🌱 Update Builder Image group #1572

syself-bot · 2025-04-01T11:03:24Z

This PR contains the following updates:

Package	Type	Update	Change
adrienverge/yamllint		minor	`v1.36.2` -> `v1.37.1`
docker.io/aquasec/trivy (source)	stage	minor	`0.60.0` -> `0.62.1`
docker.io/library/golang	final	digest	`c4f892c` -> `15c182d`
golangci/golangci-lint		major	`v1.64.7` -> `v2.1.6`

Release Notes

adrienverge/yamllint (adrienverge/yamllint)

`v1.37.1`

Compare Source

`v1.37.0`

Compare Source

aquasecurity/trivy (docker.io/aquasec/trivy)

`v0.62.1`

Compare Source

Changelog

c75ed21 release: v0.62.1 [release/v0.62] (#8825)
aafebeb chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)
99485cf fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)
b4fc9e8 fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)

`v0.62.0`

Compare Source

Features

image: save layers metadata into report (#8394) (a95cab0)
misconf: add option to pass Rego scanner to IaC scanner (#8369) (890a360)
misconf: convert AWS managed policy to document (#8757) (7abf5f0)
misconf: support auto_provisioning_defaults in google_container_cluster (#8705) (9792611)
nodejs: add root and workspace for yarn packages (#8535) (bf4cd4f)
rust: add root and workspace relationships/package for cargo lock files (#8676) (93efe07)

Bug Fixes

early-return, indent-error-flow and superfluous-else rules from revive (#8796) (43350dd)
k8s: correct compare artifact versions (#8682) (cc47711)
k8s: remove using last-applied-configuration (#8791) (7a58ccb)
k8s: skip passed misconfigs for the summary report (#8684) (bff0e9b)
misconf: add missing variable as unknown (#8683) (9dcd06f)
misconf: check if metadata is not nil (#8647) (b7dfd64)
misconf: filter null nodes when parsing json manifest (#8785) (e10929a)
misconf: perform operations on attribute safely (#8774) (3ce7d59)
misconf: populate context correctly for module instances (#8656) (efd177b)
report: clean buffer after flushing (#8725) (9a5383e)
secret: ignore .dist-info directories during secret scanning (#8646) (a032ad6)
server: fix redis key when trying to delete blob (#8649) (36f8d0f)
terraform: evaluateStep to correctly set EvalContext for multiple instances of blocks (#8555) (e25de25)
terraform: hcl object expressions to return references (#8271) (0d3efa5)
testifylint last issues (#8768) (ee4f7dc)
unused-parameter rule from revive (#8794) (6562082)

`v0.61.1`

Compare Source

Changelog

7d3b4ff release: v0.61.1 [release/v0.61] (#8704)
80d120f fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)
9d6290b fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)
3799ebb test: use aquasecurity repository for test images [backport: release/v0.61] (#8698)

`v0.61.0`

Compare Source

Features

fs: optimize scanning performance by direct file access for known paths (#8525) (8bf6caf)
k8s: add support for controllers (#8614) (1bf0117)
misconf: adapt aws_default_security_group (#8538) (b57eccb)
misconf: adapt aws_opensearch_domain (#8550) (9913465)
misconf: adapt AWS::DynamoDB::Table (#8529) (8112cdf)
misconf: adapt AWS::EC2::VPC (#8534) (0d9865f)
misconf: Add support for aws_ami (#8499) (573502e)
replace TinyGo with standard Go for WebAssembly modules (#8496) (529957e)

Bug Fixes

debian: don't include empty licenses for dpkgs (#8623) (346f5b3)
fs: check postAnalyzers for StaticPaths (#8543) (c228307)
k8s: show report for --report all (#8613) (dbb6f28)
misconf: add ephemeral block type to config schema (#8513) (41512f8)
misconf: Check values wholly prior to evalution (#8604) (ad58cf4)
misconf: do not skip loading documents from subdirectories (#8526) (de7eb13)
misconf: do not use cty.NilVal for non-nil values (#8567) (400a79c)
misconf: identify the chart file exactly by name (#8590) (ba77dbe)
misconf: Improve logging for unsupported checks (#8634) (5b7704d)
misconf: set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548) (1f05b45)
misconf: skip Azure CreateUiDefinition (#8503) (c7814f1)
spdx: save text licenses into otherLicenses without normalize (#8502) (e5072f1)
use --file-patterns flag for all post analyzers (#7365) (8b88238)

