chore(deps): update oxsecurity/megalinter action to v8

[my-renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
oxsecurity/megalinter	action	major	v7.11.1 -> v8.0.0

---

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v8.0.0

Compare Source

• Reporters
  • New ApiReporter (can be used to build Grafana dashboards), by @​nvuillam in #​3540

• Removed deprecated linters, by @​nvuillam in #​3854

  • CSS_SCSSLINT: Project discontinued and advising to use stylelint
  • OPENAPI_SPECTRAL: Replaced by API_SPECTRAL (same linter but more formats handled)
  • SQL_SQL_LINT: Project no longer maintained

• Core

  • Hide to linters by default all environment variables that contain TOKEN, USERNAME or PASSWORD, by @​nvuillam in #​3881
  • Allow to override CLI_LINT_MODE when defined as project, by @​nvuillam in #​3772
  • Allow to use absolute paths for LINTER_RULES_PATH, by @​nvuillam in #​3775
  • Allow to update variables from PRE/POST Commands using output_variables property, by @​nvuillam in #​3861

• Media

  • MegaLinter: un linter pour les gouverner tous (FR), by Guillaume Arnaud from WeScale
  • MegaLinter, by Stéphane Robert, from 3DS OutScale
  • 30 Seconds to Setup MegaLinter: Your Go-To Tool for Automated Code Quality, by Peng Cao |

• Linters enhancements

  • bandit Call bandit with quiet mode to generate less logs, by @​nvuillam in #​3892
  • grype Count number of errors returned by Grype, by @​nvuillam in #​3906
  • yamllint Fix yamllint default format to avoid special characters or GitHub sections in text logs, by @​nvuillam in #​3898

• Fixes

  • terrascan fixed errors and removed redundant code, by @​TommyE123 in #​3767
  • dotnet-format various performance improvements and ability to specify sln or proj paths, by @​TommyE123 in #​3741
  • swiftlint Remove deprecated argument --path
  • Salesforce linters: Disable SF CLI auto update warning, by @​nvuillam in #​3883

• Doc

  • Add images and links to Git, CI/CD & other tools integrations at the beginning of the README, by @​nvuillam in #​3885
  • Create README animated GIF presentation of MegaLinter, by @​nvuillam in #​3910
  • Format mkdocs search index in place, by @​echoix in #​3890
  • Use consistent spelling of 'flavor', by @​InputUsername in #​3789

• CI

  • Fix docker warnings, by @​nvuillam in #​3853
    • FromAsCasing: 'as' and 'FROM' keywords' casing do not match
    • NoEmptyContinuation: Empty continuation line
    • SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data
  • Port Beta workflows to use docker/metadata-action, by @​echoix in #​3860
  • AutoUpdate linters: Always create a PR if the job has been started manually, by @​nvuillam in #​3863
  • Add skip_checkout: true to default MegaLinter GitHub Action template
  • Remove path filters in deploy-DEV workflow as it is a required check by @​echoix in #​3894

• mega-linter-runner

  • Add new rules to upgrade to MegaLinter v8, by @​nvuillam in #​3896
  • Replace glob-promise by glob library, by @​nvuillam in #​3902
    • Minimum NodeJs version is now 20.x

