chore(deps): update oxsecurity/megalinter action to v7.11.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
oxsecurity/megalinter	action	minor	v7.8.0 -> v7.11.1

---

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v7.11.1

Compare Source

• Fixes

  • Implement fallback in case git diff does not work with merge-base

• Linter versions upgrades

  • stylelint from 16.3.1 to 16.4.0

v7.11.0

Compare Source

• Core

  • Allow to override the number of parallel cores used, with variable PARALLEL_PROCESS_NUMBER, by @​nvuillam in #​3428
  • Upgrade base python image from 3.12.2-alpine3.19 to 3.12.3-alpine3.19
  • Upgrade PHP 8.1 to 8.3 by @​llaville in #​3464
  • Add descriptor pre / post commands, by @​bdovaz in #​3468
  • Allow merge lists with EXTENDS, by @​bdovaz in #​3469

• Media

• New linters

  • Add Kotlin detekt linter, by @​enciyo in #​3408

• Reporters

  • Add ruff sarif support, by @​Skitionek in #​3486

• Fixes

  • Fix listing of modified files, by @​vkucera in #​3472. Fixes #​2125.
  • Fix conflict between prettier and yamllint about spaces, by @​apeyrat in #​3426
  • Ensure trufflehog does not auto-update itself, by @​wandering-tales in #​3430
  • Salesforce linters: use sf + default Flow Scanner rules, by @​nvuillam in #​3435
  • Disable JSON_ESLINT_PLUGIN_JSONC until ota-meshi/eslint-plugin-jsonc#328 is fixed
  • Upgrade tar in mega-linter-runner
  • secretlint: remove default .secretlintignore that was never used but .gitignore is used instead. Fixes #​3328
  • Add jpeg, xlsx to .gitleaks.toml, by @​rasa in #​3434
  • Fix Json Schema, by @​nvuillam in #​3470
  • Remove TEMPLATES/.secretlintignore, by @​pjungermann in #​3476

• Doc

  • Update R2DevOps logo, by @​nvuillam in #​3436
  • Update Roslynator repo url and logo, by @​TommyE123 in #​3444
  • Fix clang-format documentation links to point to the correct version. Fixes #​3452, by @​daltonv in #​3453
  • Add copy to clipboard button in code block (documentation), by @​nikkii86 in #​3491

• Flavors

  • Add C & C++ linters in Python flavor by @​nvuillam in #​3456

• CI

  • Make SPELL_LYCHEE non blocking for internal CI jobs
  • Remove old unused automerge workflows by @​echoix in #​3432
  • Add consistent python3/python handling at build.sh, by @​pjungermann in #​3475

• Linter versions upgrades

  • ansible-lint from 24.2.0 to 24.2.2
  • bicep_linter from 0.25.53 to 0.26.170
  • black from 24.2.0 to 24.4.0
  • cfn-lint from 0.86.0 to 0.86.4
  • checkov from 3.2.34 to 3.2.74
  • checkstyle from 10.14.0 to 10.15.0
  • clippy from 0.1.76 to 0.1.77
  • clj-kondo from 2024.03.05 to 2024.03.13
  • csharpier from 0.27.3 to 0.28.1
  • cspell from 8.6.0 to 8.7.0
  • devskim from 1.0.32 to 1.0.33
  • dotnet-format from 8.0.102 to 8.0.104
  • eslint-plugin-jsonc from 2.13.0 to 2.15.1
  • golangci-lint from 1.56.2 to 1.57.2
  • grype from 0.74.7 to 0.77.0
  • kics from 1.7.13 to 2.0.0
  • lightning-flow-scanner from 2.18.0 to 2.22.0
  • markdown-link-check from 3.11.2 to 3.12.1
  • npm-groovy-lint from 14.2.3 to 14.4.1
  • phpcs from 3.9.0 to 3.9.1
  • phpstan from 1.10.60 to 1.10.67
  • protolint from 0.48.0 to 0.49.6
  • psalm from Psalm.5.23.0@​ to Psalm.5.23.1@​
  • pyright from 1.1.353 to 1.1.359
  • roslynator from 0.8.3.0 to 0.8.6.0
  • rstcheck from 6.2.0 to 6.2.1
  • rubocop from 1.62.0 to 1.63.3
  • ruff from 0.3.2 to 0.4.1
  • secretlint from 8.1.2 to 8.2.3
  • sfdx-scanner-apex from 3.21.0 to 3.23.0
  • sfdx-scanner-aura from 3.21.0 to 3.23.0
  • sfdx-scanner-lwc from 3.21.0 to 3.23.0
  • snakefmt from 0.10.0 to 0.10.1
  • snakemake from 8.5.5 to 8.10.8
  • spectral from 6.11.0 to 6.11.1
  • sqlfluff from 2.3.5 to 3.0.5
  • stylelint from 16.2.1 to 16.3.1
  • syft from 1.0.1 to 1.2.0
  • tekton-lint from 1.0.0 to 1.0.2
  • terraform-fmt from 1.7.4 to 1.8.1
  • terragrunt from 0.55.13 to 0.57.5
  • trivy-sbom from 0.49.1 to 0.50.2
  • trivy from 0.49.1 to 0.50.2
  • trufflehog from 3.69.0 to 3.73.0
  • vale from 3.2.2 to 3.4.0