Performance Improvements

misconf: parse input for Rego once (#8483) (0e5e909)
misconf: retrieve check metadata from annotations once (#8478) (7b96351)

golangci/golangci-lint (golangci/golangci-lint)

`v2.1.6`

Compare Source

Linters bug fixes
- godot: from 1.5.0 to 1.5.1
- musttag: from 0.13.0 to 0.13.1
Documentation
- Add note about golangci-lint v2 integration in VS Code

`v2.1.5`

Compare Source

Due to an error related to Snapcraft, some artifacts of the v2.1.4 release have not been published.

This release contains the same things as v2.1.3.

`v2.1.4`

Compare Source

Due to an error related to Snapcraft, some artifacts of the v2.1.3 release have not been published.

This release contains the same things as v2.1.3.

`v2.1.3`

Compare Source

Linters bug fixes
- fatcontext: from 0.7.2 to 0.8.0
Misc.
- migration: fix nakedret.max-func-lines: 0
- migration: fix order of staticcheck settings
- fix: add go.mod hash to the cache salt
- fix: use diagnostic position for related information position

`v2.1.2`

Compare Source

Linters bug fixes
- exptostd: from 0.4.2 to 0.4.3
- gofumpt: from 0.7.0 to 0.8.0
- protogetter: from 0.3.13 to 0.3.15
- usetesting: from 0.4.2 to 0.4.3

`v2.1.1`

Compare Source

The release process of v2.1.0 failed due to a regression inside goreleaser.

The binaries of v2.1.0 have been published, but not the other artifacts (AUR, Docker, etc.).

`v2.1.0`

Compare Source

Enhancements
- Add an option to display absolute paths (--path-mode=abs)
- Add configuration path placeholder (${config-path})
- Add warn-unused option for fmt command
- Colored diff for fmt command (golangci-lint fmt --diff-colored)
New linters
- Add funcorder linter https://github.com/manuelarte/funcorder
Linters new features or changes
- go-errorlint: from 1.7.1 to 1.8.0 (automatic error comparison and type assertion fixes)
- ⚠️ goconst: ignore-strings is deprecated and replaced by ignore-string-values
- goconst: from 1.7.1 to 1.8.1 (new options: find-duplicates, eval-const-expressions)
- govet: add httpmux analyzer
- nilnesserr: from 0.1.2 to 0.2.0 (detect more cases)
- paralleltest: from 1.0.10 to 1.0.14 (checks only _test.go files)
- revive: from 1.7.0 to 1.9.0 (support kebab case for setting names)
- sloglint: from 0.9.0 to 0.11.0 (autofix, new option msg-style, suggest slog.DiscardHandler)
- wrapcheck: from 2.10.0 to 2.11.0 (new option report-internal-errors)
- wsl: from 4.6.0 to 4.7.0 (cgo files are always excluded)
Linters bug fixes
- fatcontext: from 0.7.1 to 0.7.2
- gocritic: fix importshadow checker
- gosec: from 2.22.2 to 2.22.3
- ireturn: from 0.3.1 to 0.4.0
- loggercheck: from 0.10.1 to 0.11.0
- nakedret: from 2.0.5 to 2.0.6
- nonamedreturns: from 1.0.5 to 1.0.6
- protogetter: from 0.3.12 to 0.3.13
- testifylint: from 1.6.0 to 1.6.1
- unconvert: update to HEAD
Misc.
- Fixes memory leaks when using go1.(N) with golangci-lint built with go1.(N-X)
- Adds golangci-lint-fmt pre-commit hook
Documentation
- Improvements
- Updates section about vscode integration

`v2.0.2`

Compare Source

Misc.
- Fixes flags parsing for formatters
- Fixes the filepath used by the exclusion source option
Documentation
- Adds a section about flags migration
- Cleaning pages with v1 options

`v2.0.1`

Compare Source

Linters/formatters bug fixes
- golines: fix settings during linter load
Misc.
- Validates the version field before the configuration
- forbidigo: fix migration

