Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🌱 Update Builder Image group #182

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

cluster-stack-bot[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
adrienverge/yamllint minor v1.35.1 -> v1.37.0
docker.io/aquasec/trivy (source) stage minor 0.59.1 -> 0.61.0
golangci/golangci-lint major v1.64.5 -> v2.0.2

Release Notes

adrienverge/yamllint (adrienverge/yamllint)

v1.37.0

Compare Source

v1.36.2

Compare Source

v1.36.1

Compare Source

v1.36.0

Compare Source

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.61.0

Compare Source

Features
Bug Fixes
Performance Improvements

v0.60.0

Compare Source

Features
Bug Fixes
  • db: fix case when 2 trivy-db were copied at the same time (#​8452) (bb3cca6)
  • don't use scope for trivy registry login command (#​8393) (8715e5d)
  • go: merge nested flags into string for ldflags for Go binaries (#​8368) (b675b06)
  • image: disable AVD-DS-0007 for history scanning (#​8366) (a3cd693)
  • k8s: add missed option PkgRelationships (#​8442) (f987e41)
  • misconf: do not log scanners when misconfig scanning is disabled (#​8345) (5695eb2)
  • misconf: ecs include enhanced for container insights (#​8326) (39789ff)
  • misconf: fix incorrect k8s locations due to JSON to YAML conversion (#​8073) (a994453)
  • os: add mapping OS aliases (#​8466) (6b4cebe)
  • python: add poetry v2 support (#​8323) (10cd98c)
  • report: remove html escaping for shortDescription and fullDescription fields for sarif reports (#​8344) (3eb0b03)
  • sbom: add SBOM file's filePath as Application FilePath if we can't detect its path (#​8346) (ecc01bb)
  • sbom: improve logic for binding direct dependency to parent component (#​8489) (85cca8c)
  • sbom: preserve OS packages from multiple SBOMs (#​8325) (bd5baaf)
  • server: secrets inspectation for the config analyzer in client server mode (#​8418) (a1c4bd7)
  • spdx: init pkgFilePaths map for all formats (#​8380) (72ea4b0)
  • terraform: apply parser options to submodule parsing (#​8377) (398620b)
  • update all documentation links (#​8045) (49456ba)
golangci/golangci-lint (golangci/golangci-lint)

v2.0.2

Compare Source

  1. Misc.
    • Fixes flags parsing for formatters
    • Fixes the filepath used by the exclusion source option
  2. Documentation
    • Adds a section about flags migration
    • Cleaning pages with v1 options

v2.0.1

Compare Source

  1. Linters/formatters bug fixes
    • golines: fix settings during linter load
  2. Misc.
    • Validates the version field before the configuration
    • forbidigo: fix migration

v2.0.0

Compare Source

  1. Enhancements
  2. New linters/formatters
  3. Linters new features
    • ⚠️ Merge staticcheck, stylecheck, gosimple into one linter (staticcheck) (cf. Migration guide)
    • go-critic: from 0.12.0 to 0.13.0
    • gomodguard: from 1.3.5 to 1.4.1 (block explicit indirect dependencies)
    • nilnil: from 1.0.1 to 1.1.0 (new option: only-two)
    • perfsprint: from 0.8.2 to 0.9.1 (checker name in the diagnostic message)
    • staticcheck: new quickfix set of rules
    • testifylint: from 1.5.2 to 1.6.0 (new options: equal-values, suite-method-signature, require-string-msg)
    • wsl: from 4.5.0 to 4.6.0 (new option: allow-cuddle-used-in-block)
  4. Linters bug fixes
    • bidichk: from 0.3.2 to 0.3.3
    • errchkjson: from 0.4.0 to 0.4.1
    • errname: from 1.0.0 to 1.1.0
    • funlen: fix ignore-comments option
    • gci: from 0.13.5 to 0.13.6
    • gosmopolitan: from 1.2.2 to 1.3.0
    • inamedparam: from 0.1.3 to 0.2.0
    • intrange: from 0.3.0 to 0.3.1
    • protogetter: from 0.3.9 to 0.3.12
    • unparam: from 8a5130c to 0df0534
  5. Misc.
    • 🧹 Configuration options renaming (cf. Migration guide)
    • 🧹 Remove options (cf. Migration guide)
    • 🧹 Remove flags (cf. Migration guide)
    • 🧹 Remove alternative names (cf. Migration guide)
    • 🧹 Remove or replace deprecated elements (cf. Migration guide)
    • Adds an option to display some commands as JSON:
      • golangci-lint config path --json
      • golangci-lint help linters --json
      • golangci-lint help formatters --json
      • golangci-lint linters --json
      • golangci-lint formatters --json
      • golangci-lint version --json
  6. Documentation

v1.64.8

Compare Source

  • Detects use of configuration files from golangci-lint v2

v1.64.7

Compare Source

  1. Linters bug fixes
    • depguard: from 2.2.0 to 2.2.1
    • dupl: from 3e9179a to f665c8d
    • gosec: from 2.22.1 to 2.22.2
    • staticcheck: from 0.6.0 to 0.6.1
  2. Documentation
    • Add GitLab documentation

v1.64.6

Compare Source

  1. Linters bug fixes
    • asciicheck: from 0.4.0 to 0.4.1
    • contextcheck: from 1.1.5 to 1.1.6
    • errcheck: from 1.8.0 to 1.9.0
    • exptostd: from 0.4.1 to 0.4.2
    • ginkgolinter: from 0.19.0 to 0.19.1
    • go-exhaustruct: from 3.3.0 to 3.3.1
    • gocheckcompilerdirectives: from 1.2.1 to 1.3.0
    • godot: from 1.4.20 to 1.5.0
    • perfsprint: from 0.8.1 to 0.8.2
    • revive: from 1.6.1 to 1.7.0
    • tagalign: from 1.4.1 to 1.4.2

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

| datasource  | package                 | from    | to      |
| ----------- | ----------------------- | ------- | ------- |
| github-tags | adrienverge/yamllint    | v1.35.1 | v1.37.0 |
| docker      | docker.io/aquasec/trivy | 0.59.1  | 0.61.0  |
| github-tags | golangci/golangci-lint  | v1.64.5 | v2.0.2  |
@cluster-stack-bot cluster-stack-bot bot added type/major type/minor update/container size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. area/github Changes made in the github directory labels Apr 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/github Changes made in the github directory size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. type/major type/minor update/container
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants