Bump oxsecurity/megalinter from 9.4.0 to 9.5.0 by dependabot[bot] · Pull Request #581 · EIPStackGroup/OpENer

dependabot · 2026-06-02T01:25:28Z

Bumps oxsecurity/megalinter from 9.4.0 to 9.5.0.

Release notes

Sourced from oxsecurity/megalinter's releases.

v9.5.0

What's Changed

Take 2 mn to read MegaLinter v9.5.0 announcements

Breaking changes

Docker images published only to GitHub Container Registry (ghcr.io) until OIDC-based publishing to Docker Hub is implemented. The Docker Hub registry (docker.io/oxsecurity/megalinter) is frozen at v9.4.0: pulls of oxsecurity/megalinter:v9 (or :beta, or any flavor tag) will keep returning v9.4.0. To get v9.5.0 and later from CI tools other than GitHub Actions (GitLab CI, Azure Pipelines, Bitbucket, Jenkins, Drone, raw docker run, …), switch your image references:

oxsecurity/megalinter:v9 → ghcr.io/oxsecurity/megalinter:v9

oxsecurity/megalinter:beta → ghcr.io/oxsecurity/megalinter:beta

oxsecurity/megalinter-<flavor>:v9 → ghcr.io/oxsecurity/megalinter-<flavor>:v9

GitHub Action users (uses: oxsecurity/megalinter@v9) and mega-linter-runner users are not affected, as both already pull from ghcr.io.

ESLint-based linters upgraded to v10+. Legacy .eslintrc.* configs are no longer supported: you must migrate to flat-config (eslint.config.js) to keep using JAVASCRIPT_ES, TYPESCRIPT_ES, JSX_ESLINT, TSX_ESLINT, and JSON_ESLINT_PLUGIN_JSONC.

Airbnb and Standard ESLint configs replaced (they never shipped ESLint 9+ support):

extends: ["airbnb"] → extends: ["airbnb-extended"]

extends: ["standard"] → extends: ["neostandard"]

Core

User notifications system: linters can surface structured "Notices" to end users in the PR comment / report footer (used for ESLint migration, deprecated options, etc.), replaces the ad-hoc migration warnings

Security: more default hidden environment variables, so a compromised linter cannot leak your secrets

Upgrade .NET runtime to 10.0 (csharpier, dotnet-format, roslynator, devskim, tsqllint, vbdotnet-format)

Upgrade GO runtime to 1.26.3

New linters

osv-scanner: trivy-like vulnerability scanner by Google

zizmor: GitHub Actions static analysis

Disabled linters

KICS (until upstream security issue is fixed)

Spectral (crashing)

Re-enabled linters

Trivy (v0.70.0): the supply chain security incident is resolved

Deprecated linters

Removed linters

Media

Linters enhancements

ESLint: legacy .eslintrc.* configs are now detected and a migration notice is emitted in the report so users know they need to switch to flat-config

shellcheck: honour the BASH_SHELLCHECK_CONFIG_FILE variable / .shellcheckrc config file

raku (Rakudo): now ships on ARM64 too

scala: linter installation is now deterministic (same binary across rebuilds)

v8r (JSON/YAML schema validation): output now shows only validation errors (no more "no schema found" or success noise)

lychee: removed the deprecated exclude_mail option (no longer supported by lychee upstream)

Faster image pulls: several linters (Lua/StyLua arm64, clj-kondo, kubescape, ls-lint, dotenv-linter) now use pre-built Alpine binaries instead of compiling from source

Fixes

... (truncated)

Changelog

Sourced from oxsecurity/megalinter's changelog.

[v9.5.0] - 2026-05-16

Take 2 mn to read MegaLinter v9.5.0 announcements

Breaking changes

Docker images published only to GitHub Container Registry (ghcr.io) until OIDC-based publishing to Docker Hub is implemented. The Docker Hub registry (docker.io/oxsecurity/megalinter) is frozen at v9.4.0: pulls of oxsecurity/megalinter:v9 (or :beta, or any flavor tag) will keep returning v9.4.0. To get v9.5.0 and later from CI tools other than GitHub Actions (GitLab CI, Azure Pipelines, Bitbucket, Jenkins, Drone, raw docker run, …), switch your image references:

oxsecurity/megalinter:v9 → ghcr.io/oxsecurity/megalinter:v9

oxsecurity/megalinter:beta → ghcr.io/oxsecurity/megalinter:beta

oxsecurity/megalinter-<flavor>:v9 → ghcr.io/oxsecurity/megalinter-<flavor>:v9

GitHub Action users (uses: oxsecurity/megalinter@v9) and mega-linter-runner users are not affected, as both already pull from ghcr.io.

