build(deps): bump the github-actions group across 1 directory with 5 updates - #29
Merged
gabrielfrasantos merged 2 commits intoMay 19, 2026
Conversation
dependabot
Bot
added
dependencies
Contributor
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 5 | 0 | 0 | 0.06s | |
| ✅ CPP | clang-format | 15 | 6 | 0 | 0 | 0.72s |
| ✅ CPP | cppcheck | 15 | 0 | 0 | 0.8s | |
| ✅ DOCKERFILE | hadolint | 1 | 0 | 0 | 0.03s | |
| ✅ JSON | jsonlint | 7 | 0 | 0 | 0.4s | |
| ✅ JSON | prettier | 7 | 2 | 0 | 0 | 1.06s |
| markdownlint | 12 | 1 | 19 | 0 | 1.93s | |
| ✅ MARKDOWN | markdown-table-formatter | 12 | 1 | 0 | 0 | 0.78s |
| ✅ REPOSITORY | checkov | yes | no | no | 51.86s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.45s | |
| ✅ REPOSITORY | grype | yes | no | no | 77.04s | |
| ✅ REPOSITORY | ls-lint | yes | no | no | 0.01s | |
| ✅ REPOSITORY | osv-scanner | yes | no | no | 0.87s | |
| ✅ REPOSITORY | secretlint | yes | no | no | 92.88s | |
| ✅ REPOSITORY | syft | yes | no | no | 1.94s | |
| ✅ REPOSITORY | trivy | yes | no | no | 23.02s | |
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 1.87s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 19.82s | |
| lychee | 38 | 4 | 0 | 20.23s | ||
| ✅ YAML | prettier | 8 | 1 | 0 | 0 | 1.12s |
| ✅ YAML | v8r | 8 | 0 | 0 | 9.03s | |
| ✅ YAML | yamllint | 8 | 0 | 0 | 0.7s |
Detailed Issues
⚠️ SPELL / lychee - 4 errors
📝 Summary
---------------------
🔍 Total..........261
🔗 Unique.........243
✅ Successful.....252
⏳ Timeouts.........0
🔀 Redirected.....111
👻 Excluded.........5
❓ Unknown..........0
🚫 Errors...........4
⛔ Unsupported......4
Errors in .github/agents/orchestrator.agent.md
[ERROR] file://.github/copilot-instructions.md (at 52:23) | File not found. Check if file exists and path is correct
Errors in .github/ISSUE_TEMPLATE/add-or-update-hal-driver.md
[ERROR] http://mcd.rou.st.com/modules.php?name=mcu (at 28:60) | Connection failed. Check network connectivity and firewall settings
Errors in README.md
[404] https://api.securityscorecards.dev/projects/github.com/embedded-pro/hal-st (at 3:199) | Rejected status code: 404 Not Found
[ERROR] https://st.com/ (at 5:93) | HTTP/2 protocol error. Server may not support HTTP/2 properly | Followed 1 redirect. Redirects: https://st.com/ --[301]--> https://www.st.com/
Hint: Followed 111 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`
⚠️ MARKDOWN / markdownlint - 19 errors
.github/agents/executor.agent.md:11 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You are the executor agent for..."]
.github/agents/orchestrator.agent.md:18:401 error MD013/line-length Line length [Expected: 400; Actual: 420]
.github/agents/orchestrator.agent.md:18 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You are the orchestrator agent..."]
.github/agents/planner.agent.md:11 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You are the planner agent for ..."]
.github/agents/planner.agent.md:39 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/agents/reviewer.agent.md:14 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You are the reviewer agent for..."]
.github/agents/reviewer.agent.md:122 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/instructions/hal-st-cpp.instructions.md:18 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/ISSUE_TEMPLATE/add-or-update-hal-driver.md:10 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "How to import a HAL driver"]
.github/prompts/orchestrate.prompt.md:8 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "Start a new development workfl..."]
CHANGELOG.md:83 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "⚠ BREAKING CHANGES"]
CHANGELOG.md:87 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:94 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Bug Fixes"]
CHANGELOG.md:103 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:122 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Bug Fixes"]
CHANGELOG.md:140 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "⚠ BREAKING CHANGES"]
CHANGELOG.md:144 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:151 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:162 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Bug Fixes"]
Notices
📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,CPP_CPPCHECK,CPP_CLANG_FORMAT,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GRYPE,REPOSITORY_LS_LINT,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R
Show us your support by starring ⭐ the repository
…updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [hendrikmuhs/ccache-action](https://github.com/hendrikmuhs/ccache-action) | `1.2.19` | `1.2.23` | | [lukka/run-cmake](https://github.com/lukka/run-cmake) | `10.8` | `10.9` | | [carlosperate/arm-none-eabi-gcc-action](https://github.com/carlosperate/arm-none-eabi-gcc-action) | `1.10.1` | `1.12.3` | | [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) | `9.0.1` | `9.5.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.35.2` | `4.35.5` | Updates `hendrikmuhs/ccache-action` from 1.2.19 to 1.2.23 - [Release notes](https://github.com/hendrikmuhs/ccache-action/releases) - [Commits](hendrikmuhs/ccache-action@bfa03e1...d62db5f) Updates `lukka/run-cmake` from 10.8 to 10.9 - [Release notes](https://github.com/lukka/run-cmake/releases) - [Commits](lukka/run-cmake@af1be47...5d55ea7) Updates `carlosperate/arm-none-eabi-gcc-action` from 1.10.1 to 1.12.3 - [Release notes](https://github.com/carlosperate/arm-none-eabi-gcc-action/releases) - [Changelog](https://github.com/carlosperate/arm-none-eabi-gcc-action/blob/main/CHANGELOG.md) - [Commits](carlosperate/arm-none-eabi-gcc-action@a532c97...0725d97) Updates `oxsecurity/megalinter` from 9.0.1 to 9.5.0 - [Release notes](https://github.com/oxsecurity/megalinter/releases) - [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md) - [Commits](oxsecurity/megalinter@0dcbedd...0e3ce9b) Updates `github/codeql-action` from 4.35.2 to 4.35.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...9e0d7b8) --- updated-dependencies: - dependency-name: carlosperate/arm-none-eabi-gcc-action dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: hendrikmuhs/ccache-action dependency-version: 1.2.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: lukka/run-cmake dependency-version: '10.9' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: oxsecurity/megalinter dependency-version: 9.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-fb8af59c58
branch
from
May 19, 2026 06:50
f59c6ec to
eeb2cc7
Compare
Contributor
|
@copilot create a commit to remove zizmor from my megalinter and also fix this comment: .github/workflows/linting-formatting.yml:38:13: constant expression "false" in condition. remove the if: section [if-cond] |
Agent-Logs-Url: https://github.com/embedded-pro/hal-st/sessions/6fc60c5e-dc52-48b3-a883-e4950213c97e Co-authored-by: gabrielfrasantos <21131318+gabrielfrasantos@users.noreply.github.com>
Contributor
Done in commit
|
gabrielfrasantos
deleted the
dependabot/github_actions/github-actions-fb8af59c58
branch
May 19, 2026 14:22
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 5 updates in the / directory:
1.2.191.2.2310.810.91.10.11.12.39.0.19.5.04.35.24.35.5Updates
hendrikmuhs/ccache-actionfrom 1.2.19 to 1.2.23Release notes
Sourced from hendrikmuhs/ccache-action's releases.
... (truncated)
Commits
d62db5fSupport platforms without upstream ccache/sccache releases (#439)05e1c04update code46cafa7Bump brace-expansion (#438)1f2fc71Update ccache to 4.13.3 (#441)a488765Bump@types/nodefrom 25.5.0 to 25.6.0 (#440)c97afbaBump handlebars from 4.7.8 to 4.7.9 (#436)3352247update codee44a23fBump fast-xml-parser from 5.4.1 to 5.5.7 (#434)bb3037dBump picomatch (#435)1bbbcdaupdate codeUpdates
lukka/run-cmakefrom 10.8 to 10.9Release notes
Sourced from lukka/run-cmake's releases.
Commits
5d55ea7consume lib v4.1.113fd3792consume libs v4.1.109434c8dsecond attempt: fixes #1550cd486bUpdate GitHub Actions To Use Node 24 (#157)1c9a7c7fixed #15567c73a8Document solution as suggested in lukka/run-cmake#1...45ee98eBump@octokit/request-errorfrom 5.0.1 to 5.1.112e545bBump cross-spawn from 7.0.3 to 7.0.6Updates
carlosperate/arm-none-eabi-gcc-actionfrom 1.10.1 to 1.12.3Release notes
Sourced from carlosperate/arm-none-eabi-gcc-action's releases.
... (truncated)
Changelog
Sourced from carlosperate/arm-none-eabi-gcc-action's changelog.
... (truncated)
Commits
0725d97project: Uprev to v1.12.3 & update changelog.06b4f82fix: Windows cache path validation within@actions/cache->@actions/glob->mini...58bf513ci: Runtest-buildon all OSes to catch platform specific issues.c2381d8Project: Uprev to v1.12.2 & update changelog.2ca53dfdeps: Bump brace-expansion (#93)604387edeps: Bump handlebars from 4.7.8 to 4.7.9 (#92)4f77049deps: Bump picomatch (#91)3052bceci: Fix jest ESM handling for the URL tests.15d2e9adeps: Updated most dependencies to the latest version.c28a6fcdeps: Bump flatted from 3.2.2 to 3.4.2 (#90)Updates
oxsecurity/megalinterfrom 9.0.1 to 9.5.0Release notes
Sourced from oxsecurity/megalinter's releases.
... (truncated)
Changelog
Sourced from oxsecurity/megalinter's changelog.
... (truncated)
Commits
0e3ce9bFix release workflows.3e132b1Release MegaLinter v9.5.0cbb7fe9Doc + prepare 9.5.0 release (#7836)29bcf10[automation] Auto-update linters version, help and documentation (#7832)ed753c5chore(deps): update jdkato/vale docker tag to v3.14.2 (#7829)e04f202feat: implement user notifications system and replace migration warnings (#7833)54bfad8chore(deps): update dependency@stoplight/spectral-clito v6.16.0 (#7830)f809408Eslint legacy detection & warning (#7831)6725b65chore(deps): update dependency langsmith to v0.8.5 (#7828)cbcc02fchore(deps): update dependency rumdl to v0.1.93 (#7825)Updates
github/codeql-actionfrom 4.35.2 to 4.35.5Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
9e0d7b8Merge pull request #3905 from github/update-v4.35.5-d4b4855156d7d599Add changelog entry for #389951f7e38Update changelog for v4.35.5d4b4855Merge pull request #3899 from github/mbg/esbuild/split127de81Merge remote-tracking branch 'origin/main' into mbg/esbuild/split7fde13fUse src + basename in header to avoid issues on Windowsdfa61e7Improve pattern matching and error handling52aafecImport and callrunWrappernormally inanalyzetests0d08c01Auto-generate shared bundle14085a6Auto-generate entry points