chore(deps, cpp): update github.vscode-github-actions, github.vscode-pull-request-github, sonarsource.sonarlint-vscode in devcontainer.json by philips-software-forest-releaser[bot] · Pull Request #1325 · philips-software/amp-devcontainer

philips-software-forest-releaser · 2026-06-28T03:48:28Z

Note

Before merging this PR, please conduct a manual test checking basic functionality of the updated plug-ins. There are limited automated tests for the VS Code Extension updates.

Updates sonarsource.sonarlint-vscode from 5.3.0 to 5.4.0

Release notes

For full release notes, see JIRA

Updates github.vscode-pull-request-github from 0.150.0 to 0.152.0

Release notes

0.150.0

Fixes

New PR title doesn't match behavior on github.com. https://www.github.com/microsoft/vscode-pull-request-github/issues/8771

PRs not shown in panel when workspace folder is a manually-created git worktree. https://www.github.com/microsoft/vscode-pull-request-github/issues/8756

0.148.0

Changes

Contribute YAML schema validation for GitHub issue template files under .github/ISSUE_TEMPLATE/.

Fixes

Comments panel discards <img> alt attribute, renders "Image: image". https://www.github.com/microsoft/vscode-pull-request-github/issues/8760

Merge button shows a separator even when there are no extra options. https://www.github.com/microsoft/vscode-pull-request-github/issues/8759

URI handler rejects PR URLs with underscores in the owner name. https://www.github.com/microsoft/vscode-pull-request-github/issues/8758

PR description is reset if the branch push fails. https://www.github.com/microsoft/vscode-pull-request-github/issues/8678

Thank You

@Malix-Labs: Contribute YAML schema validation for GitHub issue templates PR #8761

0.146.0

Changes

Trim Co-authored-by lines from the default PR description.

Fixes

"Bad credentials" error persists even after re-authenticating via browser. https://www.github.com/microsoft/vscode-pull-request-github/issues/8738

Comment shows twice in diff editor. https://www.github.com/microsoft/vscode-pull-request-github/issues/8736

Upload button overlays cursor / text in comment editor. https://www.github.com/microsoft/vscode-pull-request-github/issues/8735

Branches tracking a shared upstream incorrectly associated with stale closed PRs. https://www.github.com/microsoft/vscode-pull-request-github/issues/8676

0.144.0

Changes

Support uploading images to pull requests with a button and with paste.

Use a more descriptive folder name when checking out pull requests in a worktree.

"githubIssues.issueBranchTitle" now supports the ${issueType} template variable.

Fixes

VS Code hangs with "the upstream ref origin/master for branch master is not a github repo". https://www.github.com/microsoft/vscode-pull-request-github/issues/8729

getAssignableUsers and getMentionableUsers bypass globalState cache when fetch promise already exists. https://www.github.com/microsoft/vscode-pull-request-github/issues/8669

Bad Credentials error. https://www.github.com/microsoft/vscode-pull-request-github/issues/8603

Thank You

@MaxDNG: Re-parent pulled-up directory children to ensure proper checkbox refresh PR #8679

Updates github.vscode-github-actions from 0.32.0 to 0.32.1

Release notes

…b, sonarsource.sonarlint-vscode in devcontainer.json

github-actions · 2026-06-28T03:51:05Z

📦 Container Size Analysis

Note

Comparing ghcr.io/philips-software/amp-devcontainer-base:edge ➔ ghcr.io/philips-software/amp-devcontainer-base:pr-1325

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	73.72 MB	73.72 MB	+50 B (+0%)	🔼
linux/arm64	71.91 MB	71.91 MB	+305 B (+0%)	🔼

sonarqubecloud · 2026-06-28T03:51:15Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2026-06-28T03:51:15Z

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	23		0	0	0.23s
✅ DOCKERFILE	hadolint	3		0	0	0.23s
✅ JSON	npm-package-json-lint	yes		no	no	0.51s
✅ JSON	prettier	21	3	0	0	0.66s
✅ JSON	v8r	21		0	0	11.79s
✅ MARKDOWN	markdownlint	12	0	0	0	1.19s
✅ MARKDOWN	markdown-table-formatter	12	0	0	0	0.31s
✅ REPOSITORY	checkov	yes		no	no	29.21s
✅ REPOSITORY	gitleaks	yes		no	no	1.13s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	54.39s
⚠️ REPOSITORY	osv-scanner	yes		1	no	0.72s
✅ REPOSITORY	secretlint	yes		no	no	2.05s
✅ REPOSITORY	syft	yes		no	no	2.03s
✅ REPOSITORY	trivy	yes		no	no	13.77s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.36s
✅ REPOSITORY	trufflehog	yes		no	no	3.39s
⚠️ SPELL	lychee	83		2	0	11.31s
✅ YAML	prettier	31	0	0	0	1.28s
✅ YAML	v8r	31		0	0	12.42s
✅ YAML	yamllint	31		0	0	1.17s

Detailed Issues

⚠️ SPELL / lychee - 2 errors

📝 Summary
---------------------
🔍 Total..........135
🔗 Unique.........114
✅ Successful.....128
⏳ Timeouts.........0
🔀 Redirected......16
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........2
⛔ Unsupported......2

Errors in .github/TOOL_VERSION_ISSUE_TEMPLATE.md
[403] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads (at 30:7) | Rejected status code: 403 Forbidden

Errors in README.md
[ERROR] https://securityscorecards.dev/viewer/?uri=github.com/philips-software/amp-devcontainer (at 4:599) | Connection failed. Check network connectivity and firewall settings

Hint: Followed 16 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

⚠️ REPOSITORY / osv-scanner - 1 error

Scanning dir .
Starting filesystem walk for root: /
Scanned .devcontainer/cpp/requirements.txt file and found 20 packages
Scanned package-lock.json file and found 73 packages
Scanned test/rust/workspace/cargo/Cargo.lock file and found 1 package
Scanned test/rust/workspace/test/Cargo.lock file and found 1 package
Scanned test/rust/workspace/cortex-m/Cargo.lock file and found 20 packages
Scanned test/rust/workspace/clippy/Cargo.lock file and found 1 package
Scanned test/rust/workspace/cortex-mf/Cargo.lock file and found 20 packages
End status: 92 dirs visited, 289 inodes visited, 7 Extract calls, 28.349055ms elapsed, 28.349285ms wall time

Total 2 packages affected by 2 known vulnerabilities (0 Critical, 0 High, 0 Medium, 0 Low, 2 Unknown) from 1 ecosystem.
0 vulnerabilities can be fixed.

+-----------------------------------+------+-----------+------------+---------+---------------+------------------------------------------+
| OSV URL                           | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE                                   |
+-----------------------------------+------+-----------+------------+---------+---------------+------------------------------------------+
| https://osv.dev/RUSTSEC-2026-0110 |      | crates.io | bare-metal | 0.2.5   | --            | test/rust/workspace/cortex-m/Cargo.lock  |
| https://osv.dev/RUSTSEC-2026-0110 |      | crates.io | bare-metal | 0.2.5   | --            | test/rust/workspace/cortex-mf/Cargo.lock |
+-----------------------------------+------+-----------+------------+---------+---------------+------------------------------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

oxsecurity/megalinter/flavors/salesforce@v9.5.0 (59 linters)
oxsecurity/megalinter/flavors/javascript@v9.5.0 (62 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

github-actions · 2026-06-28T03:57:25Z

Test Results

4 files - 9 4 suites - 9 0s ⏱️ - 17m 41s
1 tests - 32 1 ✅ - 32 0 💤 ±0 0 ❌ ±0
4 runs - 133 4 ✅ - 133 0 💤 ±0 0 ❌ ±0

Results for commit 11bf8b1. ± Comparison against base commit 9c46d08.

Update github.vscode-github-actions, github.vscode-pull-request-githu…

11bf8b1

…b, sonarsource.sonarlint-vscode in devcontainer.json

philips-software-forest-releaser Bot requested a review from a team as a code owner June 28, 2026 03:48

philips-software-forest-releaser Bot added dependencies Pull requests that update a dependency file vscode-extensions labels Jun 28, 2026

Ron (rjaegers) approved these changes Jun 29, 2026

View reviewed changes

Ron (rjaegers) enabled auto-merge June 29, 2026 16:27

Ron (rjaegers) disabled auto-merge June 29, 2026 18:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps, cpp): update github.vscode-github-actions, github.vscode-pull-request-github, sonarsource.sonarlint-vscode in devcontainer.json#1325

chore(deps, cpp): update github.vscode-github-actions, github.vscode-pull-request-github, sonarsource.sonarlint-vscode in devcontainer.json#1325
philips-software-forest-releaser[bot] wants to merge 1 commit into
mainfrom
feature/amp-devcontainer-cpp/update-vscode-extensions-devcontainer.json

philips-software-forest-releaser Bot commented Jun 28, 2026

Uh oh!

github-actions Bot commented Jun 28, 2026

Uh oh!

sonarqubecloud Bot commented Jun 28, 2026

Uh oh!

github-actions Bot commented Jun 28, 2026

Uh oh!

github-actions Bot commented Jun 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

philips-software-forest-releaser Bot commented Jun 28, 2026

0.150.0

Fixes

0.148.0

Changes

Fixes

0.146.0

Changes

Fixes

0.144.0

Changes

Fixes

Uh oh!

github-actions Bot commented Jun 28, 2026

📦 Container Size Analysis

📈 Size Comparison Table

Uh oh!

sonarqubecloud Bot commented Jun 28, 2026

Quality Gate passed

Uh oh!

github-actions Bot commented Jun 28, 2026

✅⚠️MegaLinter analysis: Success with warnings

Detailed Issues

Notices

Uh oh!

github-actions Bot commented Jun 28, 2026

Test Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant