CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

• Core

  • mega-linter-runner: Remove container by default, except of no-remove-container option is sent
  • Upgrade base image from python:3.11.6-alpine3.18 to python:3.11.7-alpine3.18, by @echoix in #3212
  • Upgrade actions/upload-artifact@v3 to actions/upload-artifact@v4 in default workflows

• Media

• New linters

• Fixes

  • tekton-lint is now published as @ibm/tekton-lint, by @echoix in #3210
  • PHP PHIVE: Use keys.openpgp.org and fingerprint for phive key verification, by @echoix in #3230

• Doc

  • Upgrade url to PHP CodeSniffer, as now the original repo is not maintained anymore.

• CI

• Linter versions upgrades

  • prettier from 3.1.0 to 3.1.1 on 2023-12-10
  • checkov from 3.1.27 to 3.1.28 on 2023-12-10
  • checkov from 3.1.28 to 3.1.29 on 2023-12-10
  • csharpier from 0.26.4 to 0.26.5 on 2023-12-10
  • checkov from 3.1.29 to 3.1.31 on 2023-12-11
  • rubocop from 1.58.0 to 1.59.0 on 2023-12-11
  • cfn-lint from 0.83.4 to 0.83.5 on 2023-12-13
  • phpstan from 1.10.48 to 1.10.49 on 2023-12-13
  • black from 23.11.0 to 23.12.0 on 2023-12-13
  • isort from 5.13.0 to 5.13.1 on 2023-12-13
  • pylint from 3.0.2 to 3.0.3 on 2023-12-13
  • checkov from 3.1.31 to 3.1.34 on 2023-12-13
  • semgrep from 1.52.0 to 1.53.0 on 2023-12-13
  • terragrunt from 0.54.0 to 0.54.1 on 2023-12-13
  • pyright from 1.1.339 to 1.1.340 on 2023-12-13
  • checkov from 3.1.34 to 3.1.35 on 2023-12-13
  • phpstan from 1.10.49 to 1.10.50 on 2023-12-13
  • checkov from 3.1.35 to 3.1.36 on 2023-12-13
  • eslint-plugin-jsonc from 2.10.0 to 2.11.0 on 2023-12-13
  • isort from 5.13.1 to 5.13.2 on 2023-12-13
  • ruff from 0.1.7 to 0.1.8 on 2023-12-13
  • checkov from 3.1.36 to 3.1.38 on 2023-12-13
  • tekton-lint from 0.6.0 to 0.7.0 on 2023-12-13
  • csharpier from 0.26.5 to 0.26.6 on 2023-12-14
  • eslint-plugin-jsonc from 2.11.0 to 2.11.1 on 2023-12-14
  • trufflehog from 3.63.2 to 3.63.3 on 2023-12-14
  • terraform-fmt from 1.6.5 to 1.6.6 on 2023-12-14
  • terragrunt from 0.54.1 to 0.54.3 on 2023-12-14
  • bicep_linter from 0.23.1 to 0.24.24 on 2023-12-14
  • clj-kondo from 2023.10.20 to 2023.12.15 on 2023-12-15
  • cfn-lint from 0.83.5 to 0.83.6 on 2023-12-15
  • pyright from 1.1.340 to 1.1.341 on 2023-12-15
  • devskim from 1.0.23 to 1.0.27 on 2023-12-15
  • trufflehog from 3.63.3 to 3.63.4 on 2023-12-15
  • terragrunt from 0.54.3 to 0.54.4 on 2023-12-15
  • eslint from 8.55.0 to 8.56.0 on 2023-12-16
  • psalm from Psalm.5.17.0@ to Psalm.5.18.0@ on 2023-12-16
  • terragrunt from 0.54.4 to 0.54.5 on 2023-12-16
  • npm-groovy-lint from 13.0.2 to 14.0.0 on 2023-12-16
  • terrascan from 1.18.3 to 1.18.8 on 2023-12-16
  • csharpier from 0.26.6 to 0.26.7 on 2023-12-16
  • phplint from 9.0.6 to 9.1.0 on 2023-12-17

[v7.7.0] - 2023-12-09

• Core

  • Update base java apk package to openjdk 17 by @nvuillam in oxsecurity#3160
  • Update dotnet linters to .NET 7 by @bdovaz in oxsecurity#2402

• Media

  • Try using MegaLinter (article in japanese) by Takashi Minayaga

• New linters

  • Add clang-format c & cpp formatting linter including "apply fix" support
  • Add Roslynator C# linter by @bdovaz in oxsecurity#3155

• Fixes

  • Call jscpd with --gitignore to ignore copy-pastes in files matching .gitignore
  • cpplint: Dynamically add the list of extensions from list of files in --extensions parameter
  • Fix mkdocs generation + CI control job by @nvuillam in oxsecurity#3135
  • Add semgrep ruleset to validation schema by @wesley-dean-flexion in oxsecurity#3164
  • Downgrade stylelint to avoid crash with not v16 compliant dependencies
  • Fix count of yaml-lint errors
  • Remove openssl reinstall, as base image has updated version from alpine 3.18.5 by @echoix in oxsecurity#3181

• CI

  • Add arguments to make use of pytest-xdist, by @echoix

• Linter versions upgrades

  • ansible-lint from 6.22.0 to 6.22.1
  • bandit from 1.7.5 to 1.7.6
  • cfn-lint from 0.83.3 to 0.83.4
  • checkov from 3.0.39 to 3.1.25
  • checkstyle from 10.12.5 to 10.12.6
  • csharpier from 0.26.2 to 0.26.4
  • cspell from 8.0.0 to 8.1.3
  • dotnet-format from 6.0.417 to 7.0.114
  • eslint from 8.54.0 to 8.55.0
  • gitleaks from 8.18.0 to 8.18.1
  • isort from 5.12.0 to 5.13.0
  • lightning-flow-scanner from 2.15.0 to 2.16.0
  • luacheck from 1.1.1 to 1.1.2
  • markdown-table-formatter from 1.4.0 to 1.5.0
  • markdownlint from 0.37.0 to 0.38.0
  • mypy from 1.7.0 to 1.7.1
  • npm-groovy-lint from 12.1.0 to 13.0.2
  • phpcs from 3.7.2 to 3.8.0
  • phplint from 9.0.4 to 9.0.6
  • phpstan from 1.10.42 to 1.10.48
  • psalm from Psalm.5.15.0@ to Psalm.5.17.0@
  • puppet-lint from 4.2.1 to 4.2.3
  • pyright from 1.1.336 to 1.1.339
  • roslynator from 0.8.0.0 to 0.8.1.0
  • rubocop from 1.57.2 to 1.58.0
  • ruff from 0.1.6 to 0.1.7
  • secretlint from 7.1.0 to 8.0.0
  • semgrep from 1.50.0 to 1.52.0
  • sfdx-scanner-apex from 3.18.0 to 3.19.0
  • sfdx-scanner-aura from 3.18.0 to 3.19.0
  • sfdx-scanner-lwc from 3.18.0 to 3.19.0
  • syft from 0.97.1 to 0.98.0
  • terraform-fmt from 1.6.4 to 1.6.5
  • terragrunt from 0.53.4 to 0.54.0
  • trivy from 0.47.0 to 0.48.0
  • trufflehog from 3.63.0 to 3.63.2
  • vale from 2.29.7 to 2.30.0

[v7.6.0] - 2023-11-19

• Major enhancements

  • New flavor c_cpp: New flavor for pure C/C++ projects, by @daltonv in oxsecurity#3067
  • New flavor formatters: Contains only formatter linters, by @nvuillam in oxsecurity#3071
  • Add Salesforce Lightning Flow Scanner, by @nvuillam in oxsecurity#3092

• Core

  • Allow to use value any to always activate a linter who as a _DIRECTORY variable. Example: KUBERNETES_DIRECTORY: any, by @nvuillam in oxsecurity#3058
  • Update base Docker image to python:3.11.6-alpine3.18

• Fixes

  • Fix issue Gitleaks --no-git does not work anymore, #2945, in #3112
  • Fix way to install powershell on Alpine linux image
  • Fix issue with VS Code devcontainer not building #3114
  • Fix Default Workflow to handle latest ActionLint rules, by @nvuillam in oxsecurity#3130
  • Write checkov SARIF report results_sarif.sarif in REPORT_FOLDER, by @gmeligio in oxsecurity#3121
  • Updated lintr config template to use linters_with_defaults() (formerly with_defaults())
  • Fix csharp installation dependencies, by @nvuillam in oxsecurity#3075
  • Fix powershell installation by @nvuillam in oxsecurity#3126

• Doc

  • Update lintr links to their current locations, by @echoix in #3122
  • Update Pylint links to their current locations, by @echoix in #3116
  • Add R2DevOps way to setup MegaLinter on Gitlab, by @nvuillam in oxsecurity#3129

• CI

  • Upgrade pymdown-extensions and markdown, by @BryanQuigley in #3053
  • Use docker/metadata-action for some internal CI, by @echoix in #3110
  • Call docker buildx prune instead of docker builder prune, by @echoix in #3127
  • Set schedule earlier for auto-update-linters.yml, allow manual runs, by @echoix in oxsecurity#3066
  • Add mike to dev/requirements.txt, by @echoix in oxsecurity#3070
  • Modernize dependabot.yml in correct directories, by @echoix in oxsecurity#3093
  • Fix devcontainer Dockerfile typo (fixes #3114) by @daltonv in oxsecurity#3115

• Linter versions upgrades

  • ansible-lint from 6.21.1 to 6.22.0
  • bicep_linter from 0.22.6 to 0.23.1
  • black from 23.10.1 to 23.11.0
  • cfn-lint from 0.83.0 to 0.83.3
  • checkov from 3.0.12 to 3.0.39
  • checkstyle from 10.12.4 to 10.12.5
  • clippy from 0.1.73 to 0.1.74
  • csharpier from 0.25.0 to 0.26.2
  • cspell from 7.3.8 to 8.0.0
  • dotnet-format from 6.0.416 to 6.0.417
  • eslint from 8.52.0 to 8.54.0
  • golangci-lint from 1.55.1 to 1.55.2
  • kics from 1.7.10 to 1.7.11
  • kubeconform from 0.6.3 to 0.6.4
  • mypy from 1.6.1 to 1.7.0
  • npm-groovy-lint from 11.1.1 to 12.1.0
  • npm-package-json-lint from 7.0.0 to 7.1.0
  • phpstan from 1.10.39 to 1.10.42
  • powershell from 7.3.9 to 7.4.0
  • powershell_formatter from 7.3.9 to 7.4.0
  • prettier from 3.0.3 to 3.1.0
  • protolint from 0.46.2 to 0.46.3
  • pyright from 1.1.333 to 1.1.336
  • ruff from 0.1.3 to 0.1.6
  • secretlint from 7.0.7 to 7.1.0
  • semgrep from 1.46.0 to 1.50.0
  • sfdx-scanner-apex from 3.17.0 to 3.18.0
  • sfdx-scanner-aura from 3.17.0 to 3.18.0
  • sfdx-scanner-lwc from 3.17.0 to 3.18.0
  • swiftlint from 0.53.0 to 0.54.0
  • syft from 0.94.0 to 0.97.1
  • terraform-fmt from 1.6.2 to 1.6.4
  • terragrunt from 0.53.0 to 0.53.4
  • tflint from 0.48.0 to 0.49.0
  • trivy-sbom from 0.46.1 to 0.47.0
  • trivy from 0.46.1 to 0.47.0
  • trufflehog from 3.61.0 to 3.63.0
  • vale from 2.29.5 to 2.29.7
  • xmllint from 21104 to 21106
  • yamllint from 1.32.0 to 1.33.0

[v7.5.0] - 2023-10-29

• Core

  • mega-linter-runner: Convert to ES6 and upgrade npm dependencies. Node 18 minimum version is now required.
  • Allow to define COMPILER_ONLY virtual package as cargo dependency in descriptors to embed rust compiler in the Dockerfile
  • Optimize @generated marker scanning (#2654)

• Media

  • Achieve Code Consistency: MegaLinter Integration in Azure DevOps, by Don Koning on Microsoft Tech Community

• Fixes

  • build.py: Remove exclusivity between pip, gem & cargo packages
  • Salesforce linters: Switch sfdx-cli to @salesforce/cli
  • Fixed issue with actionlint throwing an error on if statements in the generated workflow file
  • Added default .devskim.json to mitigate errors introduced when no config exists

• Doc

  • Display list of articles from newest to oldest
  • Fix incorrect environment variable in djlint docs
  • Improve lychee documentation to add an example of .lycheeignore

• CI

  • Add the other maintainers globally to the CODEOWNERS file (#3008)
  • Free disk space earlier in the process to avoid failure during docker build
  • Set flavors-stats.json as a generated file in .gitattributes (#3023)
  • Update and fix our ChatOps automations to only run on pull request comments, by @echoix in #3034
  • Use App::cpm to install perlcritic faster, and clean .perl-cpm cache, by @echoix in #3036
  • Add failure message in ChatOps build-command and Slash dispatcher, by @echoix in #3037

• Linter versions upgrades

  • ansible-lint from 6.20.0 6.21.1
  • bicep_linter from 0.21.1 to 0.22.6
  • black from 23.9.1 to 23.10.1
  • cfn-lint from 0.80.2 to 0.83.0
  • checkov from 2.4.48 to 3.0.12
  • checkstyle from 10.12.3 to 10.12.4
  • clippy from 0.1.72 to 0.1.73
  • clj-kondo from 2023.09.07 to 2023.10.20
  • cspell from 7.3.6 to 7.3.8
  • devskim from 1.0.22 to 1.0.23
  • dotnet-format from 6.0.414 to 6.0.416
  • editorconfig-checker from 2.7.1 to 2.7.2
  • eslint-plugin-jsonc from 2.9.0 to 2.10.0
  • eslint from 8.49.0 to 8.52.0
  • golangci-lint from 1.54.2 to 1.55.1
  • kics from 1.7.8 to 1.7.10
  • ktlint from 1.0.0 to 1.0.1
  • mypy from 1.5.1 to 1.6.1
  • perlcritic from 1.150 to 1.152
  • phpstan from 1.10.35 to 1.10.39
  • powershell from 7.3.7 to 7.3.9
  • powershell_formatter from 7.3.7 to 7.3.9
  • protolint from 0.46.0 to 0.46.2
  • puppet-lint from 4.2.0 to 4.2.1
  • pylint from 2.17.5 to 3.0.2
  • pyright from 1.1.327 to 1.1.333
  • rubocop from 1.56.3 to 1.57.2
  • ruff from 0.1.2 to 0.1.3
  • ruff from 0.0.290 to 0.1.2
  • semgrep from 1.41.0 to 1.46.0
  • sfdx-scanner-apex from 3.16.0 to 3.17.0
  • sfdx-scanner-aura from 3.16.0 to 3.17.0
  • sfdx-scanner-lwc from 3.16.0 to 3.17.0
  • snakefmt from 0.8.4 to 0.8.5
  • sqlfluff from 2.3.2 to 2.3.5
  • stylelint from 15.10.3 to 15.11.0
  • swiftlint from 0.52.4 to 0.53.0
  • syft from 0.91.0 to 0.94.0
  • terraform-fmt from 1.5.7 to 1.6.2
  • terragrunt from 0.51.4 to 0.53.0
  • trivy-sbom from 0.45.1 to 0.46.1
  • trivy from 0.45.1 to 0.46.1
  • trufflehog from 3.56.1 to 3.61.0
  • v8r from 2.0.0 to 2.1.0
  • vale from 2.29.0 to 2.29.5

[v7.4.0] - 2023-09-22

• Core

  • Upgrade python to 3.11.5

• Media

  • Maximize your code consistency with Megalinter by Tor Ivar Asbølmo on codewithme.cloud
  • MegaLinter in Azure DevOps by James Cook

• Fixes

  • Fix IGNORE_GITIGNORED_FILES not working anymore , by @iisisrael
  • Fix v7 issue when using MEGALINTER_FILES_TO_LINT ( thanks @pfiaux !)
  • Fix Ignore symlink files when VALIDATE_ALL_CODEBASE is false
  • Fix rstcheck options & install

• Doc

  • Secretlint logo - reduce size to 150 and remove background
  • Replace https://megalinter.io/flavors with https://megalinter.io/latest/flavors to avoid lychee 404 error

• CI

  • Workflow job name changed from build to megalinter to prevent conflicts with other workflows
  • Add support for master branch in TEMPLATES/mega-linter.yml, by @rasa

• Deprecations

  • Deprecate SCSS LINT as not maintained anymore (https://github.com/sds/scss-lint#notice-consider-other-tools-before-adopting-scss-lint)

• Linter versions upgrades

  • actionlint from 1.6.25 to 1.6.26
  • ansible-lint from 6.17.2 to 6.20.0
  • bicep_linter from 0.20.4 to 0.21.1
  • black from 23.7.0 to 23.9.1
  • cfn-lint from 0.79.6 to 0.80.2
  • checkov from 2.3.360 to 2.4.10
  • checkstyle from 10.12.2 to 10.12.3
  • chktex from 1.7.6 to 1.7.8
  • clippy from 0.1.71 to 0.1.72
  • clj-kondo from 2023.07.13 to 2023.09.07
  • cspell from 6.31.3 to 7.3.6
  • devskim from 1.0.18 to 1.0.22
  • djlint from 1.32.1 to 1.34.0
  • dotnet-format from 6.0.413 to 6.0.414
  • editorconfig-checker from 2.7.0 to 2.7.1
  • eslint from 8.46.0 to 8.49.0
  • git_diff from 2.38.5 to 2.40.1
  • gitleaks from 8.17.0 to 8.18.0
  • golangci-lint from 1.54.0 to 1.54.2
  • helm from 3.10.2 to 3.11.3
  • jscpd from 3.5.9 to 3.5.10
  • kics from 1.7.5 to 1.7.8
  • ktlint from 0.50.0 to 1.0.0
  • kubescape from 2.3.6 to 2.9.0
  • markdownlint from 0.35.0 to 0.36.0
  • mypy from 1.4.1 to 1.5.1
  • phpstan from 1.10.28 to 1.10.35
  • powershell from 7.3.6 to 7.3.7
  • powershell_formatter from 7.3.6 to 7.3.7
  • prettier from 3.0.1 to 3.0.3
  • protolint from 0.45.0 to 0.46.0
  • psalm from Psalm.5.14.1@ to Psalm.5.15.0@
  • puppet-lint from 4.0.1 to 4.2.0
  • pyright from 1.1.321 to 1.1.327
  • revive from 1.3.2 to 1.3.4
  • rstcheck from 6.1.2 to 6.2.0
  • rstfmt from 0.0.13 to 0.0.14
  • rubocop from 1.56.0 to 1.56.3
  • ruff from 0.0.284 to 0.0.290
  • scalafix from 0.11.0 to 0.11.1
  • semgrep from 1.34.1 to 1.41.0
  • sfdx-scanner-apex from 3.15.0 to 3.16.0
  • sfdx-scanner-aura from 3.15.0 to 3.16.0
  • sfdx-scanner-lwc from 3.15.0 to 3.16.0
  • snakemake from 7.32.3 to 7.32.4
  • spectral from 6.10.1 to 6.11.0
  • sqlfluff from 2.2.1 to 2.3.2
  • stylelint from 15.10.2 to 15.10.3
  • syft from 0.86.1 to 0.91.0
  • terraform-fmt from 1.5.4 to 1.5.7
  • terragrunt from 0.48.6 to 0.51.3
  • terrascan from 1.18.2 to 1.18.3
  • tflint from 0.47.0 to 0.48.0
  • trivy-sbom from 0.44.0 to 0.45.1
  • trivy from 0.44.0 to 0.45.1
  • trufflehog from 3.47.0 to 3.56.1
  • vale from 2.28.1 to 2.29.0
  • xmllint from 21004 to 21104

[v7.3.0] - 2023-08-10

• Features

  • Allow to define linter_key**_COMMAND_REMOVE_ARGUMENTS** to remove a command line argument internally added by MegaLinter

• Fixes

  • Replace https://megalinter.io/config-file by https://megalinter.io/latest/config-file to avoid lychee 404 detection
  • Improve docs for posting comments to PRs in GitHub Enterprise

• CodeTotal

  • Redis reporter: Return URL of linter icons when available, in property iconPngUrl
  • Allow to run CodeTotal with a single command npx mega-linter-runner@latest --codetotal , that opens CodeTotal in Web Browser once started

• Linter versions upgrades

  • bicep_linter from 0.19.5 to 0.20.4
  • cfn-lint from 0.79.2 to 0.79.6
  • checkov from 2.3.343 to 2.3.360
  • checkstyle from 10.12.1 to 10.12.2
  • cspell from 6.31.2 to 6.31.3
  • devskim from 1.0.1 to 1.0.18
  • dotnet-format from 6.0.412 to 6.0.413
  • eslint from 8.45.0 to 8.46.0
  • flake8 from 6.0.0 to 6.1.0
  • golangci-lint from 1.53.3 to 1.54.0
  • kics from 1.7.4 to 1.7.5
  • phpstan from 1.10.26 to 1.10.28
  • prettier from 3.0.0 to 3.0.1
  • psalm from Psalm.5.13.1@ to Psalm.5.14.1@
  • puppet-lint from 4.0.0 to 4.0.1
  • pyright from 1.1.318 to 1.1.321
  • rubocop from 1.55.0 to 1.56.0
  • ruff from 0.0.280 to 0.0.284
  • secretlint from 7.0.3 to 7.0.7
  • semgrep from 1.33.2 to 1.34.1
  • sfdx-scanner-apex from 3.14.0 to 3.15.0
  • sfdx-scanner-aura from 3.14.0 to 3.15.0
  • sfdx-scanner-lwc from 3.14.0 to 3.15.0
  • snakemake from 7.31.0 to 7.32.3
  • spectral from 6.10.0 to 6.10.1
  • sqlfluff from 2.1.4 to 2.2.1
  • syft from 0.85.0 to 0.86.1
  • terraform-fmt from 1.5.3 to 1.5.4
  • terragrunt from 0.48.4 to 0.48.6
  • terrascan from 1.18.1 to 1.18.2
  • trivy-sbom from 0.43.1 to 0.44.0
  • trivy from 0.43.1 to 0.44.0
  • trufflehog from 3.45.1 to 3.47.0

[v7.2.1] - 2023-07-26

• Fixes

  • Fix TAP reporter (3 real dots instead if 3 dots character)
  • Call trufflehog with --only-verified to avoid false positives in .git/config

• Linter versions upgrades

  • cfn-lint from 0.78.2 to 0.79.2
  • checkov from 2.3.340 to 2.3.343
  • pylint from 2.17.4 to 2.17.5
  • rubocop from 1.54.2 to 1.55.0
  • snakemake from 7.30.2 to 7.31.0
  • spectral from 6.8.0 to 6.10.0
  • sqlfluff from 2.1.3 to 2.1.4
  • trufflehog from 3.44.0 to 3.45.1

[v7.2.0] - 2023-07-25

• New linters

  • Add Lychee - links and email addresses checker, by @DariuszPorowski in #2673
  • Add grype security linter
  • Add trufflehog security linter

• New flavor dotnetweb: dotnet flavor linters + Javascript & Typescript linters

• Media

  • 8 Tools to Scan Node.js Applications for Security Vulnerability, by Chandan Kumar{target=_blank} on GeekFlare.com
  • Shift Left Just Become Easier (Black Hat Arsenal Session)

• Core

  • MegaLinter Server for CodeTotal
  • Improvements to Gitpod workspace and addition of Makefile for automation, by @ThomasSanson in oxsecurity#2737

• Fixes

  • Handle reporter crashes without making all ML crash
  • Devskim: Remove default --ignore-globs argument
  • mypy: Use /tmp as cache folder by default with ENV MYPY_CACHE_DIR=/tmp in Dockerfile
  • Fix hadolint to use its default configuration file properly, by @KihyeokK in oxsecurity#2763
  • Remove linters not in flavor before calling reporters
  • Undowngrade devskim, by @nvuillam in oxsecurity#2748
  • Add ts-standard linter for ts standard, by @janderssonse in oxsecurity#2746
  • Remove additional --update for apk in Dockerfile by @PeterDaveHello in oxsecurity#2619
  • Fix V8R config arg usage (#2756), by @bdovaz in oxsecurity#2819

• Reporters

  • New Redis reporter (beta)

• CI

  • Clean docker build cache to avoid no space left on device during Build Dev job

• Linter versions upgrades

  • actionlint from 1.6.24 to 1.6.25
  • ansible-lint from 6.16.2 to 6.17.2
  • bicep_linter from 0.17.1 to 0.19.5
  • black from 23.3.0 to 23.7.0
  • cfn-lint from 0.77.10 to 0.78.2
  • checkov from 2.3.285 to 2.3.340
  • checkstyle from 10.12.0 to 10.12.1
  • clippy from 0.1.70 to 0.1.71
  • clj-kondo from 2023.05.26 to 2023.07.13
  • csharpier from 0.24.2 to 0.25.0
  • cspell from 6.31.1 to 6.31.2
  • devskim from 0.7.104 to 1.0.11
  • djlint from 1.30.2 to 1.32.1
  • dotnet-format from 6.0.408 to 6.0.412
  • eslint-plugin-jsonc from 2.8.0 to 2.9.0
  • eslint from 8.42.0 to 8.45.0
  • gitleaks from 8.16.4 to 8.17.0
  • golangci-lint from 1.53.2 to 1.53.3
  • grype from 0.63.1 to 0.63.1
  • kics from 1.7.1 to 1.7.4
  • ktlint from 0.49.1 to 0.50.0
  • kubeconform from 0.6.2 to 2.3.6
  • markdownlint from 0.34.0 to 0.37.0
  • mypy from 1.3.0 to 1.4.1
  • npm-package-json-lint from 6.4.0 to 7.0.0
  • phpstan from 1.10.18 to 1.10.26
  • powershell from 7.3.4 to 7.3.6
  • powershell_formatter from 7.3.4 to 7.3.6
  • prettier from 2.8.8 to 3.0.0
  • protolint from 0.44.0 to 0.45.0
  • psalm from Psalm.5.12.0@ to Psalm.5.13.1@
  • pyright from 1.1.313 to 1.1.318
  • rubocop from 1.52.0 to 1.54.2
  • ruff from 0.0.272 to 0.0.280
  • secretlint from 6.2.3 to 7.0.3
  • semgrep from 1.26.0 to 1.33.2
  • sfdx-scanner-apex from 3.13.0 to 3.14.0
  • sfdx-scanner-aura from 3.13.0 to 3.14.0
  • sfdx-scanner-lwc from 3.13.0 to 3.14.0
  • shfmt from 3.6.0 to 3.7.0
  • snakemake from 7.26.0 to 7.30.2
  • sqlfluff from 2.1.1 to 2.1.3
  • stylelint from 15.10.0 to 15.10.0
  • swiftlint from 0.52.2 to 0.52.4
  • syft from 0.83.0 to 0.85.0
  • terraform-fmt from 1.4.6 to 1.5.3
  • terragrunt from 0.46.3 to 0.51.4
  • tflint from 0.46.1 to 0.47.0
  • trivy from 0.42.1 to 0.43.1
  • vale from 2.27.0 to 2.28.1

[v7.1.0] - 2023-06-11

• Core

  • Upgrade base image to python:3.11.4-alpine3.17, by @nvuillam in oxsecurity#2738

• Linter enhancements & fixes

  • cljstyle: Remove default value for configuration file name, by @nvuillam in oxsecurity#2717
  • golangci-lint : Add autofix capability using --fix argument, by @seaneagan in oxsecurity#2700

• Linter versions upgrades

  • cfn-lint from 0.77.5 to 0.77.7
  • checkov from 2.3.267 to 2.3.285
  • clippy from 0.1.69 to 0.1.70
  • clj-kondo from 2023.05.18 to 2023.05.26
  • djlint from 1.30.0 to 1.30.2
  • eslint from 8.41.0 to 8.42.0
  • gitleaks from 8.16.3 to 8.16.4
  • golangci-lint from 1.52.2 to 1.53.2
  • kubeconform from 0.6.1 to 0.6.2
  • kubescape from 2.3.4 to 2.3.5
  • luacheck from 1.1.0 to 1.1.1
  • markdownlint from 0.33.0 to 0.34.0
  • phpstan from 1.10.15 to 1.10.18
  • pyright from 1.1.311 to 1.1.313
  • rubocop from 1.51.0 to 1.52.0
  • ruff from 0.0.270 to 0.0.272
  • scalafix from 0.10.4 to 0.11.0
  • semgrep from 1.24.0 to 1.26.0
  • sfdx-scanner-apex from 3.12.0 to 3.13.0
  • sfdx-scanner-aura from 3.12.0 to 3.13.0
  • sfdx-scanner-lwc from 3.12.0 to 3.13.0
  • stylelint from 15.6.2 to 15.7.0
  • syft from 0.82.0 to 0.83.0
  • terragrunt from 0.45.17 to 0.46.3
  • trivy from 0.41.0 to 0.42.1

[v7.0.4] - 2023-05-31

• Core

  • Allow to define linterkey_UNSECURED_ENV_VARIABLES for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT)

• Documentation

  • Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by @ruzickap in oxsecurity#2706

• Linter versions upgrades

  • checkov from 2.3.261 to 2.3.267
  • djlint from 1.29.0 to 1.30.0
  • pyright from 1.1.310 to 1.1.311
  • semgrep from 1.23.0 to 1.24.0
  • standard from 17.0.0 to 17.1.0
  • terragrunt from 0.45.16 to 0.45.17

[v7.0.3] - 2023-05-29

• Linter enhancements & fixes

  • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.