ESLint-based linters upgraded to v10+. Legacy .eslintrc.* configs are no longer supported: you must migrate to flat-config (eslint.config.js) to keep using JAVASCRIPT_ES, TYPESCRIPT_ES, JSX_ESLINT, TSX_ESLINT, and JSON_ESLINT_PLUGIN_JSONC.

Airbnb and Standard ESLint configs replaced (they never shipped ESLint 9+ support):

extends: ["airbnb"] → extends: ["airbnb-extended"]

extends: ["standard"] → extends: ["neostandard"]

Core

User notifications system: linters can surface structured "Notices" to end users in the PR comment / report footer (used for ESLint migration, deprecated options, etc.), replaces the ad-hoc migration warnings

Security: more default hidden environment variables, so a compromised linter cannot leak your secrets

Upgrade .NET runtime to 10.0 (csharpier, dotnet-format, roslynator, devskim, tsqllint, vbdotnet-format)

Upgrade GO runtime to 1.26.3

New linters

osv-scanner: trivy-like vulnerability scanner by Google

zizmor: GitHub Actions static analysis

Disabled linters

KICS (until upstream security issue is fixed)

Spectral (crashing)

Re-enabled linters

Trivy (v0.70.0): the supply chain security incident is resolved

Deprecated linters

Removed linters

Media

Linters enhancements

ESLint: legacy .eslintrc.* configs are now detected and a migration notice is emitted in the report so users know they need to switch to flat-config

shellcheck: honour the BASH_SHELLCHECK_CONFIG_FILE variable / .shellcheckrc config file

raku (Rakudo): now ships on ARM64 too

scala: linter installation is now deterministic (same binary across rebuilds)

v8r (JSON/YAML schema validation): output now shows only validation errors (no more "no schema found" or success noise)

lychee: removed the deprecated exclude_mail option (no longer supported by lychee upstream)

Faster image pulls: several linters (Lua/StyLua arm64, clj-kondo, kubescape, ls-lint, dotenv-linter) now use pre-built Alpine binaries instead of compiling from source

Fixes

Console output: linters now show their log sections (not only on errors), the results table and reporter logs are printed after linters complete, and parallel-run logs are no longer interleaved

... (truncated)

Commits

0e3ce9b Fix release workflows.
3e132b1 Release MegaLinter v9.5.0
cbb7fe9 Doc + prepare 9.5.0 release (#7836)
29bcf10 [automation] Auto-update linters version, help and documentation (#7832)
ed753c5 chore(deps): update jdkato/vale docker tag to v3.14.2 (#7829)
e04f202 feat: implement user notifications system and replace migration warnings (#7833)
54bfad8 chore(deps): update dependency @stoplight/spectral-cli to v6.16.0 (#7830)
f809408 Eslint legacy detection & warning (#7831)
6725b65 chore(deps): update dependency langsmith to v0.8.5 (#7828)
cbcc02f chore(deps): update dependency rumdl to v0.1.93 (#7825)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) from 9.4.0 to 9.5.0. - [Release notes](https://github.com/oxsecurity/megalinter/releases) - [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md) - [Commits](oxsecurity/megalinter@v9.4.0...v9.5.0) --- updated-dependencies: - dependency-name: oxsecurity/megalinter dependency-version: 9.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-02T01:27:55Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
❌ ACTION	actionlint	1	1	0	0.08s
❌ ACTION	zizmor	1	1	0	0.38s
❌ C	clang-format	112	1	0	1.14s
❌ C	cppcheck	112	15	0	14.91s
❌ C	cpplint	112	3360	0	26.83s
❌ COPYPASTE	jscpd	yes	40	no	4.44s
❌ CPP	clang-format	72	1	0	0.82s
❌ CPP	cppcheck	72	2	0	2.7s
❌ CPP	cpplint	72	857	0	9.29s
⚠️ MARKDOWN	markdownlint	1	52	0	0.73s
✅ MARKDOWN	markdown-table-formatter	1	0	0	0.22s
❌ REPOSITORY	checkov	yes	1	no	24.66s
✅ REPOSITORY	gitleaks	yes	no	no	4.85s
✅ REPOSITORY	git_diff	yes	no	no	0.03s
✅ REPOSITORY	grype	yes	no	no	61.82s
❌ REPOSITORY	osv-scanner	yes	1	no	0.14s
✅ REPOSITORY	secretlint	yes	no	no	1.54s
✅ REPOSITORY	syft	yes	no	no	2.06s
✅ REPOSITORY	trivy	yes	no	no	10.89s
✅ REPOSITORY	trivy-sbom	yes	no	no	0.16s
✅ REPOSITORY	trufflehog	yes	no	no	5.87s
❌ SPELL	lychee	24	1	0	0.73s
✅ XML	xmllint	1	0	0	0.16s
⚠️ YAML	prettier	2	1	2	0.42s
✅ YAML	v8r	2	0	0	3.83s
❌ YAML	yamllint	2	9	0	0.53s

