MegaLinter Files

What's Changed

• Core

• New config property ENABLE_ERRORS_LINTERS. If set, only the listed linters will be considered as blocking

• New linters

• Add cppcheck linter, by @bdovaz in https://github.com/oxsecurity/megalinter/pull/5224

• Media

• Integrating MegaLinter to Automate Linting Across Multiple Codebases. A Technical Description, by Thorsten Foltz

• Linters enhancements

• editorconfig_checker Changes default EditorConfig-Checker config filename by @llaville in https://github.com/oxsecurity/megalinter/issues/5061

• TruffleHog: Ignore .git by default if not already done using --exclude-paths option

• Fixes

• Sanitize all linter outputs by default, by @nvuillam in https://github.com/oxsecurity/megalinter/pull/5266

• Doc

• Add j2lint to plugins, by @wesley-dean in https://github.com/oxsecurity/megalinter/pull/5151
• Add fmlint (frontmatter linter) to plugins list by @wesley-dean in https://github.com/oxsecurity/megalinter/pull/5257

• Remove trailing spaces by @parkerbxyz in https://github.com/oxsecurity/megalinter/pull/5185

• CI

• Initial Renovate automerge configuration, by @echoix in https://github.com/oxsecurity/megalinter/pull/5057
• Set update schedule for checkov updates, by @echoix in https://github.com/oxsecurity/megalinter/pull/5064
• Always upgrade packages from base image for updated security fixes, by @echoix in https://github.com/oxsecurity/megalinter/pull/5152

• build-command: Unshallow pull or full pull before committing changes, by @echoix in https://github.com/oxsecurity/megalinter/pull/5201

• Linter versions upgrades (50)

• ansible-lint from 25.1.3 to 25.2.1
• bicep_linter from 0.34.1 to 0.34.44
• cfn-lint from 1.32.0 to 1.34.1
• checkov from 3.2.390 to 3.2.404
• checkstyle from 10.21.4 to 10.23.0
• clippy from 0.1.85 to 0.1.86
• clj-kondo from 2025.02.20 to 2025.04.07
• cpplint from 2.0.0 to 2.0.2
• cspell from 8.17.5 to 8.19.2
• dartanalyzer from 3.7.2 to 3.7.3
• devskim from 1.0.52 to 1.0.56
• dotnet-format from 9.0.104 to 9.0.105
• flake8 from 7.1.2 to 7.2.0
• gitleaks from 8.24.2 to 8.24.3
• grype from 0.90.0 to 0.91.2
• kics from 2.1.6 to 2.1.7
• kubescape from 3.0.32 to 3.0.34
• lightning-flow-scanner from 3.2.0 to 3.4.0
• ls-lint from 2.2.3 to 2.3.0
• phplint from 9.5.6 to 9.6.2
• php-cs-fixer from 3.73.1 to 3.75.0
• phpcs from 3.12.0 to 3.12.2
• phpstan from 2.1.8 to 2.1.12
• pmd from 7.11.0 to 7.12.0
• psalm from Psalm.6.9.4@ to Psalm.6.10.1@
• pyright from 1.1.397 to 1.1.400
• revive from 1.7.0 to 1.9.0
• rubocop from 1.74.0 to 1.75.3
• ruff from 0.11.2 to 0.11.6
• ruff-format from 0.11.2 to 0.11.6
• secretlint from 9.2.0 to 9.3.1
• sfdx-scanner-apex from 4.10.0 to 4.11.0
• sfdx-scanner-aura from 4.10.0 to 4.11.0
• sfdx-scanner-lwc from 4.10.0 to 4.11.0
• spectral from 6.14.3 to 6.15.0
• sqlfluff from 3.3.1 to 3.4.0
• stylelint from 16.16.0 to 16.19.0
• swiftlint from 0.58.2 to 0.59.1
• syft from 1.21.0 to 1.23.1
• terraform-fmt from 1.11.2 to 1.11.4
• terragrunt from 0.76.6 to 0.77.22
• tflint from 0.55.1 to 0.56.0
• trivy from 0.60.0 to 0.61.1
• trivy-sbom from 0.60.0 to 0.61.1
• trufflehog from 3.88.18 to 3.88.25
• v8r from 4.2.1 to 4.3.0
• vale from 3.9.4 to 3.11.2
• yamllint from 1.36.2 to 1.37.0

Full Changelog: https://github.com/oxsecurity/megalinter/compare/v8.5.0...v8.6.0