• Core

  • Secure PRE_COMMANDS and POST_COMMANDS by default
  • Can be disabled with secured_env: false in the command definition
  • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression

• Linter versions upgrades

  • checkstyle from 10.11.0 to 10.12.0
  • kubescape from 2.3.3 to 2.3.4
  • checkov from 2.3.259 to 2.3.261

[v7.0.2] - 2023-05-27

• Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner)
  • Dead link to configuration.md
  • Regex issue with megalinter-reports

[v7.0.0] - 2023-05-27

To upgrade to MegaLinter v7, run npx mega-linter-runner@latest --upgrade , comment here if you have any issue :)

• MAJOR Updates

  • SECURED_ENV_VARIABLES & core scoped configuration by @nvuillam in oxsecurity#2601
    • New configuration variables SECURED_ENV_VARIABLES and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter
    • Read documentation to enhance security using MegaLinter
  • Use relative file paths to call linters by @nvuillam in oxsecurity#1877
    • This can be a breaking change for customizations, post an issue if you see a problem !

• New linters

  • Add linter cljstyle, Clojure formatter, by @practicalli-john in oxsecurity#2115
  • Add kubescape, kubernetes linter, by @muandane in oxsecurity#2531
  • Add Vale, a powerful enforcer of writing style, by @wesley-dean-flexion in oxsecurity#2406

• Removed linters

  • KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors)
  • REPOSITORY_GOODCHECK: Not open-source anymore
  • SPELL_MISSPELL: Not maintained anymore (last commit in 2018)
  • TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV
  • TERRAFORM_KICS: Replaced by REPOSITORY_KICS

• Medias

  • Article: Use the Workflows JSON schema in your IDE, by Google Cloud
  • Video: Ortelius Architecture Meeting, with a review of MegaLinter, by Steve Taylor from Ortelius
  • Web site: my-devops-lab.com

• Linter enhancements & fixes

  • cspell
    • Fix corrective .cspell.json file generated from cspell output by @nvuillam in oxsecurity#2562
  • eslint
    • Ensure ESLint actually runs in project mode (#1572) by @Kurt-von-Laven in oxsecurity#2455
  • jscpd
    • Prevent jscpd to create output folder if the repo is not writable by @nvuillam in oxsecurity#2556
  • Gitleaks
    • Add support to scan PR commits only on PRs when VALIDATE_ALL_CODEBASE is set to false, by @DariuszPorowski #2504
  • KICS
    • Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by @nvuillam in oxsecurity#2689
    • KICS can now output SARIF
    • The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary
  • KubeConform
    • Simplify kubeconform install & get version by @nvuillam in oxsecurity#2629
  • PHPLint
    • Upgrade PHPLint to v9 by @bdovaz in oxsecurity#2638
  • sqlfluff
    • Remove old options from SQLFluff config file by @tunetheweb in oxsecurity#2560
  • v8r
    • Allow use of configuration files with v8r by @bdovaz in oxsecurity#1982

• Core

  • Upgrade base Docker image to python:3.11.3-alpine3.17 by @nvuillam in oxsecurity#2537
  • Allow simultaneous regex filtering at descriptor and linter levels by @nvuillam & @seaneagan in oxsecurity#2669
  • Allow MEGALINTER_CONFIG to contain a full path to a MegaLinter config file by @nvuillam in oxsecurity#2649
  • Fix issue preventing plugins to work with flavors by @nvuillam in oxsecurity#2532
  • Fix crash in case of unreachable symlinks by @nvuillam in oxsecurity#2538
  • mega-linter-runner: Use --platform also for docker run by @nvuillam , @Kurt-Von-Laven & @cam-barts in oxsecurity#2690
  • Replace deprecated distutils.copy_tree by shutil.copytree

• Reporters

  • SARIF_REPORTER
    • Add option to skip def_ws prefix in sarif reports by @janderssonse in oxsecurity#2383
    • update schema to pass official SARIF validator by @DariuszPorowski in oxsecurity#2645
  • CONFIG_REPORTER
    • Add support for idea plugins auto-install by @waterfoul in oxsecurity#2553
  • CONSOLE_REPORTER
    • Updated cases in console/log output to use ⚠ Warning Sign (U+26A0) instead of ◬ White Up-Pointing Triangle with Dot (U+25EC), by @Doommius
  • GITLAB_COMMENT_REPORTER
    • Enhancement & fixes for GitlabCommentReporter by @nvuillam in oxsecurity#2564
      • New var GITLAB_COMMENT_REPORTER_OVERWRITE_COMMENT to allow to disable the overwrite of existing MegaLinter comment in case of new run
      • In case of overwrite activated (by default), fetch all Merge Request comments, not the first 20.
      • Display a different message in log when a Merge Request comment is created or updated.
  • AZURE_COMMENT_REPORTER
    • Downgrade Azure DevOps pipy package to avoid crash by @nvuillam in oxsecurity#2576

• Documentation

  • Improve documentation pages split by @nvuillam in oxsecurity#2688
    • Now Installation and Configuration menus have their own child menus
  • Doc about how to use fine grained PAT by @nvuillam in oxsecurity#2662
  • Fixed incorrect link in Azure to Gitlab reporters pages. by @Doommius in oxsecurity#2613
  • Added bitbucket job template + Fix icon in console logs by @Doommius in oxsecurity#2617
  • Exclude licenses pages from online search results by @nvuillam in oxsecurity#2665
  • Improve HTML tables display by @nvuillam in oxsecurity#2670
  • Remove ASCII characters from linters helps displayed in MegaLinter documentation

• Internal CI

  • Upgrade GitHub Actions to change automated comments and increase timeout by @nvuillam in oxsecurity#2536
  • Use Github Permissions instead of PAT by @nvuillam in oxsecurity#2652
  • Update GitHub Actions workflows environments by @nvuillam in oxsecurity#2657
  • Automate External Plugins table generation using .automation/plugins.yml file by @nvuillam in oxsecurity#2667
  • Fix MegaLinter build issue by @nvuillam in oxsecurity#2539
  • Fix for trivy-action (new naming for input) by @DariuszPorowski in oxsecurity#2541
  • Fix /build slash command to checkout the correct PR branch by @echoix in oxsecurity#2542
  • Fix local run of python test cases by @nvuillam in oxsecurity#2565
  • Fix mkdocs documentation generation by downgrading mkdocs-glightbox to 0.3.2 by @nvuillam in oxsecurity#2582
  • Do not push to docker from dev PRs by @nvuillam in oxsecurity#2639
  • Update stale workflow: remove trigger on comments and explicit permissions by @echoix in oxsecurity#2641
  • Decouple updating docker pull stats from building docs by @echoix in oxsecurity#2677
  • Review MegaLinter's own cspell word list for outdated exclusions by @echoix in oxsecurity#2676
  • Run stale workflow only on schedule, by @echoix in oxsecurity#2641
  • Add explicit permissions to stale workflow, by @echoix in oxsecurity#2641

• Linter versions upgrades

  • actionlint from 1.6.23 to 1.6.24
  • ansible-lint from 6.14.4 to 6.16.2
  • bicep_linter from 0.15.31 to 0.17.1
  • cfn-lint from 0.76.1 to 0.77.5
  • checkov from 2.3.149 to 2.3.259
  • checkstyle from 10.9.3 to 10.11.0
  • clippy from 0.1.68 to 0.1.69
  • clj-kondo from 2023.03.17 to 2023.05.18
  • csharpier from 0.23.0 to 0.24.2
  • djlint from 1.19.16 to 1.29.0
  • dotnet-format from 6.0.407 to 6.0.408
  • eslint-plugin-jsonc from 2.7.0 to 2.8.0
  • eslint from 8.37.0 to 8.41.0
  • git_diff from 2.38.4 to 2.38.5
  • gitleaks from 8.16.1 to 8.16.3
  • jscpd from 3.5.4 to 3.5.9
  • jsonlint from 14.0.2 to 14.0.3
  • kics from 1.6.13 to 1.7.1
  • ktlint from 0.48.2 to 0.49.1
  • kubeconform from 0.5.0 to 0.6.1
  • kubescape from 2.3.1 to 2.3.3
  • markdown-link-check from 3.10.3 to 3.11.2
  • mypy from 1.1.1 to 1.3.0
  • phplint from 5.5 to 9.0.4
  • phpstan from 1.10.10 to 1.10.15
  • pmd from 6.48.0 to 6.55.0
  • powershell from 7.3.3 to 7.3.4
  • powershell_formatter from 7.3.3 to 7.3.4
  • prettier from 2.8.7 to 2.8.8
  • protolint from 0.43.1 to 0.44.0
  • psalm from Psalm.5.9.0@ to Psalm.5.12.0@
  • puppet-lint from 3.3.0 to 4.0.0
  • pylint from 2.17.2 to 2.17.4
  • pyright from 1.1.301 to 1.1.310
  • revive from 1.3.1 to 1.3.2
  • rubocop from 1.49.0 to 1.51.0
  • ruff from 0.0.260 to 0.0.270
  • semgrep from 1.16.0 to 1.23.0
  • sfdx-scanner-apex from 3.11.0 to 3.12.0
  • sfdx-scanner-aura from 3.11.0 to 3.12.0
  • sfdx-scanner-lwc from 3.11.0 to 3.12.0
  • snakefmt from 0.8.3 to 0.8.4
  • snakemake from 7.25.0 to 7.26.0
  • spectral from 6.6.0 to 6.8.0
  • sqlfluff from 2.0.2 to 2.1.1
  • stylelint from 15.4.0 to 15.6.2
  • swiftlint from 0.51.0 to 0.52.2
  • syft from 0.76.0 to 0.82.0
  • terraform-fmt from 1.4.4 to 1.4.6
  • terragrunt from 0.45.0 to 0.45.11
  • terrascan from 1.18.0 to 1.18.1
  • tflint from 0.45.0 to 0.46.1
  • trivy from 0.39.0 to 0.41.0
  • v8r from 1.0.0 to 2.0.0
  • vale from 2.24.0 to 2.27.0
  • xmllint from 21003 to 21004
  • yamllint from 1.30.0 to 1.32.0

[v6.22.2] - 2023-04-03

• Core

  • Fix failure of AzureCommentReporter when there is no pull request found in ENV vars
  • Fix HTML comment appearing in Azure Pull Request mail notifications

• Linter versions upgrades

  • ansible-lint from 6.14.3 to 6.14.4
  • checkov from 2.3.145 to 2.3.149
  • pylint from 2.17.1 to 2.17.2
  • rubocop from 1.48.1 to 1.49.0

[v6.22.1] - 2023-04-02

• Core

  • Changed vars in AzureCommentReporter to reflects official Azure DevOps naming convention + fallback to keep backward compatibility, see #2509
  • Update AzureCommentReport to have only one MegaLinter thread instead of a new one for each run of MegaLinter

• Documentation

  • Updated usage scenario for Azure DevOps, see #2509

• Linter versions upgrades

  • checkov from 2.3.141 to 2.3.145
  • phpstan from 1.10.9 to 1.10.10
  • rstfmt from 0.0.12 to 0.0.13

[v6.22.0] - 2023-04-01

• New linters

  • Add ruff, by @lars-reimann in oxsecurity#2458

• Linter enhancements & fixes

  • Pin markdown-link-check to 3.10.3 until tcort/markdown-link-check#246 is fixed, by @Kurt-von-Laven (#2498).

• Core

  • Fix MegaLinter doc version & url displayed in logs, by @nvuillam in oxsecurity#2485

  • Use megalinter-bot to create apply fixes commits, by @lars-reimann, @nvuillam and @megalinter-bot :)

    • If you are an existing user of MegaLinter, you must update your github actions workflows to add the following parameters to stefanzweifel/git-auto-commit-action@v4 :

    commit_user_name: megalinter-bot
    commit_user_email: nicolas.vuillamy@ox.security

    • You can also use any github username and email you like :)

• Documentation

  • Close parentheses in ci_light flavour doc by @moverperfect in oxsecurity#2494

• Linter versions upgrades

  • black from 23.1.0 to 23.3.0
  • cfn-lint from 0.75.1 to 0.76.1
  • checkov from 2.3.120 to 2.3.141
  • eslint from 8.36.0 to 8.37.0
  • kics from 1.6.12 to 1.6.13
  • markdown-link-check from 3.11.0 to 3.10.3
  • phpstan from 1.10.8 to 1.10.9
  • psalm from Psalm.5.8.0@ to Psalm.5.9.0@
  • pyright from 1.1.300 to 1.1.301
  • ruff from 0.0.255 to 0.0.260
  • semgrep from 1.15.0 to 1.16.0
  • sfdx-scanner-apex from 3.10.0 to 3.11.0
  • sfdx-scanner-aura from 3.10.0 to 3.11.0
  • sfdx-scanner-lwc from 3.10.0 to 3.11.0
  • stylelint from 15.3.0 to 15.4.0
  • swiftlint from 0.50.3 to 0.51.0
  • syft from 0.75.0 to 0.76.0
  • terraform-fmt from 1.4.2 to 1.4.4
  • trivy from 0.38.3 to 0.39.0

[v6.21.0] - 2023-03-26

• New linters
  • Add helm lint, by @ThomasSanson in oxsecurity#2386

• Medias
  • Video: Code quality - Ep01 - MegaLinter, one linter to rule them all, by @devpro
  • Video: DevSecOps Webinar using MegaLinter, by 5.15 Technologies
  • Video: (FR) Coding Tech - L'importance de la CI/CD dans le développement de logiciels, by @GridexX from R2DevOps
  • Article: (FR) MegaLinter, votre meilleur ami pour un code de qualité, by @ThomasSanson

• Linter enhancements & fixes

  • phpcs: Add regex in descriptor to be able to extract the number of found errors, by @nvuillam in oxsecurity#2453
  • Replace babel-eslint with @babel/eslint-parser, by @bdovaz in oxsecurity#2445
  • Use docker image to install phpstan, by @nvuillam in oxsecurity#2469
  • Avoid cspell error on readonly workspaces, by @nvuillam in oxsecurity#2474
  • Allow bandit to use pyproject.toml, by @nvuillam in oxsecurity#2475
  • Bring back stylelint-config-sass-guidelines package, by @nvuillam in oxsecurity#2477
  • Display only errors in markdown-link-check logs for better readability, by @nvuillam in oxsecurity#2479

• Core

  • Run CI linter jobs only on Pull requests to avoid doubling jobs

• Documentation

  • mega-linter-runner: doc fix for env list of values, see #2448, by @DariuszPorowski in oxsecurity#2449

• Linter versions upgrades

  • ansible-lint from 6.14.1 to 6.14.3
  • bandit from 1.7.4 to 1.7.5
  • cfn-lint from 0.74.1 to 0.75.1
  • checkov from 2.3.70 to 2.3.120
  • checkstyle from 10.8.0 to 10.9.3
  • clippy from 0.1.67 to 0.1.68
  • clj-kondo from 2023.02.17 to 2023.03.17
  • cspell from 6.28.0 to 6.31.1
  • dotnet-format from 6.0.406 to 6.0.407
  • eslint-plugin-jsonc from 2.6.0 to 2.7.0
  • eslint from 8.35.0 to 8.36.0
  • gitleaks from 8.16.0 to 8.16.1
  • jscpd from 3.5.3 to 3.5.4
  • jsonlint from 14.0.1 to 14.0.2
  • kics from 1.6.11 to 1.6.12
  • markdown-link-check from 3.10.3 to 3.11.0
  • phpstan from 1.10.5 to 1.10.8
  • prettier from 2.8.4 to 2.8.7
  • psalm from Psalm.5.7.7@ to Psalm.5.8.0@
  • pylint from 2.16.4 to 2.17.1
  • pyright from 1.1.296 to 1.1.300
  • revive from 1.2.5 to 1.3.1
  • rstcheck from 6.1.1 to 6.1.2
  • rubocop from 1.48.0 to 1.48.1
  • semgrep from 1.14.0 to 1.15.0
  • snakefmt from 0.8.1 to 0.8.3
  • snakemake from 7.24.0 to 7.25.0
  • sqlfluff from 1.4.5 to 2.0.2
  • stylelint from 15.2.0 to 15.3.0
  • syft from 0.74.0 to 0.75.0
  • terraform-fmt from 1.3.9 to 1.4.2
  • terragrunt from 0.44.4 to 0.45.0
  • trivy from 0.38.1 to 0.38.3
  • v8r from 0.14.0 to 1.0.0
  • yamllint from 1.29.0 to 1.30.0

[v6.20.1] - 2023-03-07

• Fixes

  • Fix issue with running on Mac m1 no longer working, by @nvuillam in oxsecurity#2430
  • Fix Container images errors when pulling, by @echoix in oxsecurity#2435
  • Fix Pre npm install not resolving, by @echoix in oxsecurity#2435
  • Add build date in Beta docker images, by @nvuillam
  • Correct misleading error message in GitlabCommentReporter.py, see #2420
  • Fix GitlabCommentReporter wrong variables names, check #2423

• Core

  • Improve config test, by @bdovaz in oxsecurity#2426

• Doc

  • Add article Level up your Unity Packages with CI/CD, by @RunningMattress in oxsecurity#2436
  • Correct minor docs error by @moverperfect in oxsecurity#2440

• Linter versions upgrades

  • ansible-lint from 6.14.0 to 6.14.1
  • bicep_linter from 0.14.85 to 0.15.31
  • cfn-lint from 0.74.0 to 0.74.1
  • checkov from 2.3.59 to 2.3.70
  • csharpier from 0.22.1 to 0.23.0
  • jsonlint from 13.0.1 to 14.0.1
  • mypy from 1.0.1 to 1.1.1
  • phpstan from 1.10.3 to 1.10.5
  • protolint from 0.43.0 to 0.43.1
  • puppet-lint from 3.2.0 to 3.3.0
  • pylint from 2.16.3 to 2.16.4
  • rubocop from 1.47.0 to 1.48.0
  • stylelint from 14.16.1 to 15.2.0

[v6.20.0] - 2023-03-05

• Core

  • Upgrade base docker image from python:3.10.4-alpine3.16 to python:3.11.1-alpine3.17
  • Build: remove folder contents before generating Dockerfile files for each linter in generate_linter_dockerfiles(), by @bdovaz in #2294
  • Build: remove folder contents before generating test classes for each linter in generate_linter_test_classes(), by @bdovaz in #2294
  • Build: automatically update the linter list used in the matrix of several of the workflows, by @bdovaz in #2294
  • Test: create a testing architecture for format/autofix linters, by @bdovaz in #2294
  • Test: create or adapt input files for format/autofix tests, by @bdovaz in #2294
  • Test: created specific test folders for linters that need them because they can't share them, by @bdovaz in #2294
  • Added rubocop-rake RubyGem for linting Rake files with RuboCop

• Fixes

  • Correctly generate class names and test class files for each linter when the linter descriptor defines the attribute "name", by @bdovaz in #2294
  • Removed the default powershell templates TEMPLATES/.powershell-formatter.psd1 and TEMPLATES/.powershell-psscriptanalyzer.psd1. Having these templates caused all rules to be ignored as the settings aren't incremental but absolute, by @bdovaz in #2294
  • Added cli_lint_fix_arg_name parameter to dotnet format descriptor as without it, autofix doesn't work, by @bdovaz in #2294
  • Created BicepLinter class to add DOTNET_SYSTEM_GLOBALIZATION_INVARIANT environment variable to avoid problems with ICU packages, by @bdovaz in #2294
  • Modified npm-groovy-lint descriptor to add --failon parameter to only fail with error and not info which is the default value, by @bdovaz in #2294
  • Added cli_lint_fix_arg_name parameter to powershell formatter descriptor as without it, autofix doesn't work, by @bdovaz in #2294
  • Created ProtolintLinter class to fix the problem that returns exit code 1 when it encounters a problem to correct even though it corrects it correctly, by @bdovaz in #2294
  • Concatenate --output parameter correctly to xmllint linter, by @bdovaz in #2294
  • Modified the .pre-commit-hooks.yaml for megalinter-full so the containername argument is correctly split between two lines, by @drbothen #2411
  • Avoid jscpd default config to detect copy pastes in image files
  • Move utilstest to megalinter folder to avoid import issues
  • Replace deprecated spectral package, by @bdovaz in by @bdovaz in oxsecurity#2340
  • Generate correct urls for packages with fixed versions, by @bdovaz in oxsecurity#2339

• Documentation

  • Change swiftlint example that did not correctly reflect the --fix parameter, by @bdovaz in #2294
  • Change in TSX eslint descriptor the urls as they were not correct, by @bdovaz in #2294
  • Change in TYPESCRIPT eslint descriptor the urls as they were not correct, by @bdovaz on #2294
  • Use mkdocs-glightbox to allow to click on images and display them in full screen

• CI

  • Use docker/build-push-action to build docker images and akhilerm/tag-push-action to release by retagging and pushing beta images instead of rebuilding them
  • Authenticate to GitHub API during docker build to avoid reaching limits
  • Remove apk go package install in images where possible to decrease image sizes, by @echoix in oxsecurity#2318
  • Create a slash PR bot to run ./build.sh command manually on PRs, by @echoix in #2353 and #2381
  • Limit parallel execution of large job matrix in the workflows with max-parallel in order to keep runners available for other jobs, by @echoix in #2397

• Linter versions upgrades

  • ansible-lint from 6.12.1 to 6.14.0
  • bash-exec from 5.1.16 to 5.2.15
  • bicep_linter from 0.14.46 to 0.14.85
  • cfn-lint from 0.72.10 to 0.74.0
  • checkmake from 0.2.1 to 0.2.0
  • checkov from 2.1.244 to 2.3.18
  • checkstyle from 10.7.0 to 10.8.0
  • clj-kondo from 2023.01.20 to 2023.02.17
  • cspell from 6.21.0 to 6.28.0
  • djlint from 1.19.13 to 1.19.16
  • dotnet-format from 6.0.405 to 6.0.406
  • dustilock from 0.0.0 to 1.2.0
  • editorconfig-checker from 2.4.0 to 2.7.0
  • eslint from 8.33.0 to 8.35.0
  • git_diff from 2.36.4 to 2.38.4
  • gitleaks from 8.15.3 to 8.16.0
  • golangci-lint from 1.51.0 to 1.51.2
  • jscpd from 3.3.26 to 3.5.3
  • jsonlint from 11.7.0 to 13.0.1
  • kics from 1.6.9 to 1.6.11
  • mypy from 0.991 to 1.0.1
  • perlcritic from 1.148 to 1.150
  • phpcs from 3.7.1 to 3.7.2
  • phpstan from 1.9.14 to 1.10.3
  • powershell_formatter from 7.3.2 to 7.3.3
  • powershell from 7.3.2 to 7.3.3
  • prettier from 2.8.3 to 2.8.4
  • protolint from 0.42.2 to 0.43.0
  • psalm from Psalm.5.6.0@ to Psalm.5.7.7@
  • puppet-lint from 3.0.1 to 3.2.0
  • pylint from 2.16.1 to 2.16.3
  • pyright from 1.1.270 to 1.1.296
  • rubocop from 1.44.1 to 1.47.0
  • secretlint from 6.2.0 to 6.2.3
  • semgrep from 1.9.0 to 1.14.0
  • sfdx-scanner-apex from 3.8.0 to 3.10.0
  • sfdx-scanner-aura from 3.8.0 to 3.10.0
  • sfdx-scanner-lwc from 3.8.0 to 3.10.0
  • snakemake from 7.21.0 to 7.24.0
  • spectral from 5.9.2 to 6.6.0
  • syft from 0.70.0 to 0.74.0
  • terraform-fmt from 1.3.7 to 1.3.9
  • terragrunt from 0.43.2 to 0.44.4
  • terrascan from 1.16.0 to 1.18.0
  • tflint from 0.44.1 to 0.45.0
  • trivy from 0.35.0 to 0.38.1
  • xmllint from 20914 to 21003

[v6.19.0] - 2023-02-05

• Core

  • Deploy additional Docker images to GitHub Container Registry, by @lars-reimann in #2117
  • Build: Disable generate_documentation_all_users as we use github-dependents-info

• Evolutions

  • Support xmllint autofix, by @bdovaz in oxsecurity#2244 (requires definition of XML_XMLLINT_AUTOFORMAT: true)

• Fixes

  • Change name of config file for powershell formatter to avoid collision with powershell linter config, by @nvuillam in oxsecurity#2231
  • Enhance find SARIF json in stdout output
  • Pass --show-context, --show-suggestions, and --no-must-find-files to CSpell for friendlier UX, by @Kurt-von-Laven in #2275.
  • Only run npm-package-json-lint when package.json is present, by @Kurt-von-Laven in #2280.
  • Fix local files with extends, by @bdovaz in oxsecurity#2236
  • Remove downgrading of ansible-lint, by @gotit96 in oxsecurity#2257
  • Tag some automatically updated files as generated files, by @echoix in oxsecurity#2285
  • Fix Sarif Reporter in Azure Devops with space in project name, by @EtienneDeneuve in oxsecurity#2301
  • Pass extra args for friendlier CSpell UX (#2271), by @Kurt-von-Laven in oxsecurity#2275

• Documentation

  • Configure jsonschema documentation formatting (see Descriptor schema, Configuration schema), by @echoix in #2270
  • Update CONTRIBUTING.md and add documentation improvements hints, by @bdovaz in oxsecurity#2228
  • Add Powershell linters rules url, by @bdovaz in oxsecurity#2242
  • Fix syft logo, by @pjungermann in oxsecurity#2282
  • Fix docker run documentation, by @davidjeddy in oxsecurity#2258

• Linter versions upgrades

  • actionlint from 1.6.22 to 1.6.23
  • ansible-lint from 6.7.0 to 6.12.1
  • bicep_linter from 0.13.1 to 0.14.6
  • black from 22.12.0 to 23.1.0
  • cfn-lint from 0.72.6 to 0.72.10
  • checkstyle from 10.6.0 to 10.7.0
  • clippy from 0.1.66 to 0.1.67
  • clj-kondo from 2022.12.10 to 2023.01.20
  • csharpier from 0.21.0 to 0.22.1
  • cspell from 6.18.1 to 6.21.0
  • devskim from 0.7.101 to 0.7.104
  • djlint from 1.19.11 to 1.19.13
  • dotnet-format from 000 to 6.0.405
  • eslint from 8.31.0 to 8.33.0
  • git_diff from 2.36.3 to 2.36.4
  • gitleaks from 8.15.2 to 8.15.3
  • golangci-lint from 1.50.1 to 1.51.0
  • isort from 5.11.4 to 5.12.0
  • kics from 1.6.7 to 1.6.9
  • ktlint from 0.48.1 to 0.48.2
  • perlcritic from 1.146 to 1.148
  • phpstan from 1.9.7 to 1.9.14
  • powershell from 7.3.1 to 7.3.2
  • powershell_formatter from 7.3.1 to 7.3.2
  • prettier from 2.8.1 to 2.8.3
  • psalm from Psalm.dev-master@ to Psalm.5.6.0@
  • pylint from 2.15.10 to 2.16.1
  • revive from 1.2.4 to 1.2.5
  • rstfmt from 0.0.11 to 0.0.12
  • rubocop from 1.42.0 to 1.44.1
  • scss-lint from 0.59.0 to 0.60.0
  • secretlint from 6.0.2 to 6.2.0
  • semgrep from 1.3.0 to 1.9.0
  • snakefmt from 0.8.0 to 0.8.1
  • snakemake from 7.19.1 to 7.21.0
  • syft from 0.65.0 to 0.70.0
  • terraform-fmt from 1.3.6 to 1.3.7
  • terragrunt from 0.42.3 to 0.43.2
  • tflint from 0.44.0 to 0.44.1
  • tsqllint from 1.15.1.0 to 1.15.3.0
  • v8r from 0.13.1 to 0.14.0
  • yamllint from 1.28.0 to 1.29.0

[v6.18.0] - 2023-01-07

• New linters

  • Add CSharpier linter, by @bdovaz in #2185 and #2198

• Core

  • Upgrade to dotnet 6.0, by @lexstatic in #1680
    • dotnet-format requires .sln, .csproj or .vbproj in the repo
  • Switch to docker buildx, by @bdovaz in #2199
  • Drone CI enhancements, by @NebulaOnion in #2195
    • Config generator tool now supports Drone CI
    • Added information about how to change trigger rules for Drone CI workflow
  • Unify the drawing of badges in documentation, by @bdovaz in #2220

• Fixes

  • Don't write output files if REPORT_OUTPUT_FOLDER is none
  • Fix Perl linter skipping files

• New MegaLinter plugins

  • linkcheck: Plugin to check and validate Markdown links, by @shiranr
  • salt-lint: Checks Salt State files (SLS) for best practices and behavior that could potentially be improved, by @grimmjo

• New article talking about MegaLinter: Writing documentation as a champ in engineering teams, by @gijsreyn

• Linter versions upgrades

  • cfn-lint from 0.72.5 to 0.72.6
  • checkstyle from 10.5.0 to 10.6.0
  • csharpier from 0.16.0 to 0.21.0
  • cspell from 6.18.0 to 6.18.1
  • devskim from 0.6.9 to 0.7.101
  • djlint from 1.19.10 to 1.19.11
  • eslint-plugin-jsonc from 2.5.0 to 2.6.0
  • eslint from 8.30.0 to 8.31.0
  • kics from 1.6.6 to 1.6.7
  • ktlint from 0.48.0 to 0.48.1
  • markdownlint from 0.32.2 to 0.33.0
  • phplint from 5.4 to 5.5
  • phpstan from 1.9.4 to 1.9.7
  • rubocop from 1.41.1 to 1.42.0
  • secretlint from 5.3.0 to 6.0.2
  • semgrep from 1.2.1 to 1.3.0
  • sfdx-scanner from 3.7.1 to 3.8.0
  • stylelint from 14.16.0 to 14.16.1
  • syft from 0.64.0 to 0.65.0
  • tsqllint from 1.14.5.0 to 1.15.1.0

[v6.17.0] - 2022-12-27

• New linters

  • Add PowerShell formatter, by @bdovaz (#2176)

• Documentation

  • Improve meta tags in HTML documentation
  • Clarify how npm-package-json-lint files can be ignored, by @bdovaz (#2184)

• Linter versions upgrades

  • djlint from 1.19.9 to 1.19.10
  • dotenv-linter from 3.2.0 to 3.3.0
  • powershell_formatter from 5.1.22621 to 7.3.1
  • tflint from 0.43.0 to 0.44.0

[v6.16.0] - 2022-12-24

• New linters

  • Add npm-package-json-lint linter, by @bdovaz (#2150)

• Evolutions

  • Upgrade to alpine 3.16
  • Disable php7 & upgrade php8 to php81
  • Add Makefile linters to documentation flavor
  • PowershellLinter autofix capability, by @bdovaz (#2175)
  • Allow local files with EXTENDS configuration, by @bdovaz (#2151)
  • Add Trivy config file parameters, by @bdovaz (#2154)

• Fixes

  • Change reporter text for better UX, by @ashokm (#2168)
  • Remove workspace prefix from aggregate sarif report, by @janderssonse (#2119)
  • CSpell file name linting doesn't use (custom) CSpell configuration (#2058)
  • HTML email not rendering correctly (#2120). Set REPORTERS_MARKDOWN_TYPE to simple to avoid external images in PR/MR markdown comments.
  • mega-linter-runner: Fix Value for container-name of type String required, by @AlbanAndrieu (#2123
  • Use warning emoji in reporters, by @ashokm (#2156)
  • Fix branding to use the correct 'OX Security' name, by @ashokm

• Doc

  • Enclose System.TeamProject in Azure Pipelines, by @ashokm (#2131)
  • Better contributing docs, by @bdovaz (#2162)

• Linter versions upgrades

  • bicep_linter from 0.12.40 to 0.13.1
  • black from 22.10.0 to 22.12.0
  • cfn-lint from 0.72.0 to 0.72.5
  • checkstyle from 10.4 to 10.5.0
  • clippy from 0.1.65 to 0.1.66
  • clj-kondo from 2022.10.14 to 2022.12.10
  • cspell from 6.14.3 to 6.18.0
  • djlint from 1.19.7 to 1.19.9
  • eslint from 8.28.0 to 8.29.0 to 8.30.0
  • git_diff from 2.34.5 to 2.36.3
  • gitleaks from 8.15.0 to 8.15.2
  • isort from 5.10.1 to 5.11.4
  • kics from 1.6.5 to 1.6.6
  • ktlint from 0.47.1 to 0.48.0
  • luacheck from 1.0.0 to 1.1.0
  • perlcritic from 1.140 to 1.146
  • phplint from 3.0 to 5.4
  • phpstan from 1.9.2 to 1.9.4
  • powershell from 7.3.0 to 7.3.1
  • prettier from 2.8.0 to 2.8.1
  • psalm from Psalm.4.x-dev@ to Psalm.dev-master@
  • pylint from 2.15.6 to 2.15.9
  • rubocop from 1.39.0 to 1.41.1
  • semgrep from 0.122.0 to 1.2.1
  • sfdx-scanner-apex from 3.6.2 to 3.7.1
  • sfdx-scanner-aura from 3.6.2 to 3.7.1
  • sfdx-scanner-lwc from 3.6.2 to 3.7.1
  • shellcheck from 0.8.0 to 0.9.0
  • snakefmt from 0.7.0 to 0.8.0
  • snakemake from 7.18.2 to 7.19.1
  • sqlfluff from 1.4.2 to 1.4.5
  • stylelint from 14.15.0 to 14.16.0
  • swiftlint from 0.50.0 to 0.50.3
  • syft from 0.62.1 to 0.64.0
  • terraform-fmt from 1.3.5 to 1.3.6
  • terragrunt from 0.40.2 to 0.42.3
  • terrascan from 1.17.0 to 1.16.0
  • tflint from 0.42.1 to 0.43.0
  • trivy from 0.29.2 to 0.35.0
  • v8r from 0.13.0 to 0.13.1

[v6.15.0] - 2022-11-23

• Switch to https://megalinter.io

• Initial Drone CI documentation

• Automatically generate "Used by" markdown documentation with github-dependents-info

• Add Docker container documentation

• Linter versions upgrades

  • bicep_linter from 0.12.1 to 0.12.40
  • cfn-lint from 0.70.1 to 0.72.0
  • coffeelint from 5.2.10 to 5.2.11
  • cspell from 6.14.0 to 6.14.3
  • djlint from 1.19.4 to 1.19.7
  • eslint from 8.27.0 to 8.28.0
  • flake8 from 5.0.4 to 6.0.0
  • hadolint from 2.10.0 to 2.12.0
  • kics from 1.6.3 to 1.6.5
  • mypy from 0.982 to 0.991
  • phpstan from 1.9.1 to 1.9.2
  • powershell from 7.2.7 to 7.3.0
  • prettier from 2.7.1 to 2.8.0
  • protolint from 0.41.0 to 0.42.2
  • psalm from Psalm.5.x-dev@ to Psalm.4.x-dev@
  • pylint from 2.15.5 to 2.15.6
  • rstcheck from 6.1.0 to 6.1.1
  • rubocop from 1.38.0 to 1.39.0
  • semgrep from 0.120.0 to 0.122.0
  • snakefmt from 0.6.1 to 0.7.0
  • snakemake from 7.18.1 to 7.18.2
  • sqlfluff from 1.4.1 to 1.4.2
  • stylelint from 14.14.1 to 14.15.0
  • swiftlint from 0.46.5 to 0.50.0
  • syft from 0.60.3 to 0.62.1
  • terraform-fmt from 1.3.4 to 1.3.5
  • terragrunt from 0.40.0 to 0.40.2
  • terrascan from 1.16.0 to 1.17.0

[v6.14.0] - 2022-11-06

• Core

  • Replace set-output usage with GITHUB_OUTPUT to handle Github deprecation notice
  • Allow PRE_COMMANDS to be defined within a python venv (#2017)
  • Correct behavior of EXTENDS property in .megalinter.yml config file (#1516)
  • Fix flavor suggestion message in reporters

• New MegaLinter plugin: mustache: Plugin to validate Logstash pipeline definition files using mustache, by Yann Jouanique

• Linters

  • Bring back rstfmt RestructuredText formatter
  • Add the SPELL_*_FILE_EXTENSIONS parameter for each SPELL type linter. If set, it will use this value to filter instead of the default behavior which is to parse the files of all other linters executed (#1997).
  • Allow cspell to also analyze file names (new variable SPELL_CSPELL_ANALYZE_FILE_NAMES) (#2009)
  • Fix bicep version regex

• Linter versions upgrades

  • actionlint from 1.6.21 to 1.6.22
  • bicep_linter from 0.11.1 to to 0.12.1
  • cfn-lint from 0.68.1 to 0.70.1
  • checkstyle from 10.3.4 to 10.4
  • clippy from 0.1.64 to 0.1.65
  • cspell from 6.12.0 to 6.14.0
  • djlint from 1.19.2 to 1.19.4
  • eslint-plugin-jsonc from 2.4.0 to 2.5.0
  • eslint from 8.26.0 to 8.27.0
  • kics from 1.6.2 to 1.6.3
  • kubeconform from 0.4.12 to 0.5.0
  • npm-groovy-lint from 11.0.0 to 11.1.1
  • phpstan from 1.8.10 to 1.9.1
  • revive from 0.0.0 to 1.2.4
  • rstfmt from 0.0.10 to 0.0.11
  • rubocop from 1.37.0 to 1.38.0
  • secretlint from 5.2.4 to 5.3.0
  • semgrep from 0.118.0 to 0.120.0
  • sfdx-scanner-apex from 2.13.9 to 3.6.2
  • sfdx-scanner-aura from 2.13.9 to 3.6.2
  • sfdx-scanner-lwc from 2.13.9 to 3.6.2
  • snakemake from 7.16.1 to 7.18.1
  • sqlfluff from 1.3.2 to 1.4.1
  • stylelint from 14.14.0 to 14.14.1
  • syft from 0.59.0 to 0.60.3
  • terraform-fmt from 1.3.3 to 1.3.4
  • terragrunt from 0.39.2 to 0.40.0
  • tflint from 0.41.0 to 0.42.1
  • yamllint from 1.26.3 to 1.26.3

[v6.13.0] - 2022-10-24

• New cupcake flavor with 78 instead of 108 linters

• Don't add literal double quote character to filenames in mega-linter-runner (#1942).

• Remove default npm-groovy-lint extra arguments (#1872)

• Replace yaml.load by yaml.safe_load for better security

• Linter versions upgrades

  • cfn-lint from 0.67.0 to 0.68.1
  • clj-kondo from 2022.10.05 to 2022.10.14
  • djlint from 1.19.1 to 1.19.2
  • eslint from 8.25.0 to 8.26.0
  • git_diff from 2.34.4 to 2.34.5
  • gitleaks from 8.14.1 to 8.15.0
  • golangci-lint from 1.50.0 to 1.50.1
  • phpstan from 1.8.9 to 1.8.10
  • powershell from 7.2.6 to 7.2.7
  • puppet-lint from 3.0.0 to 3.0.1
  • pylint from 2.15.4 to 2.15.5
  • rubocop from 1.36.0 to 1.37.0
  • semgrep from 0.117.0 to 0.118.0
  • snakemake from 7.16.0 to 7.16.1
  • syft from 0.58.0 to 0.59.0
  • terraform-fmt from 1.3.2 to 1.3.3
  • terragrunt from 0.39.1 to 0.39.2
  • terrascan from 1.15.2 to 1.16.0

[v6.12.0] - 2022-10-16

• Add Makefile linter in go flavor

• Fix invalid Docker container names in .pre-commit-hooks.yaml (#1932)

• Correct removeContainer casing in runner (#1917)

• Fix use of TERRAFORM_KICS_ARGUMENTS (#1947)

• Use -p argument for pyright custom config file path (#1946)

• Fix incorrect link to pytype for pyright (#1967)

• Deduplicate SHOW_ELAPSED_TIME properties to address v8r error (#1962)

• Linter versions upgrades

  • actionlint from 1.6.16 to 1.6.21
  • ansible-lint from 6.7.0 to 6.7.0
  • bicep_linter from 0.10.61 to 0.11.1
  • black from 22.8.0 to 22.10.0
  • cfn-lint from 0.66.0 to 0.67.0
  • clj-kondo from 2022.09.08 to 2022.10.05
  • djlint from 1.18.0 to 1.19.1
  • eslint from 8.24.0 to 8.25.0
  • gitleaks from 8.13.0 to 8.14.1
  • golangci-lint from 1.49.0 to 1.50.0
  • kics from 1.6.1 to 1.6.2
  • mypy from 0.981 to 0.982
  • npm-groovy-lint from 10.1.0 to 11.0.0
  • phpstan from 1.8.6 to 1.8.9
  • puppet-lint from 2.5.2 to 3.0.0
  • pylint from 2.15.3 to 2.15.4
  • scalafix from 0.10.3 to 0.10.4
  • semgrep from 0.115.0 to 0.117.0
  • snakemake from 7.14.2 to 7.16.0
  • stylelint from 14.13.0 to 14.14.0
  • terraform-fmt from 1.3.1 to 1.3.2
  • terragrunt from 0.39.0 to 0.39.1

[v6.11.1] - 2022-10-03

• Remove no-space-check from MegaLinter default .pylintrc file (#1923)

[v6.11.0] - 2022-10-02

• Linters

  • Add bicep linter (#1898)
  • Add quotes to arm-ttk linter command (#1879)
  • Add Makefile linter in java flavor

• Core

  • Improve support for devcontainers by using Python base image
    • Fixed Python version in devcontainer from 3.9 -> 3.10
    • Fix build command on linux (thanks a lot to Edouard Choinière for the investigation and solution !)
  • Azure Comments reporter - Change status when all tests pass (#1915)

• Doc

  • Document the -f argument to mega-linter-runner (#1895)
  • Fix a typo in documentation of bash-exec linter (#1892)

• Linter versions upgrades

  • ansible-lint from 6.6.0 to 6.7.0
  • cfn-lint from 0.65.0 to 0.66.0
  • checkov from 2.1.213 to 2.1.244
  • checkstyle from 10.3.3 to 10.3.4
  • clippy from 0.1.63 to 0.1.64
  • coffeelint from 5.2.9 to 5.2.10
  • cspell from 6.10.0 to 6.12.0
  • djlint from 1.16.0 to 1.18.0
  • eslint from 8.23.1 to 8.24.0
  • gitleaks from 8.12.0 to 8.13.0
  • jsonlint from 11.6.0 to 11.7.0
  • kics from 1.6.0 to 1.6.1
  • markdown-link-check from 3.10.2 to 3.10.3
  • mypy from 0.971 to 0.981
  • phpstan from 1.8.5 to 1.8.6
  • protolint from 0.40.0 to 0.41.0
  • scalafix from 0.10.2 to 0.10.3
  • semgrep from 0.113.0 to 0.115.0
  • snakemake from 7.14.0 to 7.14.2
  • sqlfluff from 1.3.1 to 1.3.2
  • stylelint from 14.12.0 to 14.13.0
  • syft from 0.56.0 to 0.58.0
  • terraform-fmt from 1.2.9 to 1.3.1
  • terragrunt from 0.38.12 to 0.39.0
  • tflint from 0.40.0 to 0.41.0

[v6.10.0] - 2022-09-19

• Add git-lfs in Docker image to handle large files in git repositories

• MegaLinter Docker images size improvements

  • Remove NPM cache
  • Remove Cargo cache
  • Remove rustup when clippy isn't embedded in the image
  • Remove npm packages useless files

• Linter versions upgrades

  • ansible-lint from 6.5.2 to 6.6.0
  • cfn-lint from 0.64.1 to 0.65.0
  • checkov from 2.1.201 to 2.1.213
  • cspell from 6.8.1 to 6.10.0
  • djlint from 1.12.3 to 1.16.0
  • eslint from 8.23.0 to 8.23.1
  • kics from 1.5.15 to 1.6.0
  • pylint from 2.15.2 to 2.15.3
  • scalafix from 0.10.1 to 0.10.2
  • semgrep from 0.112.1 to 0.113.0
  • sfdx-scanner-apex from 2.13.8 to 2.13.9
  • sfdx-scanner-aura from 2.13.8 to 2.13.9
  • sfdx-scanner-lwc from 2.13.8 to 2.13.9
  • stylelint from 14.11.0 to 14.12.0
  • syft from 0.55.0 to 0.56.0
  • terragrunt from 0.38.10 to 0.38.12
  • terragrunt from 0.38.9 to 0.38.10
  • yamllint from 1.27.1 to 1.28.0

[v6.9.1] - 2022-09-11

• Linters

  • Add python type checker pyright, by Microsoft
  • New linters with available SARIF output for SARIF Reporter
    • ansible-lint
    • shellcheck thanks to shellcheck-sarif
  • Use list_of_files Cli lint mode for checkstyle, to have unique SARIF output and improve performances
  • Use list_of_files Cli lint mode for golangci-lint and revive, to improve performances
  • Reactivate snakefmt

• Core

  • Improve build performances and docker images sizes (reduce from 117 to 36 layers)
    • Use BUILDKIT
    • Join RUN instructions
    • Optimize core Dockerfile items
    • Clean npm, python and cargo caches
  • Create a venv for each python-based linter to avoid issues with dependencies
  • Fix broken link to documentation when using v6

• Linter versions upgrades

  • ansible-lint from 6.0.2 to 6.5.2
  • cfn-lint from 0.63.2 to 0.64.1
  • checkov from 2.1.183 to 2.1.201
  • clj-kondo from 2022.08.03 to 2022.09.08
  • djlint from 1.12.1 to 1.12.3
  • gitleaks from 8.11.2 to 8.12.0
  • golangci-lint from 1.48.0 to 1.49.0
  • ktlint from 0.47.0 to 0.47.1
  • phpstan from 1.8.4 to 1.8.5
  • protolint from 0.39.0 to 0.40.0
  • pylint from 2.15.0 to 2.15.2
  • semgrep from 0.103.0 to 0.112.1
  • sqlfluff from 1.3.0 to 1.3.1
  • standard from 15.0.1 to 17.0.0
  • terraform-fmt from 1.2.8 to 1.2.9
  • tflint from 0.39.3 to 0.40.0

Note: MegaLinter 6.9.0 release has been cancelled: it was fine but the docker image sizes were not optimized enough.

[v6.8.0] - 2022-09-04

• Run MegaLinter pre-commit hooks serially (#1826).

• Replace deprecated StandardJS VS Code extension with the newer official version

• When SARIF_REPORTER is active, use sarif-fmt to convert SARIF into text for console and text reporters (#1822).

• Count checkstyle errors (#1820)

• Linter versions upgrades

  • black from 22.6.0 to 22.8.0
  • cfn-lint from 0.63.0 to 0.63.2
  • checkov from 2.1.160 to 2.1.183
  • checkstyle from 10.3.2 to 10.3.3
  • djlint from 1.12.0 to 1.12.1
  • kics from 1.5.14 to 1.5.15
  • phpstan from 1.8.2 to 1.8.4
  • rubocop from 1.35.1 to 1.36.0
  • snakemake from 7.13.0 to 7.14.0
  • syft from 0.54.0 to 0.55.0
  • terragrunt from 0.38.8 to 0.38.9

[v6.7.1] - 2022-08-28

• Fix Azure Comments reporter: Use BuildId to build artifacts url
• Fix actionlint install command

[v6.7.0] - 2022-08-28

• Linters

  • Add PMD java linter

• Azure Pipelines integration enhancements

  • Update installation instructions
  • Console reporter: manage collapsible groups for easier display & navigation in job logs (requires CI=true and TF_BUILD=true sent as env variables)
  • Azure comments reporter (see documentation)

• Performances improvements

  • When running linters in parallel, run in the same process only the linters from same descriptor and that can update the same sources (to avoid concurrency). Other linters can be run independently.
  • Define linter_speed of linter descriptors (default 3). Can be from 1 (super slow) to 5 (super fast). This is used to optimize the processing order of linters.

• Fixes

  • Fix: Properly match files_sub_directory as a prefix instead of partial string matching (#1765)
  • Match regex without workspace and sub_directory
  • Remove config variables that aren't applicable to linters analyzing all files or all other linters files

• Linter versions upgrades

  • cfn-lint from 0.62.0 to 0.63.0
  • checkov from 2.1.139 to 2.1.160
  • cspell from 6.8.0 to 6.8.1
  • djlint from 1.11.0 to 1.12.0
  • eslint from 8.22.0 to 8.23.0
  • gitleaks from 8.11.0 to 8.11.2
  • golangci-lint from 1.48.0 to 1.49.0
  • luacheck from 0.26.1 to 1.0.0
  • pylint from 2.14.5 to 2.15.0
  • rubocop from 1.35.0 to 1.35.1
  • secretlint from 5.2.3 to 5.2.4
  • snakemake from 7.12.1 to 7.13.0
  • terraform-fmt from 1.2.7 to 1.2.8
  • terragrunt from 0.38.7 to 0.38.8
  • tflint from 0.35.0 to 0.39.3

[v6.6.0] - 2022-08-21

• Fix flavors suggestions to ignore linters not relevant for such flavor (#1746)

• Update pre-commit hooks from v5 to v6 (#1755).

• Fix version in URL in logs produced by reporters

• Add Makefile linter within python flavor (#1760)

• Set DEFAULT_WORKSPACE as git safe directory per default #1766

• Improve documentation for TAP_REPORTER

• Linter versions upgrades

  • actionlint from 1.6.15 to 1.6.16
  • cfn-lint from 0.61.5 to 0.62.0
  • checkov from 2.1.127 to 2.1.139
  • cpplint from 1.6.0 to 1.6.1
  • cspell from 6.6.1 to 6.8.0
  • djlint from 1.9.5 to 1.11.0
  • eslint-plugin-jsonc from 2.3.1 to 2.4.0
  • gitleaks from 8.10.3 to 8.11.0
  • kics from 1.5.13 to 1.5.14
  • ktlint from 0.46.1 to 0.47.0
  • markdownlint from 0.32.1 to 0.32.2
  • sfdx-scanner-apex from 2.13.7 to 2.13.8
  • sfdx-scanner-aura from 2.13.7 to 2.13.8
  • sfdx-scanner-lwc from 2.13.7 to 2.13.8
  • sqlfluff from 1.2.1 to 1.3.0
  • stylelint from 14.10.0 to 14.11.0
  • syft from 0.53.4 to 0.54.0

[v6.5.0] - 2022-08-15

• npm-groovy-lint: Use Cli lint mode list_of_files for much better performances

• Disable proselint by default if .proselintrc file isn't found

• Linter versions upgrades

  • checkov from 2.1.121 to 2.1.127
  • eslint from 8.21.0 to 8.22.0
  • gitleaks from 8.10.2 to 8.10.3
  • npm-groovy-lint from 9.5.0 to 10.1.0
  • rstcheck from 6.0.0 to 6.1.0

[v6.4.0] - 2022-08-12

• Add REPOSITORY_CHECKOV in all flavors

• New config variables

  • MEGALINTER_FILES_TO_LINT: Comma-separated list of files to analyze. Using this variable will bypass other file listing methods (#808)
  • SKIP_CLI_LINT_MODES: Comma-separated list of cli_lint_modes. To use if you want to skip linters with some CLI lint modes (ex: file,project). Available values: file,cli_lint_mode,project.

