ci(github-action): update oxsecurity/megalinter action to v8.5.0

[bendo-bot]

This PR contains the following updates:

Package	Type	Update	Change
oxsecurity/megalinter	action	minor	v8.4.2 -> v8.5.0

---

Release Notes

oxsecurity/megalinter (oxsecurity/megalinter)

v8.5.0

Compare Source

• Core

  • Addition of warnings to reporters and logic changes to surface warnings even when there are no errors. Addition of cli_lint_warning_count / cli_lint_warning_regex variables to the JSON schema. #​4476, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4556

• Linters enhancements

  • kubescape Remove downgraded_version from kubescape, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4712
  • npm-groovy-lint: Undowngrade npm-groovy-lint as there is a new release with issue fixed by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/4834
  • syft: Add SBOM file by default in report folder + remove useless debug statement
  • trivy-sbom: Add SBOM file by default in report folder + remove useless debug statement

• Fixes

  • Use npm to install pyright
  • Undowngrade npm-groovy-lint as there is a new release with issue fix
  • jscpd: remove forced --exitCode 1 to fix #​4631
  • Use --with-all-dependencies to install phpcs-fixer, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/4672
  • Remove Composer config PHP 8.3 compatibily platform for PSALM 6.0, by @​llaville in https://github.com/oxsecurity/megalinter/pull/4930
  • Fix lychee upgrade issue (lycheeignore upgrade), by @​wesley-dean in https://github.com/oxsecurity/megalinter/pull/4964

• Doc

  • Remove reference to R2DevOps jobs as it has been discontinued (see #​4678)
  • Improve contributing doc by adding reference to source .venv/Scripts/activate on Windows
  • Better apk package url, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4707
  • Better package version docs, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4721
  • Correct default SARIF_REPORTER_FILE_NAME, by @​yxtay in https://github.com/oxsecurity/megalinter/pull/4783
  • Use github private email for megalinter-bot, by @​yxtay in https://github.com/oxsecurity/megalinter/pull/4786
  • Update plugins.md to add raw link to JSON schema, by @​wesley-dean in https://github.com/oxsecurity/megalinter/pull/4932

• Flavors

  • Add syft in all flavors

• CI

  • Update .devcontainer configuration, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4843
  • Configure Renovate for gem, cargo, pip and npm dependencies, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4673
  • Configure Renovate for composer dependencies, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4916
  • Use packagist data source, by @​bdovaz in https://github.com/oxsecurity/megalinter/pull/4922
  • Bring back codecov, by @​nvuillam in https://github.com/oxsecurity/megalinter/pull/4836

• Plugins

  • Add docker-compose-linter (dclint) to plugins list, by @​wesley-dean in https://github.com/oxsecurity/megalinter/pull/4962
  • Add repolinter to the list of plugins, by @​wesley-dean in https://github.com/oxsecurity/megalinter/pull/4972

• Linter versions upgrades (55)

  • ansible-lint from 25.1.1 to 25.1.3
  • bandit from 1.8.2 to 1.8.3
  • bicep_linter from 0.33.13 to 0.34.1
  • cfn-lint from 1.22.7 to 1.32.0
  • checkov from 3.2.360 to 3.2.390
  • checkstyle from 10.21.2 to 10.21.4
  • clippy from 0.1.84 to 0.1.85
  • clj-kondo from 2025.01.16 to 2025.02.20
  • cspell from 8.17.3 to 8.17.5
  • dartanalyzer from 3.6.2 to 3.7.2
  • detekt from 1.23.7 to 1.23.8
  • dotnet-format from 9.0.102 to 9.0.104
  • editorconfig-checker from 3.2.0 to 3.2.1
  • flake8 from 7.1.1 to 7.1.2
  • gitleaks from 8.23.3 to 8.24.2
  • golangci-lint from 1.63.4 to 1.64.8
  • grype from 0.87.0 to 0.90.0
  • isort from 6.0.0 to 6.0.1
  • kics from 2.1.3 to 2.1.6
  • kubescape from 2.9.0 to 3.0.32
  • lightning-flow-scanner from 2.43.0 to 3.2.0
  • mypy from 1.14.1 to 1.15.0
  • npm-groovy-lint from 15.0.0 to 15.1.0
  • php-cs-fixer from 3.68.5 to 3.73.1
  • phpcs from 3.11.3 to 3.12.0
  • phpstan from 2.1.2 to 2.1.8
  • pmd from 7.9.0 to 7.11.0
  • prettier from 3.4.2 to 3.5.3
  • protolint from 0.52.0 to 0.53.0
  • psalm from Psalm.6.1.0@​ to Psalm.6.9.4@​
  • puppet-lint from 4.2.4 to 4.3.0
  • pylint from 3.3.4 to 3.3.6
  • pyright from 1.1.393 to 1.1.397
  • revive from 1.6.0 to 1.7.0
  • roslynator from 0.10.0.0 to 0.10.1.0
  • rubocop from 1.71.0 to 1.74.0
  • ruff-format from 0.9.4 to 0.11.2
  • ruff from 0.9.4 to 0.11.2
  • scalafix from 0.14.0 to 0.14.2
  • secretlint from 9.0.0 to 9.2.0
  • sfdx-scanner-apex from 4.9.0 to 4.10.0
  • sfdx-scanner-aura from 4.9.0 to 4.10.0
  • sfdx-scanner-lwc from 4.9.0 to 4.10.0
  • shfmt from 3.10.0 to 3.11.0
  • snakefmt from 0.10.2 to 0.11.0
  • spectral from 6.14.2 to 6.14.3
  • sqlfluff from 3.3.0 to 3.3.1
  • stylelint from 16.14.1 to 16.16.0
  • syft from 1.19.0 to 1.21.0
  • terraform-fmt from 1.10.3 to 1.11.2
  • terragrunt from 0.71.1 to 0.76.6
  • trivy-sbom from 0.59.0 to 0.60.0
  • trivy from 0.59.0 to 0.60.0
  • trufflehog from 3.88.4 to 3.88.14
  • yamllint from 1.35.1 to 1.36.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bendo-bot]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.