Skip to content

chore(deps): update all digest updates - #445

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-digest
Aug 19, 2026
Merged

chore(deps): update all digest updates#445
renovate[bot] merged 1 commit into
mainfrom
renovate/all-digest

Conversation

@renovate

@renovate renovate Bot commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
docker/setup-buildx-action (changelog) action digest bb05f3f → 37fe631 OpenSSF Scorecard
yxtay/.github (changelog) action digest 0c8dfdd → ee64aff OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from yxtay as a code owner August 19, 2026 17:15
@renovate
renovate Bot enabled auto-merge (squash) August 19, 2026 17:15
@github-actions

github-actions Bot commented Aug 19, 2026

Copy link
Copy Markdown

✅MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ JSON prettier 1 0 0 0 0.33s
✅ MARKDOWN markdownlint 2 0 0 0 0.52s
✅ MARKDOWN markdown-table-formatter 2 0 0 0 0.14s
✅ YAML prettier 11 0 0 0 0.54s

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,YAML_PRETTIER

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 19, 2026

Copy link
Copy Markdown

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ COPYPASTE jscpd yes no no 0.44s
✅ DOCKERFILE hadolint 1 0 0 0.23s
✅ JSON prettier 1 0 0 0 0.28s
✅ JSON v8r 1 0 0 1.57s
✅ REPOSITORY betterleaks yes no no 0.98s
✅ REPOSITORY gitleaks yes no no 0.37s
✅ REPOSITORY git_diff yes no no 0.01s
⚠️ REPOSITORY osv-scanner yes 32 no 7.04s
✅ REPOSITORY secretlint yes no no 1.12s
✅ REPOSITORY syft yes no no 1.34s
✅ REPOSITORY trivy yes no no 7.1s
✅ REPOSITORY trivy-sbom yes no no 0.1s
✅ REPOSITORY trufflehog yes no no 3.16s
✅ YAML prettier 11 0 0 0 0.66s
✅ YAML v8r 11 0 0 6.07s
✅ YAML yamllint 11 0 0 0.41s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 32 errors 
Scanning dir .
Starting filesystem walk for root: /
Scanned requirements.txt file and found 9 packages
End status: 23 dirs visited, 78 inodes visited, 1 Extract calls, 2.727689ms elapsed, 2.72781ms wall time
Filtered 2 local/unscannable package/s from the scan.

Total 4 packages affected by 33 known vulnerabilities (1 Critical, 19 High, 11 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
33 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE           |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| https://osv.dev/PYSEC-2020-173      | 8.7  | PyPI      | pip        | 9.0.3   | 19.2          | requirements.txt |
| https://osv.dev/GHSA-gpvv-69j7-gwj8 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2021-437      | 7.1  | PyPI      | pip        | 9.0.3   | 21.1          | requirements.txt |
| https://osv.dev/GHSA-5xp3-jfq3-5q8x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-228      | 6.8  | PyPI      | pip        | 9.0.3   | 23.3          | requirements.txt |
| https://osv.dev/GHSA-mq26-g339-26xf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1795     | 5.9  | PyPI      | pip        | 9.0.3   | 25.3          | requirements.txt |
| https://osv.dev/GHSA-4xh5-x5gv-qwph |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1796     | 2.0  | PyPI      | pip        | 9.0.3   | 26.0          | requirements.txt |
| https://osv.dev/GHSA-6vgw-5pg2-w6jp |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-196      | 8.0  | PyPI      | pip        | 9.0.3   | 26.1.2        | requirements.txt |
| https://osv.dev/GHSA-wf93-45jw-7689 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2875     | 4.6  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-58qw-9mgm-455v |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2876     | 5.3  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-jp4c-xjxw-mgf9 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2022-43012    | 8.7  | PyPI      | setuptools | 9.1.0   | 65.5.1        | requirements.txt |
| https://osv.dev/GHSA-r9hx-vwmv-q579 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2025-49       | 8.8  | PyPI      | setuptools | 9.1.0   | 78.1.1        | requirements.txt |
| https://osv.dev/GHSA-5rjg-fvgr-3xxf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1918     | 8.8  | PyPI      | setuptools | 9.1.0   | 70.0.0        | requirements.txt |
| https://osv.dev/GHSA-cx63-2mw6-8hw5 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3447     | 6.1  | PyPI      | setuptools | 9.1.0   | 83.0.0        | requirements.txt |
| https://osv.dev/GHSA-h35f-9h28-mq5c |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1374     | 5.3  | PyPI      | filelock   | 3.19.1  | 3.20.3        | requirements.txt |
| https://osv.dev/GHSA-qmgc-5h2g-mvrw |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1375     | 6.3  | PyPI      | filelock   | 3.19.1  | 3.20.1        | requirements.txt |
| https://osv.dev/GHSA-w853-jp5j-5j7f |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-175      |      | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/PYSEC-2023-227      | 8.7  | PyPI      | pillow     | 9.5.0   | 10.0.0        | requirements.txt |
| https://osv.dev/GHSA-8ghj-p4vj-mr35 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-165      | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-wjx4-4jcj-g98j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1793     | 7.3  | PyPI      | pillow     | 9.5.0   | 10.3.0        | requirements.txt |
| https://osv.dev/GHSA-44wm-f244-xhp3 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1794     | 8.8  | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/GHSA-j7hp-h8jx-5ppr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2253     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-8v84-f9pq-wr9x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2254     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-5x94-69rx-g8h2 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2255     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-45hq-cxwh-f6vc |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2256     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-phj9-mv4w-65pm |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2257     | 4.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-4x4j-2g7c-83w6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2874     | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-r73j-pqj5-w3x7 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3451     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-6r8x-57c9-28j4 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3453     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-9hw9-ch79-4vh6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3454     | 8.2  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-xj96-63gp-2gmr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3493     | 8.3  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-62p4-gmf7-7g93 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3494     | 6.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-fj7v-r99m-22gq |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3495     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-jjj6-mw9f-p565 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3496     | 8.7  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-vjc4-5qp5-m44j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-457      | 9.3  | PyPI      | pillow     | 9.5.0   | 10.2.0        | requirements.txt |
| https://osv.dev/GHSA-3f63-hfp8-52jq |      |           |            |         |               |                  |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 19, 2026

