Skip to content

chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 2.0.0 in the docker-dependencies group across 1 directory - #1452

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/docker-dependencies-2fa57057bf
Open

chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 2.0.0 in the docker-dependencies group across 1 directory#1452
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/docker/docker-dependencies-2fa57057bf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker-dependencies group with 1 update in the / directory: hoverkraft-tech/docker-base-images/super-linter.

Updates hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 2.0.0

Release notes

Sourced from hoverkraft-tech/docker-base-images/super-linter's releases.

Version super-linter - 2.0.0

Release Summary

This release includes a breaking build dependency change: the container CI was migrated to 0.39.0.

No other public-facing features or fixes are listed.

Breaking changes

The release includes a breaking change: build(deps)! migrated container CI to 0.39.0.

What's Changed

Breaking Changes

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/docker-base-images@super-linter-1.2.0...super-linter-2.0.0

Version super-linter - 1.2.0

What's Changed

Features

  • feat(ci): automate image and repository releases with AI changelogs (#270) @​neilime

Documentation

  • docs(super-linter): use Git discovery for local linting (#269) @​neilime

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/docker-base-images@super-linter-1.1.0...super-linter-1.2.0

Version super-linter - 1.1.0

What's Changed

Features

New Contributors

No new contributors in this release.

... (truncated)

Commits
  • 3083aa2 build(deps): bump hoverkraft-tech/docker-base-images/super-linter
  • 4f960bb build(deps): bump argoproj/argocd in /images/argocd-cmp-hk-deployment
  • 8200157 build(deps): bump testcontainers
  • 8534b71 build(deps): bump the github-actions-dependencies group across 1 directory wi...
  • d6c145f chore: fix lint issues
  • f9409aa build(deps): consume ci-github-publish 1.0.1 release history fix
  • 469b428 build(deps): complete ci-github-common 0.39.1 migration
  • 4004aca fix(ci): address release workflow review findings
  • bb83fe8 feat(ci): automate image and repository releases with AI changelogs
  • 93ab183 fix(actions): create container-only symlinks during image setup
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Oct 8, 2026
@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown

Hi, thank you for creating your PR, we will check it out very soon

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown

Code Coverage Report

Coverage Results

Coverage

Metric Covered Total Percentage
Lines 12 12 100.00%
Branches 3 3 100.00%
Functions 8 8 100.00%

Overall: 100.00% 🟢
🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩

@dependabot dependabot Bot changed the title chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 0.6.0 in the docker-dependencies group chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 1.0.0 in the docker-dependencies group across 1 directory Oct 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from a7ffa12 to 1cf48c9 Compare October 9, 2026 04:15
@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@dependabot dependabot Bot changed the title chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 1.0.0 in the docker-dependencies group across 1 directory chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 1.1.0 in the docker-dependencies group across 1 directory Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from 1cf48c9 to be550bb Compare October 16, 2026 04:10
@github-actions

github-actions Bot commented Oct 16, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@dependabot dependabot Bot changed the title chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 1.1.0 in the docker-dependencies group across 1 directory chore(deps): bump hoverkraft-tech/docker-base-images/super-linter from 0.4.3 to 2.0.0 in the docker-dependencies group across 1 directory Oct 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from be550bb to f649fd0 Compare October 23, 2026 04:09
@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@dependabot
chore(deps): bump hoverkraft-tech/docker-base-images/super-linter
4cad649 
Bumps the docker-dependencies group with 1 update in the / directory: [hoverkraft-tech/docker-base-images/super-linter](https://github.com/hoverkraft-tech/docker-base-images).


Updates `hoverkraft-tech/docker-base-images/super-linter` from 0.4.3 to 2.0.0
- [Release notes](https://github.com/hoverkraft-tech/docker-base-images/releases)
- [Commits](hoverkraft-tech/docker-base-images@0.4.3...super-linter-2.0.0)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/docker-base-images/super-linter
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-dependencies-2fa57057bf branch from f649fd0 to 4cad649 Compare October 30, 2026 04:06
@github-actions

github-actions Bot commented Oct 30, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
DOCKERFILE_HADOLINT Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY 

Report Summary

┌───────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│            Target             │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ application/package-lock.json │    npm     │        8        │         -         │    -    │
├───────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                    │ dockerfile │        -        │         0         │    -    │
└───────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


application/package-lock.json (npm)
===================================
Total: 8 (UNKNOWN: 0, LOW: 4, MEDIUM: 3, HIGH: 1, CRITICAL: 0)

┌──────────────────────┬─────────────────┬──────────┬──────────┬───────────────────┬─────────────────────┬──────────────────────────────────────────────────────────────┐
│       Library        │  Vulnerability  │ Severity │  Status  │ Installed Version │    Fixed Version    │                            Title                             │
├──────────────────────┼─────────────────┼──────────┼──────────┼───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ body-parser          │ CVE-2026-111181 │ HIGH     │ fixed    │ 1.20.8            │ 2.4.0, 1.20.9       │ body-parser: body-parser: Denial of Service via unhandled    │
│                      │                 │          │          │                   │                     │ decompression stream error                                   │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111181                  │
├──────────────────────┼─────────────────┼──────────┼──────────┼───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ deepmerge            │ CVE-2026-93753  │ LOW      │ affected │ 4.3.1             │                     │ deepmerge: deepmerge: Prototype Poisoning via mergeObject    │
│                      │                 │          │          │                   │                     │ function                                                     │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-93753                   │
├──────────────────────┼─────────────────┼──────────┼──────────┼───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ fast-uri             │ CVE-2026-110180 │ MEDIUM   │ fixed    │ 3.1.8             │ 2.4.8, 3.1.9, 4.2.3 │ fast-uri: fast-uri: Security policy bypass via improper host │
│                      │                 │          │          │                   │                     │ canonicalization                                             │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110180                  │
│                      ├─────────────────┤          │          │                   │                     ├──────────────────────────────────────────────────────────────┤
│                      │ CVE-2026-110306 │          │          │                   │                     │ fast-uri: fast-uri: Cross-Site Scripting via improper URI    │
│                      │                 │          │          │                   │                     │ scheme decoding                                              │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110306                  │
│                      ├─────────────────┼──────────┤          │                   │                     ├──────────────────────────────────────────────────────────────┤
│                      │ CVE-2026-110095 │ LOW      │          │                   │                     │ fast-uri: fast-uri: Path traversal via improper relative URI │
│                      │                 │          │          │                   │                     │ normalization                                                │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110095                  │
│                      ├─────────────────┤          │          │                   │                     ├──────────────────────────────────────────────────────────────┤
│                      │ CVE-2026-110725 │          │          │                   │                     │ fast-uri: fast-uri: Cross-site scripting via unescaped colon │
│                      │                 │          │          │                   │                     │ in relative URI paths                                        │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110725                  │
├──────────────────────┼─────────────────┼──────────┤          ├───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ qs                   │ CVE-2026-110816 │ MEDIUM   │          │ 6.16.0            │ 6.16.1              │ qs: qs: Denial of Service via unhandled exception during     │
│                      │                 │          │          │                   │                     │ array serialization                                          │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110816                  │
├──────────────────────┼─────────────────┼──────────┤          ├───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ serialize-javascript │ CVE-2026-115897 │ LOW      │          │ 7.0.5             │ 7.1.3               │ serialize-javascript: serialize-javascript: Cross-Site       │
│                      │                 │          │          │                   │                     │ Scripting via improper function escaping                     │
│                      │                 │          │          │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-115897                  │
└──────────────────────┴─────────────────┴──────────┴──────────┴───────────────────┴─────────────────────┴──────────────────────────────────────────────────────────────┘

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants