From 71669a2ac1ce560726bc8efeaab4804b8e868fcd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 08:24:11 +0000 Subject: [PATCH 1/2] fix(deps): bump oxsecurity/megalinter/flavors/go from 10.1.0 to 10.2.0 Bumps [oxsecurity/megalinter/flavors/go](https://github.com/oxsecurity/megalinter) from 10.1.0 to 10.2.0. - [Release notes](https://github.com/oxsecurity/megalinter/releases) - [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md) - [Commits](https://github.com/oxsecurity/megalinter/compare/9949bad031045f366be2467e00e8371a7328a2e2...f2fe8c1cba37091848df3e524066c8c23ef353ed) --- updated-dependencies: - dependency-name: oxsecurity/megalinter/flavors/go dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yaml | 10 +++++----- .github/workflows/validate-go-project-readonly.yaml | 2 +- .github/workflows/validate-go-project.yaml | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index ab04cb6d..25c4d0e9 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -4509,7 +4509,7 @@ jobs: id: ml-root if: ${{ !cancelled() && steps.prepare-root.outcome == 'success' }} continue-on-error: true - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ steps.prepare-root.outputs.workspace }} MEGALINTER_CONFIG: ${{ github.workspace }}/.mega-linter.yml @@ -4545,7 +4545,7 @@ jobs: id: ml-nested if: ${{ !cancelled() && steps.prepare-nested.outcome == 'success' }} continue-on-error: true - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ steps.prepare-nested.outputs.workspace }} MEGALINTER_CONFIG: ${{ github.workspace }}/.mega-linter.yml @@ -4581,7 +4581,7 @@ jobs: id: ml-absent if: ${{ !cancelled() && steps.prepare-absent.outcome == 'success' }} continue-on-error: true - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ steps.prepare-absent.outputs.workspace }} MEGALINTER_CONFIG: ${{ github.workspace }}/.mega-linter.yml @@ -4617,7 +4617,7 @@ jobs: id: ml-malformed if: ${{ !cancelled() && steps.prepare-malformed.outcome == 'success' }} continue-on-error: true - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ steps.prepare-malformed.outputs.workspace }} MEGALINTER_CONFIG: ${{ github.workspace }}/.mega-linter.yml @@ -4653,7 +4653,7 @@ jobs: id: ml-finding if: ${{ !cancelled() && steps.prepare-finding.outcome == 'success' }} continue-on-error: true - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ steps.prepare-finding.outputs.workspace }} MEGALINTER_CONFIG: ${{ github.workspace }}/.mega-linter.yml diff --git a/.github/workflows/validate-go-project-readonly.yaml b/.github/workflows/validate-go-project-readonly.yaml index 0bbd3830..0ece35fa 100644 --- a/.github/workflows/validate-go-project-readonly.yaml +++ b/.github/workflows/validate-go-project-readonly.yaml @@ -912,7 +912,7 @@ jobs: # native scanner cases (test-catalogue-tool-pin-parity.sh). - name: "\U0001F9F9 Lint" id: ml - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ needs.changes.outputs.module-directory }} GOTOOLCHAIN: go${{ steps.setup-go.outputs.go-version }} diff --git a/.github/workflows/validate-go-project.yaml b/.github/workflows/validate-go-project.yaml index 58f1819a..d3b7ef93 100644 --- a/.github/workflows/validate-go-project.yaml +++ b/.github/workflows/validate-go-project.yaml @@ -988,7 +988,7 @@ jobs: # native scanner cases (test-catalogue-tool-pin-parity.sh). - name: 🧹 Lint id: ml - uses: oxsecurity/megalinter/flavors/go@9949bad031045f366be2467e00e8371a7328a2e2 # v10.1.0 + uses: oxsecurity/megalinter/flavors/go@f2fe8c1cba37091848df3e524066c8c23ef353ed # v10.2.0 env: DEFAULT_WORKSPACE: ${{ needs.changes.outputs.module-directory }} GOTOOLCHAIN: go${{ steps.setup-go.outputs.go-version }} From 505058b3064bd7c1cbb083b0cf9b03f0f4c40a5f Mon Sep 17 00:00:00 2001 From: Nikolai Emil Damm Date: Mon, 9 Nov 2026 10:26:38 +0100 Subject: [PATCH 2/2] test(ci): reuse the MegaLinter v10.2.0 image in the malformed-config proof Co-Authored-By: Claude Opus 5.5 --- .github/tests/megalinter-config-container.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/tests/megalinter-config-container.sh b/.github/tests/megalinter-config-container.sh index efdab757..cea482b3 100644 --- a/.github/tests/megalinter-config-container.sh +++ b/.github/tests/megalinter-config-container.sh @@ -42,7 +42,7 @@ case "${1:-}" in # The action has already pulled this image at its immutable action pin. # Reuse its LOCAL image id with networking disabled to capture the precise # parser failure, rather than accepting an image-pull/runner error as RED. - image="$(docker image inspect ghcr.io/oxsecurity/megalinter-go:v10.1.0 --format '{{.Id}}')" + image="$(docker image inspect ghcr.io/oxsecurity/megalinter-go:v10.2.0 --format '{{.Id}}')" [[ "$image" =~ ^sha256:[0-9a-f]{64}$ ]] log="$workspace/megalinter-malformed-config.log" status=0