3914
  • Add pytest-rerunfailures to improve CI control jobs success, by @​AlejandroSuero in oxsecurity/megalinter#3993
  • Send GITHUB_TOKEN to trivy-action
  • Workaround to avoid to reach Docker Hub rate limits: Build & push first on ghcr.io, then login to docker hub, then push to docker hub

• Linter versions upgrades

  • actionlint from 1.7.1 to 1.7.3 on 2024-09-29
  • ansible-lint from 24.7.0 to 24.9.2 on 2024-09-20
  • bandit from 1.7.9 to 1.7.10 on 2024-09-23
  • bicep_linter from 0.29.47 to 0.30.23 on 2024-09-24
  • black from 24.8.0 to 24.10.0 on 2024-10-07
  • cfn-lint from 1.10.3 to 1.16.1 on 2024-10-11
  • checkov from 3.2.232 to 3.2.257 on 2024-10-06
  • checkstyle from 10.17.0 to 10.18.2 on 2024-09-29
  • clippy from 0.1.80 to 0.1.81 on 2024-09-06
  • clj-kondo from 2024.08.01 to 2024.09.27 on 2024-09-26
  • cpplint from 1.6.1 to 2.0.0 on 2024-10-06
  • csharpier from 0.29.0 to 0.29.2 on 2024-09-16
  • cspell from 8.14.1 to 8.15.1 on 2024-10-11
  • detekt from 1.23.6 to 1.23.7 on 2024-09-08
  • djlint from 1.34.1 to 1.35.2 on 2024-08-29
  • dotnet-format from 8.0.108 to 8.0.110 on 2024-10-11
  • eslint from 8.57.0 to 8.57.1 on 2024-09-16
  • gitleaks from 8.18.4 to 8.20.1 on 2024-10-08
  • golangci-lint from 1.60.1 to 1.61.0 on 2024-09-09
  • kics from 2.1.2 to 2.1.3 on 2024-10-04
  • lightning-flow-scanner from 2.33.0 to 2.34.0 on 2024-08-25
  • lychee from 0.15.1 to 0.16.1 on 2024-10-07
  • markdownlint from 0.41.0 to 0.42.0 on 2024-09-24
  • mypy from 1.11.1 to 1.11.2 on 2024-08-25
  • npm-groovy-lint from 14.6.0 to 15.0.2 on 2024-08-29
  • php-cs-fixer from 3.62.0 to 3.64.0 on 2024-08-31
  • phpcs from 3.10.2 to 3.10.3 on 2024-09-20
  • phplint from 9.4.1 to 9.5.3 on 2024-10-11
  • phpstan from 1.11.11 to 1.12.6 on 2024-10-06
  • pmd from 7.4.0 to 7.6.0 on 2024-09-27
  • psalm from Psalm.5.25.0@​ to Psalm.5.26.1@​ on 2024-09-09
  • pylint from 3.2.6 to 3.3.1 on 2024-09-24
  • pyright from 1.1.376 to 1.1.384 on 2024-10-11
  • revive from 1.3.9 to 1.4.0 on 2024-09-23
  • roslynator from 0.8.9.0 to 0.9.1.0 on 2024-10-11
  • rubocop from 1.65.1 to 1.66.1 on 2024-09-06
  • ruff from 0.6.1 to 0.6.9 on 2024-10-04
  • scalafix from 0.12.1 to 0.13.0 on 2024-09-27
  • secretlint from 8.2.4 to 8.4.0 on 2024-10-06
  • sfdx-scanner-apex from 4.4.0 to 4.6.0 on 2024-09-26
  • sfdx-scanner-aura from 4.4.0 to 4.6.0 on 2024-09-26
  • sfdx-scanner-lwc from 4.4.0 to 4.6.0 on 2024-09-26
  • shfmt from 3.8.0 to 3.9.0 on 2024-09-03
  • snakemake from 8.18.1 to 8.21.0 on 2024-10-13
  • spectral from 6.11.1 to 6.13.1 on 2024-09-21
  • sqlfluff from 3.1.0 to 3.2.3 on 2024-10-11
  • standard from 17.1.0 to 17.1.2 on 2024-09-13
  • stylelint from 16.8.2 to 16.10.0 on 2024-10-11
  • swiftlint from 0.56.1 to 0.57.0 on 2024-09-09
  • syft from 1.11.0 to 1.14.0 on 2024-10-07
  • terraform-fmt from 1.9.4 to 1.9.5 on 2024-08-28
  • terragrunt from 0.66.8 to 0.67.5 on 2024-09-16
  • terrascan from 1.18.11 to 1.19.9 on 2024-09-21
  • trivy-sbom from 0.54.1 to 0.56.2 on 2024-10-11
  • trivy from 0.54.1 to 0.56.2 on 2024-10-11
  • trufflehog from 3.81.10 to 3.82.8 on 2024-10-13
  • v8r from 4.0.1 to 4.1.0 on 2024-08-25
  • vale from 3.7.0 to 3.7.1 on 2024-09-26

