Fix Lychee & undowngrade revive (#3271)

* [automation] Auto-update linters version, help and documentation * Fix lychee breaking change Upgrade lychee default configuration to handle [breaking change between 0.13.0 and 0.14.0](lycheeverse/lychee#1338) * Undowngrade revive * Fix lychee config until bug is solved lycheeverse/lychee#1340 * [MegaLinter] Apply linters fixes --------- Co-authored-by: nvuillam <[email protected]> Co-authored-by: nvuillam <[email protected]>
oxsecurity · Jan 7, 2024 · 9854dd5 · 9854dd5
1 parent b2da3a2
commit 9854dd5
Show file tree

Hide file tree

Showing 115 changed files with 403 additions and 349 deletions.
diff --git a/.automation/generated/linter-helps.json b/.automation/generated/linter-helps.json
diff --git a/.automation/generated/linter-versions.json b/.automation/generated/linter-versions.json
@@ -8,7 +8,7 @@
     "black": "23.12.1",
     "cfn-lint": "0.83.7",
     "checkmake": "0.2.0",
-    "checkov": "3.1.51",
+    "checkov": "3.1.54",
     "checkstyle": "10.12.7",
     "chktex": "1.7.8",
     "clang-format": "16.0.6",
@@ -29,7 +29,7 @@
     "editorconfig-checker": "2.7.2",
     "eslint": "8.56.0",
     "eslint-plugin-jsonc": "2.11.2",
-    "flake8": "6.1.0",
+    "flake8": "7.0.0",
     "gherkin-lint": "0.0.0",
     "git_diff": "2.40.1",
     "gitleaks": "8.18.1",
@@ -51,7 +51,7 @@
     "lightning-flow-scanner": "2.16.0",
     "lintr": "0.0.0",
     "luacheck": "1.1.2",
-    "lychee": "0.13.0",
+    "lychee": "0.14.0",
     "markdown-link-check": "3.11.2",
     "markdown-table-formatter": "1.5.0",
     "markdownlint": "0.38.0",
@@ -63,7 +63,7 @@
     "php": "7.4.26",
     "phpcs": "3.8.0",
     "phplint": "9.1.0",
-    "phpstan": "1.10.50",
+    "phpstan": "1.10.54",
     "pmd": "6.55.0",
     "powershell": "7.4.0",
     "powershell_formatter": "7.4.0",
@@ -101,14 +101,14 @@
     "standard": "17.1.0",
     "stylelint": "16.1.0",
     "swiftlint": "0.54.0",
-    "syft": "0.99.0",
+    "syft": "0.100.0",
     "tekton-lint": "1.0.0",
     "terraform-fmt": "1.6.6",
     "terragrunt": "0.54.12",
     "terrascan": "1.18.11",
     "tflint": "0.50.0",
-    "trivy": "0.48.1",
-    "trivy-sbom": "0.48.1",
+    "trivy": "0.48.2",
+    "trivy-sbom": "0.48.2",
     "trufflehog": "3.63.7",
     "ts-standard": "12.0.2",
     "tsqllint": "1.15.3.0",

diff --git a/.github/linters/lychee.toml b/.github/linters/lychee.toml
@@ -29,7 +29,7 @@ user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTM
 retry_wait_time = 2
 
 # Comma-separated list of accepted status codes for valid links.
-accept = [200, 206, 429]
+accept = ["200", "206", "429"]
 