• mega-linter-runner:

  • Allow MEGALINTER_FILES_TO_LINT to be sent as positional arguments
  • New argument --filesonly that sends SKIP_CLI_LINT_MODES=project
  • Example: mega-linter-runner --flavor python --release beta --filesonly megalinter/config.py megalinter/flavor_factory.py megalinter/MegaLinter.py

• Fixes

  • Fix SARIF when a run is missing a results list (#1725)
  • Fix missing quotes for Powershell script analyzer (#1728)

• Linter versions upgrades

  • cfn-lint from 0.61.4 to 0.61.5
  • checkov from 2.1.100 to 2.1.121
  • clippy from 0.1.62 to 0.1.63
  • cspell from 6.5.0 to 6.6.1
  • gitleaks from 8.10.1 to 8.10.1
  • powershell from 7.2.5 to 7.2.6
  • protolint from 0.38.3 to 0.39.0
  • rubocop from 1.33.0 to 1.35.0
  • snakemake from 7.12.0 to 7.12.1
  • stylelint from 14.9.1 to 14.10.0
  • terraform-fmt from 1.2.6 to 1.2.7
  • terragrunt from 0.38.6 to 0.38.7

[v6.3.0] - 2022-08-07

• Linters

  • Add REPOSITORY_CHECKOV to benefit from all checks and not only terraform ones. TERRAFORM_CHECKOV will be deprecated in a next major version
  • Add djlint (HTML_DJLINT) to lint HTML files (html, django, jinja, nunjucks, handlebars, golang, angular)
  • Upgrade jsonlint to use maintained package @prantlf/jsonlint]([https://www.npmjs.com/package/@prantlf/jsonlint) + use cli_lint_mode list_of_files to improve performances

• Core

  • Support for automatic removal of Docker container when linting is finished
  • Fix SARIF when endColumn is 0 (#1702)
  • Use dynamic REPORT_FOLDER value for output files for SALESFORCE and COPYPASTE descriptors
  • Fix collapsible sections in Gitlab console logs
  • Manage ignore files (like .secretlintignore or .eslintignore)
    • Define ignore argument for client in descriptors
    • Define ignore file name in descriptors (overridable with _IGNORE_FILE_NAME at runtime)
    • Update documentation generation to take in account this new configuration

• Linter versions upgrades

  • checkov from 2.1.83 to 2.1.98
  • clj-kondo from 2022.04.25 to 2022.08.03
  • eslint from 8.20.0 to 8.21.0
  • flake8 from 5.0.1 to 5.0.2
  • golangci-lint from 1.47.2 to 1.48.0
  • jsonlint from 1.6.3 to 11.6.0
  • kics from 1.5.12 to 1.5.13
  • rubocop from 1.32.0 to 1.33.0
  • syft from 0.52.0 to 0.53.4

[v6.2.1] - 2022-08-01

• Fix blocking bug in MegaLinter v6.2.0 core (#1684 and #1685)

• Linter versions upgrades

  • checkstyle from 10.3.1 to 10.3.2 on 2022-08-01
  • flake8 from 5.0.0 to 5.0.1 on 2022-08-01
  • checkov from 2.1.82 to 2.1.83 on 2022-08-01

[v6.2.0] - 2022-07-31

• Core

  • Fix mega-linter-runner --install template (#1662)
  • Use REPORT_OUTPUT_FOLDER: none to not generate report files
  • Add info in doc about CLI_LINT_MODE and about how to ignore files when cli_lint_mode is project
  • Fix bug that disables generation of megalinter.log file in most cases
  • Fixes about JSON Schema (#1621)
  • Remove redundant line separator after generated table (#1650)
  • Avoid flavor suggestion message when only REPOSITORY linters aren't found

• Linters

  • Add checkmake to lint Makefile
  • Disable SemGrep by default if REPOSITORY_SEMGREP_RULESETS isn't defined.
  • Avoid cspell to lint all files. Lint only other linter files (#1648)
  • Fix revive installation command
  • New default config for gitleaks with useDefault=true

• Linter versions upgrades

  • cfn-lint from 0.61.3 to 0.61.4 on 2022-07-30
  • checkov from 2.1.60 to 2.1.61 on 2022-07-19
  • checkov from 2.1.61 to 2.1.63 on 2022-07-20
  • checkov from 2.1.63 to 2.1.65 on 2022-07-21
  • checkov from 2.1.65 to 2.1.67 on 2022-07-21
  • checkov from 2.1.67 to 2.1.68 on 2022-07-23
  • checkov from 2.1.68 to 2.1.69 on 2022-07-24
  • checkov from 2.1.69 to 2.1.70 on 2022-07-24
  • checkov from 2.1.70 to 2.1.74 on 2022-07-25
  • checkov from 2.1.74 to 2.1.82 on 2022-07-30
  • cspell from 6.3.0 to 6.4.0 on 2022-07-19
  • cspell from 6.4.0 to 6.4.1 on 2022-07-24
  • cspell from 6.4.1 to 6.5.0 on 2022-07-30
  • flake8 from 4.0.1 to 5.0.0 on 2022-07-31
  • gitleaks from 8.8.12 to 8.9.0 on 2022-07-30
  • golangci-lint from 1.47.0 to 1.47.1 on 2022-07-19
  • golangci-lint from 1.47.1 to 1.47.2 on 2022-07-21
  • jscpd from 3.4.5 to 3.3.26 on 2022-07-19
  • markdown-table-formatter from 1.3.0 to 1.4.0 on 2022-07-25
  • markdownlint from 0.32.0 to 0.32.1 on 2022-07-25
  • mypy from 0.961 to 0.971 on 2022-07-19
  • phpstan from 1.8.1 to 1.8.2 on 2022-07-20
  • rubocop from 1.31.2 to 1.32.0 on 2022-07-21
  • sfdx-scanner-apex from 2.13.5 to 2.13.6 on 2022-07-21
  • sfdx-scanner-apex from 2.13.6 to 2.13.7 on 2022-07-30
  • sfdx-scanner-aura from 2.13.5 to 2.13.6 on 2022-07-21
  • sfdx-scanner-aura from 2.13.6 to 2.13.7 on 2022-07-30
  • sfdx-scanner-lwc from 2.13.5 to 2.13.6 on 2022-07-21
  • sfdx-scanner-lwc from 2.13.6 to 2.13.7 on 2022-07-30
  • snakemake from 7.8.5 to 7.9.0 on 2022-07-19
  • snakemake from 7.9.0 to 7.12.0 on 2022-07-30
  • syft from 0.51.0 to 0.52.0 on 2022-07-22
  • terraform-fmt from 1.2.5 to 1.2.6 on 2022-07-30
  • terragrunt from 0.38.5 to 0.38.6 on 2022-07-24

[v6.1.0] - 2022-07-19

• Improve console logs by using collapsible sections in GitHub Actions and Gitlab CI (disable by defining CONSOLE_REPORTER_SECTIONS: false)

• Define CLEAR_REPORT_FOLDER=true to empty report folder at the beginning of each run (#1502)

• Improve SARIF output

  • Replace CI paths in logs
  • Add missing required properties so SARIF is valid
  • Add MegaLinter information in SARIF linter runs
  • Allow to select linters to activate SARIF for, using SARIF_REPORTER_LINTERS
  • Fix issue when a linter is used in multiple SARIF lint results

• Linter versions upgrades

  • cfn-lint from 0.61.2 to 0.61.3 on 2022-07-19
  • checkov from 2.1.57 to 2.1.59 on 2022-07-18
  • checkov from 2.1.59 to 2.1.60 on 2022-07-19
  • cspell from 6.2.3 to 6.3.0 on 2022-07-18
  • eslint from 8.19.0 to 8.20.0 on 2022-07-17
  • golangci-lint from 1.46.2 to 1.47.0 on 2022-07-19
  • jscpd from 3.3.26 to 3.4.5 on 2022-07-19
  • markdownlint from 0.31.1 to 0.32.0 on 2022-07-17
  • pylint from 2.14.4 to 2.14.5 on 2022-07-18

[v6.0.5] - 2022-07-16

• Fix mega-linter-runner --upgrade so it also updates report folder to megalinter-reports in GitHub Actions Workflows #1609

• Fix documentation and templates to use megalinter-reports folder everywhere

• Workaround for python-markdown issue radude/mdx_truly_sane_lists#9

• Linter versions upgrades

  • checkov from 2.1.54 to 2.1.56 on 2022-07-15
  • checkov from 2.1.56 to 2.1.57 on 2022-07-16
  • gitleaks from 8.8.7 to 8.8.12 on 2022-07-16
  • kics from 1.5.11 to 1.5.12 on 2022-07-16
  • protolint from 0.38.2 to 0.38.3 on 2022-07-15
  • sqlfluff from 1.2.0 to 1.2.1 on 2022-07-16
  • terraform-fmt from 1.2.4 to 1.2.5 on 2022-07-15
  • terragrunt from 0.38.4 to 0.38.5 on 2022-07-15

[v6.0.4] - 2022-07-14

• Fix count of errors when using SARIF reporter

• DevSkim: Ignore megalinter-reports by default (#1603)

• Load JSON when list of objects is defined in an ENV var (#1605)

• AutoFix pre_commands using npm install (1258)

• Linter versions upgrades

  • checkov from 2.1.43 to 2.1.54 on 2022-07-14
  • git_diff from 2.34.2 to 2.34.4 on 2022-07-14
  • phpstan from 1.8.0 to 1.8.1 on 2022-07-14
  • sqlfluff from 1.1.0 to 1.2.0 on 2022-07-14
  • syft from 0.50.0 to 0.51.0 on 2022-07-14

[v6.0.3] - 2022-07-11

• mega-linter-runner: Update query args when opening OX Security
• Fix mega-linter-runner doesn't default to v6 for flavors (1596)

[v6.0.0] - 2022-07-10

• Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

• Core architecture

  • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one
    • Correct SARIF files for known format errors
  • New config variable DISABLE_LINTERS_ERRORS to define a list of linters that will be considered as non blocking
  • Upgrade base docker image to python:3.10.4-alpine3.15
  • Rename default report folder from report to megalinter-reports
  • Display GitHub stars in linters summary table in documentation

• Linters:

  • Add DevSkim security linter by Microsoft
  • Add dustilock to check for dependency confusion attacks with node and python packages
  • Add gitleaks to lint git repository
  • Add goodcheck as regex-based linter
  • Add PMD to lint java files (disabled for now)
  • Add semgrep as regex-based linter with many community rules
  • Add syft to generate SBOM (Software Bill Of Materials)
  • Add trivy security linter
  • Remove dockerfilelint, as it'sn't maintained anymore and hadolint contains all its rules
  • Remove rstfmt as it'sn't maintained anymore
  • SARIF management for:
    • bandit
    • checkov
    • checkstyle
    • cfn-lint
    • devskim
    • eslint
    • gitleaks
    • hadolint
    • ktlint
    • npm-groovy-lint
    • psalm
    • semgrep
    • secretlint
    • revive
    • terrascan
    • tflint
    • trivy

• Descriptors:

  • New flavor Security
  • New descriptor repository: contains DevSkim, dustilock, gitleaks, secretlint, semgrep, syft, trivy
  • Remove CREDENTIALS and GIT descriptors

• mega-linter-runner

  • --upgrade option can now upgrade repos MegaLinter config to v6
  • Create/update local .gitignore file when installing / updating MegaLinter using mega-linter-runner
  • Propose to test ox.security service
  • Switch from npm to yarn

• Dev architecture

  • Manage offline run of bash build.sh for those who want to code in planes :)
  • Automate update of CHANGELOG.md after release (beta)
  • Accelerate internal CI testing performances

• Linter versions upgrades

  • actionlint from 1.6.13 to 1.6.15 on 2022-07-10
  • black from 22.3.0 to 22.6.0 on 2022-07-10
  • cfn-lint from 0.61.1 to 0.61.2 on 2022-07-10
  • checkov from 3.9 to 2.1.43 on 2022-07-10
  • checkstyle from 10.3 to 10.3.1 on 2022-07-10
  • clippy from 0.1.61 to 0.1.62 on 2022-07-10
  • cspell from 6.1.2 to 6.2.3 on 2022-07-10
  • eslint-plugin-jsonc from 2.3.0 to 2.3.1 on 2022-07-10
  • eslint from 8.18.0 to 8.19.0 on 2022-07-10
  • git_diff from 2.30.3 to 2.34.2 on 2022-07-10
  • phpstan from 1.7.15 to 1.8.0 on 2022-07-10
  • pylint from 2.14.3 to 2.14.4 on 2022-07-10
  • rubocop from 1.30.1 to 1.31.2 on 2022-07-10
  • secretlint from 4.1.0 to 5.2.3 on 2022-07-10
  • snakemake from 7.8.3 to 7.8.5 on 2022-07-10
  • spectral from 5.6.0 to 5.9.2 on 2022-07-10
  • sqlfluff from 1.0.0 to 1.1.0 on 2022-07-10
  • terraform-fmt from 1.2.3 to 1.2.4 on 2022-07-10
  • terragrunt from 0.38.1 to 0.38.4 on 2022-07-10
  • terrascan from 1.14.0 to 1.15.2 on 2022-07-10
  • v8r from 0.6.1 to 0.13.0 on 2022-07-10
  • yamllint from 1.26.3 to 1.27.1 on 2022-07-10

[v5.17.0] - 2022-07-10

• Message to propose users to upgrade to v6

[v5.16.1] - 2022-06-26

• Quick fix release management

[v5.16.0] - 2022-06-26

• Support for named Docker container.

• Linter versions upgrades

  • checkov from 2.0.1230 to 2.1.0 on 2022-06-23
  • checkov from 2.1.0 to 2.1.5 on 2022-06-24
  • checkov from 2.1.5 to 2.1.7 on 2022-06-25
  • checkov from 2.1.7 to 3.9 on 2022-06-26
  • kics from 1.5.10 to 1.5.11 on 2022-06-23
  • protolint from 0.38.1 to 0.38.2 on 2022-06-26
  • sfdx-scanner-apex from 2.13.4 to 2.13.5 on 2022-06-23
  • sfdx-scanner-aura from 2.13.4 to 2.13.5 on 2022-06-23
  • sfdx-scanner-lwc from 2.13.4 to 2.13.5 on 2022-06-23
  • terragrunt from 0.38.0 to 0.38.1 on 2022-06-23

[v5.15.0] - 2022-06-23

• OX Security branding and pre-announcement
• Linter versions upgrades
  • cfn-lint from 0.61.0 to 0.61.1 on 2022-06-22
  • checkov from 2.0.1209 to 2.0.1210 on 2022-06-14
  • checkov from 2.0.1210 to 2.0.1212 on 2022-06-15
  • checkov from 2.0.1212 to 2.0.1217 on 2022-06-15
  • checkov from 2.0.1217 to 2.0.1218 on 2022-06-17
  • checkov from 2.0.1218 to 2.0.1219 on 2022-06-19
  • checkov from 2.0.1219 to 2.0.1226 on 2022-06-22
  • checkov from 2.0.1226 to 2.0.1230 on 2022-06-22
  • eslint from 8.17.0 to 8.18.0 on 2022-06-19
  • ktlint from 0.45.2 to 0.46.0 on 2022-06-19
  • ktlint from 0.46.0 to 0.46.1 on 2022-06-22
  • phpcs from 3.6.2 to 3.7.0 on 2022-06-14
  • phpcs from 3.7.0 to 3.7.1 on 2022-06-19
  • phpstan from 1.7.12 to 1.7.13 on 2022-06-14
  • phpstan from 1.7.13 to 1.7.14 on 2022-06-15
  • phpstan from 1.7.14 to 1.7.15 on 2022-06-22
  • powershell from 7.2.4 to 7.2.5 on 2022-06-22
  • prettier from 2.6.2 to 2.7.0 on 2022-06-15
  • prettier from 2.7.0 to 2.7.1 on 2022-06-17
  • pylint from 2.14.1 to 2.14.2 on 2022-06-15
  • pylint from 2.14.2 to 2.14.3 on 2022-06-19
  • snakefmt from 0.6.0 to 0.6.1 on 2022-06-14
  • snakemake from 7.8.2 to 7.8.3 on 2022-06-22
  • sql-lint from 0.0.19 to 0.0.20 on 2022-06-19
  • sql-lint from 0.0.20 to 1.0.0 on 2022-06-22
  • sqlfluff from 0.13.2 to 1.0.0 on 2022-06-19
  • terraform-fmt from 1.2.2 to 1.2.3 on 2022-06-17
  • terragrunt from 0.37.3 to 0.37.4 on 2022-06-15
  • terragrunt from 0.37.4 to 0.38.0 on 2022-06-19

[v5.14.0] - 2022-06-12

• Local plugins support & documentation

• Update R lintr documentation

• Linter versions upgrades

  • actionlint from 1.6.12 to 1.6.13 on 2022-05-20
  • cfn-lint from 0.60.0 to 0.60.1 on 2022-05-20
  • cfn-lint from 0.60.1 to 0.61.0 on 2022-06-01
  • checkov from 2.0.1141 to 2.0.1143 on 2022-05-17
  • checkov from 2.0.1143 to 2.0.1147 on 2022-05-20
  • checkov from 2.0.1147 to 2.0.1150 on 2022-05-22
  • checkov from 2.0.1150 to 2.0.1158 on 2022-05-24
  • checkov from 2.0.1158 to 2.0.1159 on 2022-05-24
  • checkov from 2.0.1159 to 2.0.1161 on 2022-05-25
  • checkov from 2.0.1161 to 2.0.1162 on 2022-05-27
  • checkov from 2.0.1162 to 2.0.1174 on 2022-05-30
  • checkov from 2.0.1174 to 2.0.1175 on 2022-05-31
  • checkov from 2.0.1175 to 2.0.1177 on 2022-05-31
  • checkov from 2.0.1177 to 2.0.1182 on 2022-05-31
  • checkov from 2.0.1182 to 2.0.1185 on 2022-06-02
  • checkov from 2.0.1185 to 2.0.1188 on 2022-06-03
  • checkov from 2.0.1188 to 2.0.1206 on 2022-06-08
  • checkov from 2.0.1206 to 2.0.1207 on 2022-06-09
  • checkov from 2.0.1207 to 2.0.1209 on 2022-06-10
  • checkstyle from 10.2 to 10.3 on 2022-05-30
  • clippy from 0.1.60 to 0.1.61 on 2022-05-20
  • coffeelint from 5.2.8 to 5.2.9 on 2022-05-17
  • cspell from 5.20.0 to 5.21.0 on 2022-05-20
  • cspell from 5.21.0 to 5.21.1 on 2022-05-21
  • cspell from 5.21.1 to 6.0.0 on 2022-05-22
  • cspell from 6.0.0 to 6.1.0 on 2022-05-31
  • cspell from 6.1.0 to 6.1.1 on 2022-06-03
  • cspell from 6.1.1 to 6.1.2 on 2022-06-09
  • eslint-plugin-jsonc from 2.2.1 to 2.3.0 on 2022-05-28
  • eslint from 8.15.0 to 8.16.0 on 2022-05-21
  • eslint from 8.16.0 to 8.17.0 on 2022-06-08
  • golangci-lint from 1.46.1 to 1.46.2 on 2022-05-20
  • graphql-schema-linter from 3.0.0 to 3.0.1 on 2022-05-22
  • kics from 1.5.8 to 1.5.9 on 2022-05-27
  • kics from 1.5.9 to 1.5.10 on 2022-06-09
  • mypy from 0.950 to 0.960 on 2022-05-27
  • mypy from 0.960 to 0.961 on 2022-06-08
  • phpstan from 1.6.8 to 1.6.9 on 2022-05-22
  • phpstan from 1.6.9 to 1.7.0 on 2022-05-24
  • phpstan from 1.7.0 to 1.7.1 on 2022-05-24
  • phpstan from 1.7.1 to 1.7.2 on 2022-05-27
  • phpstan from 1.7.11 to 1.7.12 on 2022-06-09
  • phpstan from 1.7.2 to 1.7.3 on 2022-05-30
  • phpstan from 1.7.3 to 1.7.6 on 2022-05-31
  • phpstan from 1.7.6 to 1.7.7 on 2022-05-31
  • phpstan from 1.7.7 to 1.7.8 on 2022-06-02
  • phpstan from 1.7.8 to 1.7.9 on 2022-06-03
  • phpstan from 1.7.9 to 1.7.11 on 2022-06-08
  • powershell from 7.2.3 to 7.2.4 on 2022-05-20
  • pylint from 2.13.9 to 2.14.0 on 2022-06-02
  • pylint from 2.14.0 to 2.14.1 on 2022-06-08
  • rstcheck from 5.0.0 to 6.0.0 on 2022-06-08
  • rubocop from 1.29.1 to 1.30.0 on 2022-05-27
  • rubocop from 1.30.0 to 1.30.1 on 2022-06-08
  • scalafix from 0.10.0 to 0.10.1 on 2022-06-10
  • sfdx-scanner-apex from 2.13.2 to 2.13.4 on 2022-05-27
  • sfdx-scanner-aura from 2.13.2 to 2.13.4 on 2022-05-27
  • sfdx-scanner-lwc from 2.13.2 to 2.13.4 on 2022-05-27
  • shfmt from 3.5.0 to 3.6.0 on 2022-05-24
  • snakemake from 7.6.2 to 7.7.0 on 2022-05-17
  • snakemake from 7.7.0 to 7.8.0 on 2022-05-24
  • snakemake from 7.8.0 to 7.8.1 on 2022-05-31
  • snakemake from 7.8.1 to 7.8.2 on 2022-06-08
  • sqlfluff from 0.13.1 to 0.13.2 on 2022-05-21
  • stylelint from 14.8.2 to 14.8.3 on 2022-05-22
  • stylelint from 14.8.3 to 14.8.4 on 2022-05-25
  • stylelint from 14.8.4 to 14.8.5 on 2022-05-27
  • stylelint from 14.8.5 to 14.9.0 on 2022-06-09
  • stylelint from 14.9.0 to 14.9.1 on 2022-06-11
  • terraform-fmt from 1.1.9 to 1.2.0 on 2022-05-20
  • terraform-fmt from 1.2.0 to 1.2.1 on 2022-05-24
  • terraform-fmt from 1.2.1 to 1.2.2 on 2022-06-03
  • terragrunt from 0.37.1 to 0.37.2 on 2022-06-09
  • terragrunt from 0.37.2 to 0.37.3 on 2022-06-12

[v5.13.0] - 2022-05-15

• Add gherkin-lint in dotnet flavor (#1435)

• Define pre-commit hooks (#569).

• Pin ansible-lint to 6.0.2 to fix pip dependency conflict between jsonschema versions (#1470).