v7

Compare Source

• New linters

  • Add ls-lint, file and folder linter, by @​scolladon in oxsecurity/megalinter#3681

• Core

  • Handle renovate version comments in build script, by @​echoix in oxsecurity/megalinter#3617 , oxsecurity/megalinter#3627 , oxsecurity/megalinter#3643 , oxsecurity/megalinter#3699 , oxsecurity/megalinter#3700
  • Update base image to python:3.12.4-alpine3.20
  • Use dotnet8-sdk available in the main repository, by @​TommyE123 in oxsecurity/megalinter#3696

• Media

  • Introducing MegaLinter: Streamlining Code Quality Checks Across Multiple Languages, by Cloud Tuned
  • Infrastructure as Code GitHub Codespace Template, by Luke Murray
  • Video: How to: Secrets scanning, by Hackitect's playground

• Linters enhancements

  • Add SARIF support (v2) for all PHP linters by @​llaville in oxsecurity/megalinter#3745 , oxsecurity/megalinter#3729
  • Add python package Pygments to rst-lint venv, by @​bobidle in oxsecurity/megalinter#3631
  • CSharpier added ability to override config filename and path, by @​TommyE123 in oxsecurity/megalinter#3664
  • xmllint added support for xsd files, by @​TommyE123 in oxsecurity/megalinter#3665

• Fixes

  • Improve support for single argument in get_list_args function, by @​TommyE123 in oxsecurity/megalinter#3589
  • ansible-lint Improved activation by checking for .ansible-lint config file, by @​TommyE123 in oxsecurity/megalinter#3697
  • DevSkim fixed fatal errors when scanning and ability to override config path, by @​TommyE123 in oxsecurity/megalinter#3673
  • GitLeaks add missing schema properties, by @​TommyE123 in oxsecurity/megalinter#3675
  • Powershell Error table truncation improvements, by @​TommyE123 in oxsecurity/megalinter#3620
  • Powershell added missing schema property POWERSHELL_POWERSHELL_FORMATTER_OUTPUT_ENCODING, by @​TommyE123 in oxsecurity/megalinter#3678
  • syft use scan instead of deprecated packages arg, by @​TommyE123 in oxsecurity/megalinter#3613
  • tflint added missing schema property TERRAFORM_TFLINT_SECURED_ENV, by @​TommyE123 in oxsecurity/megalinter#3679
  • tflint fixed deprecated argument and other improvements to default .tflint.hcl template, by @​TommyE123 in oxsecurity/megalinter#3688
  • xmllint added missing schema properties XML_XMLLINT_AUTOFORMAT and XML_XMLLINT_INDENT, by @​TommyE123 in oxsecurity/megalinter#3677
  • yamllint fix error/warning count to work with different log output formats, by @​TommyE123 in oxsecurity/megalinter#3612

• Doc

  • Update documentation icons by @​nvuillam in oxsecurity/megalinter#3625

• Flavors

  • Add gherkin-lint in c_cpp flavor, by @​nvuillam in oxsecurity/megalinter#3698

• CI

  • Bump actions/checkout from 3 to 4, by @​KristjanESPERANTO in oxsecurity/megalinter#2994
  • Reduce dependabot PR frequency to weekly by @​echoix in oxsecurity/megalinter#3642

