[Snyk] Upgrade mega-linter-runner from 6.15.0 to 6.22.2

[ofemie]

Snyk has created this PR to upgrade mega-linter-runner from 6.15.0 to 6.22.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 48 versions ahead of your current version.

• The recommended version was released on a year ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	482	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	482	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	482	No Known Exploit
	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	482	No Known Exploit
	Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	482	Proof of Concept
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	482	Proof of Concept

Release notes

Package name: mega-linter-runner

• 6.22.2 - 2023-04-03
  

  What's Changed

  • Fixes

    • Fix failure of AzureCommentReporter when there is no pull request found in ENV vars, by @ nvuillam in #2515
    • Fix HTML comment appearing in Azure Pull Request mail notifications, by @ nvuillam in #2521

  • Linter versions upgrades

    • ansible-lint from 6.14.3 to 6.14.4
    • checkov from 2.3.145 to 2.3.149
    • pylint from 2.17.1 to 2.17.2
    • rubocop from 1.48.1 to 1.49.0

  MegaLinter is graciously provided by

  Full Changelog: v6.22.1...v6.22.2

• 6.22.1 - 2023-04-02
  

  What's Changed

  • Core

    • Changed vars in AzureCommentReporter to reflects official Azure DevOps naming convention + fallback to keep backward compatibility, see #2509, by @ DariuszPorowski in #2510
    • Update AzureCommentReporter to have only one MegaLinter thread instead of a new one for each run of MegaLinter, by @ nvuillam in #2512
    • Fix build issue by retrying curl if failed by @ nvuillam in #2507

  • Documentation

    • Updated usage scenario for Azure DevOps, see #2509, by @ DariuszPorowski in #2510

  • Linter versions upgrades

    • checkov from 2.3.141 to 2.3.145
    • phpstan from 1.10.9 to 1.10.10
    • rstfmt from 0.0.12 to 0.0.13

  MegaLinter is graciously provided by

  Full Changelog: v6.22.0...v6.22.1

• 6.22.0 - 2023-04-01
  

  What's Changed

  • New linters

    • Add ruff, by @ lars-reimann in #2458

  • Linter enhancements & fixes

    • Pin markdown-link-check to 3.10.3 until tcort/markdown-link-check#246 is fixed, by @ Kurt-von-Laven (#2498).

  • Core

    • Fix MegaLinter doc version & url displayed in logs, by @ nvuillam in #2485

    • Use megalinter-bot to create apply fixes commits, by @ lars-reimann, @ nvuillam and @ megalinter-bot :)

      • If you are an existing user of MegaLinter, you must update your github actions workflows to add the following parameters to stefanzweifel/git-auto-commit-action@v4 :

      commit_user_name: megalinter-bot
      commit_user_email: nicolas.vuillamy@ox.security

      • You can also use any github username and email you like :)

  • Documentation

    • Close parentheses in ci_light flavour doc by @ moverperfect in #2494

  • Linter versions upgrades

    • black from 23.1.0 to 23.3.0
    • cfn-lint from 0.75.1 to 0.76.1
    • checkov from 2.3.120 to 2.3.141
    • eslint from 8.36.0 to 8.37.0
    • kics from 1.6.12 to 1.6.13
    • markdown-link-check from 3.11.0 to 3.10.3
    • phpstan from 1.10.8 to 1.10.9
    • psalm from Psalm.5.8.0@ to Psalm.5.9.0@
    • pyright from 1.1.300 to 1.1.301
    • ruff from 0.0.255 to 0.0.260
    • semgrep from 1.15.0 to 1.16.0
    • sfdx-scanner-apex from 3.10.0 to 3.11.0
    • sfdx-scanner-aura from 3.10.0 to 3.11.0
    • sfdx-scanner-lwc from 3.10.0 to 3.11.0
    • stylelint from 15.3.0 to 15.4.0
    • swiftlint from 0.50.3 to 0.51.0
    • syft from 0.75.0 to 0.76.0
    • terraform-fmt from 1.4.2 to 1.4.4
    • trivy from 0.38.3 to 0.39.0