 # Only test links with the given schemes (e.g. https).
 # Omit to check links with any scheme.

diff --git a/.github/workflows/deploy-BETA-linters.yml b/.github/workflows/deploy-BETA-linters.yml
@@ -84,6 +84,7 @@ jobs:
             "c_cpplint",
             "c_clang_format",
             "clojure_clj_kondo",
+            "clojure_cljstyle",
             "cloudformation_cfn_lint",
             "coffee_coffeelint",
             "copypaste_jscpd",

diff --git a/.github/workflows/deploy-DEV-linters.yml b/.github/workflows/deploy-DEV-linters.yml
@@ -55,6 +55,7 @@ jobs:
             "c_cpplint",
             "c_clang_format",
             "clojure_clj_kondo",
+            "clojure_cljstyle",
             "cloudformation_cfn_lint",
             "coffee_coffeelint",
             "copypaste_jscpd",

diff --git a/.github/workflows/deploy-RELEASE-linters.yml b/.github/workflows/deploy-RELEASE-linters.yml
@@ -59,6 +59,7 @@ jobs:
             "c_cpplint",
             "c_clang_format",
             "clojure_clj_kondo",
+            "clojure_cljstyle",
             "cloudformation_cfn_lint",
             "coffee_coffeelint",
             "copypaste_jscpd",

diff --git a/.lycheeignore b/.lycheeignore
@@ -23,4 +23,7 @@ https://github.com/oxsecurity/megalinter/raw/main/docs/assets/icons/swift.ico
 https://stylelint.io/user-guide/integrations/other#analysis-platform-engines
 https://github.com/pmd/pmd/releases/download/pmd_releases
 https://twitter.com/intent/tweet*
-https://github.com/sgerrand/alpine-pkg-glibc/releases/download
+https://github.com/sgerrand/alpine-pkg-glibc/releases/download
+
+# Todo: remove when lychee accepts again to ignore 429 : https://github.com/lycheeverse/lychee/issues/1340
+https://github.com/*
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -26,6 +26,7 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
   - tekton-lint is now published as @ibm/tekton-lint, by @echoix in [#3210](https://github.com/oxsecurity/megalinter/pull/3210)
   - PHP PHIVE: Use keys.openpgp.org and fingerprint for phive key verification, by @echoix in [#3230](https://github.com/oxsecurity/megalinter/pull/3230)
   - Undowngrade sass linters, by @echoix in [#3260](https://github.com/oxsecurity/megalinter/pull/3260)
+  - Upgrade lychee default configuration to handle [breaking change between 0.13.0 and 0.14.0](https://github.com/lycheeverse/lychee/issues/1338)
 
 - Doc
   - Upgrade url to [PHP CodeSniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer), as now the original repo is not maintained anymore.
@@ -124,6 +125,13 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
   - [ruff](https://github.com/astral-sh/ruff) from 0.1.10 to **0.1.11** on 2024-01-03
   - [checkov](https://www.checkov.io/) from 3.1.50 to **3.1.51** on 2024-01-03
   - [tekton-lint](https://github.com/IBM/tekton-lint) from 0.7.0 to **1.0.0** on 2024-01-03
+  - [phpstan](https://phpstan.org/) from 1.10.50 to **1.10.54** on 2024-01-07
+  - [flake8](https://flake8.pycqa.org) from 6.1.0 to **7.0.0** on 2024-01-07
+  - [checkov](https://www.checkov.io/) from 3.1.51 to **3.1.54** on 2024-01-07
+  - [syft](https://github.com/anchore/syft) from 0.99.0 to **0.100.0** on 2024-01-07
+  - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.48.1 to **0.48.2** on 2024-01-07
+  - [trivy](https://aquasecurity.github.io/trivy/) from 0.48.1 to **0.48.2** on 2024-01-07
+  - [lychee](https://lychee.cli.rs) from 0.13.0 to **0.14.0** on 2024-01-07
 <!-- linter-versions-end -->
 
 ## [v7.7.0] - 2023-12-09

diff --git a/Dockerfile b/Dockerfile
@@ -24,7 +24,7 @@ FROM golang:1-alpine as revive
 ## The golang image used as a builder is a temporary workaround 
 ## for the released revive binaries not returning version numbers (devel). 
 ## The install command should then be what is commented in the go.megalinter-descriptor.yml
-RUN GOBIN=/usr/bin go install github.com/mgechev/revive@v1.3.4
+RUN GOBIN=/usr/bin go install github.com/mgechev/revive@latest
 
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM ghcr.io/assignuser/chktex-alpine:latest as chktex