Skip to content

chore(deps): update oxsecurity/megalinter action to v9 #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update oxsecurity/megalinter action to v9 #22

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 20, 2025 •
edited
Loading

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package Type Update Change
oxsecurity/megalinter action major v7 -> v9

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v9

Compare Source

  • Fix v9 release issue

v8

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions bot added the prod label Sep 20, 2025
@github-actions GitHub Actions
Copy link
Contributor

❌MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
❌ ACTION actionlint 3 1 0 0.27s
✅ JAVASCRIPT prettier 1 1 0 0 0.44s
✅ JSON jsonlint 8 0 0 0.22s
✅ JSON npm-package-json-lint yes no no 0.44s
✅ JSON prettier 8 2 0 0 0.39s
✅ JSON v8r 8 0 0 7.15s
⚠️ MARKDOWN markdownlint 9 0 20 0 0.82s
✅ MARKDOWN markdown-table-formatter 9 0 0 0 0.33s
✅ REPOSITORY gitleaks yes no no 0.15s
✅ REPOSITORY git_diff yes no no 0.01s
❌ REPOSITORY grype yes 5 no 26.5s
❌ REPOSITORY secretlint yes 1 no 0.37s
✅ REPOSITORY syft yes no no 1.28s
✅ REPOSITORY trivy-sbom yes no no 0.14s
✅ REPOSITORY trufflehog yes no no 2.74s
⚠️ SPELL cspell 27 117 0 6.79s
❌ SPELL lychee 24 8 0 1.06s
⚠️ SPELL proselint 9 5 0 7.03s
✅ YAML prettier 7 3 0 0 0.54s
✅ YAML yamllint 7 0 0 0.47s

Detailed Issues

❌ ACTION / actionlint - 1 error 
.github/workflows/megalinter.yml:101:13: if: condition "${{ success() }} || ${{ failure() }}" is always evaluated to true because extra characters are around ${{ }} [if-cond]
    |
101 |         if: ${{ success() }} || ${{ failure() }}
    |             ^~~
❌ REPOSITORY / grype - 5 errors 
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
NAME            INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS           RISK   
braces          3.0.2      3.0.3     npm   GHSA-grv7-fg5c-xmjg  High      0.2% (45th)    0.2    
cross-spawn     5.1.0      6.0.6     npm   GHSA-3xgq-45jj-v275  High      0.1% (33rd)    < 0.1  
micromatch      4.0.5      4.0.8     npm   GHSA-952p-6rrq-rcjv  Medium    0.1% (32nd)    < 0.1  
@babel/runtime  7.24.1     7.26.10   npm   GHSA-968p-4wvh-cqc8  Medium    < 0.1% (15th)  < 0.1  
tmp             0.0.33     0.2.4     npm   GHSA-52f5-9888-hmc6  Low       < 0.1% (9th)   < 0.1
[0026] ERROR discovered vulnerabilities at or above the severity threshold
❌ SPELL / lychee - 8 errors 
[404] https://megalinter.github.io/flavors/ | Network error: Not Found
[404] https://megalinter.github.io/configuration/ | Network error: Not Found
[404] https://api.github.com/repos/$ | Network error: Not Found
[404] https://github.com/$ | Network error: Not Found
[404] https://github.com/openzeppelin/compound-monitoring-v3/workflows | Network error: Not Found
[403] https://faucet.polygon.technology/ | Network error: Forbidden
[404] https://reqbin.com/req/ | Network error: Not Found
[404] https://github.com/openzeppelin/compound-monitoring-v3/actions | Network error: Not Found
📝 Summary
---------------------
🔍 Total...........31
✅ Successful......23
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........8

Errors in .github/markdown-link-check.json
[404] https://github.com/openzeppelin/compound-monitoring-v3/actions | Network error: Not Found
[404] https://github.com/openzeppelin/compound-monitoring-v3/workflows | Network error: Not Found
[403] https://faucet.polygon.technology/ | Network error: Forbidden
[404] https://reqbin.com/req/ | Network error: Not Found