  MegaLinter is graciously provided by

  Full Changelog: v6.21.0...v6.22.0

• 6.21.0 - 2023-03-26
  

  What's Changed

  • New linters
    • Add helm lint, by @ ThomasSanson in #2386
  • Medias
    • Video: Code quality - Ep01 - MegaLinter, one linter to rule them all, by @ devpro
    • Video: DevSecOps Webinar using MegaLinter, by 5.15 Technologies
    • Video: (FR) Coding Tech - L'importance de la CI/CD dans le développement de logiciels, by @ GridexX from R2DevOps
    • Article: (FR) MegaLinter, votre meilleur ami pour un code de qualité, by @ ThomasSanson

  • Linter enhancements & fixes

    • phpcs: Add regex in descriptor to be able to extract the number of found errors, by @ nvuillam in #2453
    • Replace babel-eslint with @ babel/eslint-parser, by @ bdovaz in #2445
    • Use docker image to install phpstan, by @ nvuillam in #2469
    • Avoid cspell error on readonly workspaces, by @ nvuillam in #2474
    • Allow bandit to use pyproject.toml, by @ nvuillam in #2475
    • Bring back stylelint-config-sass-guidelines package, by @ nvuillam in #2477
    • Display only errors in markdown-link-check logs for better readability, by @ nvuillam in #2479

  • Core

    • Run CI linter jobs only on Pull requests to avoid doubling jobs

  • Documentation

    • mega-linter-runner: doc fix for env list of values, see #2448, by @ DariuszPorowski in #2449

  • Linter versions upgrades

    • ansible-lint from 6.14.1 to 6.14.3
    • bandit from 1.7.4 to 1.7.5
    • cfn-lint from 0.74.1 to 0.75.1
    • checkov from 2.3.70 to 2.3.120
    • checkstyle from 10.8.0 to 10.9.3
    • clippy from 0.1.67 to 0.1.68
    • clj-kondo from 2023.02.17 to 2023.03.17
    • cspell from 6.28.0 to 6.31.1
    • dotnet-format from 6.0.406 to 6.0.407
    • eslint-plugin-jsonc from 2.6.0 to 2.7.0
    • eslint from 8.35.0 to 8.36.0
    • gitleaks from 8.16.0 to 8.16.1
    • jscpd from 3.5.3 to 3.5.4
    • jsonlint from 14.0.1 to 14.0.2
    • kics from 1.6.11 to 1.6.12
    • markdown-link-check from 3.10.3 to 3.11.0
    • phpstan from 1.10.5 to 1.10.8
    • prettier from 2.8.4 to 2.8.7
    • psalm from Psalm.5.7.7@ to Psalm.5.8.0@
    • pylint from 2.16.4 to 2.17.1
    • pyright from 1.1.296 to 1.1.300
    • revive from 1.2.5 to 1.3.1
    • rstcheck from 6.1.1 to 6.1.2
    • rubocop from 1.48.0 to 1.48.1
    • semgrep from 1.14.0 to 1.15.0
    • snakefmt from 0.8.1 to 0.8.3
    • snakemake from 7.24.0 to 7.25.0
    • sqlfluff from 1.4.5 to 2.0.2
    • stylelint from 15.2.0 to 15.3.0
    • syft from 0.74.0 to 0.75.0
    • terraform-fmt from 1.3.9 to 1.4.2
    • terragrunt from 0.44.4 to 0.45.0
    • trivy from 0.38.1 to 0.38.3
    • v8r from 0.14.0 to 1.0.0
    • yamllint from 1.29.0 to 1.30.0

  New Contributors

  • @ ThomasSanson made their first contribution in #2386
  • @ DariuszPorowski made their first contribution in #2449