• Linter versions upgrades

  • ansible-lint from 24.2.3 to 24.6.1
  • bandit from 1.7.8 to 1.7.9
  • bash-exec from 5.2.21 to 5.2.26
  • bicep_linter from 0.27.1 to 0.28.1
  • cfn-lint from 0.87.4 to 1.5.0
  • checkov from 3.2.122 to 3.2.174
  • clang-format from 17.0.5 to 17.0.6
  • clippy from 0.1.78 to 0.1.79
  • cspell from 8.8.3 to 8.10.4
  • editorconfig-checker from 3.0.1 to 3.0.3
  • flake8 from 7.0.0 to 7.1.0
  • git_diff from 2.43.4 to 2.45.2
  • gitleaks from 8.18.2 to 8.18.4
  • golangci-lint from 1.59.0 to 1.59.1
  • grype from 0.78.0 to 0.79.2
  • helm from 3.14.2 to 3.14.3
  • jscpd from 4.0.4 to 4.0.5
  • kics from 2.0.1 to 2.1.1
  • ktlint from 1.2.1 to 1.3.1
  • lightning-flow-scanner from 2.26.0 to 2.28.0
  • markdown-table-formatter from 1.6.0 to 1.6.1
  • mypy from 1.10.0 to 1.10.1
  • npm-package-json-lint from 7.1.0 to 8.0.0
  • php-cs-fixer from 3.58.1 to 3.59.3
  • phplint from 9.3.1 to 9.4.1
  • phpstan from 1.11.3 to 1.11.7
  • pmd from 7.1.0 to 7.3.0
  • prettier from 3.3.0 to 3.3.2
  • protolint from 0.49.7 to 0.50.2
  • psalm from Psalm.5.24.0@​ to Psalm.5.25.0@​
  • pylint from 3.2.2 to 3.2.5
  • pyright from 1.1.365 to 1.1.370
  • ruff from 0.4.10 to 0.5.1
  • sfdx-scanner-apex from 3.25.0 to 4.3.2
  • sfdx-scanner-aura from 3.25.0 to 4.3.2
  • sfdx-scanner-lwc from 3.25.0 to 4.3.2
  • snakemake from 8.12.0 to 8.15.2
  • sqlfluff from 3.0.7 to 3.1.0
  • swiftlint from 0.54.0 to 0.55.1
  • syft from 1.5.0 to 1.8.0
  • terraform-fmt from 1.8.4 to 1.9.0
  • terragrunt from 0.58.13 to 0.59.6
  • tflint from 0.51.1 to 0.52.0
  • trivy-sbom from 0.51.4 to 0.53.0
  • trivy from 0.51.4 to 0.53.0
  • trufflehog from 3.77.0 to 3.79.0
  • v8r from 3.0.0 to 3.1.0
  • vale from 3.4.2 to 3.6.0
  • xmllint from 21108 to 21207

v6

Compare Source

• Core

  • Fix failure of AzureCommentReporter when there is no pull request found in ENV vars
  • Fix HTML comment appearing in Azure Pull Request mail notifications

• Linter versions upgrades

  • ansible-lint from 6.14.3 to 6.14.4
  • checkov from 2.3.145 to 2.3.149
  • pylint from 2.17.1 to 2.17.2
  • rubocop from 1.48.1 to 1.49.0

v5

Compare Source

• Message to propose users to upgrade to v6

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Moscow, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Thanks for opening an issue! Make sure you've followed CONTRIBUTING.md.

[github-actions]

Hello from PR Helper

Remember to comment with one of the following states:

#pr-ready to enable all auto processing and merging.

#pr-onhold to prevent merging as you have other commits or discussions to make.

If you do not set the #pr-ready comment then the auto-merge capabilities will not be active.

[github-actions]

Thanks for the PR!

This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[github-actions]

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	1	8	3	0	❌
Security Audit for Infrastructure	0	0	0	6	✅

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