v7.10.0

Compare Source

• Core

  • Update dotnet linters to .NET 8, by @​bdovaz in #​3182

• Media

  • How to use MegaLinter with Jenkins, by Darin Pope / Cloudbees

• Fixes

  • Trivy: use misconfig instead of the deprecated config scanner, updating the default arguments, by @​pjungermann in #​3376
  • Update calls to sfdx-scanner to output a CSV file for Aura & LWC, by @​nvuillam in #​3398
  • Kics: fixed error count in the summary table, by @​TommyE123 in #​3402
  • Fix issue with EXTENDS using private repository by sending GITHUB_TOKEN as HTTP auth header, by @​nvuillam in #​3404
  • Fix SPELL_VALE_CONFIG_FILE not working (handle the override of linter CONFIG_FILE if the linter is activated only if some files are found), by @​nvuillam in #​3409

• CI

  • Enable dependabot updates for devcontainer and other Docker directories, by @​echoix in #​3390

• Doc

  • Removed obsolete warning for semgrep as the issue has been fixed, by @​Jayllyz in #​3374
  • docs: fix docs in TrivySbomLinter.py, by @​pjungermann in https://togithub.com/oxsecurity/megalinter/pull/3377S

• Linter versions upgrades

  • actionlint from 1.6.26 to 1.6.27
  • bandit from 1.7.7 to 1.7.8
  • bicep_linter from 0.25.3 to 0.25.53
  • black from 24.1.1 to 24.2.0
  • cfn-lint from 0.85.1 to 0.86.0
  • checkov from 3.2.20 to 3.2.21
  • checkstyle from 10.13.0 to 10.14.0
  • clj-kondo from 2023.12.15 to 2024.03.05
  • csharpier from 0.27.2 to 0.27.3
  • cspell from 8.3.2 to 8.6.0
  • devskim from 1.0.28 to 1.0.32
  • dotnet-format from 7.0.115 to 8.0.102
  • eslint from 8.56.0 to 8.57.0
  • golangci-lint from 1.56.1 to 1.56.2
  • grype from 0.74.5 to 0.74.7
  • helm from 3.13.2 to 3.14.2
  • kics from 1.7.12 to 1.7.13
  • ktlint from 1.1.1 to 1.2.1
  • lightning-flow-scanner from 2.16.0 to 2.18.0
  • mypy from 1.8.0 to 1.9.0
  • npm-groovy-lint from 14.2.1 to 14.2.3
  • phpcs from 3.8.1 to 3.9.0
  • phpstan from 1.10.57 to 1.10.60
  • powershell from 7.4.0 to 7.4.1
  • powershell_formatter from 7.4.0 to 7.4.1
  • protolint from 0.47.5 to 0.48.0
  • psalm from Psalm.5.21.1@​ to Psalm.5.23.0@​
  • pylint from 3.0.3 to 3.1.0
  • pyright from 1.1.350 to 1.1.353
  • rubocop from 1.60.2 to 1.62.0
  • ruff from 0.2.1 to 0.3.2
  • scalafix from 0.11.1 to 0.12.0
  • secretlint from 8.1.1 to 8.1.2
  • shellcheck from 0.9.0 to 0.10.0
  • snakemake from 8.4.8 to 8.5.5
  • syft from 0.104.0 to 1.0.1
  • terraform-fmt from 1.7.3 to 1.7.4
  • terragrunt from 0.55.1 to 0.55.13
  • trufflehog from 3.67.5 to 3.69.0
  • vale from 3.0.5 to 3.2.2
  • xmllint from 21106 to 21107
  • yamllint from 1.34.0 to 1.35.1

