chore(deps): bump the npm_and_yarn group across 2 directories with 1 update #6973

dependabot · 2026-01-17T04:37:32Z

Bumps the npm_and_yarn group with 1 update in the /.automation/test/devskim/good directory: tar.
Bumps the npm_and_yarn group with 1 update in the /.automation/test/repository_syft directory: tar.

Updates tar from 6.1.11 to 7.5.3

Release notes

Sourced from tar's releases.

v6.1.13

6.1.13 (2022-12-07)

Dependencies

cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

57493ee #332 ensuring close event is emited after stream has ended (@webark)

b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

f129929 #313 remove dead link to benchmarks (#313) (@yetzt)

c1faa9f add examples/explanation of using tar.t (@isaacs)

Changelog

Sourced from tar's changelog.

Changelog

7.5

Added zstd compression support.

7.4

Deprecate onentry in favor of onReadEntry for clarity.

7.3

Add onWriteEntry option

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Drop support for node <18

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

Add support for brotli compression

Add maxDepth option to prevent extraction into excessively deep folders.

... (truncated)

Commits

0313844 7.5.3
340eb28 fix: sanitize absolute linkpaths properly
8bb83f7 update deps
1c4aedd Fix typo in onWriteEntry documentation
d9ea73a 7.5.2
5e1a8e6 Fix sync tar.list when file size reduces while reading
0fbeaed formatting
2dbacfe add types for make-tar util
c5865d3 remove unused taprc file
bdb3809 header: only read from ustar block if not specified in Pax
Additional commits viewable in compare view

Updates tar from 6.1.11 to 7.5.3

Release notes

Sourced from tar's releases.

v6.1.13

6.1.13 (2022-12-07)

Dependencies

cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

57493ee #332 ensuring close event is emited after stream has ended (@webark)

b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

f129929 #313 remove dead link to benchmarks (#313) (@yetzt)

c1faa9f add examples/explanation of using tar.t (@isaacs)

Changelog

Sourced from tar's changelog.

Changelog

7.5

Added zstd compression support.

7.4

Deprecate onentry in favor of onReadEntry for clarity.

7.3

Add onWriteEntry option

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Drop support for node <18

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

Add support for brotli compression

Add maxDepth option to prevent extraction into excessively deep folders.

... (truncated)

Commits

0313844 7.5.3
340eb28 fix: sanitize absolute linkpaths properly
8bb83f7 update deps
1c4aedd Fix typo in onWriteEntry documentation
d9ea73a 7.5.2
5e1a8e6 Fix sync tar.list when file size reduces while reading
0fbeaed formatting
2dbacfe add types for make-tar util
c5865d3 remove unused taprc file
bdb3809 header: only read from ustar block if not specified in Pax
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Upgrade dependency

Bumps tar to ^7.5.3 in package.json for .automation/test/devskim/good

Lockfile updates (major transitive changes)

Replaces fs-minipass with @isaacs/fs-minipass@^4, and upgrades minipass@7, minizlib@3, yallist@5, chownr@3
tar and several deps now require node >=18
Removes older transitive entries no longer used (e.g., mkdirp, older minipass/yallist)

^{Written by Cursor Bugbot for commit 7c228d9. This will update automatically on new commits. Configure here.}

…update Bumps the npm_and_yarn group with 1 update in the /.automation/test/devskim/good directory: [tar](https://github.com/isaacs/node-tar). Bumps the npm_and_yarn group with 1 update in the /.automation/test/repository_syft directory: [tar](https://github.com/isaacs/node-tar). Updates `tar` from 6.1.11 to 7.5.3 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.11...v7.5.3) Updates `tar` from 6.1.11 to 7.5.3 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.11...v7.5.3) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-01-17T04:43:04Z