Copy link
Copy Markdown

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.28s
✅ ACTION zizmor 5 0 0 0 1.18s
✅ COPYPASTE jscpd yes no no 0.1s
✅ DOCKERFILE hadolint 1 0 0 0.24s
✅ EDITORCONFIG editorconfig-checker 23 0 0 0.05s
✅ JSON prettier 1 0 0 0 0.3s
✅ JSON v8r 1 0 0 1.31s
✅ MARKDOWN markdownlint 2 0 0 0 0.62s
✅ MARKDOWN markdown-table-formatter 2 0 0 0 0.15s
✅ REPOSITORY betterleaks yes no no 2.06s
✅ REPOSITORY gitleaks yes no no 0.44s
✅ REPOSITORY git_diff yes no no 0.01s
⚠️ REPOSITORY osv-scanner yes 32 no 10.7s
✅ REPOSITORY secretlint yes no no 0.97s
✅ REPOSITORY semgrep yes no no 17.38s
✅ REPOSITORY syft yes no no 2.45s
✅ REPOSITORY trivy yes no no 9.07s
✅ REPOSITORY trivy-sbom yes no no 0.11s
✅ REPOSITORY trufflehog yes no no 3.28s
✅ SPELL lychee 15 0 0 1.14s
✅ YAML prettier 11 0 0 0 0.58s
✅ YAML v8r 11 0 0 5.71s
✅ YAML yamllint 11 0 0 0.46s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 32 errors 
Scanning dir .
Starting filesystem walk for root: /
Scanned requirements.txt file and found 9 packages
End status: 24 dirs visited, 89 inodes visited, 1 Extract calls, 6.019649ms elapsed, 6.01984ms wall time
Filtered 2 local/unscannable package/s from the scan.