• Use docker image for editorconfig-checker

• Update sqlfluff descriptor properties to enable error count(#1460)

• Linter versions upgrades

  • cfn-lint from 0.59.0 to 0.59.1 on 2022-05-03
  • cfn-lint from 0.59.1 to 0.60.0 on 2022-05-14
  • checkov from 2.0.1076 to 2.0.1079 on 2022-04-24
  • checkov from 2.0.1079 to 2.0.1084 on 2022-04-26
  • checkov from 2.0.1084 to 2.0.1088 on 2022-04-28
  • checkov from 2.0.1088 to 2.0.1098 on 2022-04-29
  • checkov from 2.0.1098 to 2.0.1100 on 2022-04-30
  • checkov from 2.0.1100 to 2.0.1102 on 2022-05-02
  • checkov from 2.0.1102 to 2.0.1108 on 2022-05-03
  • checkov from 2.0.1108 to 2.0.1110 on 2022-05-03
  • checkov from 2.0.1110 to 2.0.1113 on 2022-05-05
  • checkov from 2.0.1113 to 2.0.1118 on 2022-05-06
  • checkov from 2.0.1118 to 2.0.1119 on 2022-05-07
  • checkov from 2.0.1119 to 2.0.1120 on 2022-05-08
  • checkov from 2.0.1120 to 2.0.1121 on 2022-05-08
  • checkov from 2.0.1121 to 2.0.1140 on 2022-05-14
  • checkov from 2.0.1140 to 2.0.1141 on 2022-05-15
  • checkstyle from 10.1 to 10.2 on 2022-04-24
  • clj-kondo from 2022.04.08 to 2022.04.25 on 2022-04-30
  • coffeelint from 5.2.7 to 5.2.8 on 2022-04-26
  • cspell from 5.19.7 to 5.20.0 on 2022-05-03
  • editorconfig-checker from 2.3.5 to 2.4.0 on 2022-05-15
  • eslint from 8.14.0 to 8.15.0 on 2022-05-07
  • golangci-lint from 1.45.2 to 1.46.1 on 2022-05-14
  • graphql-schema-linter from 2.0.1 to 2.0.2 on 2022-05-06
  • graphql-schema-linter from 2.0.2 to 3.0.0 on 2022-05-07
  • kics from 1.5.6 to 1.5.7 on 2022-05-03
  • kics from 1.5.7 to 1.5.8 on 2022-05-14
  • luacheck from 0.26.0 to 0.26.1 on 2022-04-24
  • markdown-link-check from 3.10.0 to 3.10.2 on 2022-05-05
  • mypy from 0.942 to 0.950 on 2022-04-28
  • phpstan from 1.5.7 to 1.6.0 on 2022-04-26
  • phpstan from 1.6.0 to 1.6.2 on 2022-04-28
  • phpstan from 1.6.2 to 1.6.3 on 2022-04-29
  • phpstan from 1.6.3 to 1.6.4 on 2022-05-03
  • phpstan from 1.6.4 to 1.6.7 on 2022-05-05
  • phpstan from 1.6.7 to 1.6.8 on 2022-05-14
  • powershell from 7.2.2 to 7.2.3 on 2022-04-28
  • protolint from 0.37.1 to 0.38.1 on 2022-05-03
  • psalm from Psalm.4.x-dev@ to Psalm.5.x-dev@ on 2022-05-14
  • pylint from 2.13.7 to 2.13.8 on 2022-05-03
  • pylint from 2.13.8 to 2.13.9 on 2022-05-14
  • rubocop from 1.28.1 to 1.28.2 on 2022-04-26
  • rubocop from 1.28.2 to 1.29.0 on 2022-05-07
  • rubocop from 1.29.0 to 1.29.1 on 2022-05-14
  • sfdx-scanner-apex from 2.13.1 to 2.13.2 on 2022-05-05
  • sfdx-scanner-aura from 2.13.1 to 2.13.2 on 2022-05-05
  • sfdx-scanner-lwc from 2.13.1 to 2.13.2 on 2022-05-05
  • snakemake from 7.4.0 to 7.5.0 on 2022-04-28
  • snakemake from 7.5.0 to 7.6.0 on 2022-05-03
  • snakemake from 7.6.0 to 7.6.1 on 2022-05-05
  • snakemake from 7.6.1 to 7.6.2 on 2022-05-07
  • sqlfluff from 0.13.0 to 0.13.1 on 2022-05-07
  • stylelint from 14.7.1 to 14.8.0 on 2022-04-28
  • stylelint from 14.8.0 to 14.8.1 on 2022-04-30
  • stylelint from 14.8.1 to 14.8.2 on 2022-05-04
  • terragrunt from 0.36.10 to 0.37.1 on 2022-05-14
  • terragrunt from 0.36.7 to 0.36.8 on 2022-04-28
  • terragrunt from 0.36.8 to 0.36.9 on 2022-04-30
  • terragrunt from 0.36.9 to 0.36.10 on 2022-05-06
  • xmllint from 20913 to 20914 on 2022-05-14

[v5.12.0] - 2022-04-23

• Core

  • Fix git upgrade issue
  • New option FAIL_IF_UPDATED_SOURCES (#1389)

• Linter versions upgrades

  • actionlint from 1.6.11 to 1.6.12 on 2022-04-18
  • cfn-lint from 0.58.4 to 0.59.0 on 2022-04-18
  • checkov from 2.0.1047 to 2.0.1050 on 2022-04-11
  • checkov from 2.0.1050 to 2.0.1067 on 2022-04-18
  • checkov from 2.0.1067 to 2.0.1068 on 2022-04-18
  • checkov from 2.0.1068 to 2.0.1076 on 2022-04-22
  • coffeelint from 5.2.5 to 5.2.6 on 2022-04-11
  • coffeelint from 5.2.6 to 5.2.7 on 2022-04-22
  • eslint from 8.13.0 to 8.14.0 on 2022-04-23
  • git_diff from 2.30.2 to 2.30.3 on 2022-04-18
  • htmlhint from 1.1.3 to 1.1.4 on 2022-04-11
  • kics from 1.5.5 to 1.5.6 on 2022-04-18
  • npm-groovy-lint from 9.4.1 to 9.5.0 on 2022-04-18
  • phpstan from 1.5.4 to 1.5.6 on 2022-04-18
  • phpstan from 1.5.6 to 1.5.7 on 2022-04-22
  • pylint from 2.13.5 to 2.13.7 on 2022-04-22
  • rstcheck from 3.3.1 to 5.0.0 on 2022-04-18
  • rubocop from 1.27.0 to 1.28.1 on 2022-04-22
  • snakemake from 7.3.8 to 7.4.0 on 2022-04-22
  • sqlfluff from 0.12.0 to 0.13.0 on 2022-04-22
  • stylelint from 14.6.1 to 14.7.1 on 2022-04-18
  • terraform-fmt from 1.1.8 to 1.1.9 on 2022-04-22
  • terragrunt from 0.36.6 to 0.36.7 on 2022-04-18
  • tflint from 0.34.1 to 0.35.0 on 2022-04-18

[v5.11.0] - 2022-04-11

• Linters

  • Disable rstfmt as it's neither stable or maintained
  • markdown-links-check: allow 203 as valid return code

• Fixes

  • Github Comment Reporter: switch to using a hidden HTML comment to mark the comment, with the current workflow and jobid. This is more robust than the old method. ([#1355)
  • Allow to provide CI_ACTION_RUN_URL to build hlink for GitHub Comments reporter messages ([#1341)
  • Display plugin URL in MegaLinter output logs ([#1340)
  • Fix public glibc public key download
  • Fix no override and no default toolchain set when lint rust with clippy via github-action (#975)
  • Fix cspell FileNotFound error by creating subdirectories under report as required (#1397)

• Doc

  • Add instructions to upload artifacts when using MegaLinter with Jenkins

• Linter versions upgrades

  • actionlint from 1.6.10 to 1.6.11 on 2022-04-06
  • ansible-lint from 6.0.1 to 6.0.2 on 2022-03-24
  • bash-exec from 5.1.0 to 5.1.16 on 2022-03-22
  • black from 22.1.0 to 22.3.0 on 2022-03-30
  • cfn-lint from 0.58.3 to 0.58.4 on 2022-03-22
  • checkov from 2.0.1008 to 2.0.1016 on 2022-03-31
  • checkov from 2.0.1016 to 2.0.1021 on 2022-03-31
  • checkov from 2.0.1021 to 2.0.1024 on 2022-04-01
  • checkov from 2.0.1024 to 2.0.1030 on 2022-04-04
  • checkov from 2.0.1030 to 2.0.1037 on 2022-04-06
  • checkov from 2.0.1037 to 2.0.1045 on 2022-04-09
  • checkov from 2.0.1045 to 2.0.1046 on 2022-04-10
  • checkov from 2.0.1046 to 2.0.1047 on 2022-04-11
  • checkov from 2.0.975 to 2.0.977 on 2022-03-21
  • checkov from 2.0.977 to 2.0.980 on 2022-03-22
  • checkov from 2.0.980 to 2.0.983 on 2022-03-23
  • checkov from 2.0.983 to 2.0.995 on 2022-03-26
  • checkov from 2.0.995 to 2.0.999 on 2022-03-27
  • checkov from 2.0.999 to 2.0.1008 on 2022-03-30
  • checkstyle from 10.0 to 10.1 on 2022-03-27
  • clippy from 0.1.59 to 0.1.60 on 2022-04-09
  • clj-kondo from 2022.02.09 to 2022.04.08 on 2022-04-10
  • coffeelint from 5.2.4 to 5.2.5 on 2022-03-22
  • cspell from 5.19.2 to 5.19.3 on 2022-03-26
  • cspell from 5.19.3 to 5.19.4 on 2022-04-01
  • cspell from 5.19.4 to 5.19.5 on 2022-04-02
  • cspell from 5.19.5 to 5.19.6 on 2022-04-09
  • cspell from 5.19.6 to 5.19.7 on 2022-04-10
  • eslint from 8.11.0 to 8.12.0 on 2022-03-26
  • eslint from 8.12.0 to 8.13.0 on 2022-04-09
  • golangci-lint from 1.45.0 to 1.45.2 on 2022-03-26
  • hadolint from 2.9.1 to 2.9.3 on 2022-03-31
  • hadolint from 2.9.3 to 2.10.0 on 2022-04-10
  • htmlhint from 1.1.2 to 1.1.3 on 2022-03-30
  • kics from 1.5.4 to 1.5.5 on 2022-03-31
  • ktlint from 0.45.0 to 0.45.1 on 2022-03-22
  • ktlint from 0.45.1 to 0.45.2 on 2022-04-07
  • luacheck from 0.25.0 to 0.26.0 on 2022-03-26
  • mypy from 0.941 to 0.942 on 2022-03-26
  • phpstan from 1.4.10 to 1.5.0 on 2022-03-26
  • phpstan from 1.5.0 to 1.5.2 on 2022-03-30
  • phpstan from 1.5.2 to 1.5.3 on 2022-03-31
  • phpstan from 1.5.3 to 1.5.4 on 2022-04-04
  • prettier from 2.6.0 to 2.6.1 on 2022-03-26
  • prettier from 2.6.1 to 2.6.2 on 2022-04-04
  • pylint from 2.12.2 to 2.13.1 on 2022-03-26
  • pylint from 2.13.1 to 2.13.2 on 2022-03-27
  • pylint from 2.13.2 to 2.13.3 on 2022-03-30
  • pylint from 2.13.3 to 2.13.4 on 2022-03-31
  • pylint from 2.13.4 to 2.13.5 on 2022-04-07
  • rubocop from 1.26.0 to 1.26.1 on 2022-03-23
  • rubocop from 1.26.1 to 1.27.0 on 2022-04-09
  • scalafix from 0.9.34 to 0.10.0 on 2022-04-04
  • sfdx-scanner-apex from 2.13.0 to 2.13.1 on 2022-03-24
  • sfdx-scanner-aura from 2.13.0 to 2.13.1 on 2022-03-24
  • sfdx-scanner-lwc from 2.13.0 to 2.13.1 on 2022-03-24
  • snakemake from 7.2.1 to 7.3.0 on 2022-03-22
  • snakemake from 7.3.0 to 7.3.1 on 2022-03-24
  • snakemake from 7.3.1 to 7.3.2 on 2022-03-26
  • snakemake from 7.3.2 to 7.3.3 on 2022-03-30
  • snakemake from 7.3.3 to 7.3.4 on 2022-03-31
  • snakemake from 7.3.4 to 7.3.5 on 2022-03-31
  • snakemake from 7.3.5 to 7.3.6 on 2022-04-04
  • snakemake from 7.3.6 to 7.3.7 on 2022-04-06
  • snakemake from 7.3.7 to 7.3.8 on 2022-04-07
  • sqlfluff from 0.11.1 to 0.11.2 on 2022-03-26
  • sqlfluff from 0.11.2 to 0.12.0 on 2022-04-09
  • stylelint from 14.6.0 to 14.6.1 on 2022-03-26
  • terraform-fmt from 1.1.7 to 1.1.8 on 2022-04-09
  • terrascan from 1.13.2 to 1.14.0 on 2022-04-01

[v5.10.0] - 2022-03-20

• Linter versions upgrades
  • ansible-lint from 5.4.0 to 6.0.0 on 2022-03-16
  • ansible-lint from 6.0.0 to 6.0.1 on 2022-03-19
  • checkov from 2.0.939 to 2.0.940 on 2022-03-13
  • checkov from 2.0.940 to 2.0.943 on 2022-03-14
  • checkov from 2.0.943 to 2.0.949 on 2022-03-15
  • checkov from 2.0.949 to 2.0.962 on 2022-03-16
  • checkov from 2.0.962 to 2.0.969 on 2022-03-17
  • checkov from 2.0.969 to 2.0.970 on 2022-03-17
  • checkov from 2.0.970 to 2.0.975 on 2022-03-19
  • cspell from 5.19.0 to 5.19.1 on 2022-03-13
  • cspell from 5.19.1 to 5.19.2 on 2022-03-14
  • golangci-lint from 1.44.2 to 1.45.0 on 2022-03-19
  • hadolint from 2.7.0 to 2.9.1 on 2022-03-19
  • kics from 1.5.3 to 1.5.4 on 2022-03-17
  • ktlint from 0.44.0 to 0.45.0 on 2022-03-19
  • markdown-link-check from 3.9.3 to 3.10.0 on 2022-03-20
  • mypy from 0.940 to 0.941 on 2022-03-15
  • phpstan from 1.4.9 to 1.4.10 on 2022-03-14
  • powershell from 7.2.1 to 7.2.2 on 2022-03-17
  • prettier from 2.5.1 to 2.6.0 on 2022-03-17
  • snakemake from 7.2.0 to 7.2.1 on 2022-03-14
  • sqlfluff from 0.11.0 to 0.11.1 on 2022-03-17
  • stylelint from 14.5.3 to 14.6.0 on 2022-03-17
  • terragrunt from 0.36.3 to 0.36.5 on 2022-03-17
  • terragrunt from 0.36.5 to 0.36.6 on 2022-03-19

[v5.9.0] - 2022-03-13

• Linters

  • New linter kubeconform to validate Kubernetes manifests with updated schemas

• Core

  • Switch from JDK 8 to JDK 11
  • Use latest version of npm

• Flavors

  • Add shell linters to ci_light flavor (#1298)

• Fixes

  • Generate JSON Schema HTML Documentation when building documentation (#1287)
  • rubocop: remove --force-exclusion from auto-added parameters (#302)
  • terrascan: call terrascan init as a pre-command

• Linter versions upgrades

  • actionlint from 1.6.8 to 1.6.9 on 2022-02-25
  • actionlint from 1.6.9 to 1.6.10 on 2022-03-12
  • bandit from 1.7.2 to 1.7.3 on 2022-02-28
  • bandit from 1.7.3 to 1.7.4 on 2022-03-06
  • cfn-lint from 0.58.0 to 0.58.1 on 2022-02-21
  • cfn-lint from 0.58.1 to 0.58.2 on 2022-02-27
  • cfn-lint from 0.58.2 to 0.58.3 on 2022-03-09
  • checkov from 2.0.873 to 2.0.885 on 2022-02-21
  • checkov from 2.0.885 to 2.0.901 on 2022-02-25
  • checkov from 2.0.901 to 2.0.902 on 2022-02-25
  • checkov from 2.0.902 to 2.0.903 on 2022-02-27
  • checkov from 2.0.903 to 2.0.906 on 2022-02-28
  • checkov from 2.0.906 to 2.0.914 on 2022-03-03
  • checkov from 2.0.914 to 2.0.917 on 2022-03-04
  • checkov from 2.0.917 to 2.0.918 on 2022-03-06
  • checkov from 2.0.918 to 2.0.923 on 2022-03-08
  • checkov from 2.0.923 to 2.0.924 on 2022-03-08
  • checkov from 2.0.924 to 2.0.927 on 2022-03-09
  • checkov from 2.0.927 to 2.0.931 on 2022-03-10
  • checkov from 2.0.931 to 2.0.935 on 2022-03-11
  • checkov from 2.0.935 to 2.0.938 on 2022-03-12
  • checkov from 2.0.938 to 2.0.939 on 2022-03-13
  • checkstyle from 9.3 to 10.0 on 2022-03-03
  • clippy from 0.1.58 to 0.1.59 on 2022-02-25
  • clj-kondo from 2022.01.15 to 2022.02.09 on 2022-02-21
  • cpplint from 1.5.5 to 1.6.0 on 2022-02-20
  • cspell from 5.18.5 to 5.19.0 on 2022-03-13
  • eslint from 8.10.0 to 8.11.0 on 2022-03-12
  • eslint from 8.9.0 to 8.10.0 on 2022-02-27
  • kics from 1.5.2 to 1.5.3 on 2022-03-03
  • mypy from 0.931 to 0.940 on 2022-03-12
  • phpstan from 1.4.6 to 1.4.7 on 2022-03-03
  • phpstan from 1.4.7 to 1.4.8 on 2022-03-06
  • phpstan from 1.4.8 to 1.4.9 on 2022-03-11
  • protolint from 0.37.0 to 0.37.1 on 2022-02-27
  • rst-lint from 1.3.2 to 1.4.0 on 2022-02-25
  • rubocop from 1.25.1 to 1.26.0 on 2022-03-10
  • sfdx-scanner-apex from 2.12.0 to 2.13.0 on 2022-02-25
  • sfdx-scanner-aura from 2.12.0 to 2.13.0 on 2022-02-25
  • sfdx-scanner-lwc from 2.12.0 to 2.13.0 on 2022-02-25
  • snakefmt from 0.4.4 to 0.6.0 on 2022-03-04
  • snakemake from 6.15.5 to 7.0.0 on 2022-02-25
  • snakemake from 7.0.0 to 7.0.1 on 2022-02-27
  • snakemake from 7.0.1 to 7.0.3 on 2022-03-03
  • snakemake from 7.0.3 to 7.0.4 on 2022-03-04
  • snakemake from 7.0.4 to 7.1.0 on 2022-03-06
  • snakemake from 7.1.0 to 7.1.1 on 2022-03-08
  • snakemake from 7.1.1 to 7.2.0 on 2022-03-13
  • sqlfluff from 0.10.1 to 0.11.0 on 2022-03-08
  • stylelint from 14.5.1 to 14.5.3 on 2022-02-25
  • swiftlint from 0.46.2 to 0.46.3 on 2022-02-25
  • swiftlint from 0.46.3 to 0.46.4 on 2022-03-08
  • swiftlint from 0.46.4 to 0.46.5 on 2022-03-09
  • terraform-fmt from 1.1.6 to 1.1.7 on 2022-03-04
  • terragrunt from 0.36.1 to 0.36.2 on 2022-02-25
  • terragrunt from 0.36.2 to 0.36.3 on 2022-03-04
  • terrascan from 1.13.1 to 1.13.2 on 2022-02-25
  • tsqllint from 1.14.3.0 to 1.14.5.0 on 2022-02-21
  • xmllint from 20912 to 20913 on 2022-03-12

[v5.8.0] - 2022-02-18

• Linters

  • Improve ansible-lint performances by linting all project in one call, and count number of errors
  • Use project cli_lint_mode to improve performances
    • terrascan

• Fixes

  • Manage to use local certificate with Gitlab comments reporter using GITLAB_SSL_CERTIFICATE_PATH (#1239)
  • Fix GITLAB_ACCESS_TOKEN_MEGALINTER suggestion when trying to push comments to gitlab merge request
  • Gitlab Comments Reporter: allow to use certificates with variable GITLAB_CUSTOM_CERTIFICATE (or GITLAB_CERTIFICATE_PATH only if PRE_COMMANDS are used) (#1239)

• Core

  • Allow to check prop existence in active_only_if_file_found and apply to eslint descriptors (#1205)

• Doc

  • Update images with screen records gifs
  • Add publish artifact task in azure pipelines doc

• Linter versions upgrades

  • ansible-lint from 5.3.2 to 5.4.0 on 2022-02-13
  • checkov from 2.0.782 to 2.0.783 on 2022-02-03
  • checkov from 2.0.783 to 2.0.786 on 2022-02-03
  • checkov from 2.0.786 to 2.0.791 on 2022-02-05
  • checkov from 2.0.791 to 2.0.793 on 2022-02-06
  • checkov from 2.0.793 to 2.0.795 on 2022-02-06
  • checkov from 2.0.795 to 2.0.812 on 2022-02-09
  • checkov from 2.0.812 to 2.0.813 on 2022-02-09
  • checkov from 2.0.813 to 2.0.817 on 2022-02-10
  • checkov from 2.0.817 to 2.0.830 on 2022-02-13
  • checkov from 2.0.830 to 2.0.833 on 2022-02-14
  • checkov from 2.0.833 to 2.0.853 on 2022-02-16
  • checkov from 2.0.853 to 2.0.866 on 2022-02-18
  • checkov from 2.0.866 to 2.0.873 on 2022-02-18
  • cspell from 5.18.0 to 5.18.3 on 2022-02-05
  • cspell from 5.18.3 to 5.18.4 on 2022-02-09
  • cspell from 5.18.4 to 5.18.5 on 2022-02-16
  • eslint-plugin-jsonc from 2.1.0 to 2.2.1 on 2022-02-18
  • eslint from 8.8.0 to 8.9.0 on 2022-02-13
  • golangci-lint from 1.44.0 to 1.44.2 on 2022-02-18
  • kics from 1.5.1 to 1.5.2 on 2022-02-18
  • ktlint from 0.43.2 to 0.44.0 on 2022-02-16
  • markdownlint from 0.30.0 to 0.31.0 on 2022-02-06
  • markdownlint from 0.31.0 to 0.31.1 on 2022-02-09
  • phpstan from 1.4.5 to 1.4.6 on 2022-02-06
  • protolint from 0.36.0 to 0.37.0 on 2022-02-13
  • rubocop from 1.25.0 to 1.25.1 on 2022-02-03
  • snakemake from 6.15.1 to 6.15.2 on 2022-02-06
  • snakemake from 6.15.2 to 6.15.3 on 2022-02-09
  • snakemake from 6.15.3 to 6.15.4 on 2022-02-09
  • snakemake from 6.15.4 to 6.15.5 on 2022-02-10
  • sqlfluff from 0.10.0 to 0.10.1 on 2022-02-18
  • sqlfluff from 0.9.4 to 0.10.0 on 2022-02-13
  • stylelint from 14.3.0 to 14.4.0 on 2022-02-09
  • stylelint from 14.4.0 to 14.5.0 on 2022-02-13
  • stylelint from 14.5.0 to 14.5.1 on 2022-02-18
  • terraform-fmt from 1.1.4 to 1.1.5 on 2022-02-03
  • terraform-fmt from 1.1.5 to 1.1.6 on 2022-02-18
  • terrascan from 1.13.0 to 1.13.1 on 2022-02-13

[v5.7.1] - 2022-02-02

• Linter updates:

  • temporary disable snakefmt to allow latest versions of black and sqlfluff
  • cspell: Update .cspell default config with "version: "2.0", "noConfigSearch": true
  • Use list_of_files mode to improve performances
    • markdown-link-check
    • standard
    • stylelint

• Fixes

  • Remove extraheader in git repo when using Azure Pipelines (#1125)
  • Fix gitlab token error message (#1228)

• Linter versions upgrades

  • black from 21.12 to 22.1.0 on 2022-02-02
  • cfn-lint from 0.57.0 to 0.58.0 on 2022-02-01
  • checkov from 2.0.775 to 2.0.777 on 2022-01-31
  • checkov from 2.0.777 to 2.0.778 on 2022-02-01
  • checkov from 2.0.778 to 2.0.780 on 2022-02-02
  • checkov from 2.0.780 to 2.0.782 on 2022-02-02
  • cspell from 5.17.0 to 5.18.0 on 2022-01-31
  • kics from 1.5.0 to 1.5.1 on 2022-02-02
  • markdown-table-formatter from 1.2.0 to 1.3.0 on 2022-01-31
  • phpstan from 1.4.3 to 1.4.4 on 2022-02-01
  • phpstan from 1.4.4 to 1.4.5 on 2022-02-02
  • snakemake from 6.13.1 to 6.15.1 on 2022-02-02
  • sqlfluff from 0.9.3 to 0.9.4 on 2022-02-02
  • terragrunt from 0.36.0 to 0.36.1 on 2022-02-01

[v5.7.0] - 2022-01-30

• Core:

  • New reporter GITLAB_COMMENT_REPORTER allowing to post MegaLinter results as comments on Gitlab merge requests
  • CI: Update test method to check that the number of errors is correctly calculated (+ fix linter test cases)

• Linter updates:

  • Add configuration file option for SQLFluff (#1200)
  • secretlint: Use .gitignore as .secretlintignore if --secretlintignore isn't defined and .secretlintignore not found (#1207)
  • Update bash-exec documentation
  • Display correct number of errors in logs
    • actionlint
    • chktex
    • cpplint
    • htmlhint
    • perlcritic
    • sfdx-scanner
    • shellcheck
    • shfmt
  • Use list_of_files mode to improve performances
    • htmlhint
    • shellcheck
    • shfmt

• Fixes:

  • Fix v5 doc deployment when there is a new release (#1190)
  • Fix issue when using VALIDATE_ALL_CODEBASE: false on Azure Pipelines by defining auth header in CI env variable GIT_AUTHORIZATION_BEARER (#1125)
  • Fix tflint initialization so it uses configuration file when defined (#1134)

• Linter versions upgrades

  • bandit from 1.7.1 to 1.7.2 on 2022-01-26
  • checkov from 2.0.744 to 2.0.745 on 2022-01-23
  • checkov from 2.0.745 to 2.0.746 on 2022-01-24
  • checkov from 2.0.746 to 2.0.749 on 2022-01-24
  • checkov from 2.0.749 to 2.0.754 on 2022-01-24
  • checkov from 2.0.754 to 2.0.763 on 2022-01-26
  • checkov from 2.0.763 to 2.0.769 on 2022-01-28
  • checkov from 2.0.769 to 2.0.772 on 2022-01-29
  • checkov from 2.0.772 to 2.0.775 on 2022-01-30
  • checkstyle from 9.2.1 to 9.3 on 2022-01-30
  • coffeelint from 5.2.3 to 5.2.4 on 2022-01-28
  • cspell from 5.16.0 to 5.17.0 on 2022-01-28
  • dotenv-linter from 3.1.1 to 3.2.0 on 2022-01-24
  • eslint-plugin-jsonc from 2.0.0 to 2.1.0 on 2022-01-28
  • eslint from 8.7.0 to 8.8.0 on 2022-01-29
  • golangci-lint from 1.43.0 to 1.44.0 on 2022-01-26
  • htmlhint from 1.1.0 to 1.1.1 on 2022-01-23
  • htmlhint from 1.1.1 to 1.1.2 on 2022-01-28
  • markdown-link-check from 3.9.2 to 3.9.3 on 2022-01-29
  • phpstan from 1.4.2 to 1.4.3 on 2022-01-29
  • rubocop from 0.82.0 to 1.25.0 on 2022-01-29
  • shfmt from 3.2.1 to 3.5.0 on 2022-01-30
  • shfmt from 3.3.1 to 3.2.1 on 2022-01-30
  • snakemake from 6.13.1 to 6.14.0 on 2022-01-28
  • snakemake from 6.14.0 to 6.15.0 on 2022-01-29
  • snakemake from 6.15.0 to 6.13.1 on 2022-01-30
  • sqlfluff from 0.9.1 to 0.9.3 on 2022-01-28
  • stylelint from 14.2.0 to 14.3.0 on 2022-01-23
  • swiftlint from 0.46.0 to 0.46.2 on 2022-01-28
  • tsqllint from 1.14.0.0 to 1.14.3.0 on 2022-01-23

[v5.6.0] - 2022-01-22

• Add linters licenses to online documentation

• Fix issue when config vars are both from ENV and from config file (#1154)

• Fix issue of --files argument format when calling npm-groovy-lint (#1176)

• Fix wrong status in reports when DISABLE_ERRORS is used

• Increase memory size for node.js-based linters (#1149)

• Make python linters play nice with each other (#1182)