Detailed Issues

❌ ACTION / actionlint - 1 error

.github/workflows/build.yml:135:9: shellcheck reported issue in this script: SC2086:info:3:41: Double quote to prevent globbing and word splitting [shellcheck]
    |
135 |         run: |
    |         ^~~~

❌ REPOSITORY / checkov - 1 error

github_actions scan results:

Passed checks: 71, Failed checks: 1, Skipped checks: 0

Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
	FAILED for resource: on(Build, Lint & Coverage)
	File: /.github/workflows/build.yml:17-18

❌ C / clang-format - 1 error

^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument

(Truncated to last 2666 characters out of 19263)

❌ CPP / clang-format - 1 error

^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument
.clang-format:62:36: error: invalid boolean
AllowShortCaseLabelsOnASingleLine: Never
                                   ^~~~~
Error reading .clang-format: Invalid argument

(Truncated to last 2666 characters out of 12383)

❌ C / cppcheck - 15 errors

IN32/sample_application/sampleapplication.c
❌ [ERROR] source/src/ports/generic_networkhandler.c
    Checking source/src/ports/generic_networkhandler.c ...
    source/src/ports/generic_networkhandler.c:0:0: information: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. [normalCheckLevelMaxBranches]
    
    ^
    Checking source/src/ports/generic_networkhandler.c: OPENER_TRACE_ENABLED...
    Checking source/src/ports/generic_networkhandler.c: STM32...
    Checking source/src/ports/generic_networkhandler.c: STM32;__MINGW32__...
    Checking source/src/ports/generic_networkhandler.c: _WIN32...

✅ [SUCCESS] source/src/ports/generic_networkhandler.h
✅ [SUCCESS] source/src/ports/networkhandler.h
✅ [SUCCESS] source/src/ports/nvdata/conffile.c
✅ [SUCCESS] source/src/ports/nvdata/conffile.h
✅ [SUCCESS] source/src/ports/nvdata/nvdata.c
✅ [SUCCESS] source/src/ports/nvdata/nvdata.h
✅ [SUCCESS] source/src/ports/nvdata/nvqos.c
✅ [SUCCESS] source/src/ports/nvdata/nvqos.h
✅ [SUCCESS] source/src/ports/nvdata/nvtcpip.c
✅ [SUCCESS] source/src/ports/nvdata/nvtcpip.h
✅ [SUCCESS] source/src/ports/opener_error.h
✅ [SUCCESS] source/src/ports/socket_timer.c
✅ [SUCCESS] source/src/ports/socket_timer.h
✅ [SUCCESS] source/src/trace.h
✅ [SUCCESS] source/src/typedefs.h
❌ [ERROR] source/src/utils/doublylinkedlist.c
    Checking source/src/utils/doublylinkedlist.c ...
    source/src/utils/doublylinkedlist.c:0:0: information: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. [normalCheckLevelMaxBranches]
    