Total 4 packages affected by 33 known vulnerabilities (1 Critical, 19 High, 11 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
33 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE           |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| https://osv.dev/PYSEC-2020-173      | 8.7  | PyPI      | pip        | 9.0.3   | 19.2          | requirements.txt |
| https://osv.dev/GHSA-gpvv-69j7-gwj8 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2021-437      | 7.1  | PyPI      | pip        | 9.0.3   | 21.1          | requirements.txt |
| https://osv.dev/GHSA-5xp3-jfq3-5q8x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-228      | 6.8  | PyPI      | pip        | 9.0.3   | 23.3          | requirements.txt |
| https://osv.dev/GHSA-mq26-g339-26xf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1795     | 5.9  | PyPI      | pip        | 9.0.3   | 25.3          | requirements.txt |
| https://osv.dev/GHSA-4xh5-x5gv-qwph |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1796     | 2.0  | PyPI      | pip        | 9.0.3   | 26.0          | requirements.txt |
| https://osv.dev/GHSA-6vgw-5pg2-w6jp |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-196      | 8.0  | PyPI      | pip        | 9.0.3   | 26.1.2        | requirements.txt |
| https://osv.dev/GHSA-wf93-45jw-7689 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2875     | 4.6  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-58qw-9mgm-455v |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2876     | 5.3  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-jp4c-xjxw-mgf9 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2022-43012    | 8.7  | PyPI      | setuptools | 9.1.0   | 65.5.1        | requirements.txt |
| https://osv.dev/GHSA-r9hx-vwmv-q579 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2025-49       | 8.8  | PyPI      | setuptools | 9.1.0   | 78.1.1        | requirements.txt |
| https://osv.dev/GHSA-5rjg-fvgr-3xxf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1918     | 8.8  | PyPI      | setuptools | 9.1.0   | 70.0.0        | requirements.txt |
| https://osv.dev/GHSA-cx63-2mw6-8hw5 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3447     | 6.1  | PyPI      | setuptools | 9.1.0   | 83.0.0        | requirements.txt |
| https://osv.dev/GHSA-h35f-9h28-mq5c |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1374     | 5.3  | PyPI      | filelock   | 3.19.1  | 3.20.3        | requirements.txt |
| https://osv.dev/GHSA-qmgc-5h2g-mvrw |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1375     | 6.3  | PyPI      | filelock   | 3.19.1  | 3.20.1        | requirements.txt |
| https://osv.dev/GHSA-w853-jp5j-5j7f |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-175      |      | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/PYSEC-2023-227      | 8.7  | PyPI      | pillow     | 9.5.0   | 10.0.0        | requirements.txt |
| https://osv.dev/GHSA-8ghj-p4vj-mr35 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-165      | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-wjx4-4jcj-g98j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1793     | 7.3  | PyPI      | pillow     | 9.5.0   | 10.3.0        | requirements.txt |
| https://osv.dev/GHSA-44wm-f244-xhp3 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1794     | 8.8  | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/GHSA-j7hp-h8jx-5ppr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2253     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-8v84-f9pq-wr9x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2254     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-5x94-69rx-g8h2 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2255     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-45hq-cxwh-f6vc |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2256     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-phj9-mv4w-65pm |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2257     | 4.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-4x4j-2g7c-83w6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2874     | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-r73j-pqj5-w3x7 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3451     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-6r8x-57c9-28j4 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3453     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-9hw9-ch79-4vh6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3454     | 8.2  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-xj96-63gp-2gmr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3493     | 8.3  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-62p4-gmf7-7g93 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3494     | 6.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-fj7v-r99m-22gq |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3495     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-jjj6-mw9f-p565 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3496     | 8.7  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-vjc4-5qp5-m44j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-457      | 9.3  | PyPI      | pillow     | 9.5.0   | 10.2.0        | requirements.txt |
| https://osv.dev/GHSA-3f63-hfp8-52jq |      |           |            |         |               |                  |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 19, 2026

Copy link
Copy Markdown

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ DOCKERFILE hadolint 1 0 0 0.4s
✅ REPOSITORY betterleaks yes no no 1.29s
✅ REPOSITORY devskim yes no no 1.7s
✅ REPOSITORY dustilock yes no no 1.44s
✅ REPOSITORY gitleaks yes no no 0.67s
⚠️ REPOSITORY osv-scanner yes 32 no 9.19s
✅ REPOSITORY secretlint yes no no 1.47s
✅ REPOSITORY semgrep yes no no 19.4s
✅ REPOSITORY syft yes no no 1.72s
✅ REPOSITORY trivy yes no no 10.12s
✅ REPOSITORY trivy-sbom yes no no 0.09s
✅ REPOSITORY trufflehog yes no no 4.13s

Detailed Issues

⚠️ REPOSITORY / osv-scanner - 32 errors 
Scanning dir .
Starting filesystem walk for root: /
Scanned requirements.txt file and found 9 packages
End status: 23 dirs visited, 78 inodes visited, 1 Extract calls, 6.159465ms elapsed, 6.159705ms wall time
Filtered 2 local/unscannable package/s from the scan.

Total 4 packages affected by 33 known vulnerabilities (1 Critical, 19 High, 11 Medium, 1 Low, 1 Unknown) from 1 ecosystem.
33 vulnerabilities can be fixed.