• Linter versions upgrades

  • coffeelint from 5.2.2 to 5.2.3 on 2022-01-09
  • phpstan from 1.3.0 to 1.3.3 on 2022-01-09
  • mypy from 0.930 to 0.931 on 2022-01-09
  • cspell from 5.14.0 to 5.15.1 on 2022-01-09
  • checkov from 2.0.702 to 2.0.708 on 2022-01-09
  • terraform-fmt from 1.1.2 to 1.1.3 on 2022-01-09
  • terrascan from 1.12.0 to 1.13.0 on 2022-01-09
  • npm-groovy-lint from 9.3.0 to 9.3.2 on 2022-01-09
  • sqlfluff from 0.9.0 to 0.9.1 on 2022-01-09
  • cfn-lint from 0.56.3 to 0.56.4 on 2022-01-11
  • npm-groovy-lint from 9.3.2 to 9.4.0 on 2022-01-11
  • snakemake from 6.12.3 to 6.13.0 on 2022-01-11
  • checkov from 2.0.708 to 2.0.709 on 2022-01-11
  • scalafix from 0.9.33 to 0.9.34 on 2022-01-12
  • snakemake from 6.13.0 to 6.13.1 on 2022-01-12
  • cspell from 5.15.1 to 5.15.2 on 2022-01-12
  • checkov from 2.0.709 to 2.0.710 on 2022-01-12
  • npm-groovy-lint from 9.4.0 to 9.4.1 on 2022-01-13
  • checkov from 2.0.710 to 2.0.712 on 2022-01-13
  • terragrunt from 0.35.16 to 0.35.18 on 2022-01-13
  • clj-kondo from 2021.12.19 to 2022.01.13 on 2022-01-14
  • clippy from 0.1.57 to 0.1.58 on 2022-01-14
  • checkov from 2.0.712 to 2.0.717 on 2022-01-14
  • phpstan from 1.3.3 to 1.4.0 on 2022-01-15
  • terragrunt from 0.35.18 to 0.35.19 on 2022-01-15
  • terragrunt from 0.35.19 to 0.35.20 on 2022-01-15
  • checkov from 2.0.717 to 2.0.718 on 2022-01-16
  • eslint from 8.6.0 to 8.7.0 on 2022-01-17
  • checkov from 2.0.718 to 2.0.720 on 2022-01-17
  • phpstan from 1.4.0 to 1.4.1 on 2022-01-18
  • checkov from 2.0.720 to 2.0.727 on 2022-01-18
  • clj-kondo from 2022.01.13 to 2022.01.15 on 2022-01-22
  • cfn-lint from 0.56.4 to 0.57.0 on 2022-01-22
  • markdown-link-check from 3.9.0 to 3.9.2 on 2022-01-22
  • phpstan from 1.4.1 to 1.4.2 on 2022-01-22
  • protolint from 0.35.2 to 0.36.0 on 2022-01-22
  • cspell from 5.15.2 to 5.16.0 on 2022-01-22
  • swiftlint from 0.45.1 to 0.46.0 on 2022-01-22
  • checkov from 2.0.727 to 2.0.744 on 2022-01-22
  • kics from 1.4.9 to 1.5.0 on 2022-01-22
  • terraform-fmt from 1.1.3 to 1.1.4 on 2022-01-22
  • terragrunt from 0.35.20 to 0.36.0 on 2022-01-22

[v5.5.0] - 2022-01-03

• Linter versions upgrades
  • checkov from 2.0.680 to 2.0.681 on 2021-12-21
  • stylelint from 14.1.0 to 14.2.0 on 2021-12-23
  • mypy from 0.920 to 0.930 on 2021-12-23
  • checkov from 2.0.681 to 2.0.687 on 2021-12-23
  • npm-groovy-lint from 9.1.0 to 9.2.0 on 2021-12-23
  • checkov from 2.0.687 to 2.0.690 on 2021-12-23
  • tflint from 0.34.0 to 0.34.1 on 2021-12-26
  • clj-kondo from 2021.06.18 to 2021.12.19 on 2021-12-29
  • npm-groovy-lint from 9.2.0 to 9.3.0 on 2021-12-29
  • checkstyle from 9.2 to 9.2.1 on 2021-12-29
  • cspell from 5.13.4 to 5.14.0 on 2021-12-29
  • checkov from 2.0.690 to 2.0.695 on 2021-12-29
  • phpstan from 1.2.0 to 1.3.0 on 2021-12-29
  • checkov from 2.0.695 to 2.0.701 on 2021-12-31
  • htmlhint from 1.0.0 to 1.1.0 on 2022-01-01
  • eslint from 8.5.0 to 8.6.0 on 2022-01-01
  • checkov from 2.0.701 to 2.0.702 on 2022-01-03

[v5.4.0] - 2021-12-21

• Linter versions upgrades
  • snakemake from 6.12.1 to 6.12.2 on 2021-12-09
  • checkov from 2.0.636 to 2.0.639 on 2021-12-09
  • checkov from 2.0.639 to 2.0.641 on 2021-12-09
  • terraform-fmt from 1.0.11 to 1.1.0 on 2021-12-09
  • snakemake from 6.12.2 to 6.12.3 on 2021-12-11
  • checkov from 2.0.641 to 2.0.648 on 2021-12-11
  • cspell from 5.13.2 to 5.13.3 on 2021-12-11
  • terragrunt from 0.35.13 to 0.35.14 on 2021-12-11
  • checkov from 2.0.648 to 2.0.649 on 2021-12-12
  • phpcs from 3.6.1 to 3.6.2 on 2021-12-14
  • sqlfluff from 0.8.2 to 0.9.0 on 2021-12-14
  • checkov from 2.0.649 to 2.0.659 on 2021-12-14
  • tflint from 0.33.2 to 0.34.0 on 2021-12-14
  • npm-groovy-lint from 9.0.0 to 9.1.0 on 2021-12-15
  • powershell from 7.2.0 to 7.2.1 on 2021-12-15
  • checkov from 2.0.659 to 2.0.660 on 2021-12-15
  • mypy from 0.910 to 0.920 on 2021-12-16
  • checkov from 2.0.660 to 2.0.662 on 2021-12-16
  • checkov from 2.0.662 to 2.0.668 on 2021-12-17
  • terraform-fmt from 1.1.0 to 1.1.1 on 2021-12-17
  • eslint from 8.4.1 to 8.5.0 on 2021-12-18
  • checkov from 2.0.668 to 2.0.672 on 2021-12-18
  • cspell from 5.13.3 to 5.13.4 on 2021-12-18
  • terraform-fmt from 1.1.1 to 1.1.2 on 2021-12-18
  • terragrunt from 0.35.14 to 0.35.16 on 2021-12-18
  • coffeelint from 5.2.1 to 5.2.2 on 2021-12-21
  • checkov from 2.0.672 to 2.0.680 on 2021-12-21
  • kics from 1.4.8 to 1.4.9 on 2021-12-21

[v5.3.0] - 2021-12-08

• Fix jscpd typo about .venv (#986)

• markdownlint: rename default config file from .markdown-lint.json to .markdownlint.json

• Deprecate DEFAULT_BRANCH setting (#948)

• Correct some broken links in README from Mega-Linter to MegaLinter (#1030)

• Docker run -- clean-up containers when exits (#1033)

• Add missing Bandit config file and rules path options (#679)

• Fix getting linter version of npm plugin. (#845)

• Improve runtime performances when using a flavor and defining FLAVORS_SUGGESTION: false

• Don't check for updated files when APPLY_FIXES isn't active

• Fix CLI_LINT_MODE default value in doc (#1086)

• Linters

  • New linter phplint to speed-up linting of php files (#1031)
    • Fix phplint constraint to accept all future bugfix v3.0.x versions (PHP 7.4 support) (#1043)
  • cpplint: Use cli_lint_mode: project to improve performances

• Linter versions upgrades

  • remark-lint from 14.0.1 to 14.0.2 on 2021-11-19
  • php from 7.4.25 to 7.4.26 on 2021-11-19
  • checkov from 2.0.587 to 2.0.588 on 2021-11-19
  • markdownlint from 0.29.0 to 0.30.0 on 2021-11-21
  • checkov from 2.0.588 to 2.0.591 on 2021-11-21
  • terragrunt from 0.35.10 to 0.35.12 on 2021-11-21
  • eslint from 8.2.0 to 8.3.0 on 2021-11-21
  • checkov from 2.0.591 to 2.0.595 on 2021-11-21
  • cfn-lint from 0.56.1 to 0.56.2 on 2021-11-22
  • sqlfluff from 0.8.1 to 0.8.2 on 2021-11-22
  • checkov from 2.0.595 to 2.0.597 on 2021-11-22
  • htmlhint from 0.16.1 to 0.16.2 on 2021-11-24
  • checkov from 2.0.597 to 2.0.600 on 2021-11-24
  • htmlhint from 0.16.2 to 0.16.3 on 2021-11-25
  • markdown-link-check from 0.0.0 to 3.9.0 on 2021-11-25
  • cspell from 5.13.0 to 5.13.1 on 2021-11-25
  • checkov from 2.0.600 to 2.0.603 on 2021-11-25
  • kics from 1.4.7 to 1.4.8 on 2021-11-25
  • prettier from 2.4.1 to 2.5.0 on 2021-11-26
  • pylint from 2.11.1 to 2.12.1 on 2021-11-26
  • snakemake from 6.10.0 to 6.11.0 on 2021-11-26
  • checkov from 2.0.603 to 2.0.605 on 2021-11-26
  • terragrunt from 0.35.12 to 0.35.13 on 2021-11-26
  • htmlhint from 0.16.3 to 1.0.0 on 2021-11-27
  • scalafix from 0.9.32 to 0.9.33 on 2021-11-27
  • snakemake from 6.11.0 to 6.11.1 on 2021-11-27
  • checkstyle from 9.1 to 9.2 on 2021-11-29
  • checkov from 2.0.605 to 2.0.606 on 2021-11-29
  • snakemake from 6.11.1 to 6.12.1 on 2021-11-30
  • swiftlint from 0.45.0 to 0.45.1 on 2021-11-30
  • checkov from 2.0.606 to 2.0.609 on 2021-11-30
  • v8r from 0.6.1 to 0.7.0 on 2021-11-30
  • v8r from 0.7.0 to 0.6.1 on 2021-12-01
  • checkov from 2.0.614 to 2.0.616 on 2021-12-01
  • checkov from 2.0.616 to 2.0.618 on 2021-12-01
  • coffeelint from 5.2.0 to 5.2.1 on 2021-12-02
  • checkov from 2.0.618 to 2.0.621 on 2021-12-02
  • ktlint from 0.40.0 to 0.43.2 on 2021-12-02
  • clippy from 0.1.56 to 0.1.57 on 2021-12-03
  • checkov from 2.0.621 to 2.0.625 on 2021-12-03
  • cfn-lint from 0.56.2 to 0.56.3 on 2021-12-04
  • pylint from 2.12.1 to 2.12.2 on 2021-12-04
  • checkov from 2.0.625 to 2.0.626 on 2021-12-04
  • eslint from 8.3.0 to 8.4.0 on 2021-12-04
  • prettier from 2.5.0 to 2.5.1 on 2021-12-05
  • black from 21.11 to 21.12 on 2021-12-06
  • checkov from 2.0.626 to 2.0.628 on 2021-12-06
  • checkov from 2.0.628 to 2.0.632 on 2021-12-07
  • eslint from 8.4.0 to 8.4.1 on 2021-12-07
  • cspell from 5.13.1 to 5.13.2 on 2021-12-07
  • checkov from 2.0.632 to 2.0.634 on 2021-12-07
  • tflint from 0.33.1 to 0.33.2 on 2021-12-07
  • checkov from 2.0.634 to 2.0.636 on 2021-12-08

[v5.2.0] - 2021-11-18

• Fix release doc CI

• Add <utteranc.es> comments in online documentation

• Add link to MegaLinter documentation in console logs

• Linter versions upgrades

  • actionlint from 1.6.7 to 1.6.8 on 2021-11-15
  • checkov from 2.0.572 to 2.0.573 on 2021-11-15
  • checkov from 2.0.573 to 2.0.574 on 2021-11-15
  • cfn-lint from 0.56.0 to 0.56.1 on 2021-11-17
  • checkov from 2.0.574 to 2.0.580 on 2021-11-17
  • black from 21.10 to 21.11 on 2021-11-17
  • cspell from 5.12.6 to 5.13.0 on 2021-11-17
  • checkov from 2.0.580 to 2.0.582 on 2021-11-17
  • checkov from 2.0.582 to 2.0.583 on 2021-11-18
  • phpstan from 1.1.2 to 1.2.0 on 2021-11-18
  • checkov from 2.0.583 to 2.0.587 on 2021-11-18

[v5.1.0] - 2021-11-15

• Fix config issue with IGNORE_GITIGNORED_FILES (#932)

• Bypass random CI issue with sql_tsqllint_test test version and test help

• New configuration PRINT_ALL_FILES (default: true). If set to false, console log only displays updated and error files, not all of them

• Update black configuration, that now uses a pyproject.toml file (#949)

• Allows list_of_files cli_lint_mode on Psalm linter to improve performance compare to file mode

• mega-linter-runner: Upgrade yeoman environment to allow spaces in path

• Documentation versioning with mike

• Accordingly, to official PHPStan documentation, the TEMPLATES/phpstan.neon.dist config file set default level to zero.

• Downgrade dotnet from 6.0 to 5.0, to be compliant with tsqllint

• Allow GithubStatusReporter to work for other CI platforms

• Add license badge in linters documentation (All linters)

• Upgrade checkov install instructions to use alpine-oriented ones

• Fix wrong errors count displayed with PHPStan and Psalm linters (#985)

• Fix typo error in .jscpd.json config file (#986)

• Deprecate DEFAULT_BRANCH, and change its default from master to HEAD (#915)

• Core architecture

  • New configuration PRINT_ALL_FILES (default: true). If set to false, console log only displays updated and error files, not all of them
  • Documentation versioning with mike
  • Allow GithubStatusReporter to work for other CI platforms
  • Add license info in List of linters documentation page

• Linters

  • Update black configuration, that now uses a pyproject.toml file (#949)
  • Allows list_of_files cli_lint_mode on Psalm linter to improve performance compare to file mode
  • Upgrade checkov install instructions to use alpine-oriented ones
  • Accordingly, to official PHPStan documentation, the TEMPLATES/phpstan.neon.dist config file set default level to zero.
  • Downgrade dotnet from 6.0 to 5.0, to be compliant with tsqllint

• Bug fixes

  • Fix config issue with IGNORE_GITIGNORED_FILES (#932)
  • Bypass random CI issue with sql_tsqllint_test test version and test help
  • mega-linter-runner: Upgrade yeoman environment to allow spaces in path

• Linter versions upgrades

  • cspell from 5.12.5 to 5.12.6 on 2021-11-04
  • cfn-lint from 0.55.0 to 0.56.0 on 2021-11-06
  • coffeelint from 5.1.0 to 5.1.1 on 2021-11-06
  • jscpd from 3.3.26 to 3.4.1 on 2021-11-06
  • hadolint from 2.7.0 to 2.8.0 on 2021-11-06
  • eslint-plugin-jsonc from 1.7.0 to 2.0.0 on 2021-11-06
  • phpstan from 1.0.2 to 1.1.0 on 2021-11-06
  • jscpd from 3.4.1 to 3.4.2 on 2021-11-07
  • shellcheck from 0.7.2 to 0.8.0 on 2021-11-07
  • coffeelint from 5.1.1 to 5.2.0 on 2021-11-07
  • jscpd from 3.4.2 to 3.3.26 on 2021-11-07
  • hadolint from 2.8.0 to 2.7.0 on 2021-11-07
  • sqlfluff from 0.7.1 to 0.8.0 on 2021-11-07
  • sqlfluff from 0.8.0 to 0.8.1 on 2021-11-08
  • swiftlint from 0.43.1 to 0.44.0 on 2021-11-08
  • actionlint from 1.6.6 to 1.6.7 on 2021-11-08
  • eslint from 7.32.0 to 8.2.0 on 2021-11-08
  • swiftlint from 0.44.0 to 0.45.0 on 2021-11-08
  • powershell from 7.1.5 to 7.2.0 on 2021-11-08
  • protolint from 0.35.1 to 0.35.2 on 2021-11-09
  • isort from 5.10.0 to 5.10.1 on 2021-11-09
  • phpstan from 1.1.1 to 1.1.2 on 2021-11-09
  • kics from 1.4.6 to 1.4.7 on 2021-11-11
  • terraform-fmt from 1.0.10 to 1.0.11 on 2021-11-11
  • terragrunt from 0.35.6 to 0.35.8 on 2021-11-11
  • htmlhint from 0.16.0 to 0.16.1 on 2021-11-12
  • checkov from 2.0.524 to 2.0.566 on 2021-11-12
  • terragrunt from 0.35.8 to 0.35.9 on 2021-11-12
  • bandit from 1.7.0 to 1.7.1 on 2021-11-13
  • scalafix from 0.9.31 to 0.9.32 on 2021-11-13
  • checkov from 2.0.566 to 2.0.569 on 2021-11-13
  • terragrunt from 0.35.9 to 0.35.10 on 2021-11-13
  • checkov from 2.0.569 to 2.0.571 on 2021-11-14
  • stylelint from 14.0.1 to 14.1.0 on 2021-11-14
  • checkov from 2.0.571 to 2.0.572 on 2021-11-14

[v5.0.7] - 2021-11-04

• Fix that upgrader removed all jobs after cancel_duplicates but the last (#925)

• Linter versions upgrades

  • cfn-lint from 0.54.4 to 0.55.0 on 2021-11-03
  • phpstan from 1.0.0 to 1.0.1 on 2021-11-03
  • golangci-lint from 1.42.1 to 1.43.0 on 2021-11-04
  • phpstan from 1.0.1 to 1.0.2 on 2021-11-04
  • isort from 5.9.3 to 5.10.0 on 2021-11-04

[v5.0.6] - 2021-11-03

• Use GH actions concurrency to cancel runs (#921)

[v5.0.5] - 2021-11-02

• Fix mega-linter-runner --install template for Github Action Workflow

• Replace expression "abusive copy-paste" by "excessive copy-paste"

• Linter versions upgrades

  • coffeelint from 5.0.5 to 5.1.0 on 2021-11-02
  • phpstan from 0.12.99 to 1.0.0 on 2021-11-02
  • black from 21.9 to 21.10 on 2021-11-02
  • cspell from 5.12.4 to 5.12.5 on 2021-11-02
  • terragrunt from 0.35.5 to 0.35.6 on 2021-11-02

[v5.0.2] - 2021-10-31

• Quick build to fix stargazers badge regression (see issue #873) (#909)

• Improve Azure Pipeline template documentation (#908)

• Take in account legacy docker images for total docker pull count (#910)

• Upgrade stale github action

• Linter versions upgrades

  • cspell from 5.12.3 to 5.12.4 on 2021-10-31
  • checkstyle from 9.0.1 to 9.1 on 2021-10-31
  • tflint from 0.33.0 to 0.33.1 on 2021-10-31

[v5.0.1] - 2021-10-30

• Fix mega-linter-runner bug related to v5
• Fix online documentation

[v5.0.0] - 2021-10-30

• Migration from github individual repo nvuillam/mega-linter to github organization repo megalinter/megalinter
• Migration from docker hub space nvuillam to space megalinter
  • Docker images are now megalinter/megalinter or megalinter/megalinter-FLAVOR
• Documentation is now hosted at https://megalinter.github.io/
• Tool to upgrade user repos configuration files using npx mega-linter-runner --upgrade (will upgrade references to nvuillam/mega-linter into megalinter/megalinter)
• Version management: Now mega-linter docker images, github action and mega-linter-runner versions are aligned
  • latest for latest official release
  • beta for current content of main branch
  • alpha for current content of alpha branch
  • docker image, github action and mega-linter-runner can still be called with exact version number
• Being more inclusive: rename master branch into main
• IGNORE_GITIGNORED_FILES parameter default to true

[4.47.0] - 2021-10-30

• Upgrades

  • Base docker image python:3.9.6-alpine3.13 to python:3.9.7-alpine3.13
  • Automerge internal job pascalgn/automerge-action-0.14.2 to pascalgn/automerge-action-0.14.3

• Config reporter: Parse .vscode/extensions.json as json5 (with comments)

• Add eslint-plugin-jsx-a11y dependency

• Rename default PHPStan config file, from phpstan.neon to phpstan.neon.dist accordingly to PHPStan resolution priority

• Allows list_of_files cli_lint_mode on PHPSTAN linter to improve performance compare to file mode

• phpstan is now installed with phive rather than composer (reduces disk usage)

• Allows list_of_files cli_lint_mode on PHPCS linter to improve performance compare to file mode

• Allows list_of_files cli_lint_mode on EditorConfig-Checker linter to improve performance compare to file mode

• Fix internal CSS because of StyleLint new rule selector-class-pattern

• Fix ansible-lint version collection

• Message to recommend to upgrade to MegaLinter v5

• Linter versions upgrades

  • cfn-lint from 0.54.1 to 0.54.2 on 2021-09-23
  • eslint-plugin-jsonc from 1.6.0 to 1.7.0 on 2021-09-23
  • checkov from 2.0.430 to 2.0.436 on 2021-09-23
  • coffeelint from 5.0.3 to 5.0.4 on 2021-09-24
  • checkov from 2.0.436 to 2.0.438 on 2021-09-24
  • php from 7.4.21 to 7.4.24 on 2021-09-24
  • terragrunt from 0.32.3 to 0.32.4 on 2021-09-24
  • snakemake from 6.8.0 to 6.8.1 on 2021-09-25
  • checkov from 2.0.438 to 2.0.441 on 2021-09-25
  • secretlint from 4.0.0 to 4.1.0 on 2021-09-25
  • checkov from 2.0.441 to 2.0.442 on 2021-09-26
  • checkov from 2.0.442 to 2.0.443 on 2021-09-27
  • protolint from 0.32.0 to 0.35.1 on 2021-09-26
  • protolint from 0.32.0 to 0.35.1 on 2021-09-27
  • checkov from 2.0.443 to 2.0.446 on 2021-09-27
  • cspell from 5.10.1 to 5.11.0 on 2021-09-29
  • checkov from 2.0.446 to 2.0.448 on 2021-09-29
  • npm-groovy-lint from 8.2.0 to 9.0.0 on 2021-09-30
  • sfdx-scanner-apex from 2.11.0 to 2.12.0 on 2021-09-30
  • sfdx-scanner-aura from 2.11.0 to 2.12.0 on 2021-09-30
  • sfdx-scanner-lwc from 2.11.0 to 2.12.0 on 2021-09-30
  • snakemake from 6.8.1 to 6.9.0 on 2021-09-30
  • cspell from 5.11.0 to 5.11.1 on 2021-09-30
  • checkov from 2.0.448 to 2.0.454 on 2021-09-30
  • snakemake from 6.9.0 to 6.9.1 on 2021-09-30
  • checkov from 2.0.454 to 2.0.461 on 2021-09-30
  • checkstyle from 9.0 to 9.0.1 on 2021-10-03
  • luacheck from 0.23.0 to 0.25.0 on 2021-10-03
  • checkov from 2.0.461 to 2.0.467 on 2021-10-03
  • terraform-fmt from 1.0.7 to 1.0.8 on 2021-10-03
  • terragrunt from 0.32.4 to 0.34.0 on 2021-10-03
  • sqlfluff from 0.6.6 to 0.6.7 on 2021-10-05
  • checkov from 2.0.467 to 2.0.469 on 2021-10-05
  • markdownlint from 0.28.1 to 0.29.0 on 2021-10-06
  • cspell from 5.11.1 to 5.12.0 on 2021-10-06
  • sqlfluff from 0.6.7 to 0.6.8 on 2021-10-06
  • checkov from 2.0.469 to 2.0.475 on 2021-10-06
  • cspell from 5.12.0 to 5.12.1 on 2021-10-06
  • checkov from 2.0.475 to 2.0.476 on 2021-10-06
  • cspell from 5.12.1 to 5.12.2 on 2021-10-07
  • terragrunt from 0.34.0 to 0.34.1 on 2021-10-07
  • checkov from 2.0.476 to 2.0.477 on 2021-10-07
  • terrascan from 1.10.0 to 1.11.0 on 2021-10-07
  • cspell from 5.12.2 to 5.12.3 on 2021-10-09
  • checkov from 2.0.477 to 2.0.479 on 2021-10-09
  • sqlfluff from 0.6.8 to 0.6.9 on 2021-10-10
  • checkov from 2.0.479 to 2.0.481 on 2021-10-10
  • checkov from 2.0.481 to 2.0.482 on 2021-10-10
  • phpcs from 3.6.0 to 3.6.1 on 2021-10-12
  • flake8 from 3.9.2 to 4.0.1 on 2021-10-12
  • checkov from 2.0.482 to 2.0.484 on 2021-10-12
  • terragrunt from 0.34.1 to 0.34.3 on 2021-10-12
  • checkov from 2.0.484 to 2.0.485 on 2021-10-13
  • powershell from 7.1.4 to 7.1.5 on 2021-10-16
  • sqlfluff from 0.6.9 to 0.7.0 on 2021-10-16
  • checkov from 2.0.485 to 2.0.491 on 2021-10-16
  • terraform-fmt from 1.0.8 to 1.0.9 on 2021-10-16
  • terragrunt from 0.34.3 to 0.35.3 on 2021-10-16
  • tflint from 0.32.1 to 0.33.0 on 2021-10-16
  • checkov from 2.0.491 to 2.0.492 on 2021-10-17
  • actionlint from 1.6.5 to 1.6.6 on 2021-10-17
  • cfn-lint from 0.54.2 to 0.54.3 on 2021-10-21
  • coffeelint from 5.0.4 to 5.0.5 on 2021-10-21
  • snakefmt from 0.4.3 to 0.4.4 on 2021-10-21
  • tekton-lint from 0.5.2 to 0.6.0 on 2021-10-21
  • checkov from 2.0.492 to 2.0.497 on 2021-10-21
  • terragrunt from 0.35.3 to 0.35.4 on 2021-10-21
  • stylelint from 13.13.1 to 14.0.0 on 2021-10-24
  • clippy from 0.1.55 to 0.1.56 on 2021-10-24
  • snakemake from 6.9.1 to 6.10.0 on 2021-10-24
  • sqlfluff from 0.7.0 to 0.7.1 on 2021-10-24
  • checkov from 2.0.497 to 2.0.509 on 2021-10-24
  • terrascan from 1.11.0 to 1.12.0 on 2021-10-24
  • checkov from 2.0.509 to 2.0.510 on 2021-10-25
  • checkov from 2.0.510 to 2.0.516 on 2021-10-26
  • stylelint from 14.0.0 to 14.0.1 on 2021-10-26
  • checkov from 2.0.516 to 2.0.524 on 2021-10-26
  • php from 7.4.24 to 7.4.25 on 2021-10-27
  • cfn-lint from 0.54.3 to 0.54.4 on 2021-10-28
  • htmlhint from 0.15.2 to 0.16.0 on 2021-10-29
  • terraform-fmt from 1.0.9 to 1.0.10 on 2021-10-29
  • terragrunt from 0.35.4 to 0.35.5 on 2021-10-29

[4.46.0] - 2021-09-21

• Add openssh apk for git repos using ssh

• Change default yamllint config file name from .yaml-lint.yml to .yamllint.yml

• Allow to disable console reporter using CONSOLE_REPORTER: false

• Override cli_lint_mode of linters using configuration : LINTER_CLI_LINT_MODE

• Performances

  • Use list_of_files linting mode for yamllint , black and prettier

• Fixes

  • Add CONFIG_REPORTER in json schema
  • Fix Broken CI due to mega-linter test plugin

• Linter versions upgrades

  • checkov from 2.0.396 to 2.0.399 on 2021-09-06
  • golangci-lint from 1.42.0 to 1.42.1 on 2021-09-07
  • snakemake from 6.7.0 to 6.8.0 on 2021-09-07
  • cfn-lint from 0.53.1 to 0.54.1 on 2021-09-12
  • prettier from 2.3.2 to 2.4.0 on 2021-09-12
  • clippy from 0.1.54 to 0.1.55 on 2021-09-12
  • sqlfluff from 0.6.4 to 0.6.5 on 2021-09-12
  • checkov from 2.0.399 to 2.0.407 on 2021-09-12
  • terragrunt from 0.31.8 to 0.31.10 on 2021-09-12
  • tflint from 0.31.0 to 0.32.1 on 2021-09-12
  • cspell from 5.9.0 to 5.9.1 on 2021-09-12
  • phpstan from 0.12.98 to 0.12.99 on 2021-09-15
  • puppet-lint from 2.5.0 to 2.5.2 on 2021-09-15
  • black from 21.8 to 21.9 on 2021-09-15
  • checkov from 2.0.407 to 2.0.414 on 2021-09-15
  • terragrunt from 0.31.10 to 0.31.11 on 2021-09-15
  • terragrunt from 0.31.11 to 0.32.1 on 2021-09-15
  • secretlint from 3.3.0 to 4.0.0 on 2021-09-18
  • htmlhint from 0.15.1 to 0.15.2 on 2021-09-18
  • prettier from 2.4.0 to 2.4.1 on 2021-09-18
  • pylint from 2.10.2 to 2.11.1 on 2021-09-18
  • scalafix from 0.9.30 to 0.9.31 on 2021-09-18
  • cspell from 5.9.1 to 5.10.1 on 2021-09-18
  • checkov from 2.0.414 to 2.0.421 on 2021-09-18
  • terraform-fmt from 1.0.6 to 1.0.7 on 2021-09-18
  • terragrunt from 0.32.1 to 0.32.2 on 2021-09-18
  • checkov from 2.0.421 to 2.0.425 on 2021-09-19
  • checkov from 2.0.425 to 2.0.426 on 2021-09-19
  • checkov from 2.0.426 to 2.0.427 on 2021-09-20
  • coffeelint from 5.0.2 to 5.0.3 on 2021-09-21
  • rstfmt from 0.0.9 to 0.0.10 on 2021-09-21
  • sqlfluff from 0.6.5 to 0.6.6 on 2021-09-21
  • checkov from 2.0.427 to 2.0.428 on 2021-09-21
  • checkov from 2.0.428 to 2.0.430 on 2021-09-21
  • terragrunt from 0.32.2 to 0.32.3 on 2021-09-21

[4.45.0] - 2021-09-04

• New CONFIG_REPORTER to generate "ready to copy" folder containing default linter configurations and IDE extensions recommendations

• New JSON_REPORTER to generate an output json file in report folder

• Manage pre_commands and post_commands at linter level

  • Default commands defined at linter descriptor level
  • Overridable by user in linterName_PRE_COMMANDS and linterName_POST_COMMANDS in .mega-linter.yml

• Fix tflint config so no custom PRE_COMMAND is necessary

• Use dotnet installer to setup tsqllint. tsqllint is now part of the main MegaLinter flavor, but removed from JAVASCRIPT flavor

• Ignore linter_FILTER_REGEX_INCLUDE/linter_FILTER_REGEX_EXCLUDE for linters running on the whole project directory

• mega-linter-runner updates

  • New CLI argument --json, to get the full report as JSON in stdout last line
  • Fix mega-linter-runner --install when local folder path contain spaces
  • Upgrade mega-linter-runner dependencies (npm audit fix)
  • Better comments for generated .mega-linter.yml config file

• Linter versions upgrades

  • markdown-table-formatter from 1.1.0 to 1.2.0 on 2021-08-20
  • phpstan from 0.12.94 to 0.12.95 on 2021-08-20
  • pylint from 2.9.6 to 2.10.1 on 2021-08-21
  • sqlfluff from 0.6.3 to 0.6.4 on 2021-08-21
  • phpstan from 0.12.95 to 0.12.96 on 2021-08-21
  • pylint from 2.10.1 to 2.10.2 on 2021-08-22
  • cspell from 5.7.2 to 5.8.0 on 2021-08-22
  • yamllint from 1.26.2 to 1.26.3 on 2021-08-22
  • eslint-plugin-jsonc from 1.5.0 to 1.6.0 on 2021-08-23
  • checkov from 2.0.363 to 2.0.367 on 2021-08-23
  • cspell from 5.8.0 to 5.8.1 on 2021-08-24
  • terragrunt from 0.31.5 to 0.31.6 on 2021-08-24
  • hadolint from 2.6.0 to 2.7.0 on 2021-08-28
  • dotenv-linter from 3.1.0 to 3.1.1 on 2021-08-28
  • cspell from 5.8.1 to 5.8.2 on 2021-08-28
  • checkov from 2.0.367 to 2.0.376 on 2021-08-28
  • terragrunt from 0.31.6 to 0.31.7 on 2021-08-28
  • terrascan from 1.9.0 to 1.10.0 on 2021-08-28
  • checkov from 2.0.376 to 2.0.377 on 2021-08-29
  • cfn-lint from 0.53.0 to 0.53.1 on 2021-08-31
  • tsqllint from 1.13.5.0 to 1.14.0.0 on 2021-08-31
  • checkov from 2.0.377 to 2.0.380 on 2021-08-31
  • terragrunt from 0.31.7 to 0.31.8 on 2021-08-31
  • checkstyle from 8.45.1 to 9.0 on 2021-09-01
  • cspell from 5.8.2 to 5.9.0 on 2021-09-01
  • checkov from 2.0.380 to 2.0.387 on 2021-09-01
  • phpstan from 0.12.96 to 0.12.97 on 2021-09-02
  • checkov from 2.0.387 to 2.0.392 on 2021-09-02
  • checkov from 2.0.392 to 2.0.393 on 2021-09-02
  • phpstan from 0.12.97 to 0.12.98 on 2021-09-03
  • checkov from 2.0.393 to 2.0.395 on 2021-09-03
  • checkov from 2.0.395 to 2.0.396 on 2021-09-04
  • black from 20.8 to 21.8 on 2021-09-04
  • snakefmt from 0.4.2 to 0.4.3 on 2021-09-04
  • terraform-fmt from 1.0.5 to 1.0.6 on 2021-09-04

[4.44.0] - 2021-08-19

• Upgrade tflint descriptor to use ghcr.io/terraform-linters/tflint docker image and initialize tflint

• Add page for flavors stats in online documentation

• Unable to list git ignored files when IGNORED_GITIGNORED_FILES: true (#PR605, by David Bernard with the contribution of Tim Pansino)

• Linter versions upgrades

  • powershell from 7.1.3 to 7.1.4 on 2021-08-13
  • checkov from 2.0.347 to 2.0.348 on 2021-08-13
  • cspell from 5.6.6 to 5.6.7 on 2021-08-14
  • terragrunt from 0.31.3 to 0.31.4 on 2021-08-14
  • tflint from 0.29.1 to 0.31.0 on 2021-08-14
  • cspell from 5.6.7 to 5.7.1 on 2021-08-15
  • eslint-plugin-jsonc from 1.4.0 to 1.5.0 on 2021-08-15
  • checkov from 2.0.348 to 2.0.350 on 2021-08-15
  • coffeelint from 5.0.1 to 5.0.2 on 2021-08-17
  • scalafix from 0.9.29 to 0.9.30 on 2021-08-17
  • cspell from 5.7.1 to 5.7.2 on 2021-08-17
  • sqlfluff from 0.6.2 to 0.6.3 on 2021-08-17
  • checkov from 2.0.350 to 2.0.352 on 2021-08-17
  • golangci-lint from 1.41.1 to 1.42.0 on 2021-08-18
  • checkov from 2.0.352 to 2.0.361 on 2021-08-18
  • sfdx-scanner-apex from 2.10.1005 to 2.11.0 on 2021-08-19
  • sfdx-scanner-aura from 2.10.1005 to 2.11.0 on 2021-08-19
  • sfdx-scanner-lwc from 2.10.1005 to 2.11.0 on 2021-08-19
  • checkov from 2.0.361 to 2.0.363 on 2021-08-19
  • terraform-fmt from 1.0.4 to 1.0.5 on 2021-08-19
  • terragrunt from 0.31.4 to 0.31.5 on 2021-08-19

[4.43.0] - 2021-08-12

• Add secretlint to check for credentials , secrets and passwords stored in linted repository

• Linter versions upgrades

  • snakemake from 6.6.1 to 6.7.0 on 2021-08-12
  • checkov from 2.0.344 to 2.0.346 on 2021-08-12
  • checkov from 2.0.346 to 2.0.347 on 2021-08-12

[4.42.0] - 2021-08-12

• Add tsqllint to lint TSQL files

• Store docker pulls statistics history

• add IGNORE_GENERATED_FILES in json schema

• allow commonjs config file for eslint - #629, by vitalitytv

• Linter versions upgrades

  • checkov from 2.0.295 to 2.0.297 on 2021-07-25
  • puppet-lint from 2.4.2 to 2.5.0 on 2021-07-26
  • checkov from 2.0.297 to 2.0.303 on 2021-07-26
  • checkov from 2.0.303 to 2.0.307 on 2021-07-28
  • v8r from 0.5.0 to 0.6.0 on 2021-07-29
  • pylint from 2.9.5 to 2.9.6 on 2021-07-29
  • checkov from 2.0.307 to 2.0.313 on 2021-07-29
  • isort from 5.9.2 to 5.9.3 on 2021-07-30
  • clippy from 0.1.53 to 0.1.54 on 2021-07-30
  • snakefmt from 0.4.1 to 0.4.2 on 2021-07-30
  • checkov from 2.0.313 to 2.0.317 on 2021-07-30
  • terragrunt from 0.31.1 to 0.31.2 on 2021-07-30
  • eslint from 7.31.0 to 7.32.0 on 2021-07-31
  • phpstan from 0.12.93 to 0.12.94 on 2021-07-31
  • checkov from 2.0.317 to 2.0.318 on 2021-07-31
  • terragrunt from 0.31.2 to 0.31.3 on 2021-07-31
  • checkstyle from 8.44 to 8.45 on 2021-08-01
  • shfmt from 3.3.0 to 3.3.1 on 2021-08-02
  • checkov from 2.0.318 to 2.0.323 on 2021-08-02
  • cfn-lint from 0.52.0 to 0.53.0 on 2021-08-03
  • checkov from 2.0.323 to 2.0.327 on 2021-08-03
  • remark-lint from 13.0.0 to 14.0.1 on 2021-08-04
  • checkov from 2.0.327 to 2.0.330 on 2021-08-04
  • yamllint from 1.26.1 to 1.26.2 on 2021-08-04
  • checkov from 2.0.330 to 2.0.334 on 2021-08-05
  • terraform-fmt from 1.0.3 to 1.0.4 on 2021-08-05
  • checkov from 2.0.334 to 2.0.336 on 2021-08-05
  • sfdx-scanner-apex from 2.10.0 to 2.10.1005 on 2021-08-06
  • sfdx-scanner-aura from 2.10.0 to 2.10.1005 on 2021-08-06
  • sfdx-scanner-lwc from 2.10.0 to 2.10.1005 on 2021-08-06
  • v8r from 0.6.0 to 0.6.1 on 2021-08-07
  • checkov from 2.0.336 to 2.0.337 on 2021-08-07
  • terrascan from 1.8.1 to 1.9.0 on 2021-08-07
  • checkov from 2.0.337 to 2.0.338 on 2021-08-08
  • checkstyle from 8.45 to 8.45.1 on 2021-08-09
  • checkov from 2.0.338 to 2.0.340 on 2021-08-09
  • checkov from 2.0.340 to 2.0.342 on 2021-08-10
  • checkov from 2.0.342 to 2.0.344 on 2021-08-10

[4.41.0] - 2021-07-25

• New config variable IGNORE_GITIGNORED_FILES (default: false). If set to true, MegaLinter will skips files ignored by git using .gitignore files

• New config variable IGNORE_GENERATED_FILES (default: false). If set to true, MegaLinter will skips files containing @generated marker and not containing @not-generated marker

• Linter versions upgrades

  • sfdx-scanner-apex from 2.9.2 to 2.9.1 on 2021-07-14
  • sfdx-scanner-aura from 2.9.2 to 2.9.1 on 2021-07-14
  • sfdx-scanner-lwc from 2.9.2 to 2.9.1 on 2021-07-14
  • checkov from 2.0.267 to 2.0.269 on 2021-07-14
  • snakemake from 6.5.3 to 6.6.0 on 2021-07-17
  • sqlfluff from 0.6.0 to 0.6.1 on 2021-07-17
  • checkov from 2.0.269 to 1.0.860 on 2021-07-17
  • checkov from 1.0.860 to 2.0.276 on 2021-07-17
  • eslint from 7.30.0 to 7.31.0 on 2021-07-17
  • checkov from 2.0.276 to 2.0.278 on 2021-07-18
  • checkov from 2.0.278 to 2.0.279 on 2021-07-18
  • checkov from 2.0.279 to 2.0.280 on 2021-07-18
  • snakemake from 6.6.0 to 6.6.1 on 2021-07-20
  • checkov from 2.0.280 to 2.0.283 on 2021-07-20
  • terraform-fmt from 1.0.1 to 1.0.2 on 2021-07-20
  • phpstan from 0.12.92 to 0.12.93 on 2021-07-21
  • pylint from 2.9.3 to 2.9.4 on 2021-07-21
  • checkov from 2.0.283 to 2.0.287 on 2021-07-21
  • terragrunt from 0.31.0 to 0.31.1 on 2021-07-21
  • markdownlint from 0.27.1 to 0.28.1 on 2021-07-25
  • pylint from 2.9.4 to 2.9.5 on 2021-07-25
  • sfdx-scanner-apex from 2.9.1 to 2.10.0 on 2021-07-25
  • sfdx-scanner-aura from 2.9.1 to 2.10.0 on 2021-07-25
  • sfdx-scanner-lwc from 2.9.1 to 2.10.0 on 2021-07-25
  • sqlfluff from 0.6.1 to 0.6.2 on 2021-07-25
  • checkov from 2.0.287 to 2.0.295 on 2021-07-25
  • terraform-fmt from 1.0.2 to 1.0.3 on 2021-07-25
  • terrascan from 1.8.0 to 1.8.1 on 2021-07-25
  • xmllint from 20910 to 20912 on 2021-07-25

[4.40.0] - 2021-07-14

• Add mypy python linter

• mega-linter-runner: Add possibility to send the docker image to use, including from another registry than docker hub, with argument --image

• Linter versions upgrades

  • phpstan from 0.12.91 to 0.12.92 on 2021-07-10
  • checkov from 2.0.259 to 2.0.261 on 2021-07-11
  • checkov from 2.0.261 to 2.0.262 on 2021-07-11
  • checkov from 2.0.262 to 2.0.263 on 2021-07-12
  • checkov from 2.0.263 to 2.0.266 on 2021-07-13
  • checkov from 2.0.266 to 2.0.267 on 2021-07-13

[4.39.0] - 2021-07-14 [DELETED RELEASE BECAUSE NOT WORKING, USE 4.38.0 UNTIL 4.40.0 RELEASE]

• Add mypy python linter

• mega-linter-runner: Add possibility to send the docker image to use, including from another registry than docker hub, with argument --image

• Linter versions upgrades

  • phpstan from 0.12.91 to 0.12.92 on 2021-07-10
  • checkov from 2.0.259 to 2.0.261 on 2021-07-11
  • checkov from 2.0.261 to 2.0.262 on 2021-07-11
  • checkov from 2.0.262 to 2.0.263 on 2021-07-12
  • checkov from 2.0.263 to 2.0.266 on 2021-07-13
  • checkov from 2.0.266 to 2.0.267 on 2021-07-13

[4.38.0] - 2021-07-10

• New python linter: bandit, added by Tom Pansino

• Manage Github action versioning: Match MegaLinter docker image version

• Linter versions upgrades

  • snakemake from 6.5.2 to 6.5.3 on 2021-07-07
  • checkov from 2.0.251 to 2.0.253 on 2021-07-07
  • php from 7.4.19 to 7.4.21 on 2021-07-07
  • sql-lint from 0.0.18 to 0.0.19 on 2021-07-08
  • checkov from 2.0.253 to 2.0.257 on 2021-07-08
  • isort from 5.9.1 to 5.9.2 on 2021-07-10
  • checkov from 2.0.257 to 2.0.259 on 2021-07-10

[4.37.0] - 2021-07-05

• Downgrade npm to npm@latest-6 to avoid idealTree error when using npm install

• Use pip to install ansible & ansible-lint as alpine apk package ansible disappeared

• Add --doc argument to build.sh to generate doc only when requested (manually, or from CI job Auto-Update-Linters)

• Add rust in default installations as it's required for latest pip cryptography package

• Linter versions upgrades

  • rstfmt from 0.0.0 to 0.0.9 on 2021-06-24
  • sfdx-scanner-apex from 2.9.1 to 2.9.2 on 2021-06-24
  • sfdx-scanner-aura from 2.9.1 to 2.9.2 on 2021-06-24
  • sfdx-scanner-lwc from 2.9.1 to 2.9.2 on 2021-06-24
  • snakemake from 6.4.1 to 6.5.0 on 2021-06-24
  • terraform-fmt from Terraform.v1.0.0 to 1.0.0 on 2021-06-24
  • terragrunt from 0.30.7 to 0.31.0 on 2021-06-24
  • snakemake from 6.5.0 to 6.5.1 on 2021-06-24
  • terraform-fmt from 1.0.0 to 1.0.1 on 2021-06-24
  • prettier from 2.3.1 to 2.3.2 on 2021-06-27
  • checkstyle from 8.43 to 8.44 on 2021-06-28
  • checkov from 2.0.226 to 2.0.228 on 2021-06-28
  • checkov from 2.0.228 to 2.0.229 on 2021-06-28
  • checkov from 2.0.229 to 2.0.230 on 2021-06-28
  • checkov from 2.0.230 to 2.0.232 on 2021-06-28
  • cfn-lint from 0.51.0 to 0.52.0 on 2021-07-05
  • hadolint from 2.5.0 to 2.6.0 on 2021-07-05
  • eslint from 7.29.0 to 7.30.0 on 2021-07-05
  • eslint-plugin-jsonc from 1.3.1 to 1.4.0 on 2021-07-05
  • phpstan from 0.12.90 to 0.12.91 on 2021-07-05
  • pylint from 2.8.3 to 2.9.3 on 2021-07-05
  • snakemake from 6.5.1 to 6.5.2 on 2021-07-05
  • checkov from 2.0.232 to 2.0.250 on 2021-07-05
  • terrascan from 1.7.0 to 1.8.0 on 2021-07-05
  • checkov from 2.0.250 to 2.0.251 on 2021-07-05

[4.36.0] - 2021-06-22

• Fix Phive (php package manager) installation

• Fix dependency error with importlib_metadata before build

• Linter versions upgrades

  • clj-kondo from 2021.04.23 to 2021.06.18 on 2021-06-22
  • cfn-lint from 0.50.0 to 0.51.0 on 2021-06-22
  • hadolint from 2.4.1 to 2.5.0 on 2021-06-22
  • dotenv-linter from 3.0.0 to 3.1.0 on 2021-06-22
  • golangci-lint from 1.40.1 to 1.41.1 on 2021-06-22
  • npm-groovy-lint from 8.1.0 to 8.2.0 on 2021-06-22
  • htmlhint from 0.14.2 to 0.15.1 on 2021-06-22
  • eslint from 7.28.0 to 7.29.0 on 2021-06-22
  • eslint-plugin-jsonc from 1.2.1 to 1.3.1 on 2021-06-22
  • phpstan from 0.12.88 to 0.12.90 on 2021-06-22
  • isort from 5.8.0 to 5.9.1 on 2021-06-22
  • clippy from 0.1.52 to 0.1.53 on 2021-06-22
  • snakefmt from 0.4.0 to 0.4.1 on 2021-06-22
  • cspell from 5.6.0 to 5.6.6 on 2021-06-22
  • sqlfluff from 0.5.6 to 0.6.0 on 2021-06-22
  • terraform-fmt from Terraform.v0.15.5 to Terraform.v1.0.0 on 2021-06-22
  • terragrunt from 0.29.8 to 0.30.7 on 2021-06-22
  • terrascan from 1.6.0 to 1.7.0 on 2021-06-22
  • tflint from 0.29.0 to 0.29.1 on 2021-06-22

[4.35.0] - 2021-06-12

• Fix #304: Display error message when docker isn't found when running mega-linter-runner

• Calculate sum of docker pulls for main page counter badge

• Check _RULES_PATH for active_only_if_file_found check (#418, by Omeed Musavi)

• Upgrade clj-kondo 2021.04.23-alpine

• Upgrade to python:3.9.5-alpine

• Partial fix #481: Allow applying fixes on push events (PR487 by Vít Kučera)

• Fix build.sh on windows

• Add trivy security check of all built MegaLinter docker images

• Linter versions upgrades

  • terragrunt from 0.29.2 to 0.29.3 on 2021-05-16
  • shfmt from 3.2.4 to 3.3.0 on 2021-05-18
  • phpstan from 0.12.87 to 0.12.88 on 2021-05-18
  • cfn-lint from 0.49.1 to 0.49.2 on 2021-05-19
  • cpplint from 1.5.4 to 1.5.5 on 2021-05-21
  • scalafix from 0.9.27 to 0.9.28 on 2021-05-21
  • snakemake from 6.3.0 to 6.4.0 on 2021-05-21
  • terraform-fmt from Terraform.v0.15.3 to Terraform.v0.15.4 on 2021-05-21
  • terragrunt from 0.29.3 to 0.29.4 on 2021-05-21
  • sfdx-scanner-apex from 2.8.0 to 2.9.1 on 2021-05-22
  • sfdx-scanner-aura from 2.8.0 to 2.9.1 on 2021-05-22
  • sfdx-scanner-lwc from 2.8.0 to 2.9.1 on 2021-05-22
  • jscpd from 3.3.25 to 3.3.26 on 2021-05-24
  • eslint from 7.26.0 to 7.27.0 on 2021-05-24
  • clj-kondo from 2021.02.13 to 2021.04.23 on 2021-05-24
  • terragrunt from 0.29.4 to 0.29.5 on 2021-05-24
  • snakemake from 6.4.0 to 6.4.1 on 2021-05-28
  • terragrunt from 0.29.5 to 0.29.6 on 2021-05-28
  • terragrunt from 0.29.6 to 0.29.7 on 2021-05-29
  • cspell from 4.1.3 to 5.5.2 on 2021-05-30
  • checkstyle from 8.42 to 8.43 on 2021-05-30
  • scalafix from 0.9.28 to 0.9.29 on 2021-05-30
  • pylint from 2.8.2 to 2.8.3 on 2021-06-01
  • cfn-lint from 0.49.2 to 0.50.0 on 2021-06-04
  • terraform-fmt from Terraform.v0.15.4 to Terraform.v0.15.5 on 2021-06-04
  • terragrunt from 0.29.7 to 0.29.8 on 2021-06-04
  • eslint from 7.27.0 to 7.28.0 on 2021-06-05
  • prettier from 2.3.0 to 2.3.1 on 2021-06-07
  • protolint from 0.31.0 to 0.32.0 on 2021-06-07
  • cspell from 5.5.2 to 5.6.0 on 2021-06-07
  • sql-lint from 0.0.17 to 0.0.18 on 2021-06-07
  • tflint from 0.28.1 to 0.29.0 on 2021-06-07

[4.34.0] - 2021-04-30

• Fix bug in MegaLinter plugins installation (related to #PR403)

• Linter versions upgrades

  • sqlfluff from 0.5.3 to 0.5.5 on 2021-05-14
  • hadolint from 2.4.0 to 2.4.1 on 2021-05-15
  • golangci-lint from 1.40.0 to 1.40.1 on 2021-05-15
  • sqlfluff from 0.5.5 to 0.5.6 on 2021-05-15

[4.33.0] - 2021-04-30

• Split Salesforce sfdx-scanner into pmd, eslint aura and eslint lwc

• Linter versions upgrades

  • snakemake from 6.1.1 to 6.1.2 on 2021-04-20
  • stylelint from 13.12.0 to 13.13.0 on 2021-04-25
  • hadolint from 2.2.0 to 2.3.0 on 2021-04-25
  • eslint from 7.24.0 to 7.25.0 on 2021-04-25
  • pylint from 2.7.4 to 2.8.0 on 2021-04-25
  • snakemake from 6.1.2 to 6.2.1 on 2021-04-25
  • terrascan from 1.4.0 to 1.5.0 on 2021-04-25
  • checkstyle from 8.41.1 to 8.42 on 2021-04-25
  • pylint from 2.8.0 to 2.8.1 on 2021-04-25
  • tflint from 0.27.0 to 0.28.0 on 2021-04-25
  • pylint from 2.8.1 to 2.8.2 on 2021-04-27
  • cfn-lint from 0.48.3 to 0.49.0 on 2021-04-28
  • phpstan from 0.12.84 to 0.12.85 on 2021-04-28
  • terragrunt from 0.28.21 to 0.29.0 on 2021-04-28
  • snakemake from 6.2.1 to 6.3.0 on 2021-04-30
  • terrascan from 1.5.0 to 1.5.1 on 2021-04-30

[4.32.0] - 2021-04-20

• Fix #376 : Link-title to license

• Add support from prettier as JSON formatter (#421, by Omeed Musavi

• Linter versions upgrades

  • phpstan from 0.12.82 to 0.12.83 on 2021-04-03
  • markdown-table-formatter from 1.0.4 to 1.1.0 on 2021-04-05
  • tflint from 0.25.0 to 0.26.0 on 2021-04-05
  • sqlfluff from 0.4.1 to 0.5.0 on 2021-04-06
  • cfn-lint from 0.48.1 to 0.48.2 on 2021-04-07
  • yamllint from 1.26.0 to 1.26.1 on 2021-04-07
  • snakemake from 6.1.0 to 6.1.1 on 2021-04-08
  • terragrunt from 0.28.16 to 0.28.19 on 2021-04-09
  • phpcs from 3.5.8 to 3.6.0 on 2021-04-09
  • eslint from 7.23.0 to 7.24.0 on 2021-04-10
  • sqlfluff from 0.5.0 to 0.5.1 on 2021-04-10
  • protolint from 0.30.1 to 0.31.0 on 2021-04-11
  • sqlfluff from 0.5.1 to 0.5.2 on 2021-04-11
  • sfdx-scanner from 2.7.0 to 2.8.0 on 2021-04-14
  • terragrunt from 0.28.19 to 0.28.21 on 2021-04-15
  • cfn-lint from 0.48.2 to 0.48.3 on 2021-04-17
  • flake8 from 3.9.0 to 3.9.1 on 2021-04-17
  • tflint from 0.26.0 to 0.27.0 on 2021-04-19
  • hadolint from 2.1.0 to 2.2.0 on 2021-04-19
  • phpstan from 0.12.83 to 0.12.84 on 2021-04-19
  • shellcheck from 0.7.1 to 0.7.2 on 2021-04-19

[4.31.0] - 2021-04-03

• Keep license pre-formatted in docs

• Use Python virtual-environment in dev-dependencies shell example

• Fix #367 : Display editorconfig-checker version

• Fix #379 : New configuration FAIL_IF_MISSING_LINTER_IN_FLAVOR

• Linter versions upgrades

  • flake8 from 3.8.4 to 3.9.0 on 2021-03-15
  • ktlint from 0.40.0 to 0.41.0 on 2021-03-21
  • phpstan from 0.12.81 to 0.12.82 on 2021-03-21
  • isort from 5.7.0 to 5.8.0 on 2021-03-21
  • sfdx-scanner from 2.6.0 to 2.7.0 on 2021-03-21
  • sql-lint from 0.0.15 to 0.0.16 on 2021-03-21
  • swiftlint from 0.43.0 to 0.43.1 on 2021-03-21
  • editorconfig-checker from 0.0.0 to 2.3.4 on 2021-03-22
  • ktlint from 0.41.0 to 0.40.0 on 2021-03-22
  • cfn-lint from 0.47.2 to 0.48.1 on 2021-03-30
  • coffeelint from 4.1.3 to 4.1.4 on 2021-03-30
  • hadolint from 1.23.0 to 2.0.0 on 2021-03-30
  • golangci-lint from 1.38.0 to 1.39.0 on 2021-03-30
  • checkstyle from 8.41 to 8.41.1 on 2021-03-30
  • eslint from 7.22.0 to 7.23.0 on 2021-03-30
  • kubeval from 0.15.0 to 0.16.1 on 2021-03-30
  • perlcritic from 1.138 to 1.140 on 2021-03-30
  • pylint from 2.7.2 to 2.7.4 on 2021-03-30
  • clippy from 0.0.212 to 0.1.51 on 2021-03-30
  • scalafix from 0.9.26 to 0.9.27 on 2021-03-30
  • terragrunt from 0.28.9 to 0.28.16 on 2021-03-30
  • kubeval from 0.16.0 to 0.16.1 on 2021-03-30
  • pylint from 2.7.3 to 2.7.4 on 2021-03-30
  • editorconfig-checker from 2.3.4 to 2.3.5 on 2021-03-31
  • hadolint from 2.0.0 to 2.1.0 on 2021-04-02
  • snakemake from 6.0.5 to 6.1.0 on 2021-04-02

[4.30.0] - 2021-03-14

• Fix #361 - Not respecting *_DISABLE_ERRORS: false

• New variable FORMATTERS_DISABLE_ERRORS to force all formatters to be blocking if errors are found

• Add *.svg in .jscpd (copy-paste detector) default ignore paths

• Linter versions upgrades

  • cfn-lint from 0.47.1 to 0.47.2 on 2021-03-13
  • eslint from 7.21.0 to 7.22.0 on 2021-03-13
  • eslint-plugin-jsonc from 1.1.0 to 1.2.1 on 2021-03-14

[4.29.0] - 2021-03-12

• Fix regex to list Salesforce errors

• Fix Updated Files Reporter when MegaLinter isn't running on GitHub Action

• Fix #359 - invalid literal with _DISABLE_ERRORS_IF_LESS_THAN

• Linter versions upgrades

  • clj-kondo from 2021.01.20 to 2021.02.13 on 2021-03-01
  • jscpd from 3.3.24 to 3.3.25 on 2021-03-06
  • hadolint from 1.22.1 to 1.23.0 on 2021-03-06
  • golangci-lint from 1.37.1 to 1.38.0 on 2021-03-06
  • markdownlint from 0.26.0 to 0.27.1 on 2021-03-06
  • snakemake from 6.0.0 to 6.0.2 on 2021-03-06
  • sqlfluff from 0.4.0 to 0.4.1 on 2021-03-06
  • swiftlint from 0.42.0 to 0.43.0 on 2021-03-06
  • terrascan from 1.3.3 to 1.4.0 on 2021-03-06
  • stylelint from 13.11.0 to 13.12.0 on 2021-03-06
  • tflint from 0.24.1 to 0.25.0 on 2021-03-06
  • shfmt from 3.2.2 to 3.2.4 on 2021-03-10
  • cfn-lint from 0.46.0 to 0.47.0 on 2021-03-10
  • git_diff from 2.30.1 to 2.30.2 on 2021-03-10
  • phpstan from 0.12.80 to 0.12.81 on 2021-03-10
  • protolint from 0.29.0 to 0.30.1 on 2021-03-10
  • snakefmt from 0.3.1 to 0.4.0 on 2021-03-10
  • snakemake from 6.0.2 to 6.0.3 on 2021-03-10
  • cfn-lint from 0.47.0 to 0.47.1 on 2021-03-12
  • powershell from 7.1.2 to 7.1.3 on 2021-03-12
  • snakemake from 6.0.3 to 6.0.5 on 2021-03-12
  • terragrunt from 0.28.6 to 0.28.9 on 2021-03-12

[4.28.0] - 2021-03-01

• Feature: <LINTER_NAME>_DISABLE_ERRORS_IF_LESS_THAN : set linter status to warning if maximum allowed errors isn't reached

• Add colors in logs

• Linter versions upgrades

  • pylint from 2.6.0 to 2.6.2 on 2021-02-16
  • golangci-lint from 1.36.0 to 1.37.0 on 2021-02-19
  • phpstan from 0.12.76 to 0.12.77 on 2021-02-19
  • sfdx-scanner from 2.5.1 to 2.6.0 on 2021-02-19
  • terragrunt from 0.28.2 to 0.28.6 on 2021-02-19
  • terrascan from 1.3.2 to 1.3.3 on 2021-02-19
  • stylelint from 13.10.0 to 13.11.0 on 2021-02-21
  • golangci-lint from 1.37.0 to 1.37.1 on 2021-02-21
  • phpstan from 0.12.77 to 0.12.78 on 2021-02-21
  • pylint from 2.6.2 to 2.7.0 on 2021-02-22
  • cfn-lint from 0.45.0 to 0.46.0 on 2021-02-24
  • pylint from 2.7.0 to 2.7.1 on 2021-02-24
  • eslint-plugin-jsonc from 0.9.0 to 1.0.0 on 2021-02-25
  • phpstan from 0.12.78 to 0.12.79 on 2021-02-25
  • protolint from 0.28.2 to 0.29.0 on 2021-02-25
  • jscpd from 3.3.23 to 3.3.24 on 2021-02-28
  • eslint from 7.20.0 to 7.21.0 on 2021-02-28
  • scalafix from 0.9.25 to 0.9.26 on 2021-02-28
  • snakemake from 5.32.2 to 6.0.0 on 2021-02-28
  • checkstyle from 8.40 to 8.41 on 2021-03-01
  • eslint-plugin-jsonc from 1.0.0 to 1.1.0 on 2021-03-01
  • phpstan from 0.12.79 to 0.12.80 on 2021-03-01
  • pylint from 2.7.1 to 2.7.2 on 2021-03-01
  • clj-kondo from 2021.01.20 to 2021.02.13 on 2021-03-01

[4.27.0] - 2021-02-16

• Linters

  • Format YAML with prettier

• Core

  • Lint docker image using Dockle

• Fixes

  • Fix ansible-lint test cases for new version
  • Update --help expected return code for shfmt ash formatter and revive go linter
  • Add --write to update files fixed by eslint
  • Pimp MegaLinter sources by adding newLines when missing (manually and from build.py) + fix logger initialization error + call python3 by default (PR329 by Tom Klingenberg)
  • Increase max line length to 500 in yaml-lint default configuration

• Linter versions upgrades

  • ansible-lint from 4.2.0 to 5.0.0 on 2021-02-09
  • bash-exec from 5.0.17 to 5.1.0 on 2021-02-09
  • cfn-lint from 0.44.6 to 0.44.7 on 2021-02-09
  • hadolint from 1.21.0 to 1.22.1 on 2021-02-09
  • git_diff from 2.26.2 to 2.30.1 on 2021-02-09
  • php from 7.3.26 to 7.4.15 on 2021-02-09
  • phpstan from 0.12.71 to 0.12.74 on 2021-02-09
  • protolint from 0.28.0 to 0.28.2 on 2021-02-09
  • lintr from 2.0.1.9000 to 0.0.0 on 2021-02-09
  • snakemake from 5.32.0 to 5.32.1 on 2021-02-09
  • terragrunt from 0.27.1 to 0.28.2 on 2021-02-09
  • ansible-lint from 5.0.0 to 0.0.0 on 2021-02-09
  • dotnet-format from 4.1.131201 to 5.0.211103 on 2021-02-12
  • stylelint from 13.9.0 to 13.10.0 on 2021-02-12
  • phpstan from 0.12.74 to 0.12.75 on 2021-02-12
  • powershell from 7.0.4 to 7.1.2 on 2021-02-12
  • snakemake from 5.32.1 to 5.32.2 on 2021-02-12
  • coffeelint from 4.1.2 to 4.1.3 on 2021-02-14
  • eslint from 7.19.0 to 7.20.0 on 2021-02-14
  • phpstan from 0.12.75 to 0.12.76 on 2021-02-14
  • black from 19.10 to 20.8 on 2021-02-15
  • snakefmt from 0.2.6 to 0.3.0 on 2021-02-15
  • sqlfluff from 0.3.6 to 0.4.0 on 2021-02-15
  • cfn-lint from 0.44.7 to 0.45.0 on 2021-02-16
  • snakefmt from 0.3.0 to 0.3.1 on 2021-02-16

[4.26.2] - 2021-01-29

• Linter versions upgrades
  • shfmt from 3.2.1 to 3.2.2 on 2021-01-30
  • yamllint from 1.25.0 to 1.26.0 on 2021-01-30
  • hadolint from 1.20.0 to 1.21.0 on 2021-02-02
  • checkstyle from 8.39 to 8.40 on 2021-02-02
  • eslint from 7.18.0 to 7.19.0 on 2021-02-02
  • phpstan from 0.12.70 to 0.12.71 on 2021-02-02
  • tflint from 0.23.1 to 0.24.1 on 2021-02-02
  • cfn-lint from 0.44.5 to 0.44.6 on 2021-02-03
  • terrascan from 1.3.1 to 1.3.2 on 2021-02-04

[4.26.1] - 2021-01-29

• Fixes

  • Prevent unexpected token error using mega-linter-runner on old versions of node
  • #293 Fix CI for PR from forked repositories
  • #295 Fix crash when .cspell.json isn't parseable (wrong JSON format)
  • #311 Add java in salesforce flavor descriptor because it's used by Apex PMD

• Linter versions upgrades

  • phpstan from 0.12.68 to 0.12.69 on 2021-01-24
  • cfn-lint from 0.44.4 to 0.44.5 on 2021-01-25
  • golangci-lint from 1.35.2 to 1.36.0 on 2021-01-27
  • protolint from 0.27.0 to 0.28.0 on 2021-01-27
  • hadolint from 1.19.0 to 1.20.0 on 2021-01-28
  • phpstan from 0.12.69 to 0.12.70 on 2021-01-28
  • clj-kondo from 2020.09.09 to 2021.01.20 on 2021-01-28

[4.26.0] - 2021-01-24

• Core architecture

  • Manage remote mega-linter.yml configuration files
  • New property EXTENDS, allowing to inherit from remote mega-linter.yml configuration files
  • Add docker-in-docker management (reuse running docker instance)
  • Allow to skip auto apply fixes with commit or PR if latest commit text contains skip fix
  • Provide new issue link to create a new flavor to improve performances

• Linters

  • Add revive GO linter
  • Add SwiftLint for Swift language
  • New MegaLinter flavor swift
  • Get correct version for eslint-plugin-jsonc

• Linter versions upgrades

  • snakefmt from 0.2.5 to 0.2.6 on 2021-01-22
  • terrascan from 1.3.0 to 1.3.1 on 2021-01-22
  • eslint-plugin-jsonc from 6.14.10 to 0.9.0 on 2021-01-24

[4.25.0] - 2021-01-22

• Linters

  • Add SQL linter sqlfluff

• Fixes

  • #269 eslint: .eslintrc.yml is considered as found whereas it's not located in workspace root

• Linter versions upgrades

  • stylelint from 13.8.0 to 13.9.0 on 2021-01-19
  • markdown-table-formatter from 1.0.1 to 1.0.4 on 2021-01-19
  • terrascan from 1.2.0 to 1.3.0 on 2021-01-19
  • cfn-lint from 0.44.3 to 0.44.4 on 2021-01-19
  • powershell from 7.1.1 to 7.0.4 on 2021-01-19
  • sfdx-scanner from 2.4.0 to 2.5.1 on 2021-01-21
  • terragrunt from 0.26.7 to 0.27.1 on 2021-01-22

[4.24.1] - 2021-01-19

• mega-linter-runner --install

  • Create .jscpd.json file if copy-paste detection is activated
  • Display ending message

• Fixes

  • #266: shfmt error in python flavor, and reactivate BASH_SHFMT and DOCKERFILE_HADOLINT for own sources linting)

• Linter versions upgrades

  • powershell from 7.1.0 to 7.1.1 on 2021-01-15
  • eslint from 7.17.0 to 7.18.0 on 2021-01-16
  • eslint-plugin-jsonc from 7.17.0 to 7.18.0 on 2021-01-16
  • scalafix from 0.9.24 to 0.9.25 on 2021-01-16
  • snakemake from 5.31.1 to 5.32.0 on 2021-01-16
  • protolint from 0.26.1 to 0.27.0 on 2021-01-18
  • phpstan from 0.12.67 to 0.12.68 on 2021-01-19

[4.24.0] - 2021-01-14

• Linters

  • Add markdown-table-formatter
  • Fix python error when CSpell found no errors

• Linter versions upgrades

  • v8r from 0.4.0 to 0.5.0 on 2021-01-14
  • phpstan from 0.12.66 to 0.12.67 on 2021-01-14
  • psalm from 4.3.1 to Psalm.4.x-dev@ on 2021-01-14

[4.23.3] - 2021-01-14

• Fix .cspell.json file updater

• Linter versions upgrades

  • v8r from 0.4.0 to 0.5.0 on 2021-01-14

[4.23.2] - 2021-01-14

• mega-linter-runner --install:
  • Fix .mega-linter.yml DISABLE property when nothing in it
  • Add default .cspell.json if spelling mistakes detector is activated

[4.23.1] - 2021-01-12

• Core
  • Refactor part of Linter & reporters to manage correctly logs when linter cli_lint_mode is project or list_of_files
    • Generate ConsoleLinter and Text reports based from Linter.files_lint_results instead of at each loop
    • When TAP Reporter active, switch linters with cli_lint_mode == "list_of_files" to "files"
    • Fix linter output when cli_lint_mode == "list_of_files"
  • Decrease number of Dockerfile steps

[4.23.0] - 2021-01-12

• Core

  • If the linter is a formatter, errors aren't considered as blocking errors by default

• Linters

  • Add prettier to format Javascript and Typescript. standard remains default
  • Add remark-lint to check and fix Markdown files. markdownlint remains default

• Linter versions upgrades

  • golangci-lint from 1.35.1 to 1.35.2 on 2021-01-11
    • golangci-lint from 1.35.0 to 1.35.1 on 2021-01-11
    • golangci-lint from 1.34.1 to 1.35.0 on 2021-01-08
  • cfn-lint from 0.44.2 to 0.44.3 on 2021-01-09
  • tflint from 0.23.0 to 0.23.1 on 2021-01-10
  • dotenv-linter from 2.2.1 to 3.0.0 on 2021-01-11
    • Update MegaLinter to call dotenv-linter v3 with fix and not --fix anymore
  • phpstan from 0.12.65 to 0.12.66 on 2021-01-11

[4.22.1] - 2021-01-07

• Core

  • Improve warning status in logs
  • Remove timestamp at each log line

• Enhance integration with GitLab CI

  • Update configuration generator
  • Update core to clean logs when in GitLab CI context

[4.22.0] - 2021-01-06

• Core

  • Allow user to configure custom scripts in .mega-linter.yml to run before and after linting, with variables PRE_RUN and POST_RUN
  • Fix wrong linter status bug
  • Enhance configuration variables performances
  • Rename XXX_FILE_NAME into XXX_CONFIG_FILE

• Linters

  • Add JSONC (json with comments) linting with eslint-plugin-jsonc

[4.21.0] - 2021-01-03

• Linters

  • Add misspell spell checker
  • Allow to define cli_lint_errors_regex in descriptors to extract number of errors from linter output stdout
  • Call linters CLIs with list of files instead of once by file, to improve performances
    • eslint
    • markdownlint
    • pylint
    • flake8
    • isort

• Core

  • Implement architecture for MegaLinter plugins
  • Count number of errors in linter logs with regexes (cli_lint_errors_count and cli_lint_errors_regex in descriptor files)
  • Cleanup unused legacy from Super-Linter

• Reports

  • Better icons for Console, GitHub Comment and Text reporters: ✅ ❌

• Documentation

  • Add Install button for VSCode IDE extensions when available
  • Add Install button for JetBrains IDEs extensions when available
  • Add a new page All linters listing all linters and references to MegaLinter in their documentation
  • Add json-schema documentation generation and references

• CI

  • Use quick build and TEST_KEYWORDS in commit messages, to improve contributor experience

• Fixes

  • Upgrade .tflint default config to work with new tflint version

[4.20.0] - 2020-12-28

• Flavors

  • Add ci_light flavor for only CI config files (Dockerfile,Jenkinsfile,JSON,YAML,XML)
  • Add salesforce flavor for Salesforce projects (DX or Metadata)
  • If all required linters aren't in the current flavor, just skip them with a warning message

• Core

  • Add Json Schema for descriptors (allows validation and auto-completion from IDEs)
  • Add Json Schema for .mega-linter.yml configuration files

[4.19.0] - 2020-12-27

• Installation

  • Add a yeoman generator in mega-linter-runner to initialize configuration in a repository: npx mega-linter-runner --install

• Linters

  • New linter v8r to validate json and yaml files with schemastore.org

[4.18.0] - 2020-12-23

• Core

  • Don't suggest flavors when MegaLinter validates only the diff files (VALIDATE_ALL_CODE_BASE: false)
  • Fix ConsoleReporter active linters table content
  • Check if linter is able to fix before flagging it as a fixing linter during runtime

• Flavors

  • New flavor: documentation

• Reporters

  • Support GitHub Enterprise for GitHub Comment Reporter
  • Support GitHub Enterprise for GitHub Status Reporter

• Doc

  • Add docker pulls badge in flavors documentation
  • Generate list of references to MegaLinter

[4.17.0] - 2020-12-18

• Core
  • Allow to use remote linters configuration files with LINTER_RULES_PATH
  • Add .jekyll-cache in the list of ignored folders by default
  • Arrange display of Flavor suggestions (text and order) in reporter logs
• Build
  • Dynamically generate (build.py) the list of flavors in github actions workflows
• Doc
  • Reorganize online documentation menus
• Linters
  • Add new linter git_diff to check for git conflicts markers
  • Fix rakudo installation
  • Fix phpstan installation

[4.16.0] - 2020-12-14

• Flavored MegaLinters

  • Generate lightweight docker images to improve MegaLinter performances on some language based projects
  • During MegaLinter run, suggest user to use a flavor and write it in reporters
  • Update descriptor YML files to define flavours
  • Update build.py to create one Dockerfile by MegaLinter flavour & flavors documentation
  • New GHA workflows to build all flavoured MegaLinters when pushing in master

• Fixes

  • Output reporter problems as warnings
  • Don't make MegaLinter fail in case GitHubStatusReporter fails

• Doc

  • Rename "index" pages into more meaningful labels

[4.15.0] - 2020-12-13

• Add Vue.js linting (eslint-plugin-vue added in dependencies)

• Configuration parameters changes:

  • Change config setting logic: EXCLUDED_DIRECTORIES is now replacing original directory list instead of extending it
  • Add config setting: ADDITIONAL_EXCLUDED_DIRECTORIES extends EXCLUDED_DIRECTORIES directory list
  • Add config setting: <LINTER_KEY>_FILE_EXTENSIONS to override corresponding value from linter descriptor file
  • Add config setting: <LINTER_KEY>_FILE_NAMES_REGEX to override corresponding value from linter descriptor file

• Descriptor yaml schema changes:

  • Rename files_names_not_ends_with to file_names_not_ends_with
  • Rename files_names to files_names_regex and change behavior to expect regular expressions in the list. they're applied using full match (the whole text should match the regular expression)

• Fix error message from Email Reporter when SMTP password isn't set

• Fix automerge action yml (skip if secrets.PAT isn't set)

• Improve caching of compiled regular expressions

• Override mkdocs theme to make analytics work

• CI

  • Auto update linters and documentation: Create update PR only if linter versions has been updated
  • Build and deploy docker images only when it's relevant (not in case of just documentation update for example)

[4.14.2] - 2020-12-07

• Quick fix Github Comment Reporter
• Reorder linters for reports

[4.14.1] - 2020-12-07

• Fixes
  • Fix python error when File.io doesn't respond, + harmonize reporter logs

[4.14.0] - 2020-12-07

• Linters

  • Add Salesforce linter: sfdx-scanner

• Core architecture

  • Allow to call extra commands to build help content

[4.13.0] - 2020-12-05

• Major updates in online documentation generation

  • Reorganize TOC
  • Generate individual pages from README sections and update their internal links targets
  • Open external links in a new browser tab

• New configuration parameters

  • Allow disabling printing alpaca image to console using PRINT_ALPACA config parameter
  • Support list of additional excluded directory basenames via EXCLUDED_DIRECTORIES configuration parameter

• New reporters:

  • Email reporter, to send mega-linter reports by mail if smtp server is configured
  • File.io reporter, to access reports with a file.io hyperlink

• Fixes

  • Fix markdown comments generator when build on Windows
  • Fix terrascan unit test case
  • Run some actions/steps only when PR is from same repository
  • Add comments in markdown generated by build.py
  • Fix boolean variables not taken in account in .mega-linter.yml config file

• Performance

  • Change way to install linters in Dockerfile (replace FROM … COPY) by package or sh installation, to reduce the docker build steps from 93 to 87
    • shellcheck
    • editorconfig-checker
    • dotenv-linter
    • golangci-lint
    • kubeval

[4.12.0] - 2020-11-29

• Performances
  • Update default workflow to get ride of has_updates action (replace by output has_updated_files from mega-linter github action)
  • Avoid duplicate runs in mega-linter.yml template and internal workflows, using skip-duplicate-actions
  • Give a proper name to each internal workflow
  • Fix issue about mkdirs failing

[4.11.0] - 2020-11-29

• Manage parallel processing of linters to improve performances

[4.10.1] - 2020-11-28

• Fallback to default behaviours instead of crashes when git not available

• mega-linter-runner

  • Allow to send env parameters to mega-linter-runner cli
  • Add examples in documentation
  • Publish mega-linter-runner beta version when pushing in master branch

[4.10.0] - 2020-11-23

• Add link to linters rules index in documentation

• Remove ANSI color codes from log files

• Add performances by linter in console log

• New option SHOW_ELAPSED_TIME , allowing the number of seconds elapsed by linter in reports

• NPM package MegaLinter runner

  • runs MegaLinter locally, using .mega-linter.yml configuration (requires docker installed on your computer)
  • test cases added in CI

[4.9.0] - 2020-11-23

• Core

  • Allow configuration to be defined in a .mega-linter.yml file

• Linters

  • Add Gherkin (Cucumber language) & gherkin-lint
  • Add RST linter : rst-lint
  • Add RST linter : rstcheck
  • Add RST formatter : rstfmt
  • Activate formatting for BASH_SHFMT
  • Activate formatting for SNAKEMAKE_SNAKEFMT
  • JsCpd: remove copy-paste HTML folder when no abuse copy-paste has been found

• Logs

  • Store log files as artifacts during test cases
  • Add examples of success and failed linter logs in documentation
  • Remove /tmp/lint and /github/workspace from log files

• Documentation

  • Add list of supported IDE in each linter documentation
  • Generate GitHub card on linter doc when available
  • Store link preview info during build

[4.8.0] - 2020-11-17

• New reporter: Updated sources

[4.7.1] - 2020-11-16

• Activate auto-fix for Groovy

[4.7.0] - 2020-11-16

• Update markdown-link-check default config
• Add tip in documentation about .cspell.json generated by MegaLinter
• Remove /tmp/lint from logs
• Improve summary table for linters in project mode (all project linted in one call, not one file by one file)
• Add Reporters in documentation, with screenshots
• New MegaLinter variables to activate/deactivate/configure reporters

[4.6.0] - 2020-11-13

• Automatic build of documentation with mkdocs-material
• Automatic deployment to https://megalinter.github.io/
• Add markdown-link-check

[4.5.0] - 2020-11-11

• Add Visual Basic .NET language & dotnet-format
• Refactor removal of arguments for formatters (from custom class to Linter generic class)
• Perl: lint files with no extension containing Perl shebang
• Add automerge for PR issues from linter versions updates
• Fix ignored root files issue

[4.4.0] - 2020-11-05

• Add Python iSort
• Quick fix "PR Comment" reporter (orange light emoji)
• Refresh fork

[4.3.2] - 2020-11-04

• Add spell checker cspell

• Add Github Action Workflow to automatically:

  • update linters dependencies
  • rebuild MegaLinter documentation
  • create a PR with updates

• Apply fixes performed by linters:

  • User configuration (APPLY_FIXES vars)
  • Descriptors configuration: cli_lint_fix_arg_name set on linter in YML when it can format and/or auto-fix issues
  • Provide fixed files info in reports
  • Test cases for all fixable file types: sample_project_fixes
  • Generate README linters table with column "Fix"
  • Provide fix capability in linters docs
  • Update Workflows YMLs to create PR or commit to apply fixes

• Core Archi:

  • All linters now have a name different than descriptor_id
  • replace calls from os.path.exists to os.path.isfile and os.path.isdir

• Other:

  • fix Phive install
  • Upgrade linter versions & help

[4.0.0] - 2020-10-01

• Initial version