    ^

✅ [SUCCESS] source/src/utils/doublylinkedlist.h
✅ [SUCCESS] source/src/utils/enipmessage.c
✅ [SUCCESS] source/src/utils/enipmessage.h
❌ [ERROR] source/src/utils/random.c
    Checking source/src/utils/random.c ...
    source/src/utils/random.c:14:4: warning: If memory allocation fails, then there is a possible null pointer dereference: random [nullPointerOutOfMemory]
      *random =
       ^
    source/src/utils/random.c:13:26: note: Assuming allocation function fails
      Random *random = malloc( sizeof(Random) );
                             ^
    source/src/utils/random.c:13:26: note: Assignment 'random=malloc(sizeof(struct Random))', assigned value is 0
      Random *random = malloc( sizeof(Random) );
                             ^
    source/src/utils/random.c:14:4: note: Null pointer dereference
      *random =
       ^

✅ [SUCCESS] source/src/utils/random.h
✅ [SUCCESS] source/src/utils/xorshiftrandom.c
✅ [SUCCESS] source/src/utils/xorshiftrandom.h
✅ [SUCCESS] source/tests/OpENerTests.h
✅ [SUCCESS] source/tests/check_assert.h
✅ [SUCCESS] source/tests/test_assert.h


(Truncated to last 2666 characters out of 10904)

❌ CPP / cppcheck - 2 errors

pointer dereference
      message[2] = 21;
      ^
    source/tests/cip/cipepathtest.cpp:377:3: warning: If memory allocation fails, then there is a possible null pointer dereference: message [nullPointerOutOfMemory]
      message[3] = 22;
      ^
    source/tests/cip/cipepathtest.cpp:371:42: note: Assuming allocation function fails
      CipOctet *message = (CipOctet *)calloc (6, sizeof(CipOctet) );
                                             ^
    source/tests/cip/cipepathtest.cpp:371:23: note: Assignment 'message=(CipOctet*)calloc(6,sizeof(CipOctet))', assigned value is 0
      CipOctet *message = (CipOctet *)calloc (6, sizeof(CipOctet) );
                          ^
    source/tests/cip/cipepathtest.cpp:377:3: note: Null pointer dereference
      message[3] = 22;
      ^
    source/tests/cip/cipepathtest.cpp:378:3: warning: If memory allocation fails, then there is a possible null pointer dereference: message [nullPointerOutOfMemory]
      message[4] = 23;
      ^
    source/tests/cip/cipepathtest.cpp:371:42: note: Assuming allocation function fails
      CipOctet *message = (CipOctet *)calloc (6, sizeof(CipOctet) );
                                             ^
    source/tests/cip/cipepathtest.cpp:371:23: note: Assignment 'message=(CipOctet*)calloc(6,sizeof(CipOctet))', assigned value is 0
      CipOctet *message = (CipOctet *)calloc (6, sizeof(CipOctet) );
                          ^
    source/tests/cip/cipepathtest.cpp:378:3: note: Null pointer dereference
      message[4] = 23;
      ^
    source/tests/cip/cipepathtest.cpp:379:3: warning: If memory allocation fails, then there is a possible null pointer dereference: message [nullPointerOutOfMemory]
      message[5] = 24;
      ^
    source/tests/cip/cipepathtest.cpp:371:42: note: Assuming allocation function fails
      CipOctet *message = (CipOctet *)calloc (6, sizeof(CipOctet) );
                                             ^
    source/tests/cip/cipepathtest.cpp:371:23: note: Assignment 'message=(CipOctet*)calloc(6,sizeof(CipOctet))', assigned value is 0
      CipOctet *message = (CipOctet *)calloc (6, sizeof(CipOctet) );
                          ^
    source/tests/cip/cipepathtest.cpp:379:3: note: Null pointer dereference
      message[5] = 24;
      ^

✅ [SUCCESS] source/tests/cip/cipstringtests.cpp
✅ [SUCCESS] source/tests/enet_encap/encaptest.cpp
✅ [SUCCESS] source/tests/enet_encap/endianconvtest.cpp
✅ [SUCCESS] source/tests/ports/socket_timer_tests.cpp
✅ [SUCCESS] source/tests/test_assert.h
✅ [SUCCESS] source/tests/utils/doublylinkedlistTests.cpp
✅ [SUCCESS] source/tests/utils/randomTests.cpp
✅ [SUCCESS] source/tests/utils/xorshiftrandomtests.cpp


(Truncated to last 2666 characters out of 17359)

❌ C / cpplint - 3360 errors

X/sample_application/sampleapplication.c
Done processing source/src/ports/STM32/networkconfig.c
Done processing source/src/ports/STM32/networkconfig.h
Done processing source/src/ports/STM32/networkhandler.c
Done processing source/src/ports/STM32/opener.c
Done processing source/src/ports/STM32/opener.h
Done processing source/src/ports/STM32/opener_error.c
Done processing source/src/ports/STM32/platform_network_includes.h
Done processing source/src/ports/STM32/sample_application/ethlinkcbs.c
Done processing source/src/ports/STM32/sample_application/ethlinkcbs.h
Done processing source/src/ports/STM32/sample_application/opener_user_conf.h
Done processing source/src/ports/STM32/sample_application/sampleapplication.c
Done processing source/src/ports/WIN32/main.c
Done processing source/src/ports/WIN32/networkconfig.c
Done processing source/src/ports/WIN32/networkconfig.h
Done processing source/src/ports/WIN32/networkhandler.c
Done processing source/src/ports/WIN32/opener_error.c
Done processing source/src/ports/WIN32/platform_network_includes.h
Done processing source/src/ports/WIN32/sample_application/ethlinkcbs.c
Done processing source/src/ports/WIN32/sample_application/ethlinkcbs.h
Done processing source/src/ports/WIN32/sample_application/opener_user_conf.h
Done processing source/src/ports/WIN32/sample_application/sampleapplication.c
Done processing source/src/ports/generic_networkhandler.c
Done processing source/src/ports/generic_networkhandler.h
Done processing source/src/ports/networkhandler.h
Done processing source/src/ports/nvdata/conffile.c
Done processing source/src/ports/nvdata/conffile.h
Done processing source/src/ports/nvdata/nvdata.c
Done processing source/src/ports/nvdata/nvdata.h
Done processing source/src/ports/nvdata/nvqos.c
Done processing source/src/ports/nvdata/nvqos.h
Done processing source/src/ports/nvdata/nvtcpip.c
Done processing source/src/ports/nvdata/nvtcpip.h
Done processing source/src/ports/opener_error.h
Done processing source/src/ports/socket_timer.c
Done processing source/src/ports/socket_timer.h
Done processing source/src/trace.h
Done processing source/src/typedefs.h
Done processing source/src/utils/doublylinkedlist.c
Done processing source/src/utils/doublylinkedlist.h
Done processing source/src/utils/enipmessage.c
Done processing source/src/utils/enipmessage.h
Done processing source/src/utils/random.c
Done processing source/src/utils/random.h
Done processing source/src/utils/xorshiftrandom.c
Done processing source/src/utils/xorshiftrandom.h
Done processing source/tests/OpENerTests.h
Done processing source/tests/check_assert.h
Done processing source/tests/test_assert.h
Total errors found: 3360

(Truncated to last 2666 characters out of 371525)