v7.9.0

Compare Source

• Core

  • Upgrade actions/checkout and stefanzweifel/git-auto-commit-action in generator template workflow, by @​Jayllyz in #​3327
  • Upgrade base python image to python:3.12.2-alpine3.19

• Fixes

  • Format powershell linter output into terminal-wide table, and count errors, by @​efrecon in #​3318
  • Allow active_only_if_file_found to work in specified subdirectory (_DIRECTORY), fixes #​2873, by @​TimothyEarley in #​3323
  • Activate CI servers reporters only if we find a related default env variable, by @​nvuillam in #​3321

• Doc

  • Update copyright year to 2024, by @​Jayllyz in #​3339

• CI

  • Free more disk space before docker build
  • Upgrade peter-evans/create-pull-request from v5 to v6 in GitHub Actions workflows

• Linter versions upgrades

  • ansible-lint from 6.22.2 to 24.2.0
  • bandit from 1.7.6 to 1.7.7
  • bicep_linter from 0.24.24 to 0.25.3
  • black from 23.12.1 to 24.1.1
  • cfn-lint from 0.84.0 to 0.85.1
  • checkov from 3.1.67 to 3.2.20
  • checkstyle from 10.12.7 to 10.13.0
  • clippy from 0.1.75 to 0.1.76
  • csharpier from 0.27.0 to 0.27.2
  • eslint-plugin-jsonc from 2.12.2 to 2.13.0
  • gitleaks from 8.18.1 to 8.18.2
  • golangci-lint from 1.55.2 to 1.56.1
  • grype from 0.63.1 to 0.74.5
  • lychee from 0.14.1 to 0.14.3
  • markdownlint from 0.38.0 to 0.39.0
  • npm-groovy-lint from 14.2.0 to 14.2.1
  • phplint from 9.1.0 to 9.1.2
  • phpstan from 1.10.56 to 1.10.57
  • prettier from 3.2.4 to 3.2.5
  • psalm from Psalm.5.20.0@​ to Psalm.5.21.1@​
  • puppet-lint from 4.2.3 to 4.2.4
  • pyright from 1.1.347 to 1.1.350
  • revive from 1.3.6 to 1.3.7
  • roslynator from 0.8.2.0 to 0.8.3.0
  • rubocop from 1.60.1 to 1.60.2
  • ruff from 0.1.14 to 0.2.1
  • secretlint from 8.1.0 to 8.1.1
  • sfdx-scanner-apex from 3.20.0 to 3.21.0
  • sfdx-scanner-aura from 3.20.0 to 3.21.0
  • sfdx-scanner-lwc from 3.20.0 to 3.21.0
  • shfmt from 3.7.0 to 3.8.0
  • snakefmt from 0.9.0 to 0.10.0
  • snakemake from 8.2.3 to 8.4.8
  • stylelint from 16.2.0 to 16.2.1
  • syft from 0.101.1 to 0.104.0
  • terraform-fmt from 1.7.0 to 1.7.3
  • terragrunt from 0.54.20 to 0.55.1
  • tflint from 0.50.1 to 0.50.3
  • trivy-sbom from 0.48.3 to 0.49.1
  • trivy from 0.48.3 to 0.49.1
  • trufflehog from 3.63.10 to 3.67.5
  • v8r from 2.1.0 to 3.0.0
  • yamllint from 1.33.0 to 1.34.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.