`v2.0.0`

Compare Source

Enhancements
- 🌟 New golangci-lint fmt command with dedicated formatter configuration
- ♻️ New golangci-lint migrate command to help migration from v1 to v2 (cf. Migration guide)
- ⚠️ New default values (cf. Migration guide)
- ⚠️ No exclusions by default (cf. Migration guide)
- ⚠️ New default sort order (cf. Migration guide)
- 🌟 New option run.relative-path-mode (cf. Migration guide)
- 🌟 New linters configuration (cf. Migration guide)
- 🌟 New output format configuration (cf. Migration guide)
- 🌟 New --fast-only flag (cf. Migration guide)
- 🌟 New option linters.exclusions.warn-unused to log a warning if an exclusion rule is unused.
New linters/formatters
- Add golines formatter https://github.com/segmentio/golines
Linters new features
- ⚠️ Merge staticcheck, stylecheck, gosimple into one linter (staticcheck) (cf. Migration guide)
- go-critic: from 0.12.0 to 0.13.0
- gomodguard: from 1.3.5 to 1.4.1 (block explicit indirect dependencies)
- nilnil: from 1.0.1 to 1.1.0 (new option: only-two)
- perfsprint: from 0.8.2 to 0.9.1 (checker name in the diagnostic message)
- staticcheck: new quickfix set of rules
- testifylint: from 1.5.2 to 1.6.0 (new options: equal-values, suite-method-signature, require-string-msg)
- wsl: from 4.5.0 to 4.6.0 (new option: allow-cuddle-used-in-block)
Linters bug fixes
- bidichk: from 0.3.2 to 0.3.3
- errchkjson: from 0.4.0 to 0.4.1
- errname: from 1.0.0 to 1.1.0
- funlen: fix ignore-comments option
- gci: from 0.13.5 to 0.13.6
- gosmopolitan: from 1.2.2 to 1.3.0
- inamedparam: from 0.1.3 to 0.2.0
- intrange: from 0.3.0 to 0.3.1
- protogetter: from 0.3.9 to 0.3.12
- unparam: from 8a5130c to 0df0534
Misc.
- 🧹 Configuration options renaming (cf. Migration guide)
- 🧹 Remove options (cf. Migration guide)
- 🧹 Remove flags (cf. Migration guide)
- 🧹 Remove alternative names (cf. Migration guide)
- 🧹 Remove or replace deprecated elements (cf. Migration guide)
- Adds an option to display some commands as JSON:
  - golangci-lint config path --json
  - golangci-lint help linters --json
  - golangci-lint help formatters --json
  - golangci-lint linters --json
  - golangci-lint formatters --json
  - golangci-lint version --json
Documentation
- Migration guide

`v1.64.8`

Compare Source

Detects use of configuration files from golangci-lint v2

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

| datasource | package | from | to | | ----------- | ----------------------- | ------- | ------- | | github-tags | adrienverge/yamllint | v1.36.2 | v1.37.1 | | docker | docker.io/aquasec/trivy | 0.60.0 | 0.62.1 | | github-tags | golangci/golangci-lint | v1.64.7 | v2.1.6 |

syself-bot bot added type/major type/minor update/container size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. area/github Changes made in the github directory labels Apr 1, 2025

syself-bot bot force-pushed the renovate/caph-builder-image branch 3 times, most recently from 8fd09a5 to 22fdd92 Compare April 18, 2025 11:03

syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from d95fde7 to 23ff29a Compare May 1, 2025 11:03

syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from 271e32d to 5f1de23 Compare May 5, 2025 11:03

syself-bot bot force-pushed the renovate/caph-builder-image branch from 5f1de23 to 027f1d7 Compare May 7, 2025 11:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🌱 Update Builder Image group #1572

🌱 Update Builder Image group #1572

Uh oh!

syself-bot bot commented Apr 1, 2025 •

edited

Loading

Uh oh!

Uh oh!

🌱 Update Builder Image group #1572

Are you sure you want to change the base?

🌱 Update Builder Image group #1572

Uh oh!

Conversation

syself-bot bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Features

Bug Fixes

Changelog

Features

Bug Fixes

Performance Improvements

Configuration

Uh oh!

Uh oh!

syself-bot bot commented Apr 1, 2025 •

edited

Loading