❌ CPP / cpplint - 857 errors

ludes.h
Done processing source/src/ports/MINGW/sample_application/ethlinkcbs.h
Done processing source/src/ports/MINGW/sample_application/opener_user_conf.h
Done processing source/src/ports/POSIX/networkconfig.h
Done processing source/src/ports/POSIX/platform_network_includes.h
Done processing source/src/ports/POSIX/sample_application/ethlinkcbs.h
Done processing source/src/ports/POSIX/sample_application/opener_user_conf.h
Done processing source/src/ports/STM32/networkconfig.h
Done processing source/src/ports/STM32/opener.h
Done processing source/src/ports/STM32/platform_network_includes.h
Done processing source/src/ports/STM32/sample_application/ethlinkcbs.h
Done processing source/src/ports/STM32/sample_application/opener_user_conf.h
Done processing source/src/ports/WIN32/networkconfig.h
Done processing source/src/ports/WIN32/platform_network_includes.h
Done processing source/src/ports/WIN32/sample_application/ethlinkcbs.h
Done processing source/src/ports/WIN32/sample_application/opener_user_conf.h
Done processing source/src/ports/generic_networkhandler.h
Done processing source/src/ports/networkhandler.h
Done processing source/src/ports/nvdata/conffile.h
Done processing source/src/ports/nvdata/nvdata.h
Done processing source/src/ports/nvdata/nvqos.h
Done processing source/src/ports/nvdata/nvtcpip.h
Done processing source/src/ports/opener_error.h
Done processing source/src/ports/socket_timer.h
Done processing source/src/trace.h
Done processing source/src/typedefs.h
Done processing source/src/utils/doublylinkedlist.h
Done processing source/src/utils/enipmessage.h
Done processing source/src/utils/random.h
Done processing source/src/utils/xorshiftrandom.h
Done processing source/tests/OpENerTests.cpp
Done processing source/tests/OpENerTests.h
Done processing source/tests/callback_mock.cpp
Done processing source/tests/check_assert.h
Done processing source/tests/cip/cipcommontests.cpp
Done processing source/tests/cip/cipconnectionmanagertest.cpp
Done processing source/tests/cip/cipconnectionobjecttest.cpp
Done processing source/tests/cip/cipelectronickeyformattest.cpp
Done processing source/tests/cip/cipelectronickeytest.cpp
Done processing source/tests/cip/cipepathtest.cpp
Done processing source/tests/cip/cipstringtests.cpp
Done processing source/tests/enet_encap/encaptest.cpp
Done processing source/tests/enet_encap/endianconvtest.cpp
Done processing source/tests/ports/socket_timer_tests.cpp
Done processing source/tests/test_assert.h
Done processing source/tests/utils/doublylinkedlistTests.cpp
Done processing source/tests/utils/randomTests.cpp
Done processing source/tests/utils/xorshiftrandomtests.cpp
Total errors found: 857

(Truncated to last 2666 characters out of 107681)

❌ COPYPASTE / jscpd - 40 errors

──────┬─────────────┬──────────────┬──────────────┬──────────────────┬───────────────────┐
│ Format   │ Files analyzed │ Total lines │ Total tokens │ Clones found │ Duplicated lines │ Duplicated tokens │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ c        │ 51             │ 12168       │ 76519        │ 28           │ 1828 (15.02%)    │ 11637 (15.21%)    │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ c-header │ 56             │ 5517        │ 20319        │ 6            │ 728 (13.2%)      │ 2112 (10.39%)     │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ markdown │ 21             │ 1388        │ 7217         │ 0            │ 0 (0%)           │ 0 (0%)            │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ latex    │ 1              │ 308         │ 3486         │ 0            │ 0 (0%)           │ 0 (0%)            │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ cpp      │ 15             │ 2723        │ 21525        │ 6            │ 44 (1.62%)       │ 536 (2.49%)       │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ diff     │ 1              │ 172         │ 647          │ 0            │ 0 (0%)           │ 0 (0%)            │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ python   │ 1              │ 37          │ 321          │ 0            │ 0 (0%)           │ 0 (0%)            │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ Total:   │ 146            │ 22313       │ 130034       │ 40           │ 2600 (11.65%)    │ 14285 (10.99%)    │
└──────────┴────────────────┴─────────────┴──────────────┴──────────────┴──────────────────┴───────────────────┘
Found 40 clones.
HTML report saved to megalinter-reports/copy-paste/html/
ERROR: jscpd found too many duplicates (11.65%) over threshold (0%)
Error: ERROR: jscpd found too many duplicates (11.65%) over threshold (0%)
    at ThresholdReporter.report (/node-deps/node_modules/@jscpd/finder/dist/index.js:615:13)
    at /node-deps/node_modules/@jscpd/finder/dist/index.js:109:18
    at Array.forEach (<anonymous>)
    at /node-deps/node_modules/@jscpd/finder/dist/index.js:108:22
    at async /node-deps/node_modules/jscpd/dist/bin/jscpd.js:9:5

(Truncated to last 2666 characters out of 9491)

❌ SPELL / lychee - 1 error

[WARN] Skipping file with invalid UTF-8 content: license.txt
  [WARN] license.txt: No files found for this input source
📝 Summary
---------------------
🔍 Total............8
🔗 Unique...........8
✅ Successful.......7
⏳ Timeouts.........0
🔀 Redirected.......2
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1
⛔ Unsupported......1

