Repository navigation
chore: Cherry-picked changes from upstream - #111
Open
github-actions[bot] wants to merge 135 commits into
Open
github-actions[bot] wants to merge 135 commits into
github-actions[bot] wants to merge 135 commits into
Conversation
Contributor
Author
|
🚀 PR Updated! The PR has been updated with the latest cherry-picked commits. @step-security/maintained-actions-dev Please review and approve the changes. 📦 Target Release Version: ❗ Missing Files:
🛑 Workflow Files (Cannot be auto-applied by GitHub Actions):
❌ Conflicting Files:
|
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Remove NBQA because its last release dates back to 2024, installs vulnerable dependencies, and commits on its repo are minor automated dependency updates since about a year ago.
Print Super-linter version and revision info on the summary footer. Close #7635
Print Super-linter version and revision info on the summary footer. Close #7635
Print Super-linter version and revision info on the summary footer. Close #7635
Add the linter versions file as a release asset when creating a new release. Close #7919
Bumps the rubocop group with 1 update in the /dependencies directory: [rubocop](https://github.com/rubocop/rubocop). Updates `rubocop` from 1.90.0 to 1.91.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.90.0...v1.91.0) --- updated-dependencies: - dependency-name: rubocop dependency-version: 1.91.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rubocop ...
* deps(all): add dependency cooldowns Add a 7-day dependency cooldown for all Dependabot package ecosystems. This means that Dependabot will only generate PRs for an update after a 7-day delay from when it was released. Dependency cooldowns are a simple, effective way to mitigate many supply-chain attacks: https://nesbitt.io/2026/03/04/package-managers-need-to-cool-down.html * Revert disable dependabot-cooldown rule ---------
Bumps the npm-security-updates group with 1 update in the /dependencies directory: [js-yaml](https://github.com/nodeca/js-yaml). Updates `js-yaml` from 4.3.1 to 4.3.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.3.1...4.3.2) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.2 dependency-type: indirect dependency-group: npm-security-updates ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
…8127) Bumps the pip group with 6 updates in the /dependencies/python directory: | Package | From | To | | --- | --- | --- | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.55.1` | `1.56.3` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.8` | | [checkov](https://github.com/bridgecrewio/checkov) | `3.3.15` | `3.3.19` | | [snakemake](https://github.com/snakemake/snakemake) | `9.26.1` | `9.27.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.8` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.30.1` | Updates `cfn-lint` from 1.55.1 to 1.56.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.55.1...v1.56.3) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.7...v4.0.8) Updates `checkov` from 3.3.15 to 3.3.19 - [Release notes](https://github.com/bridgecrewio/checkov/releases) - [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md) - [Commits](bridgecrewio/checkov@3.3.15...3.3.19) Updates `snakemake` from 9.26.1 to 9.27.0 - [Release notes](https://github.com/snakemake/snakemake/releases) - [Changelog](https://github.com/snakemake/snakemake/blob/main/CHANGELOG.md) - [Commits](snakemake/snakemake@v9.26.1...v9.27.0) Updates `ruff` from 0.16.5 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.8) Updates `zizmor` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.30.1) --- updated-dependencies: - dependency-name: cfn-lint dependency-version: 1.56.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: checkov dependency-version: 3.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: snakemake dependency-version: 9.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: zizmor dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ...
Upgrade the base container environment and PHP dependencies to resolve Composer and Dependabot platform version mismatches: - Update python-base in Dockerfile from python:3.14.7-alpine3.23 to python:3.14.7-alpine3.24. - Upgrade Alpine PHP packages from php84* to php85* to match PHP 8.5 bundled in composer:2.10.3. - Constrain require.php in composer.json to ~8.5.0 so Dependabot sets config.platform.php to 8.5.0 instead of 8.4.0, and refresh composer.lock. - Upgrade clang21/llvm21-dev to clang22/llvm22-dev in the clang-format build stage for Alpine 3.24 compatibility. - Update InSpec package assertions for php85* and clang22-extra-tools. - Add a lint-commit Makefile target and expand docs/DEVELOPMENT.md with architecture, granular test targets, and lockfile workflows.
Upgrade the base container environment and PHP dependencies to resolve Composer and Dependabot platform version mismatches: - Update python-base in Dockerfile from python:3.14.7-alpine3.23 to python:3.14.7-alpine3.24. - Upgrade Alpine PHP packages from php84* to php85* to match PHP 8.5 bundled in composer:2.10.3. - Constrain require.php in composer.json to ~8.5.0 so Dependabot sets config.platform.php to 8.5.0 instead of 8.4.0, and refresh composer.lock. - Upgrade clang21/llvm21-dev to clang22/llvm22-dev in the clang-format build stage for Alpine 3.24 compatibility. - Update InSpec package assertions for php85* and clang22-extra-tools. - Add a lint-commit Makefile target and expand docs/DEVELOPMENT.md with architecture, granular test targets, and lockfile workflows.
Upgrade the base container environment and PHP dependencies to resolve Composer and Dependabot platform version mismatches: - Update python-base in Dockerfile from python:3.14.7-alpine3.23 to python:3.14.7-alpine3.24. - Upgrade Alpine PHP packages from php84* to php85* to match PHP 8.5 bundled in composer:2.10.3. - Constrain require.php in composer.json to ~8.5.0 so Dependabot sets config.platform.php to 8.5.0 instead of 8.4.0, and refresh composer.lock. - Upgrade clang21/llvm21-dev to clang22/llvm22-dev in the clang-format build stage for Alpine 3.24 compatibility. - Update InSpec package assertions for php85* and clang22-extra-tools. - Add a lint-commit Makefile target and expand docs/DEVELOPMENT.md with architecture, granular test targets, and lockfile workflows.
Enable scanning pip requirements files with Trivy. Note that Trivy doesn't scan transitive dependencies when you run it in filesystem mode, so we still need to run pip-audit too.
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Raj-StepSecurity
force-pushed
the
auto-cherry-pick
branch
from
October 15, 2026 04:58
042098b to
ea1c1a8
Compare
Raj-StepSecurity
added
the
review-required
Contributor
Author
🔍 Cherry-Pick Verification Report📦 Upstream Changes: 📋 File-by-File Analysis:
|
Contributor
Author
🔍 Cherry-Pick Verification Report📦 Upstream Changes: 📋 File-by-File Analysis:
|
Contributor
Author
🔍 Cherry-Pick Verification Report📦 Upstream Changes: 📋 File-by-File Analysis:
|
Raj-StepSecurity
removed
the
review-required
Contributor
Author
Super-linter summary
Super-linter detected linting errors For more information, see the Powered by Super-linter GIT_COMMITLINT |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cherry-picked changes from upstream.
super-linter/super-linter@v8.7.0...v9.0.0