❌MegaLinter analysis: Error

❌ REPOSITORY / trivy - 1 error

2026-01-17T04:42:06Z	INFO	[vulndb] Need to update DB
2026-01-17T04:42:06Z	INFO	[vulndb] Downloading vulnerability DB...
2026-01-17T04:42:06Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
18.84 MiB / 78.88 MiB [-------------->______________________________________________] 23.89% ? p/s ?46.41 MiB / 78.88 MiB [----------------------------------->_________________________] 58.83% ? p/s ?76.34 MiB / 78.88 MiB [----------------------------------------------------------->_] 96.78% ? p/s ?78.88 MiB / 78.88 MiB [--------------------------------------------->] 100.00% 100.05 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [--------------------------------------------->] 100.00% 100.05 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [--------------------------------------------->] 100.00% 100.05 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 93.59 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 93.59 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 93.59 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 87.55 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 87.55 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 87.55 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 81.91 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 81.91 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 81.91 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 76.62 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 76.62 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 76.62 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 71.68 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 71.68 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 71.68 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 67.05 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 67.05 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 67.05 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 62.73 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 62.73 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [---------------------------------------------->] 100.00% 62.73 MiB p/s ETA 0s78.88 MiB / 78.88 MiB [-------------------------------------------------] 100.00% 14.83 MiB p/s 5.5s2026-01-17T04:42:13Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-01-17T04:42:13Z	INFO	[vuln] Vulnerability scanning is enabled
2026-01-17T04:42:13Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-01-17T04:42:13Z	INFO	[misconfig] Need to update the checks bundle
2026-01-17T04:42:13Z	INFO	[misconfig] Downloading the checks bundle...
165.46 KiB / 165.46 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-01-17T04:42:18Z	WARN	[yarn] Protocol error	err="failed to parse version: 'version-range@^4.15.0:"
2026-01-17T04:42:18Z	INFO	[python] Licenses acquired from one or more METADATA files may be subject to additional terms. Use `--debug` flag to see all affected packages.
2026-01-17T04:42:27Z	INFO	Suppressing dependencies for development and testing. To display them, try the '--include-dev-deps' flag.
2026-01-17T04:42:27Z	INFO	Number of language-specific files	num=4
2026-01-17T04:42:27Z	INFO	[pip] Detecting vulnerabilities...
2026-01-17T04:42:27Z	INFO	[uv] Detecting vulnerabilities...
2026-01-17T04:42:27Z	INFO	[yarn] Detecting vulnerabilities...
2026-01-17T04:42:27Z	INFO	Detected config files	num=155
2026-01-17T04:42:27Z	INFO	Some vulnerabilities have been ignored/suppressed. Use the "--show-suppressed" flag to display them.

Report Summary

┌──────────────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│                        Target                        │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ .config/python/dev/requirements.txt                  │    pip     │        0        │         -         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ mega-linter-runner/yarn.lock                         │    yarn    │        1        │        

(Truncated to 5000 characters out of 41733)

⚠️ PYTHON / bandit - 69 errors

Run started:2026-01-17 04:41:35.242633+00:00

Test results:
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_imports.html#b404-import-subprocess
   Location: ./.automation/build.py:11:0
10	import shutil
11	import subprocess
12	import sys

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ''
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:3431:35
3430	                api_github_headers = {"content-type": "application/json"}
3431	                use_github_token = ""
3432	                if "GITHUB_TOKEN" in os.environ:

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ' (with GITHUB_TOKEN)'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:3435:39
3434	                    api_github_headers["authorization"] = f"Bearer {github_token}"
3435	                    use_github_token = " (with GITHUB_TOKEN)"
3436	                logging.info(

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3822:14
3821	        cwd=cwd,
3822	        shell=True,
3823	        executable=None if sys.platform == "win32" else which("bash"),
3824	    )
3825	    stdout = utils.clean_string(process.stdout)
3826	    logging.info(f"Format table results: ({process.returncode})\n" + stdout)
3827	
3828	
3829	def generate_json_schema_docs():
3830	    logging.info("Generating json schema html docs…")
3831	    if sys.platform == "win32":

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3845:14
3844	        cwd=cwd,
3845	        shell=True,
3846	        executable=None if sys.platform == "win32" else which("bash"),
3847	    )
3848	    stdout = utils.clean_string(process.stdout)
3849	    logging.info(
3850	        f"Generate json schema docs results: ({process.returncode})\n" + stdout
3851	    )
3852	
3853	
3854	def generate_version():

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b607_start_process_with_partial_path.html
   Location: ./.automation/build.py:3858:14
3857	    cwd_to_use = os.getcwd() + "/mega-linter-runner"
3858	    process = subprocess.run(
3859	        [
3860	            "npm",
3861	            "version",
3862	            "--newversion",
3863	            RELEASE_TAG,
3864	            "-no-git-tag-version",
3865	            "--no-commit-hooks",
3866	        ],
3867	        stdout=subprocess.PIPE,
3868	        universal_newlines=True,
3869	        cwd=cwd_to_use,
3870	        shell=True,
3871	    )
3872	    print(process.stdout)

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3870:14
3869	        cwd=cwd_to_use,
3870	        shell=True,
3871	    )
3872	    print(process.stdout)
3873	    print(process.stderr)
3874	    # Update python project version:
3875	    process = subprocess.run(
3876	        ["hatch", "version", RELEASE_TAG],
3877	        stdout=subprocess.PIPE,
3878	        text=True,
3879	        shell=True,
3880	        check=True,
3881	    )
3882	    # Update changelog
3883	    if UPDATE_CHANGELOG is True:
3884	        changelog_file = f"{REPO_

(Truncated to 5000 characters out of 43932)

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.3)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
    Error: File:[sh/megalinter_exec] is not executable

⚠️ REPOSITORY / grype - 33 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME                           INSTALLED  FIXED IN  TYPE    VULNERABILITY        SEVERITY  EPSS           RISK   
ejs                            3.1.6      3.1.7     npm     GHSA-phwq-j96m-2c2q  Critical  93.4% (99th)   87.8   
tar                            6.0.1      6.1.1     npm     GHSA-3jfq-g458-7qm9  High      85.5% (99th)   67.1   
requests                       2.24.0     2.31.0    python  GHSA-j8r2-6x86-q33q  Medium    6.3% (90th)    3.5    
ip                             1.1.5                npm     GHSA-2p57-rm9w-gvfp  High      3.8% (87th)    3.0    
minimist                       1.2.5      1.2.6     npm     GHSA-xvch-5gv4-984h  Critical  0.9% (74th)    0.8    
ejs                            3.1.6      3.1.10    npm     GHSA-ghr5-ch3p-vcr6  Medium    1.3% (78th)    0.6    
node-fetch                     2.6.6      2.6.7     npm     GHSA-r683-j2x4-v87g  High      0.6% (70th)    0.5    
tar                            6.0.1      6.1.9     npm     GHSA-5955-9wpr-37jh  High      0.6% (69th)    0.5    
semver                         7.3.5      7.5.2     npm     GHSA-c2qf-rxjj-qqgw  High      0.6% (68th)    0.4    
minimatch                      3.0.4      3.0.5     npm     GHSA-f8q6-p94x-37v3  High      0.5% (63rd)    0.3    
tar                            6.0.1      6.2.1     npm     GHSA-f5x3-32g6-xq36  Medium    0.4% (63rd)    0.3    
tar                            6.1.11     6.2.1     npm     GHSA-f5x3-32g6-xq36  Medium    0.4% (63rd)    0.3    
braces                         3.0.2      3.0.3     npm     GHSA-grv7-fg5c-xmjg  High      0.2% (45th)    0.2    
ip                             1.1.5      1.1.9     npm     GHSA-78xj-cgh5-2h22  Low       0.6% (67th)    0.2    
ansi-regex                     3.0.0      3.0.1     npm     GHSA-93q8-gq69-wqmw  High      0.2% (44th)    0.2    
tar                            6.0.1      6.1.2     npm     GHSA-r628-mhmh-qjhw  High      0.2% (39th)    0.1    
http-cache-semantics           4.1.0      4.1.1     npm     GHSA-rc47-6667-2j5j  High      0.2% (38th)    0.1    
@octokit/plugin-paginate-rest  2.17.0     9.2.2     npm     GHSA-h5c3-5r3r-rr8q  Medium    0.2% (45th)    0.1    
@octokit/request-error         2.1.0      5.1.1     npm     GHSA-xx4v-prfh-6cgc  Medium    0.2% (43rd)    0.1    
@octokit/request               5.6.2      8.4.1     npm     GHSA-rmvr-2pp2-xj38  Medium    0.2% (41st)    < 0.1  
micromatch                     4.0.4      4.0.8     npm     GHSA-952p-6rrq-rcjv  Medium    0.1% (32nd)    < 0.1  
requests                       2.24.0     2.32.4    python  GHSA-9hjg-9r4m-mvj7  Medium    < 0.1% (27th)  < 0.1  
cross-spawn                    7.0.3      7.0.5     npm     GHSA-3xgq-45jj-v275  High      < 0.1% (21st)  < 0.1  
debug                          4.2.0      4.3.1     npm     GHSA-gxpj-cx7g-858c  Low       < 0.1% (27th)  < 0.1  
requests                       2.24.0     2.32.0    python  GHSA-9wx4-h78v-vm56  Medium    < 0.1% (13th)  < 0.1  
tmp                            0.0.33     0.2.4     npm     GHSA-52f5-9888-hmc6  Low       < 0.1% (22nd)  < 0.1  
tar                            6.0.1      6.1.7     npm     GHSA-9r2w-394v-53qc  High      < 0.1% (6th)   < 0.1  
word-wrap                      1.2.3      1.2.4     npm     GHSA-j8xg-fqg3-53r7  Medium    < 0.1% (9th)   < 0.1  
tar                            6.0.1      6.1.9     npm     GHSA-qq89-hq3f-393p  High      < 0.1% (2nd)   < 0.1  
js-yaml                        3.14.0     3.14.2    npm     GHSA-mh29-5h37-fv8m  Medium    < 0.1% (4th)   < 0.1  
filelock                       3.20.2     3.20.3    python  GHSA-qmgc-5h2g-mvrw  Medium    < 0.1% (1st)   < 0.1  
brace-expansion                1.1.11     1.1.12    npm     GHSA-v6h2-p8h4-qcjw  Low       < 0.1% (4th)   < 0.1  
diff                           7.0.0      8.0.3     npm     GHSA-73rr-hh4g-fpgx  Low       N/A            N/A
[0065] ERROR discovered vulnerabilities at or above the severity threshold

⚠️ SPELL / lychee - 19 errors

[WARN ] WARNING: `--exclude-mail` is deprecated and will soon be removed; E-Mail is no longer checked by default. Use `--include-mail` to enable E-Mail checking.
[ERROR] https://www.contributor-covenant.org/version/1/4/code-of-conduct.html | Network error: error sending request for url (https://www.contributor-covenant.org/version/1/4/code-of-conduct.html) Maybe a certificate error?
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden
[404] https://github.com/$ | Network error: Not Found
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages | Network error: Forbidden
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[ERROR] https://standardjs.com/ | Network error: error sending request for url (https://standardjs.com/) Maybe a certificate error?
[403] https://stackoverflow.com/a/73711302 | Error (cached)
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden
[ERROR] https://standardjs.com/ | Error (cached)
[404] https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png | Network error: Not Found
[TIMEOUT] https://generated.at/ | Timeout
[TIMEOUT] https://generated.at/ | Timeout
📝 Summary
---------------------
🔍 Total.........2422
✅ Successful....1931
⏳ Timeouts.........2
🔀 Redirected.......0
👻 Excluded.......470
❓ Unknown..........0
🚫 Errors..........19

Errors in megalinter/descriptors/bicep.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden

Errors in mega-linter-runner/README.md
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)

Errors in megalinter/descriptors/javascript.megalinter-descriptor.yml
[ERROR] https://standardjs.com/ | Network error: error sending request for url (https://standardjs.com/) Maybe a certificate error?

Errors in megalinter/descriptors/markdown.megalinter-descriptor.yml
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden

Errors in megalinter/descriptors/typescript.megalinter-descriptor.yml
[ERROR] https://standardjs.com/ | Error (cached)

Errors in megalinter/descriptors/html.megalinter-descriptor.yml
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden

Errors in megalinter/descriptors/terraform.megalinter-descriptor.yml
[404] https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png | Network error: Not Found

Errors in megalinter/descriptors/powershell.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Error (cached)

Errors in mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml
[404] https://github.com/$ | Network error: Not Found

Errors in README.md
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden
[TIMEOUT] https://generated.at/ | Timeout
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden

Errors in megalinter/descriptors/arm.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden

Errors in CODE_OF_CONDUCT.md
[ERROR] https://www.contributor-covenant.org/version/1/4/code-of-conduct.html | Network error: error sending request for url (https://www.contributor-covenant.org/version/1/4/code-of-conduct.html) Maybe a certificate error?

Errors in megalinter/descriptors/clojure.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden

⚠️ MARKDOWN / markdownlint - 332 errors

.github/copilot-instructions.md:9 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/copilot-instructions.md:156 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/linters/valestyles/proselint/README.md:12:601 error MD013/line-length Line length [Expected: 600; Actual: 755]
CHANGELOG.md:266:90 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
CHANGELOG.md:2287:87 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/articles.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "They talk about MegaLinter"]
docs/badge.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Badge"]
docs/config-activation.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Activation and deactivation"]
docs/config-apply-fixes.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Apply fixes"]
docs/config-cli-lint-mode.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLI lint mode"]
docs/config-file.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: ".mega-linter.yml file"]
docs/config-filtering.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Filter linted files"]
docs/config-linters.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Linter specific variables"]
docs/config-postcommands.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Post-commands"]
docs/config-precommands.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Pre-commands"]
docs/config-variables-security.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Environment variables security"]
docs/config-variables.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Common variables"]
docs/configuration.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Configuration"]
docs/descriptors/action_actionlint.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "actionlint"]
docs/descriptors/action.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ACTION"]
docs/descriptors/ansible_ansible_lint.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ansible-lint"]
docs/descriptors/ansible_ansible_lint.md:8:601 error MD013/line-length Line length [Expected: 600; Actual: 795]
docs/descriptors/ansible.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ANSIBLE"]
docs/descriptors/api_spectral.md:14:601 error MD013/line-length Line length [Expected: 600; Actual: 795]
docs/descriptors/api.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "API"]
docs/descriptors/arm_arm_ttk.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "arm-ttk"]
docs/descriptors/arm.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ARM"]
docs/descriptors/bash_bash_exec.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bash-exec"]
docs/descriptors/bash_shellcheck.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shellcheck"]
docs/descriptors/bash_shellcheck.md:8:601 error MD013/line-length Line length [Expected: 600; Actual: 785]
docs/descriptors/bash_shfmt.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shfmt"]
docs/descriptors/bash.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BASH"]
docs/descriptors/bicep_bicep_linter.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bicep_linter"]
docs/descriptors/bicep.md:8 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BICEP"]
docs/descriptors/c_clang_format.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "clang-format"]
docs/descriptors/c_clang_format.md:8:601 error MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/c_cppcheck.md:7 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cppcheck"]
docs/descriptors/c_cpplint.md:7

(Truncated to 5000 characters out of 43581)

⚠️ YAML / prettier - 6 errors

.automation/plugins.yml 76ms (unchanged)
.github/FUNDING.yml 5ms (unchanged)
.github/dependabot.yml 37ms (unchanged)
.github/linters/.cfnlintrc.yml 2ms (unchanged)
.github/linters/.checkov.yml 5ms (unchanged)
.github/linters/.golangci.yml 6ms (unchanged)
.github/linters/.hadolint.yml 2ms (unchanged)
.github/linters/.openapirc.yml 2ms (unchanged)
.github/linters/.protolintrc.yml 3ms (unchanged)
.github/linters/.ruby-lint.yml 2ms (unchanged)
.github/linters/.yamllint.yml 13ms (unchanged)
.github/linters/analysis_options.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/AMPM.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/Accessibility.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Acronyms.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/Adverbs.yml 32ms (unchanged)
.github/linters/valestyles/Microsoft/Auto.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Avoid.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/ComplexWords.yml 22ms (unchanged)
.github/linters/valestyles/Microsoft/Contractions.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/Dashes.yml 14ms (unchanged)
.github/linters/valestyles/Microsoft/DateFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/DateNumbers.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/DateOrder.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Ellipses.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/FirstPerson.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Foreign.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Gender.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/GenderBias.yml 10ms (unchanged)
.github/linters/valestyles/Microsoft/GeneralURL.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingAcronyms.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingColons.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingPunctuation.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Headings.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/Hyphens.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Negative.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Ordinal.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/OxfordComma.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Passive.yml 15ms (unchanged)
.github/linters/valestyles/Microsoft/Percentages.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/Quotes.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/RangeFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/RangeTime.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Ranges.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Semicolon.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/SentenceLength.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Spacing.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/Suspended.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Terms.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/URLFormat.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/Units.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/Vocab.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/We.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/Wordiness.yml 14ms (unchanged)
.github/linters/valestyles/proselint/Airlinese.yml 1ms (unchanged)
.github/linters/valestyles/proselint/AnimalLabels.yml 16ms (unchanged)
.github/linters/valestyles/proselint/Annotations.yml 6ms (unchanged)
.github/linters/valestyles/proselint/Apologizing.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Archaisms.yml 3ms (unchanged)
.github/linters/valestyles/proselint/But.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Cliches.yml 53ms (unchanged)
.github/linters/valestyles/proselint/CorporateSpeak.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Currency.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Cursing.yml 4ms (unchanged)
.github/linters/valestyles/proselint/DateCase.yml 8ms (unchanged)
.github/linters/valestyles/proselint/DateMidnight.yml 1ms (unchanged)
.github/linters/valestyles/proselint/DateRedundancy.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateSpacing.yml 1ms (unchanged)
.github/linters/valestyles/proselint/DenizenLabels.yml 6ms (unchanged)
.github/linters/valestyles/proselint/Diacritical.yml 10ms (unchanged)
.github/linters/valestyles/proselint/GenderBias.yml 8ms (unchanged)
.github/linters/valestyles/proselint/GroupTerms.yml 3ms (unchanged)
.github/linters/valestyles/proselint/Hedging.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Hyperbole.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Jargon.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTOffensive.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTTerms.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Malapropisms.yml 2ms (unchanged)
.github/linters/val

(Truncated to 5000 characters out of 11507)

⚠️ YAML / yamllint - 30 errors

mega-linter-runner/.eslintrc.yml
  11:9      warning  too few spaces inside empty braces  (braces)

mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor.yml
  7:1       error    syntax error: could not find expected ':' (syntax)

megalinter/descriptors/copypaste.megalinter-descriptor.yml
  18:301    warning  line too long (313 > 300 characters)  (line-length)

megalinter/descriptors/javascript.megalinter-descriptor.yml
  234:301   warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/markdown.megalinter-descriptor.yml
  74:301    warning  line too long (366 > 300 characters)  (line-length)

megalinter/descriptors/perl.megalinter-descriptor.yml
  26:301    warning  line too long (310 > 300 characters)  (line-length)

megalinter/descriptors/php.megalinter-descriptor.yml
  149:301   warning  line too long (389 > 300 characters)  (line-length)
  163:301   warning  line too long (302 > 300 characters)  (line-length)

megalinter/descriptors/repository.megalinter-descriptor.yml
  155:301   warning  line too long (408 > 300 characters)  (line-length)
  268:301   warning  line too long (306 > 300 characters)  (line-length)
  273:301   warning  line too long (321 > 300 characters)  (line-length)
  450:301   warning  line too long (338 > 300 characters)  (line-length)
  518:301   warning  line too long (306 > 300 characters)  (line-length)
  568:301   warning  line too long (316 > 300 characters)  (line-length)
  806:301   warning  line too long (1263 > 300 characters)  (line-length)
  871:301   warning  line too long (879 > 300 characters)  (line-length)
  885:301   warning  line too long (358 > 300 characters)  (line-length)
  941:301   warning  line too long (346 > 300 characters)  (line-length)
  948:301   warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/salesforce.megalinter-descriptor.yml
  51:301    warning  line too long (359 > 300 characters)  (line-length)
  295:301   warning  line too long (359 > 300 characters)  (line-length)

megalinter/descriptors/sql.megalinter-descriptor.yml
  64:301    warning  line too long (319 > 300 characters)  (line-length)

megalinter/descriptors/terraform.megalinter-descriptor.yml
  27:301    warning  line too long (330 > 300 characters)  (line-length)
  86:301    warning  line too long (391 > 300 characters)  (line-length)
  142:301   warning  line too long (346 > 300 characters)  (line-length)
  199:301   warning  line too long (328 > 300 characters)  (line-length)

megalinter/descriptors/typescript.megalinter-descriptor.yml
  225:301   warning  line too long (314 > 300 characters)  (line-length)

mkdocs.yml
  8:301     warning  line too long (552 > 300 characters)  (line-length)
  66:5      warning  wrong indentation: expected 6 but found 4  (indentation)
  78:5      warning  wrong indentation: expected 6 but found 4  (indentation)

✅ Linters with no issues

black, checkov, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, pylint, ruff, secretlint, shellcheck, shfmt, spectral, syft, trivy-sbom, trufflehog, v8r, v8r, xmllint

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 17, 2026

dependabot bot requested review from Kurt-von-Laven, bdovaz, echoix and nvuillam as code owners January 17, 2026 04:37

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 17, 2026

dependabot bot had a problem deploying to dev January 17, 2026 04:37 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update #6973

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update #6973

dependabot bot commented on behalf of github Jan 17, 2026 •

edited by cursor bot

Loading

Uh oh!

github-actions bot commented Jan 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update #6973

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update #6973

Conversation

dependabot bot commented on behalf of github Jan 17, 2026 • edited by cursor bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.1.13

6.1.13 (2022-12-07)

Dependencies

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

Documentation

Changelog

7.5

7.4

7.3

7.2

7.1

7.0

6.2

v6.1.13

6.1.13 (2022-12-07)

Dependencies

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

Documentation

Changelog

7.5

7.4

7.3

7.2

7.1

7.0

6.2

Uh oh!

github-actions bot commented Jan 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

✅ Linters with no issues

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 17, 2026 •

edited by cursor bot

Loading

github-actions bot commented Jan 17, 2026 •

edited

Loading