Errors in .github/workflows/build.yml
[404] https://github.com/$ (at 124:120) | Rejected status code: 404 Not Found

Hint: Followed 2 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

❌ REPOSITORY / osv-scanner - 1 error

Warning: `source` exists as both a subcommand of OSV-Scanner and as a file on the filesystem. `source` is assumed to be a subcommand here. If you intended for `source` to be an argument to `source`, you must specify `source source` in your command line.
Scanning dir .
Starting filesystem walk for root: /
End status: 75 dirs visited, 323 inodes visited, 0 Extract calls, 9.051444ms elapsed, 9.051816ms wall time
No package sources found, --help for usage information.

❌ YAML / yamllint - 9 errors

.github/dependabot.yml
  1:1       warning  missing document start "---"  (document-start)

.github/workflows/build.yml
  1:1       warning  missing document start "---"  (document-start)
  1:29      warning  wrong new line character: expected \n  (new-lines)
  3:1       warning  truthy value should be one of [false, true]  (truthy)
  5:16      error    too many spaces inside brackets  (brackets)
  5:25      error    too many spaces inside brackets  (brackets)
  7:16      error    too many spaces inside brackets  (brackets)
  7:25      error    too many spaces inside brackets  (brackets)
  145:44    error    no new line character at the end of file  (new-line-at-end-of-file)

❌ ACTION / zizmor - 1 error

INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'artipacked' audit failed on file://.github/workflows/build.yml

Caused by:
    0: error in 'artipacked' audit
    1: couldn't list tags for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)


[ZizmorLinter] Zizmor failed to reach the GitHub API.
To allow zizmor to use GITHUB_TOKEN, add the following to your .mega-linter.yml:
ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
  - GITHUB_TOKEN

⚠️ MARKDOWN / markdownlint - 52 errors

ation Trailing punctuation in heading [Punctuation: ':']
README.md:102:1 error MD007/ul-indent Unordered list indentation [Expected: 2; Actual: 1]
README.md:102:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:103:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:103:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:104:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:104:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:105:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:105:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:106:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:106:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:107:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:107:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:108:1 error MD007/ul-indent Unordered list indentation [Expected: 2; Actual: 1]
README.md:108:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:109:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:109:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:110:1 error MD007/ul-indent Unordered list indentation [Expected: 4; Actual: 2]
README.md:110:1 error MD010/no-hard-tabs Hard tabs [Column: 1]
README.md:112:14 error MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']
README.md:123 error MD003/heading-style Heading style [Expected: setext; Actual: atx]
README.md:136 error MD003/heading-style Heading style [Expected: setext; Actual: atx]
README.md:139 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
README.md:154 error MD003/heading-style Heading style [Expected: setext; Actual: atx]
README.md:156 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
README.md:165 error MD003/heading-style Heading style [Expected: setext; Actual: atx]
README.md:170:26 error MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']
README.md:183:1 error MD018/no-missing-space-atx No space after hash on atx style heading [Context: "#Filename: Dockerfile"]
README.md:202:15 error MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']
README.md:207:23 error MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']
README.md:215 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]

(Truncated to last 2666 characters out of 4484)

⚠️ YAML / prettier - 1 error

Checking formatting...
[warn] .github/workflows/build.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,C_CPPCHECK,C_CPPLINT,C_CLANG_FORMAT,COPYPASTE_JSCPD,CPP_CPPCHECK,CPP_CPPLINT,CPP_CLANG_FORMAT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 2, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump oxsecurity/megalinter from 9.4.0 to 9.5.0#581

Bump oxsecurity/megalinter from 9.4.0 to 9.5.0#581
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/oxsecurity/megalinter-9.5.0

dependabot Bot commented on behalf of github Jun 2, 2026

Uh oh!

github-actions Bot commented Jun 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 2, 2026

v9.5.0

What's Changed

[v9.5.0] - 2026-05-16

Uh oh!

github-actions Bot commented Jun 2, 2026

❌MegaLinter analysis: Error

Detailed Issues

Notices

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants