Update oxsecurity/megalinter action to v8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
oxsecurity/megalinter	action	major	v7 -> v8

---

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v8

Compare Source

• Reporters
  • New ApiReporter (can be used to build Grafana dashboards), by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3540

• Removed deprecated linters, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3854

  • CSS_SCSSLINT: Project discontinued and advising to use stylelint
  • OPENAPI_SPECTRAL: Replaced by API_SPECTRAL (same linter but more formats handled)
  • SQL_SQL_LINT: Project no longer maintained

• Core

  • Hide to linters by default all environment variables that contain TOKEN, USERNAME or PASSWORD, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3881
  • Allow to override CLI_LINT_MODE when defined as project, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3772
  • Allow to use absolute paths for LINTER_RULES_PATH, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3775
  • Allow to update variables from PRE/POST Commands using output_variables property, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3861

• Media

  • MegaLinter: un linter pour les gouverner tous (FR), by Guillaume Arnaud from WeScale
  • MegaLinter, by Stéphane Robert, from 3DS OutScale
  • 30 Seconds to Setup MegaLinter: Your Go-To Tool for Automated Code Quality, by Peng Cao |

• Linters enhancements

  • bandit Call bandit with quiet mode to generate less logs, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3892
  • grype Count number of errors returned by Grype, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3906
  • yamllint Fix yamllint default format to avoid special characters or GitHub sections in text logs, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3898

• Fixes

  • terrascan fixed errors and removed redundant code, by @​TommyE123 in https://github.com/oxsecurity/megalinter/pull/3767
  • dotnet-format various performance improvements and ability to specify sln or proj paths, by @​TommyE123 in https://github.com/oxsecurity/megalinter/pull/3741
  • swiftlint Remove deprecated argument --path
  • Salesforce linters: Disable SF CLI auto update warning, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3883

• Doc

  • Add images and links to Git, CI/CD & other tools integrations at the beginning of the README, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3885
  • Create README animated GIF presentation of MegaLinter, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3910
  • Format mkdocs search index in place, by @​echoix in https://github.com/oxsecurity/megalinter/pull/3890
  • Use consistent spelling of 'flavor', by @​InputUsername in https://github.com/oxsecurity/megalinter/pull/3789

• CI

  • Fix docker warnings, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3853
    • FromAsCasing: 'as' and 'FROM' keywords' casing do not match
    • NoEmptyContinuation: Empty continuation line
    • SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data
  • Port Beta workflows to use docker/metadata-action, by @​echoix in https://github.com/oxsecurity/megalinter/pull/3860
  • AutoUpdate linters: Always create a PR if the job has been started manually, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3863
  • Add skip_checkout: true to default MegaLinter GitHub Action template
  • Remove path filters in deploy-DEV workflow as it is a required check by @​echoix in https://github.com/oxsecurity/megalinter/pull/3894

• mega-linter-runner

  • Add new rules to upgrade to MegaLinter v8, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3896
  • Replace glob-promise by glob library, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/3902
    • Minimum NodeJs version is now 20.x

• Linter versions upgrades

  • ansible-lint from 24.6.1 to 24.7.0
  • bicep_linter from 0.28.1 to 0.29.47
  • black from 24.4.2 to 24.8.0
  • cfn-lint from 1.5.0 to 1.10.3
  • checkov from 3.2.174 to 3.2.232
  • clippy from 0.1.79 to 0.1.80
  • clj-kondo from 2024.05.24 to 2024.08.01
  • csharpier from 0.28.2 to 0.29.0
  • cspell from 8.10.4 to 8.14.1
  • dotnet-format from 8.0.106 to 8.0.108
  • flake8 from 7.1.0 to 7.1.1
  • golangci-lint from 1.59.1 to 1.60.1
  • grype from 0.79.2 to 0.79.5
  • jsonlint from 14.0.3 to 16.0.0
  • kics from 2.1.1 to 2.1.2
  • kubeconform from 0.6.6 to 0.6.7
  • lightning-flow-scanner from 2.28.0 to 2.33.0
  • mypy from 1.10.1 to 1.11.1
  • php-cs-fixer from 3.59.3 to 3.62.0
  • phpcs from 3.10.1 to 3.10.2
  • phpstan from 1.11.9 to 1.11.11
  • pmd from 7.3.0 to 7.4.0
  • prettier from 3.3.2 to 3.3.3
  • protolint from 0.50.2 to 0.50.5
  • pylint from 3.2.5 to 3.2.6
  • pyright from 1.1.370 to 1.1.376
  • revive from 1.3.7 to 1.3.9
  • rstcheck from 6.2.1 to 6.2.4
  • rubocop from 1.64.1 to 1.65.1
  • ruff from 0.5.1 to 0.6.1
  • sfdx-scanner-apex from 4.3.2 to 4.4.0
  • sfdx-scanner-aura from 4.3.2 to 4.4.0
  • sfdx-scanner-lwc from 4.3.2 to 4.4.0
  • snakemake from 8.15.2 to 8.18.1
  • stylelint from 16.6.1 to 16.8.2
  • swiftlint from 0.55.1 to 0.56.1
  • syft from 1.8.0 to 1.11.0
  • terraform-fmt from 1.9.0 to 1.9.4
  • terragrunt from 0.59.6 to 0.66.8
  • tflint from 0.52.0 to 0.53.0
  • trivy-sbom from 0.53.0 to 0.54.1
  • trivy from 0.53.0 to 0.54.1
  • trufflehog from 3.79.0 to 3.81.9
  • v8r from 3.1.0 to 4.0.1
  • vale from 3.6.0 to 3.7.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
⚠️ ACTION	actionlint	4		2	0.02s
✅ COPYPASTE	jscpd	yes		no	1.24s
✅ JAVASCRIPT	eslint	3	0	0	0.79s
✅ JAVASCRIPT	prettier	3	0	0	0.6s
✅ JSON	jsonlint	10		0	0.12s
✅ JSON	npm-package-json-lint	yes		no	0.4s
✅ JSON	prettier	10	0	0	0.55s
✅ JSON	v8r	10		0	26.2s
✅ MARKDOWN	markdownlint	2	0	0	0.49s
⚠️ MARKDOWN	markdown-link-check	3		2	4.44s
✅ MARKDOWN	markdown-table-formatter	3	0	0	0.27s
✅ REPOSITORY	checkov	yes		no	12.83s
✅ REPOSITORY	gitleaks	yes		no	0.31s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.81s
✅ REPOSITORY	secretlint	yes		no	0.51s
✅ REPOSITORY	trivy	yes		no	6.02s
✅ REPOSITORY	trivy-sbom	yes		no	0.87s
✅ REPOSITORY	trufflehog	yes		no	2.83s
✅ SPELL	cspell	33		0	2.31s
✅ SPELL	lychee	22		0	1.03s
✅ XML	xmllint	5	0	0	0.01s
✅ YAML	prettier	9	0	0	0.57s
✅ YAML	v8r	8		0	8.74s
✅ YAML	yamllint	9		0	0.37s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.