chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 2.0.0 in the docker-dependencies group across 1 directory by dependabot[bot] · Pull Request #890 · hoverkraft-tech/ci-github-container

dependabot · 2026-08-14T04:04:28Z

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker-dependencies group with 1 update in the / directory: hoverkraft-tech/docker-base-images/super-linter.

Updates hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 2.0.0

Release notes

Sourced from hoverkraft-tech/docker-base-images/super-linter's releases.

Version super-linter - 2.0.0

Release Summary

This release includes a breaking build dependency change: the container CI was migrated to 0.39.0.

No other public-facing features or fixes are listed.

Breaking changes

The release includes a breaking change: build(deps)! migrated container CI to 0.39.0.

What's Changed

Breaking Changes

build(deps)!: migrate container CI to 0.39.0 (#272) @dependabot[bot]

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/docker-base-images@super-linter-1.2.0...super-linter-2.0.0

Version super-linter - 1.2.0

What's Changed

Features

feat(ci): automate image and repository releases with AI changelogs (#270) @neilime

Documentation

docs(super-linter): use Git discovery for local linting (#269) @neilime

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/docker-base-images@super-linter-1.1.0...super-linter-1.2.0

Version super-linter - 1.1.0

What's Changed

Features

feat(super-linter): improve super-linter behavior (#262) @neilime

New Contributors

No new contributors in this release.

... (truncated)

Commits

3083aa2 build(deps): bump hoverkraft-tech/docker-base-images/super-linter
4f960bb build(deps): bump argoproj/argocd in /images/argocd-cmp-hk-deployment
8200157 build(deps): bump testcontainers
8534b71 build(deps): bump the github-actions-dependencies group across 1 directory wi...
d6c145f chore: fix lint issues
f9409aa build(deps): consume ci-github-publish 1.0.1 release history fix
469b428 build(deps): complete ci-github-common 0.39.1 migration
4004aca fix(ci): address release workflow review findings
bb83fe8 feat(ci): automate image and repository releases with AI changelogs
93ab183 fix(actions): create container-only symlinks during image setup
Additional commits viewable in compare view

github-actions · 2026-08-14T04:04:44Z

Hi, thank you for creating your PR, we will check it out very soon

github-actions · 2026-08-14T04:06:56Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-08-14T15:27:44Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-08-21T04:07:14Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-08-28T04:07:16Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Fail ❌
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT

Checked 10 files in 46ms. No fixes applied.
Found 1 error..devcontainer/devcontainer-lock.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

     1  1 │   {
     2    │ - ··"features":·{
     3    │ - ····"ghcr.io/devcontainers/features/common-utils:2":·{
     4    │ - ······"version":·"2.5.9",
     5    │ - ······"resolved":·"ghcr.io/devcontainers/features/common-utils@sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a",
     6    │ - ······"integrity":·"sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a"
     7    │ - ····},
     8    │ - ····"ghcr.io/devcontainers/features/docker-in-docker:4":·{
     9    │ - ······"version":·"4.0.0",
    10    │ - ······"resolved":·"ghcr.io/devcontainers/features/docker-in-docker@sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5",
    11    │ - ······"integrity":·"sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5"
    12    │ - ····},
    13    │ - ····"ghcr.io/devcontainers/features/github-cli:1":·{
    14    │ - ······"version":·"1.1.1",
    15    │ - ······"resolved":·"ghcr.io/devcontainers/features/github-cli@sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4",
    16    │ - ······"integrity":·"sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4"
    17    │ - ····}
    18    │ - ··}
        2 │ + → "features":·{
        3 │ + → → "ghcr.io/devcontainers/features/common-utils:2":·{
        4 │ + → → → "version":·"2.5.9",
        5 │ + → → → "resolved":·"ghcr.io/devcontainers/features/common-utils@sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a",
        6 │ + → → → "integrity":·"sha256:cb0c4d3c276f157eed17935747e364178d75fee17f55c4e129966f64633deb3a"
        7 │ + → → },
        8 │ + → → "ghcr.io/devcontainers/features/docker-in-docker:4":·{
        9 │ + → → → "version":·"4.0.0",
       10 │ + → → → "resolved":·"ghcr.io/devcontainers/features/docker-in-docker@sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5",
       11 │ + → → → "integrity":·"sha256:4fa87399214366e320d489991769c4f3f461e1ffe461f54eea78a41b34945bb5"
       12 │ + → → },
       13 │ + → → "ghcr.io/devcontainers/features/github-cli:1":·{
       14 │ + → → → "version":·"1.1.1",
       15 │ + → → → "resolved":·"ghcr.io/devcontainers/features/github-cli@sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4",
       16 │ + → → → "integrity":·"sha256:94879eebb6a0e4e2f197de9f12db7427cb4a25b82d93c55239ce8c8fc394a1b4"
       17 │ + → → }
       18 │ + → }
    19 19 │   }
    20 20 │


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

github-actions · 2026-09-01T15:14:05Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-09-04T04:07:44Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-09-11T04:06:42Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml   │ CVE-2026-84375 │ HIGH     │ fixed  │ 4.3.1             │ 4.3.2, 3.15.2 │ js-yaml: js-yaml: Denial of Service vulnerability in YAML  │
│           │                │          │        │                   │               │ parsing                                                    │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-84375                 │
├───────────┼────────────────┤          │        ├───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │          │        │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-18T04:08:19Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml   │ CVE-2026-84375 │ HIGH     │ fixed  │ 4.3.1             │ 4.3.2, 3.15.2 │ js-yaml: js-yaml: Denial of Service vulnerability in YAML  │
│           │                │          │        │                   │               │ parsing                                                    │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-84375                 │
├───────────┼────────────────┤          │        ├───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │          │        │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-22T19:32:00Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        2        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml   │ CVE-2026-84375 │ HIGH     │ fixed  │ 4.3.1             │ 4.3.2, 3.15.2 │ js-yaml: js-yaml: Denial of Service vulnerability in YAML  │
│           │                │          │        │                   │               │ parsing                                                    │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-84375                 │
├───────────┼────────────────┤          │        ├───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │          │        │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-25T04:07:40Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        1        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
├───────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ smol-toml │ CVE-2026-85730 │ HIGH     │ fixed  │ 1.7.0             │ 1.7.1         │ smol-toml: smol-toml: Denial of Service via malformed TOML │
│           │                │          │        │                   │               │ documents                                                  │
│           │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85730                 │
└───────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-09-30T19:49:47Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-10-02T04:08:38Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-10-09T04:07:10Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-10-16T04:06:45Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

Bumps the docker-dependencies group with 1 update in the / directory: [hoverkraft-tech/docker-base-images/super-linter](https://github.com/hoverkraft-tech/docker-base-images). Updates `hoverkraft-tech/docker-base-images/super-linter` from 0.4.3 to 2.0.0 - [Release notes](https://github.com/hoverkraft-tech/docker-base-images/releases) - [Commits](hoverkraft-tech/docker-base-images@0.4.3...super-linter-2.0.0) --- updated-dependencies: - dependency-name: hoverkraft-tech/docker-base-images/super-linter dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-23T04:06:14Z

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY


Report Summary

┌──────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                    Target                    │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json │    npm     │        6        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json               │    npm     │        0        │         -         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                   │ dockerfile │        -        │         0         │    -    │
├──────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                 │ dockerfile │        -        │         0         │    -    │
└──────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 6 (UNKNOWN: 0, LOW: 1, MEDIUM: 1, HIGH: 4, CRITICAL: 0)

┌──────────────────────────────┬─────────────────┬──────────┬────────┬───────────────────┬────────────────┬──────────────────────────────────────────────────────────────┐
│           Library            │  Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version  │                            Title                             │
├──────────────────────────────┼─────────────────┼──────────┼────────┼───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ @modelcontextprotocol/server │ CVE-2026-111768 │ HIGH     │ fixed  │ 2.0.0             │ 2.3.0          │ MCP TypeScript SDK: One HTTP request within the default size │
│                              │                 │          │        │                   │                │ limit could...                                               │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111768                  │
│                              ├─────────────────┤          │        │                   │                ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111770 │          │        │                   │                │ MCP TypeScript server SDK: Shared transport or server        │
│                              │                 │          │        │                   │                │ instances delivered one...                                   │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111770                  │
│                              ├─────────────────┼──────────┤        │                   │                ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111771 │ MEDIUM   │        │                   │                │ MCP TypeScript SDK: Server bearer authentication accepted    │
│                              │                 │          │        │                   │                │ tokens issued for another service...                         │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111771                  │
├──────────────────────────────┼─────────────────┼──────────┤        ├───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ markdown-it                  │ CVE-2026-111758 │ HIGH     │        │ 15.0.1            │ 14.3.3, 15.0.3 │ markdown-it: markdown-it: Denial of Service via unclosed     │
│                              │                 │          │        │                   │                │ link reference definitions                                   │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111758                  │
│                              ├─────────────────┤          │        │                   ├────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111759 │          │        │                   │ 15.0.2, 14.3.2 │ markdown-it: markdown-it: Denial of Service via mismatched   │
│                              │                 │          │        │                   │                │ quote parsing                                                │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111759                  │
│                              ├─────────────────┼──────────┤        │                   ├────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111766 │ LOW      │        │                   │ 14.3.3, 15.0.3 │ markdown-it: markdown-it: Denial of Service via repeated     │
│                              │                 │          │        │                   │                │ unterminated inline HTML constructs                          │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111766                  │
└──────────────────────────────┴─────────────────┴──────────┴────────┴───────────────────┴────────────────┴──────────────────────────────────────────────────────────────┘

dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Aug 14, 2026

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 9c5219c to c222b6f Compare August 14, 2026 15:25

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from c222b6f to 1da37a7 Compare August 21, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 1da37a7 to c73fc9a Compare August 28, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from c73fc9a to 7d590f2 Compare September 1, 2026 15:11

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 7d590f2 to 2063e01 Compare September 4, 2026 04:05

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 2063e01 to 33feaf3 Compare September 11, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 33feaf3 to 3d26c6d Compare September 18, 2026 04:05

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 3d26c6d to 6602b57 Compare September 22, 2026 19:28

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 6602b57 to 5879095 Compare September 25, 2026 04:05

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 5879095 to cc56f06 Compare September 30, 2026 19:47

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from cc56f06 to 497b3fe Compare October 2, 2026 04:06

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 497b3fe to c9655f0 Compare October 9, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from c9655f0 to 2d74529 Compare October 16, 2026 04:04

dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 2d74529 to 6b8336e Compare October 23, 2026 04:04

Conversation

dependabot Bot commented on behalf of github Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version super-linter - 2.0.0

Release Summary

Breaking changes

What's Changed

Breaking Changes

New Contributors

Version super-linter - 1.2.0

What's Changed

Features

Documentation

New Contributors

Version super-linter - 1.1.0

What's Changed

Features

New Contributors

Uh oh!

github-actions Bot commented Aug 14, 2026

Uh oh!

github-actions Bot commented Aug 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Aug 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Aug 21, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Aug 28, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 1, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 4, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 11, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 18, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 22, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 25, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Sep 30, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Oct 2, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Oct 9, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Oct 16, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Oct 23, 2026

Super-linter summary

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 14, 2026 •

edited

Loading