Merge remote-tracking branch 'origin/main' into renovate/python-3.x

Author: bdovaz

.automation/generated/linter-helps.json

@@ -8,7 +8,7 @@
     "black": "25.1.0",
     "cfn-lint": "1.32.4",
     "checkmake": "0.2.0",
-    "checkov": "3.2.394",
+    "checkov": "3.2.402",
     "checkstyle": "10.23.0",
     "chktex": "1.7.8",
     "clang-format": "19.1.4",
@@ -49,7 +49,7 @@
     "kubeconform": "0.6.7",
     "kubescape": "3.0.34",
     "kubeval": "0.16.1",
-    "lightning-flow-scanner": "3.2.0",
+    "lightning-flow-scanner": "3.2.1",
     "lintr": "0.0.0",
     "ls-lint": "2.3.0",
     "luacheck": "1.2.0",

.automation/generated/linter-versions.json

@@ -28,7 +28,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-python@v5
         with:
-          python-version: 3.12.9
+          python-version: 3.12.10
       - run: pip install --upgrade -r .config/python/dev/requirements.txt
       - run: cd .automation && bash build_schemas_doc.sh && cd ..
       # - run: mkdocs gh-deploy --force

.github/workflows/build-deploy-docs.yml

@@ -186,7 +186,7 @@ jobs:
           echo "curr ver ${{ steps.version.outputs.cversion }}"
       - uses: actions/setup-python@v5
         with:
-          python-version: 3.12.9
+          python-version: 3.12.10
       - run: pip install --upgrade -r .config/python/dev/requirements.txt
       - run: cd .automation && bash build_schemas_doc.sh && cd ..
       # - run: mkdocs gh-deploy --force

.github/workflows/deploy-RELEASE.yml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
-          python-version: 3.12.9
+          python-version: 3.12.10
       - run: pip install --upgrade -r .config/python/dev/requirements.txt
       - run: cd .automation && bash build_schemas_doc.sh && cd ..
       - run: mkdocs build

.github/workflows/test-mkdocs.yml

@@ -91,6 +91,8 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
   - [clj-kondo](https://github.com/borkdude/clj-kondo) from 2025.02.20 to **2025.04.07** on 2025-04-09
   - [vale](https://vale.sh/) from 3.11.1 to **3.11.2** on 2025-04-09
   - [stylelint](https://stylelint.io) from 16.17.0 to **16.18.0** on 2025-04-09
+  - [checkov](https://www.checkov.io/) from 3.2.394 to **3.2.402** on 2025-04-13
+  - [lightning-flow-scanner](https://github.com/Lightning-Flow-Scanner) from 3.2.0 to **3.2.1** on 2025-04-13
 <!-- linter-versions-end -->
 
 ## [v8.5.0] - 2024-03-23

CHANGELOG.md

@@ -149,7 +149,7 @@ ARG CLJ_KONDO_VERSION=2025.01.16
 # renovate: datasource=github-tags depName=greglook/cljstyle
 ARG CLJ_STYLE_VERSION=0.17.642
 # renovate: datasource=pypi depName=cfn-lint
-ARG PIP_CFN_LINT_VERSION=1.32.4
+ARG PIP_CFN_LINT_VERSION=1.33.2
 # renovate: datasource=npm depName=@coffeelint/cli
 ARG NPM_COFFEELINT_CLI_VERSION=5.2.11
 # renovate: datasource=npm depName=jscpd
@@ -287,23 +287,23 @@ ARG PIP_BANDIT_SARIF_FORMATTER_VERSION=1.1.1
 # renovate: datasource=pypi depName=mypy
 ARG PIP_MYPY_VERSION=1.15.0
 # renovate: datasource=npm depName=pyright
-ARG NPM_PYRIGHT_VERSION=1.1.398
+ARG NPM_PYRIGHT_VERSION=1.1.399
 # renovate: datasource=pypi depName=ruff
 ARG PIP_RUFF_VERSION=0.11.4
 # renovate: datasource=github-tags depName=nxadm/rakudo-pkg
 ARG RAKU_RAKU_VERSION=2024.12
 ARG RAKU_RAKU_ALPINE_VERSION=3.20
 
 # renovate: datasource=pypi depName=checkov
-ARG PIP_CHECKOV_VERSION=3.2.402
+ARG PIP_CHECKOV_VERSION=3.2.404
 # renovate: datasource=nuget depName=Microsoft.CST.DevSkim.CLI
 ARG REPOSITORY_DEVSKIM_VERSION=1.0.52
 # renovate: datasource=github-tags depName=anchore/grype
 ARG REPOSITORY_GRYPE_VERSION=0.91.0
 # renovate: datasource=npm depName=@ls-lint/ls-lint
 ARG NPM_LS_LINT_LS_LINT_VERSION=2.3.0
 # renovate: datasource=npm depName=secretlint
-ARG NPM_SECRETLINT_VERSION=9.3.0
+ARG NPM_SECRETLINT_VERSION=9.2.0
 # renovate: datasource=npm depName=@secretlint/secretlint-rule-preset-recommend
 ARG NPM_SECRETLINT_SECRETLINT_RULE_PRESET_RECOMMEND_VERSION=9.3.0
 # renovate: datasource=npm depName=@secretlint/secretlint-formatter-sarif

Dockerfile

@@ -15,7 +15,7 @@ FROM $MEGALINTER_BASE_IMAGE as base
 # Build wheel for megalinter python package
 ##################
 FROM ghcr.io/astral-sh/uv:0.6.13 AS uv
-FROM python:3.12.9-alpine3.21 AS build-ml-core
+FROM python:3.12.10-alpine3.21 AS build-ml-core
 WORKDIR /
 COPY pyproject.toml .
 COPY --from=uv /uv /bin/uv

Dockerfile-quick

@@ -23,7 +23,7 @@
 [![MegaLinter](https://github.com/oxsecurity/megalinter/workflows/MegaLinter/badge.svg?branch=main)](https://github.com/oxsecurity/megalinter/actions?query=workflow%3AMegaLinter+branch%3Amain)
 [![codecov](https://codecov.io/gh/oxsecurity/megalinter/branch/main/graph/badge.svg)](https://codecov.io/gh/oxsecurity/megalinter)
 <!-- gh-dependents-info-used-by-start -->
-[![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=2896&color=informational&logo=slickpic)](https://github.com/oxsecurity/megalinter/blob/main/./docs/used-by-stats.md)<!-- gh-dependents-info-used-by-end -->
+[![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=2909&color=informational&logo=slickpic)](https://github.com/oxsecurity/megalinter/blob/main/./docs/used-by-stats.md)<!-- gh-dependents-info-used-by-end -->
 [![Secured with Trivy](https://img.shields.io/badge/Trivy-secured-green?logo=docker)](https://github.com/aquasecurity/trivy)
 [![GitHub contributors](https://img.shields.io/github/contributors/oxsecurity/megalinter.svg)](https://github.com/oxsecurity/megalinter/graphs/contributors/)
 [![GitHub Sponsors](https://img.shields.io/github/sponsors/nvuillam)](https://github.com/sponsors/nvuillam)