build(deps): bump megalinter/megalinter from 5 to 6.0.5

[dependabot]

Bumps megalinter/megalinter from 5 to 6.0.5.

Release notes

Sourced from megalinter/megalinter's releases.

MegaLinter v6.0.5

• Fix mega-linter-runner --upgrade so it also updates report folder to megalinter-reports in GitHub Actions Workflows #1609

• Fix documentation and templates to use megalinter-reports folder everywhere

• Workaround for python-markdown issue radude/mdx_truly_sane_lists#9

• Linter versions upgrades

  • checkov from 2.1.54 to 2.1.56 on 2022-07-15
  • checkov from 2.1.56 to 2.1.57 on 2022-07-16
  • gitleaks from 8.8.7 to 8.8.12 on 2022-07-16
  • kics from 1.5.11 to 1.5.12 on 2022-07-16
  • protolint from 0.38.2 to 0.38.3 on 2022-07-15
  • sqlfluff from 1.2.0 to 1.2.1 on 2022-07-16
  • terraform-fmt from 1.2.4 to 1.2.5 on 2022-07-15
  • terragrunt from 0.38.4 to 0.38.5 on 2022-07-15

MegaLinter v6.0.4

• Fix count of errors when using SARIF reporter

• DevSkim: Ignore megalinter-reports by default [(#1603)](oxsecurity/megalinter#1603)

• Load JSON when list of objects is defined in an ENV var [(#1605)](oxsecurity/megalinter#1605)

• AutoFix pre_commands using npm install (1258)

• Linter versions upgrades

  • checkov from 2.1.43 to 2.1.54 on 2022-07-14
  • git_diff from 2.34.2 to 2.34.4 on 2022-07-14
  • phpstan from 1.8.0 to 1.8.1 on 2022-07-14
  • sqlfluff from 1.1.0 to 1.2.0 on 2022-07-14
  • syft from 0.50.0 to 0.51.0 on 2022-07-14

MegaLinter v6.0.3

• mega-linter-runner: Update query args when opening OX Security
• Fix mega-linter-runner doesn't default to v6 for flavors (1596)

MegaLinter v6.0.2

Internal CI fixes

MegaLinter v6.0.1

• Quick fixes about internal CI & documentation

= https://github.com/oxsecurity/megalinter/releases/tag/v6.0.0

MegaLinter v6.0.0

• Move Repo to OX Security

  • Github: https://github.com/oxsecurity/megalinter
  • Documentation: https://oxsecurity.github.io/megalinter/
  • OX Security home page: https://www.ox.security/

• Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

• Core architecture

  • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one

... (truncated)

Changelog

Sourced from megalinter/megalinter's changelog.

[v6.0.5] - 2022-07-16

• Fix mega-linter-runner --upgrade so it also updates report folder to megalinter-reports in GitHub Actions Workflows #1609

• Fix documentation and templates to use megalinter-reports folder everywhere

• Workaround for python-markdown issue radude/mdx_truly_sane_lists#9

• Linter versions upgrades

  • checkov from 2.1.54 to 2.1.56 on 2022-07-15
  • checkov from 2.1.56 to 2.1.57 on 2022-07-16
  • gitleaks from 8.8.7 to 8.8.12 on 2022-07-16
  • kics from 1.5.11 to 1.5.12 on 2022-07-16
  • protolint from 0.38.2 to 0.38.3 on 2022-07-15
  • sqlfluff from 1.2.0 to 1.2.1 on 2022-07-16
  • terraform-fmt from 1.2.4 to 1.2.5 on 2022-07-15
  • terragrunt from 0.38.4 to 0.38.5 on 2022-07-15

[v6.0.4] - 2022-07-14

• Fix count of errors when using SARIF reporter

• DevSkim: Ignore megalinter-reports by default [(#1603)](oxsecurity/megalinter#1603)

• Load JSON when list of objects is defined in an ENV var [(#1605)](oxsecurity/megalinter#1605)

• AutoFix pre_commands using npm install (1258)

• Linter versions upgrades

  • checkov from 2.1.43 to 2.1.54 on 2022-07-14
  • git_diff from 2.34.2 to 2.34.4 on 2022-07-14
  • phpstan from 1.8.0 to 1.8.1 on 2022-07-14
  • sqlfluff from 1.1.0 to 1.2.0 on 2022-07-14
  • syft from 0.50.0 to 0.51.0 on 2022-07-14

[v6.0.3] - 2022-07-11

• mega-linter-runner: Update query args when opening OX Security
• Fix mega-linter-runner doesn't default to v6 for flavors (1596)

[v6.0.0] - 2022-07-10

• Breaking changes: you must run npx mega-linter-runner --upgrade to use MegaLinter v6

• Core architecture

  • New reporter SARIF_REPORTER that aggregates all SARIF output files into a single one
    • Correct SARIF files for known format errors
  • New config variable DISABLE_LINTERS_ERRORS to define a list of linters that will be considered as non blocking
  • Upgrade base docker image to python:3.10.4-alpine3.15
  • Rename default report folder from report to megalinter-reports
  • Display GitHub stars in linters summary table in documentation

• Linters:

  • Add DevSkim security linter by Microsoft
  • Add dustilock to check for dependency confusion attacks with node and python packages

... (truncated)

Commits

• 09bd8a3 Release MegaLinter v6.0.5
• 2a28322 [automation] Auto-update linters version, help and documentation (#1613)
• 7b31977 Add missing repository url (#1567)
• 1856d70 Upgrade gitleaks (#1611)
• a911824 [automation] Auto-update linters version, help and documentation (#1612)
• 309d9f8 Fix CI : workaround for python-markdown latest version issue
• f416e3d Fix CI
• d97607a Fix CI & use megalinter-reports in README & templates
• a0beb1a Update report folder into megalinter-reports (#1610)
• fe80279 [automation] Auto-update linters version, help and documentation (#1608)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #25.