  MegaLinter is graciously provided by

  Full Changelog: v6.20.1...v6.21.0

• 6.20.1 - 2023-03-07
  

  What's Changed

  • Fixes

    • Fix issue with running on Mac m1 no longer working, by @ nvuillam in #2430
    • Fix Container images errors when pulling, by @ echoix in #2435
    • Fix Pre npm install not resolving, by @ echoix in #2435
    • Add build date in Beta docker images, by @ nvuillam
    • Correct misleading error message in GitlabCommentReporter.py, see #2420
    • Fix GitlabCommentReporter wrong variables names, check #2423

  • Core

    • Improve config test, by @ bdovaz in #2426

  • Doc

    • Add article Level up your Unity Packages with CI/CD, by @ RunningMattress in #2436
    • Correct minor docs error by @ moverperfect in #2440

  • Linter versions upgrades

    • ansible-lint from 6.14.0 to 6.14.1
    • bicep_linter from 0.14.85 to 0.15.31
    • cfn-lint from 0.74.0 to 0.74.1
    • checkov from 2.3.59 to 2.3.70
    • csharpier from 0.22.1 to 0.23.0
    • jsonlint from 13.0.1 to 14.0.1
    • mypy from 1.0.1 to 1.1.1
    • phpstan from 1.10.3 to 1.10.5 on 2023-03-07
    • protolint from 0.43.0 to 0.43.1
    • puppet-lint from 3.2.0 to 3.3.0
    • pylint from 2.16.3 to 2.16.4
    • rubocop from 1.47.0 to 1.48.0
    • stylelint from 14.16.1 to 15.2.0

  New Contributors

  • @ LBeaulaton made their first contribution in #2424
  • @ moverperfect made their first contribution in #2440

  MegaLinter is graciously provided by

  Full Changelog: v6.20.0...v6.20.1

• 6.20.0 - 2023-03-05
  

  

  Release notes

  • Core

    • Upgrade base docker image from python:3.10.4-alpine3.16 to python:3.11.1-alpine3.17 in #2312
    • Upgrade base docker image from python:3.11.1-alpine3.17 to python:3.12.1-alpine3.17, by @ bdovaz in #2354
    • Update editorconfig-checker to 2.7.0, by @ rasa in #2349
    • Build: remove folder contents before generating Dockerfile files for each linter in generate_linter_dockerfiles(), by @ bdovaz in #2294
    • Build: remove folder contents before generating test classes for each linter in generate_linter_test_classes(), by @ bdovaz in #2294
    • Build: automatically update the linter list used in the matrix of several of the workflows, by @ bdovaz in #2294
    • Test: create a testing architecture for format/autofix linters, by @ bdovaz in #2294
    • Test: create or adapt input files for format/autofix tests, by @ bdovaz in #2294
    • Test: created specific test folders for linters that need them because they cannot share them, by @ bdovaz in #2294
    • Added rubocop-rake RubyGem for linting Rake files with RuboCop, by @ timgentry in #2366

  • Fixes

    • Correctly generate class names and test class files for each linter when the linter descriptor defines the attribute "name", by @ bdovaz in #2294
    • Removed the default powershell templates TEMPLATES/.powershell-formatter.psd1 and TEMPLATES/.powershell-psscriptanalyzer.psd1. Having these templates caused all rules to be ignored as the settings are not incremental but absolute, by @ bdovaz in #2294
    • Added cli_lint_fix_arg_name parameter to dotnet format descriptor as without it, autofix does not work, by @ bdovaz in #2294
    • Created BicepLinter class to add DOTNET_SYSTEM_GLOBALIZATION_INVARIANT environment variable to avoid problems with ICU packages, by @ bdovaz in #2294
    • Modified npm-groovy-lint descriptor to add --failon parameter to only fail with error and not info which is the default value, by @ bdovaz in #2294
    • Added cli_lint_fix_arg_name parameter to powershell formatter descriptor as without it, autofix does not work, by @ bdovaz in #2294
    • Created ProtolintLinter class to fix the problem that returns exit code 1 when it encounters a problem to correct even though it corrects it correctly, by @ bdovaz in #2294
    • Concatenate --output parameter correctly to xmllint linter, by @ bdovaz in #2294
    • Modified the .pre-commit-hooks.yaml for megalinter-full so the containername argument is correctly split between two lines, by @ drbothen #2411
    • Avoid jscpd default config to detect copy pastes in image files in #2407.
    • Move utilstest to megalinter folder to avoid import issues in #2417.
    • Replace deprecated spectral package, by @ bdovaz in by @ bdovaz in #2340
    • Generate correct urls for packages with fixed versions, by @ bdovaz in #2339