• Linter versions upgrades

  • ansible-lint from 24.6.1 to 24.7.0
  • bicep_linter from 0.28.1 to 0.29.47
  • black from 24.4.2 to 24.8.0
  • cfn-lint from 1.5.0 to 1.10.3
  • checkov from 3.2.174 to 3.2.232
  • clippy from 0.1.79 to 0.1.80
  • clj-kondo from 2024.05.24 to 2024.08.01
  • csharpier from 0.28.2 to 0.29.0
  • cspell from 8.10.4 to 8.14.1
  • dotnet-format from 8.0.106 to 8.0.108
  • flake8 from 7.1.0 to 7.1.1
  • golangci-lint from 1.59.1 to 1.60.1
  • grype from 0.79.2 to 0.79.5
  • jsonlint from 14.0.3 to 16.0.0
  • kics from 2.1.1 to 2.1.2
  • kubeconform from 0.6.6 to 0.6.7
  • lightning-flow-scanner from 2.28.0 to 2.33.0
  • mypy from 1.10.1 to 1.11.1
  • php-cs-fixer from 3.59.3 to 3.62.0
  • phpcs from 3.10.1 to 3.10.2
  • phpstan from 1.11.9 to 1.11.11
  • pmd from 7.3.0 to 7.4.0
  • prettier from 3.3.2 to 3.3.3
  • protolint from 0.50.2 to 0.50.5
  • pylint from 3.2.5 to 3.2.6
  • pyright from 1.1.370 to 1.1.376
  • revive from 1.3.7 to 1.3.9
  • rstcheck from 6.2.1 to 6.2.4
  • rubocop from 1.64.1 to 1.65.1
  • ruff from 0.5.1 to 0.6.1
  • sfdx-scanner-apex from 4.3.2 to 4.4.0
  • sfdx-scanner-aura from 4.3.2 to 4.4.0
  • sfdx-scanner-lwc from 4.3.2 to 4.4.0
  • snakemake from 8.15.2 to 8.18.1
  • stylelint from 16.6.1 to 16.8.2
  • swiftlint from 0.55.1 to 0.56.1
  • syft from 1.8.0 to 1.11.0
  • terraform-fmt from 1.9.0 to 1.9.4
  • terragrunt from 0.59.6 to 0.66.8
  • tflint from 0.52.0 to 0.53.0
  • trivy-sbom from 0.53.0 to 0.54.1
  • trivy from 0.53.0 to 0.54.1
  • trufflehog from 3.79.0 to 3.81.9
  • v8r from 3.1.0 to 4.0.1
  • vale from 3.6.0 to 3.7.0

v7.13.0

Compare Source

• New linters

  • Add ls-lint, file and folder linter, by @​scolladon in #​3681

• Core

  • Handle renovate version comments in build script, by @​echoix in #​3617 , #​3627 , #​3643 , #​3699 , #​3700
  • Update base image to python:3.12.4-alpine3.20
  • Use dotnet8-sdk available in the main repository, by @​TommyE123 in #​3696

• Media

  • Introducing MegaLinter: Streamlining Code Quality Checks Across Multiple Languages, by Cloud Tuned
  • Infrastructure as Code GitHub Codespace Template, by Luke Murray
  • Video: How to: Secrets scanning, by Hackitect's playground

• Linters enhancements

  • Add SARIF support (v2) for all PHP linters by @​llaville in #​3745 , #​3729
  • Add python package Pygments to rst-lint venv, by @​bobidle in #​3631
  • CSharpier added ability to override config filename and path, by @​TommyE123 in #​3664
  • xmllint added support for xsd files, by @​TommyE123 in #​3665

• Fixes

  • Improve support for single argument in get_list_args function, by @​TommyE123 in #​3589
  • ansible-lint Improved activation by checking for .ansible-lint config file, by @​TommyE123 in #​3697
  • DevSkim fixed fatal errors when scanning and ability to override config path, by @​TommyE123 in #​3673
  • GitLeaks add missing schema properties, by @​TommyE123 in #​3675
  • Powershell Error table truncation improvements, by @​TommyE123 in #​3620
  • Powershell added missing schema property POWERSHELL_POWERSHELL_FORMATTER_OUTPUT_ENCODING, by @​TommyE123 in #​3678
  • syft use scan instead of deprecated packages arg, by @​TommyE123 in #​3613
  • tflint added missing schema property TERRAFORM_TFLINT_SECURED_ENV, by @​TommyE123 in #​3679
  • tflint fixed deprecated argument and other improvements to default .tflint.hcl template, by @​TommyE123 in #​3688
  • xmllint added missing schema properties XML_XMLLINT_AUTOFORMAT and XML_XMLLINT_INDENT, by @​TommyE123 in #​3677
  • yamllint fix error/warning count to work with different log output formats, by @​TommyE123 in #​3612

• Doc

  • Update documentation icons by @​nvuillam in #​3625

• Flavors

  • Add gherkin-lint in c_cpp flavor, by @​nvuillam in #​3698

• CI

  • Bump actions/checkout from 3 to 4, by @​KristjanESPERANTO in #​2994
  • Reduce dependabot PR frequency to weekly by @​echoix in #​3642

• Linter versions upgrades

  • ansible-lint from 24.2.3 to 24.6.1
  • bandit from 1.7.8 to 1.7.9
  • bash-exec from 5.2.21 to 5.2.26
  • bicep_linter from 0.27.1 to 0.28.1
  • cfn-lint from 0.87.4 to 1.5.0
  • checkov from 3.2.122 to 3.2.174
  • clang-format from 17.0.5 to 17.0.6
  • clippy from 0.1.78 to 0.1.79
  • cspell from 8.8.3 to 8.10.4
  • editorconfig-checker from 3.0.1 to 3.0.3
  • flake8 from 7.0.0 to 7.1.0
  • git_diff from 2.43.4 to 2.45.2
  • gitleaks from 8.18.2 to 8.18.4
  • golangci-lint from 1.59.0 to 1.59.1
  • grype from 0.78.0 to 0.79.2
  • helm from 3.14.2 to 3.14.3
  • jscpd from 4.0.4 to 4.0.5
  • kics from 2.0.1 to 2.1.1
  • ktlint from 1.2.1 to 1.3.1
  • lightning-flow-scanner from 2.26.0 to 2.28.0
  • markdown-table-formatter from 1.6.0 to 1.6.1
  • mypy from 1.10.0 to 1.10.1
  • npm-package-json-lint from 7.1.0 to 8.0.0
  • php-cs-fixer from 3.58.1 to 3.59.3
  • phplint from 9.3.1 to 9.4.1
  • phpstan from 1.11.3 to 1.11.7
  • pmd from 7.1.0 to 7.3.0
  • prettier from 3.3.0 to 3.3.2
  • protolint from 0.49.7 to 0.50.2
  • psalm from Psalm.5.24.0@​ to Psalm.5.25.0@​
  • pylint from 3.2.2 to 3.2.5
  • pyright from 1.1.365 to 1.1.370
  • ruff from 0.4.10 to 0.5.1
  • sfdx-scanner-apex from 3.25.0 to 4.3.2
  • sfdx-scanner-aura from 3.25.0 to 4.3.2
  • sfdx-scanner-lwc from 3.25.0 to 4.3.2
  • snakemake from 8.12.0 to 8.15.2
  • sqlfluff from 3.0.7 to 3.1.0
  • swiftlint from 0.54.0 to 0.55.1
  • syft from 1.5.0 to 1.8.0
  • terraform-fmt from 1.8.4 to 1.9.0
  • terragrunt from 0.58.13 to 0.59.6
  • tflint from 0.51.1 to 0.52.0
  • trivy-sbom from 0.51.4 to 0.53.0
  • trivy from 0.51.4 to 0.53.0
  • trufflehog from 3.77.0 to 3.79.0
  • v8r from 3.0.0 to 3.1.0
  • vale from 3.4.2 to 3.6.0
  • xmllint from 21108 to 21207

v7.12.0

Compare Source

• Core

  • Add new logs (at debug level) on each linter activation/deactivation
  • Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues
  • Upgrade to Java 21 except for npm-groovy-lint that requires Java 17

• Media

  • Add blog post 5 ways MegaLinter upped our DevSecOps game to the list of English articles by @​wesley-dean-flexion in #​3596

• Linters

  • Add PHP fixer by @​llaville in #​3598
  • API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #​3387
  • Disable SQL_TSQLLINT until security issues are solved. Related to tsqllint/tsqllint#333
  • PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of https://github.com/llaville/sarif-php-sdk
  • Php psalm improvement by @​llaville in #​3541
  • KOTLIN_KTLINT now supports list_of_files mode, and has better error counting
  • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project

• Fixes

  • Change golangci-lint lint mode to project, by @​wandering-tales in #​3509
  • Disable sql-lint as it is no longer maintained
  • Add new entries findUnusedCode and findUnusedBaselineEntry in default psalm.xml configuration file for PHP_PSALM linter. Related to #​3538
  • fix(pylint): overgeneral-exceptions fully qualified name by @​gardar in #​3576
  • Update ktlint descriptor to support list_of_files and better error counting by @​Yann-J in #​3575
  • Sync PowerShell version in arm.megalinter-descriptor.yml by @​echoix in #​3586
  • Adjust find commands to clean up files in same step by @​echoix in #​3588
  • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project by @​nvuillam in #​3590

• Doc

  • Handle disabled_reason property in descriptors
  • Sort enums in json schema, by @​echoix in #​3595

