Bump oxsecurity/megalinter from 9b98bf52c4f5223f34b6d4d1d285a55fa4565363 to 8cdb284b74d1a30398bb095409460ade6684040d

[dependabot]

Bumps oxsecurity/megalinter from 9b98bf52c4f5223f34b6d4d1d285a55fa4565363 to 8cdb284b74d1a30398bb095409460ade6684040d.

Changelog

Sourced from oxsecurity/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

• Core

  • Improve files browsing performances
  • Optimize parallel linter processing and improve grouping logic
  • Improve performance of listing .gitignored files by sending excluded directories to git ls-files
  • If there are more than 500 .gitignored files, advise to add more excluded directories using variable ADDITIONAL_EXCLUDED_DIRECTORIES, to improve performances

• New linters

  • Add PYTHON_NBQA_MYPY for type-checking Jupyter notebooks using nbqa + mypy

• Disabled linters

  • LUA_SELENE: Kampfkarren/selene#662

• Deprecated linters

• Removed linters

• Media

• Linters enhancements

  • Use the official checkmake image by @​bdovaz
  • Add sarif support to spectral by @​bdovaz

• Fixes

  • Add support for SSH remote origins when building custom flavors (fixes: #6511)
  • Fix issue with plugins ignored when FLAVOR_SUGGESTIONS=false
  • Fix wrong tagging apply_fixes=True when linter has no fix options configured
  • Python mypy: Remove .ipynb from file extensions (mypy doesn't support notebooks directly) - fixes #6904

• Reporters

  • Add a link inviting to star MegaLinter
  • Display in the console reporter the working directory from which the commands are executed by @​bdovaz
  • Update WebHook reporter so it can send more events for a better integration with UI
  • When truncating long comments in markdown reports, keep the end of the text instead of the beginning (which usually contains less useful information)

• Doc

  • JSON Schema: add default values for file extensions and file names variables + improve descriptions
  • Update default secured env variables documentation

• Flavors

... (truncated)

Commits

• 8cdb284 Avoid duplicate jobs "Mirror docker image" + allow to skip linters build (#7186)
• 491e788 chore(deps): update typescript-eslint monorepo to v8.55.0 (minor) (#7145)
• 87fcd33 chore(deps): update dependency semver to v7.7.4 (#7110)
• 3217a54 chore(deps): update dependency @​babel/core to v7.29.0 (#7135)
• 362fa31 chore(deps): update dependency eslint-plugin-vue to v10.7.0 (#7136)
• ccd6296 chore(deps): update dependency eslint-plugin-jest to v29.14.0 (#7175)
• 71c66bd chore(deps): update node.js to v24.13.1 (#7169)
• 7a4cdee chore(deps): update dependency which to v6.0.1 (#7168)
• b38f37d chore(deps): update dependency redis to v7.1.1 (#7162)
• e8c531c chore(deps): update dependency eslint-plugin-jsonc to v2.21.1 (#7156)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no	no	1.28s
✅ REPOSITORY	gitleaks	yes		no	no	0.43s
✅ REPOSITORY	git_diff	yes		no	no	0.21s
✅ REPOSITORY	grype	yes		no	no	34.79s
✅ REPOSITORY	secretlint	yes		no	no	0.36s
✅ REPOSITORY	syft	yes		no	no	1.03s
✅ REPOSITORY	trivy	yes		no	no	7.12s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.08s
✅ REPOSITORY	trufflehog	yes		no	no	2.18s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

[dependabot]

Looks like oxsecurity/megalinter is up-to-date now, so this is no longer needed.