  • Documentation

    • Change swiftlint example that did not correctly reflect the --fix parameter, by @ bdovaz in #2294
    • Change in TSX eslint descriptor the urls as they were not correct, by @ bdovaz in #2294
    • Change in TYPESCRIPT eslint descriptor the urls as they were not correct, by @ bdovaz in #2294
    • Use mkdocs-glightbox to allow to click on images and display them in full screen in #2414

  • CI

    • Use docker/build-push-action to build docker images and akhilerm/tag-push-action to release by retagging and pushing beta images instead of rebuilding them in #2342
    • Authenticate to GitHub API during docker build to avoid reaching limits, by @ bdovaz in #2299
    • Remove apk go package install in images where possible to decrease image sizes, by @ echoix in #2318
    • Create a slash PR bot to run ./build.sh command manually on PRs, by @ echoix in #2353 and #2381
    • Limit parallel execution of large job matrix in the workflows with max-parallel in order to keep runners available for other jobs, by @ echoix in #2397

  • Linter versions upgrades

    • ansible-lint from 6.12.1 to 6.14.0
    • bash-exec from 5.1.16 to 5.2.15
    • bicep_linter from 0.14.46 to 0.14.85
    • cfn-lint from 0.72.10 to 0.74.0
    • checkmake from 0.2.1 to 0.2.0
    • checkov from 2.1.244 to 2.3.18
    • checkstyle from 10.7.0 to 10.8.0
    • clj-kondo from 2023.01.20 to 2023.02.17
    • cspell from 6.21.0 to 6.28.0
    • djlint from 1.19.13 to 1.19.16
    • dotnet-format from 6.0.405 to 6.0.406
    • dustilock from 0.0.0 to 1.2.0
    • editorconfig-checker from 2.4.0 to 2.7.0
    • eslint from 8.33.0 to 8.35.0
    • git_diff from 2.36.4 to 2.38.4
    • gitleaks from 8.15.3 to 8.16.0
    • golangci-lint from 1.51.0 to 1.51.2
    • jscpd from 3.3.26 to 3.5.3
    • jsonlint from 11.7.0 to 13.0.1
    • kics from 1.6.9 to 1.6.11
    • mypy from 0.991 to 1.0.1
    • perlcritic from 1.148 to 1.150
    • phpcs from 3.7.1 to 3.7.2
    • phpstan from 1.9.14 to 1.10.3
    • powershell_formatter from 7.3.2 to 7.3.3
    • powershell from 7.3.2 to 7.3.3
    • prettier from 2.8.3 to 2.8.4
    • protolint from 0.42.2 to 0.43.0
    • psalm from Psalm.5.6.0@ to Psalm.5.7.7@
    • puppet-lint from 3.0.1 to 3.2.0
    • pylint from 2.16.1 to 2.16.3
    • pyright from 1.1.270 to 1.1.296
    • rubocop from 1.44.1 to 1.47.0
    • secretlint from 6.2.0 to 6.2.3
    • semgrep from 1.9.0 to 1.14.0
    • sfdx-scanner-apex from 3.8.0 to 3.10.0
    • sfdx-scanner-aura from 3.8.0 to 3.10.0
    • sfdx-scanner-lwc from 3.8.0 to 3.10.0
    • snakemake from 7.21.0 to 7.24.0
    • spectral from 5.9.2 to 6.6.0
    • syft from 0.70.0 to 0.74.0
    • terraform-fmt from 1.3.7 to 1.3.9
    • terragrunt from 0.43.2 to 0.44.4