• Flavors

• CI

  • Build: take in account disabled linters for workflow auto-update
  • Remove useless package-lock.json that was in python tests folder
  • Fix SARIF_REPORTER that was wrongly sent to true to format & fix test methods
  • Build: Write ARG lines at the top of Dockerfiles if they are used by FROM variables
  • Remove Github Actions Workflow telemetry to improve performances
  • Update Docker image for Gitpod to run on Ubuntu Noble, by @​echoix
  • Update makefile bootstrap config (gitpod or local) to use uv for package installation, by @​echoix
  • Use uv to install Python deps for CI by @​echoix in #​3561
  • Use a single find command to delete pycache files by @​echoix in #​3562
  • Sort schema enums by @​echoix in #​3595

• Linter versions upgrades

  • actionlint from 1.6.27 to 1.7.1
  • ansible-lint from 24.2.2 to 24.2.3
  • bicep_linter from 0.26.170 to 0.27.1
  • black from 24.4.0 to 24.4.2
  • cfn-lint from 0.86.4 to 0.87.4
  • checkov from 3.2.74 to 3.2.122
  • checkstyle from 10.15.0 to 10.17.0
  • clippy from 0.1.77 to 0.1.78
  • clj-kondo from 2024.03.13 to 2024.05.24
  • csharpier from 0.28.1 to 0.28.2
  • cspell from 8.7.0 to 8.8.3
  • detekt from 1.23.5 to 1.23.6
  • dotnet-format from 8.0.104 to 8.0.106
  • editorconfig-checker from 2.7.2 to 3.0.1
  • git_diff from 2.43.0 to 2.43.4
  • golangci-lint from 1.57.2 to 1.59.0
  • grype from 0.77.0 to 0.78.0
  • jscpd from 3.5.10 to 4.0.4
  • kics from 2.0.0 to 2.0.1
  • kubeconform from 0.6.4 to 0.6.6
  • lightning-flow-scanner from 2.22.0 to 2.24.0
  • luacheck from 1.1.2 to 1.2.0
  • lychee from 0.14.3 to 0.15.1
  • markdown-link-check from 3.12.1 to 3.12.2
  • markdown-table-formatter from 1.5.0 to 1.6.0
  • markdownlint from 0.39.0 to 0.41.0
  • mypy from 1.9.0 to 1.10.0
  • npm-groovy-lint from 14.4.1 to 14.6.0
  • phpcs from 3.9.1 to 3.10.1
  • phplint from 9.1.2 to 9.3.1
  • phpstan from 1.10.67 to 1.11.0 to 1.11.3
  • pmd from 6.55.0 to 7.1.0
  • powershell from 7.4.1 to 7.4.2
  • powershell_formatter from 7.4.1 to 7.4.2
  • prettier from 3.2.5 to 3.3.0
  • proselint from 0.13.0 to 0.14.0
  • protolint from 0.49.6 to 0.49.7
  • psalm from Psalm.5.23.1@​ to Psalm.5.24.0@​
  • pylint from 3.1.0 to 3.2.2
  • pyright from 1.1.359 to 1.1.365
  • roslynator from 0.8.6.0 to 0.8.9.0
  • rubocop from 1.63.3 to 1.64.1
  • ruff from 0.4.1 to 0.4.7
  • scalafix from 0.12.0 to 0.12.1
  • secretlint from 8.2.3 to 8.2.4
  • sfdx-scanner-apex from 3.23.0 to 3.25.0
  • sfdx-scanner-aura from 3.23.0 to 3.25.0
  • sfdx-scanner-lwc from 3.23.0 to 3.25.0
  • snakefmt from 0.10.1 to 0.10.2
  • snakemake from 8.10.8 to 8.12.0
  • sqlfluff from 3.0.5 to 3.0.7
  • stylelint from 16.4.0 to 16.6.1
  • syft from 1.2.0 to 1.5.0
  • tekton-lint from 1.0.2 to 1.1.0
  • terraform-fmt from 1.8.1 to 1.8.4
  • terragrunt from 0.57.5 to 0.58.10
  • tflint from 0.50.3 to 0.51.1
  • trivy-sbom from 0.50.2 to 0.51.4
  • trivy from 0.50.2 to 0.51.4
  • trufflehog from 3.73.0 to 3.77.0
  • vale from 3.4.0 to 3.4.2
  • xmllint from 21107 to 21108