+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE    | VERSION | FIXED VERSION | SOURCE           |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+
| https://osv.dev/PYSEC-2020-173      | 8.7  | PyPI      | pip        | 9.0.3   | 19.2          | requirements.txt |
| https://osv.dev/GHSA-gpvv-69j7-gwj8 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2021-437      | 7.1  | PyPI      | pip        | 9.0.3   | 21.1          | requirements.txt |
| https://osv.dev/GHSA-5xp3-jfq3-5q8x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-228      | 6.8  | PyPI      | pip        | 9.0.3   | 23.3          | requirements.txt |
| https://osv.dev/GHSA-mq26-g339-26xf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1795     | 5.9  | PyPI      | pip        | 9.0.3   | 25.3          | requirements.txt |
| https://osv.dev/GHSA-4xh5-x5gv-qwph |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1796     | 2.0  | PyPI      | pip        | 9.0.3   | 26.0          | requirements.txt |
| https://osv.dev/GHSA-6vgw-5pg2-w6jp |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-196      | 8.0  | PyPI      | pip        | 9.0.3   | 26.1.2        | requirements.txt |
| https://osv.dev/GHSA-wf93-45jw-7689 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2875     | 4.6  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-58qw-9mgm-455v |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2876     | 5.3  | PyPI      | pip        | 9.0.3   | 26.1          | requirements.txt |
| https://osv.dev/GHSA-jp4c-xjxw-mgf9 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2022-43012    | 8.7  | PyPI      | setuptools | 9.1.0   | 65.5.1        | requirements.txt |
| https://osv.dev/GHSA-r9hx-vwmv-q579 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2025-49       | 8.8  | PyPI      | setuptools | 9.1.0   | 78.1.1        | requirements.txt |
| https://osv.dev/GHSA-5rjg-fvgr-3xxf |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1918     | 8.8  | PyPI      | setuptools | 9.1.0   | 70.0.0        | requirements.txt |
| https://osv.dev/GHSA-cx63-2mw6-8hw5 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3447     | 6.1  | PyPI      | setuptools | 9.1.0   | 83.0.0        | requirements.txt |
| https://osv.dev/GHSA-h35f-9h28-mq5c |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1374     | 5.3  | PyPI      | filelock   | 3.19.1  | 3.20.3        | requirements.txt |
| https://osv.dev/GHSA-qmgc-5h2g-mvrw |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1375     | 6.3  | PyPI      | filelock   | 3.19.1  | 3.20.1        | requirements.txt |
| https://osv.dev/GHSA-w853-jp5j-5j7f |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2023-175      |      | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/PYSEC-2023-227      | 8.7  | PyPI      | pillow     | 9.5.0   | 10.0.0        | requirements.txt |
| https://osv.dev/GHSA-8ghj-p4vj-mr35 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-165      | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-wjx4-4jcj-g98j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1793     | 7.3  | PyPI      | pillow     | 9.5.0   | 10.3.0        | requirements.txt |
| https://osv.dev/GHSA-44wm-f244-xhp3 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-1794     | 8.8  | PyPI      | pillow     | 9.5.0   | 10.0.1        | requirements.txt |
| https://osv.dev/GHSA-j7hp-h8jx-5ppr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2253     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-8v84-f9pq-wr9x |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2254     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-5x94-69rx-g8h2 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2255     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-45hq-cxwh-f6vc |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2256     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-phj9-mv4w-65pm |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2257     | 4.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-4x4j-2g7c-83w6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-2874     | 5.5  | PyPI      | pillow     | 9.5.0   | 12.2.0        | requirements.txt |
| https://osv.dev/GHSA-r73j-pqj5-w3x7 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3451     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-6r8x-57c9-28j4 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3453     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-9hw9-ch79-4vh6 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3454     | 8.2  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-xj96-63gp-2gmr |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3493     | 8.3  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-62p4-gmf7-7g93 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3494     | 6.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-fj7v-r99m-22gq |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3495     | 7.5  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-jjj6-mw9f-p565 |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-3496     | 8.7  | PyPI      | pillow     | 9.5.0   | 12.3.0        | requirements.txt |
| https://osv.dev/GHSA-vjc4-5qp5-m44j |      |           |            |         |               |                  |
| https://osv.dev/PYSEC-2026-457      | 9.3  | PyPI      | pillow     | 9.5.0   | 10.2.0        | requirements.txt |
| https://osv.dev/GHSA-3f63-hfp8-52jq |      |           |            |         |               |                  |
+-------------------------------------+------+-----------+------------+---------+---------------+------------------+

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters DOCKERFILE_HADOLINT,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SEMGREP,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@renovate
renovate Bot merged commit 4d8f8c1 into main Aug 19, 2026
37 checks passed
@renovate
renovate Bot deleted the renovate/all-digest branch August 19, 2026 22:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@yxtay yxtay yxtay approved these changes

Assignees

No one assigned

Labels

size/S

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@yxtay