Errors in .github/workflows/megalinter.yml
[404] https://megalinter.github.io/configuration/ | Network error: Not Found
[404] https://api.github.com/repos/$ | Network error: Not Found
[404] https://github.com/$ | Network error: Not Found
[404] https://megalinter.github.io/flavors/ | Network error: Not Found
❌ REPOSITORY / secretlint - 1 error 
TypeError [ERR_PARSE_ARGS_UNKNOWN_OPTION]: Unknown option '--secretlintignores'. To specify a positional argument starting with a '-', place it at the end of the command after '--', as in '-- "--secretlintignores"
    at checkOptionUsage (node:internal/util/parse_args/parse_args:107:13)
    at node:internal/util/parse_args/parse_args:381:9
    at Array.forEach (<anonymous>)
    at parseArgs (node:internal/util/parse_args/parse_args:378:3)
    at file:///node-deps/node_modules/secretlint/module/cli.js:161:33
    at ModuleJob.run (node:internal/modules/esm/module_job:274:25)
    at async onImport.tracePromise.__proto__ (node:internal/modules/esm/loader:644:26)
    at async file:///node-deps/node_modules/secretlint/bin/secretlint.js:14:26 {
  code: 'ERR_PARSE_ARGS_UNKNOWN_OPTION'
}
⚠️ SPELL / cspell - 117 errors 
.gitignore:5:15      - Unknown word (pdflatex)   -- ## Core latex/pdflatex auxiliary files:
	 Suggestions: [plate, palate, pilate, plated, platen]
.gitignore:31:34     - Unknown word (bibtex)     -- Bibliography auxiliary files (bibtex/biblatex/biber):
	 Suggestions: [bite, bible, biter, bites, bitte]
.gitignore:31:41     - Unknown word (biblatex)   -- auxiliary files (bibtex/biblatex/biber):
	 Suggestions: [bible, blate, bibles, biflex, binate]
.gitignore:31:50     - Unknown word (biber)      -- files (bibtex/biblatex/biber):
	 Suggestions: [bier, baber, bider, biker, biter]
.gitignore:40:7      - Unknown word (latexmk)    -- *.fdb_latexmk
	 Suggestions: [latex, latex's, latex2e, latexes, Latex]
.gitignore:41:3      - Unknown word (synctex)    -- *.synctex
	 Suggestions: [synced, synnex, syntax, synched, Synnex]
.gitignore:42:3      - Unknown word (synctex)    -- *.synctex(busy)
	 Suggestions: [synced, synnex, syntax, synched, Synnex]
.gitignore:43:3      - Unknown word (synctex)    -- *.synctex.gz
	 Suggestions: [synced, synnex, syntax, synched, Synnex]
.gitignore:44:3      - Unknown word (synctex)    -- *.synctex.gz(busy)
	 Suggestions: [synced, synnex, syntax, synched, Synnex]
.gitignore:45:3      - Unknown word (pdfsync)    -- *.pdfsync
	 Suggestions: []
.gitignore:48:3      - Unknown word (latexrun)   -- # latexrun
	 Suggestions: [lateran, Lateran, laten, later, latex]
.gitignore:56:3      - Unknown word (achemso)    -- # achemso
	 Suggestions: [aches, ahems, ache's, acheson, Acheson]
.gitignore:59:3      - Unknown word (amsthm)     -- # amsthm
	 Suggestions: [alstom, asthma, Alstom, mash, mast]
.gitignore:62:3      - Unknown word (beamer)     -- # beamer
	 Suggestions: [beaker, beamed, bearer, beater, beaver]
.gitignore:74:3      - Unknown word (cprotect)   -- # cprotect
	 Suggestions: [project, correct, crotch, coronet, curtest]
.gitignore:77:3      - Unknown word (elsarticle) -- # elsarticle (documentclass of Elsevier
	 Suggestions: []
.gitignore:77:15     - Unknown word (documentclass) -- # elsarticle (documentclass of Elsevier journals
	 Suggestions: []
.gitignore:77:32     - Unknown word (Elsevier)      -- elsarticle (documentclass of Elsevier journals)
	 Suggestions: [elzevir, Elzevir, Leerier, elsie, Elsie]
.gitignore:86:3      - Unknown word (feynmf)        -- # feynmf/feynmp
	 Suggestions: [feynman, Feynman, feme, fend, fens]
.gitignore:86:10     - Unknown word (feynmp)        -- # feynmf/feynmp
	 Suggestions: [feynman, Feynman, feme, fend, fens]
.gitignore:93:8      - Unknown word (ledmac)        -- #(r)(e)ledmac/(r)(e)ledpar
	 Suggestions: [leda, leman, lemma, legman, lehman]
.gitignore:93:21     - Unknown word (ledpar)        -- #(r)(e)ledmac/(r)(e)ledpar
	 Suggestions: [lear, leda, lpar, leper, lidar]
.gitignore:102:3     - Unknown word (eledsec)       -- *.eledsec[1-9]
	 Suggestions: [leeds, eldest, elides, eludes, leeds's]
.gitignore:103:3     - Unknown word (eledsec)       -- *.eledsec[1-9]R
	 Suggestions: [leeds, eldest, elides, eludes, leeds's]
.gitignore:104:3     - Unknown word (eledsec)       -- *.eledsec[1-9][0-9]
	 Suggestions: [leeds, eldest, elides, eludes, leeds's]
.gitignore:105:3     - Unknown word (eledsec)       -- *.eledsec[1-9][0-9]R
	 Suggestions: [leeds, eldest, elides, eludes, leeds's]
.gitignore:106:3     - Unknown word (eledsec)       -- *.eledsec[1-9][0-9][0-9]
	 Suggestions: [leeds, eldest, elides, eludes, leeds's]
.gitignore:115:3     - Unknown word (glsdefs)       -- *.glsdefs
	 Suggestions: [glades, glides, glade's, glide's, gliders]
.gitignore:129:3     - Unknown word (gnuplottex)    -- # gnuplottex
	 Suggestions: [gnuplot, unplottext, unplotText, unPlottext, unPlotText]
.gitignore:130:3     - Unknown word (gnuplottex)    -- *-gnuplottex-*
	 Suggestions: [gnuplot, unplottext, unplotText, unPlottext, unPlotText]
.gitignore:132:3     - Unknown word (gregoriotex)   -- # gregoriotex
	 Suggestions: [gregorio, gregorio's]
.gitignore:133:3     - Unknown word (gaux)          -- *.gaux
	 Suggestions: [gaud, gaul, gaur, Gaul, eaux]
.gitignore:134:3     - Unknown word (glog)          -- *.glog
	 Suggestions: [geog, glob, glom, glop, glow]
.gitignore:135:3     - Unknown word (gtex)          -- *.gtex
	 Suggestions: [gte, GTE, tex, Tex, TeX]
.gitignore:137:3     - Unknown word (htlatex)       -- # htlatex
	 Suggestions: [latex, Latex, halted, halter, theater]
.gitignore:145:3     - Unknown word (hyperref)      -- # hyperref
	 Suggestions: [hyper, hyperon, herren, hyperion, hyperons]
.gitignore:148:3     - Unknown word (knitr)         -- # knitr
	 Suggestions: [knit, knits, intr, kier, kite]
.gitignore:150:43    - Unknown word (knitr)         -- next line if you use knitr and want to ignore its
	 Suggestions: [knit, knits, intr, kier, kite]
.gitignore:150:82    - Unknown word (tikz)          -- ignore its generated tikz files
	 Suggestions: [tike, tiki, tizz, taka, take]
.gitignore:151:5     - Unknown word (tikz)          -- # *.tikz
	 Suggestions: [tike, tiki, tizz, taka, take]
.gitignore:152:3     - Unknown word (tikz)          -- *-tikzDictionary
	 Suggestions: [tike, tiki, tizz, taka, take]
.gitignore:157:3     - Unknown word (luatexja)      -- # luatexja-ruby
	 Suggestions: [latex, latex's, latex2e, latexes]
.gitignore:158:3     - Unknown word (ltjruby)       -- *.ltjruby
	 Suggestions: []
.gitignore:160:3     - Unknown word (makeidx)       -- # makeidx
	 Suggestions: [makeindex, MakeIndex, maid, make, maced]
.gitignore:165:3     - Unknown word (minitoc)       -- # minitoc
	 Suggestions: [minio, manioc, minion, manitou, monitor]
.gitignore:178:3     - Unknown word (morewrites)    -- # morewrites
	 Suggestions: [moderates, morganites]
.gitignore:181:3     - Unknown wo

(Truncated to 5714 characters out of 16790)
⚠️ MARKDOWN / markdownlint - 20 errors 
chapters/02_code.md:11:401 MD013/line-length Line length [Expected: 400; Actual: 480]
chapters/02_code.md:45:401 MD013/line-length Line length [Expected: 400; Actual: 595]
chapters/03_testing.md:10:401 MD013/line-length Line length [Expected: 400; Actual: 440]
chapters/03_testing.md:27:401 MD013/line-length Line length [Expected: 400; Actual: 472]
chapters/03_testing.md:29:401 MD013/line-length Line length [Expected: 400; Actual: 418]
chapters/03_testing.md:31:401 MD013/line-length Line length [Expected: 400; Actual: 547]
chapters/03_testing.md:35:401 MD013/line-length Line length [Expected: 400; Actual: 426]
chapters/04_auditing.md:5:401 MD013/line-length Line length [Expected: 400; Actual: 805]
chapters/04_auditing.md:9:401 MD013/line-length Line length [Expected: 400; Actual: 927]
chapters/04_auditing.md:13:401 MD013/line-length Line length [Expected: 400; Actual: 486]
chapters/04_auditing.md:19:401 MD013/line-length Line length [Expected: 400; Actual: 410]
chapters/05_deployments.md:27:401 MD013/line-length Line length [Expected: 400; Actual: 512]
chapters/05_deployments.md:31:401 MD013/line-length Line length [Expected: 400; Actual: 406]
chapters/05_deployments.md:33:401 MD013/line-length Line length [Expected: 400; Actual: 417]
chapters/05_deployments.md:37:401 MD013/line-length Line length [Expected: 400; Actual: 514]
chapters/05_deployments.md:38:401 MD013/line-length Line length [Expected: 400; Actual: 414]
chapters/05_deployments.md:43:401 MD013/line-length Line length [Expected: 400; Actual: 579]
README.md:9:401 MD013/line-length Line length [Expected: 400; Actual: 739]
README.md:11:401 MD013/line-length Line length [Expected: 400; Actual: 639]
README.md:13:401 MD013/line-length Line length [Expected: 400; Actual: 511]
⚠️ SPELL / proselint - 5 errors 
chapters/01_planning.md:15:65: redundancy.garner Redundancy. Use 'interact' instead of 'interact with each other.'.
chapters/03_testing.md:3:64: garner.phrasal_adjectives.ly No hyphen is necessary in phrasal adjectives with an adverb ending in -ly, unless the -ly adverb is part of a longer phrase
chapters/05_deployments.md:9:42: weasel_words.very Substitute 'damn' every time you're inclined to write 'very'; your editor will delete it and the writing will be just as it should be. Found 4 times elsewhere.
chapters/05_deployments.md:11:255: redundancy.garner Redundancy. Use 'interact' instead of 'interact with each other.'.
chapters/06_operating.md:3:5: leonard.exclamation.30ppm More than 30 ppm of exclamations. Keep them under control.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx [email protected] --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,JAVASCRIPT_PRETTIER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_PROSELINT,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT

MegaLinter is graciously provided by OX Security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
prod
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants