chore(deps): update github-actions #274

renovate · 2025-09-02T20:45:18Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v5.0.0` -> `v5.0.1`
github/codeql-action	action	patch	`v4.31.2` -> `v4.31.6`
googleapis/release-please-action	action	minor	`v4.2.0` -> `v4.4.0`
helm/kind-action	action	minor	`v1.12.0` -> `v1.13.0`
miracum/.github	action	minor	`v1.16.19` -> `v1.18.4`
ossf/scorecard-action	action	patch	`v2.4.2` -> `v2.4.3`

Release Notes

actions/checkout (actions/checkout)

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

github/codeql-action (github/codeql-action)

`v4.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v4.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

googleapis/release-please-action (googleapis/release-please-action)

`v4.4.0`

Compare Source

Features

add ability to select versioning-strategy and release-as (#1121) (ee0f5ba)

Bug Fixes

changelog-host parameter ignored when using manifest configuration (#1151) (535c413)
bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#1149) (3612a99)
bump release-please from 17.1.2 to 17.1.3 (#1158) (66fbfe9)

`v4.3.0`

Compare Source

Features

deps: update release-please to 17.1.2 (f07192c)

helm/kind-action (helm/kind-action)

`v1.13.0`

Compare Source

What's Changed

chore: verify sha256sum of kubectl by @felix-kaestner in #134
Load GITHUB_PATH in PATH to use correct binaries when creating registry by @gotha in #133
feat: Add cloud provider by @waltermity in #135
chore: bump kind to v0.29.0 by @pmalek in #144
Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #145
bug: respect 'install_only' action input value by @mszostok in #147
bump kind and kubectl and also nodejs by @cpanato in #150

New Contributors

@felix-kaestner made their first contribution in #134
@gotha made their first contribution in #133
@waltermity made their first contribution in #135
@pmalek made their first contribution in #144
@mszostok made their first contribution in #147

Full Changelog: helm/kind-action@v1...v1.13.0

miracum/.github (miracum/.github)

`v1.18.4`

Compare Source

Miscellaneous Chores

deps: update docker.io/library/python:3.14.0-slim docker digest to 0aecac0 (#155) (d7ba80a)
deps: update github-actions (#156) (b44fb68)
deps: update github-actions to v6 (#157) (c5e8d2c)

`v1.18.3`

Compare Source

Bug Fixes

don't upload megalinter scan results (003a712)

Miscellaneous Chores

deps: update github-actions (#154) (b8f7269)

`v1.18.2`

Compare Source

Miscellaneous Chores

deps: update docker.io/library/python:3.14.0-slim docker digest to 9813eec (#152) (254a458)
deps: update github-actions (#153) (d1ea1f5)

`v1.18.1`

Compare Source

Miscellaneous Chores

deps: update docker.io/library/python:3.14.0-slim docker digest to 4ed3310 (#148) (f8a5d9d)
deps: update github-actions (#149) (2ecbe67)
deps: update github-actions (#151) (38600a9)
gradle jdk21 -> jdk25 (ef04784)

`v1.18.0`

Compare Source

Features

added replacement for gcr.io/distroless/java21-debian12 (9e83a2b)

`v1.17.0`

Compare Source

Features

push image on PRs (#147) (fe2804f)

Miscellaneous Chores

deps: update gcr.io/distroless/python3-debian12:nonroot docker digest to 1a7c3d2 (#143) (0b72274)
deps: update github-actions (#144) (33ec4c4)

`v1.16.29`

Compare Source

Miscellaneous Chores

deps: update all non-major dependencies (#145) (8b47377)
deps: update github-actions (#146) (e10cea9)

`v1.16.28`

Compare Source

Miscellaneous Chores

deps: update all non-major dependencies (#139) (349d82b)
deps: update github-actions (#142) (53643b5)

`v1.16.27`

Compare Source

Miscellaneous Chores

deps: update all digest updates (#141) (f78c505)
deps: update github-actions (#138) (a679a0c)
deps: update github-actions (#140) (24a97e0)

`v1.16.26`

Compare Source

Miscellaneous Chores

deps: update github-actions (#137) (05947ad)

`v1.16.25`

Compare Source

Miscellaneous Chores

deps: update all non-major dependencies (#136) (8b47d9b)

`v1.16.24`

Compare Source

Miscellaneous Chores

deps: update github-actions (#135) (a88016e)

`v1.16.23`

Compare Source

Miscellaneous Chores

deps: update all non-major dependencies (#132) (6159824)

`v1.16.22`

Compare Source

Miscellaneous Chores

deps: update github-actions (#133) (d1ed6d0)

`v1.16.21`

Compare Source

Miscellaneous Chores

deps: update dependency gradle to v9 (#134) (52d2994)

`v1.16.20`

Compare Source

Miscellaneous Chores

deps: update docker.io/library/python:3.13.5-slim docker digest to 4c2cf99 (#131) (d0fb36f)

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.3`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.

Documentation

docs: clarify GITHUB_TOKEN permissions needed for private repos by @pankajtaneja5 in #1574
📖 Fix recommended command to test the image in development by @deivid-rodriguez in #1583

Other

add missing top-level token permissions to workflows by @timothyklee in #1566
setup codeowners for requesting reviews by @spencerschrock in #1576
🌱 Improve printing options by @deivid-rodriguez in #1584

New Contributors

@timothyklee made their first contribution in #1566
@pankajtaneja5 made their first contribution in #1574
@deivid-rodriguez made their first contribution in #1584

Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-09-02T20:49:40Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	6	0	0	0.09s
✅ BASH	bash-exec	1	0	0	0.0s
✅ BASH	shellcheck	1	0	0	0.04s
✅ BASH	shfmt	1	0	0	0.01s
✅ CSHARP	csharpier	99	0	0	12.47s
⚠️ CSHARP	roslynator	3	3	0	31.39s
✅ DOCKERFILE	hadolint	1	0	0	0.09s
❌ EDITORCONFIG	editorconfig-checker	192	1	0	0.58s
✅ JSON	jsonlint	33	0	0	0.35s
✅ JSON	prettier	33	0	0	2.04s
✅ JSON	v8r	33	0	0	9.2s
✅ MARKDOWN	markdownlint	5	0	0	1.31s
✅ PROTOBUF	protolint	4	0	0	6.36s
✅ REPOSITORY	checkov	yes	no	no	34.14s
✅ REPOSITORY	dustilock	yes	no	no	0.02s
✅ REPOSITORY	gitleaks	yes	no	no	3.95s
✅ REPOSITORY	git_diff	yes	no	no	0.07s
✅ REPOSITORY	grype	yes	no	no	56.84s
⚠️ REPOSITORY	kics	yes	no	9	21.02s
✅ REPOSITORY	secretlint	yes	no	no	2.06s
✅ REPOSITORY	syft	yes	no	no	5.02s
✅ REPOSITORY	trivy	yes	no	no	14.73s
✅ REPOSITORY	trivy-sbom	yes	no	no	1.03s
✅ REPOSITORY	trufflehog	yes	no	no	4.94s
✅ XML	xmllint	2	0	0	0.06s
✅ YAML	prettier	32	0	0	1.19s
✅ YAML	v8r	32	0	0	11.42s
✅ YAML	yamllint	32	0	0	1.42s

Detailed Issues

❌ EDITORCONFIG / editorconfig-checker - 1 error

FhirPseudonymizer.sln:
	Wrong character encoding ("UTF-8-SIG" instead of "utf-8")

1 errors found

⚠️ REPOSITORY / kics - 9 warnings

warning: Docker compose file doesn't have 'cap_drop' attribute. Make sure your container only has necessary capabilities.
   ┌─ compose.dev.yaml:23:1
   │
23 │   vfps-db:
   │ ^^^^^^^^^^
   │
   = Container Capabilities Unrestricted
   = Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

warning: Docker compose file doesn't have 'ports' attribute bound to a specific host interface
   ┌─ compose.dev.yaml:19:1
   │
19 │     ports:
   │ ^^^^^^^^^^
   │
   = Container Traffic Not Bound To Host Interface
   = Incoming container traffic should be bound to a specific host interface

warning: Healthcheck is not defined.
   ┌─ compose.dev.yaml:79:1
   │
79 │   gpas-entici-mock:
   │ ^^^^^^^^^^^^^^^^^^^
   │
   = Healthcheck Not Set
   = Check containers periodically to see if they are running properly.

warning: Healthcheck is not defined.
  ┌─ compose.dev.yaml:2:1
  │
2 │   jaeger:
  │ ^^^^^^^^^
  │
  = Healthcheck Not Set
  = Check containers periodically to see if they are running properly.

warning: Healthcheck is not defined.
    ┌─ compose.dev.yaml:103:1
    │
103 │   keycloak:
    │ ^^^^^^^^^^^
    │
    = Healthcheck Not Set
    = Check containers periodically to see if they are running properly.

warning: Healthcheck is not defined.
   ┌─ compose.dev.yaml:23:1
   │
23 │   vfps-db:
   │ ^^^^^^^^^^
   │
   = Healthcheck Not Set
   = Check containers periodically to see if they are running properly.

warning: Healthcheck is not defined.
   ┌─ compose.dev.yaml:43:1
   │
43 │   vfps:
   │ ^^^^^^^
   │
   = Healthcheck Not Set
   = Check containers periodically to see if they are running properly.

warning: Healthcheck is not defined.
  ┌─ compose/compose.yaml:2:1
  │
2 │   fhir-pseudonymizer:
  │ ^^^^^^^^^^^^^^^^^^^^^
  │
  = Healthcheck Not Set
  = Check containers periodically to see if they are running properly.

warning: There are COPY instructions that could be grouped
   ┌─ Dockerfile:70:1
   │
70 │ COPY --from=build /build/publish .
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Multiple RUN, ADD, COPY, Instructions Listed
   = Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

warning: 9 warnings emitted

⚠️ CSHARP / roslynator - 3 errors

Results of roslynator linter (version 0.11.0.0)
See documentation on https://megalinter.io/9.2.0/descriptors/csharp_roslynator/
-----------------------------------------------

❌ [ERROR] src/FhirPseudonymizer.StressTests/FhirPseudonymizer.StressTests.csproj
    Loading project 'src/FhirPseudonymizer.StressTests/FhirPseudonymizer.StressTests.csproj'...
    Analyze 'FhirPseudonymizer.StressTests'
    System.AggregateException: One or more errors occurred. (Could not load file or assembly 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'. The system cannot find the file specified.
    )
     ---> System.IO.FileNotFoundException: Could not load file or assembly 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'. The system cannot find the file specified.
    
    File name: 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'
       at System.ModuleHandle.ResolveType(QCallModule module, Int32 typeToken, IntPtr* typeInstArgs, Int32 typeInstCount, IntPtr* methodInstArgs, Int32 methodInstCount, ObjectHandleOnStack type)
       at System.ModuleHandle.ResolveTypeHandle(Int32 typeToken, RuntimeTypeHandle[] typeInstantiationContext, RuntimeTypeHandle[] methodInstantiationContext)
       at System.Reflection.RuntimeModule.ResolveType(Int32 metadataToken, Type[] genericTypeArguments, Type[] genericMethodArguments)
       at System.Reflection.CustomAttribute.FilterCustomAttributeRecord(MetadataToken caCtorToken, MetadataImport& scope, RuntimeModule decoratedModule, MetadataToken decoratedToken, RuntimeType attributeFilterType, Boolean mustBeInheritable, ListBuilder`1& derivedAttributes, RuntimeType& attributeType, IRuntimeMethodInfo& ctorWithParameters, Boolean& isVarArg)
       at System.Reflection.CustomAttribute.AddCustomAttributes(ListBuilder`1& attributes, RuntimeModule decoratedModule, Int32 decoratedMetadataToken, RuntimeType attributeFilterType, Boolean mustBeInheritable, ListBuilder`1 derivedAttributes)
       at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeModule decoratedModule, Int32 decoratedMetadataToken, Int32 pcaCount, RuntimeType attributeFilterType)
       at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeType type, RuntimeType caType, Boolean inherit)
       at System.Attribute.GetCustomAttributes(MemberInfo element, Type attributeType, Boolean inherit)
       at Roslynator.AnalyzerAssembly.Load(Assembly analyzerAssembly, Boolean loadAnalyzers, Boolean loadFixers, String language) in /_/src/Workspaces.Core/AnalyzerAssembly.cs:line 129
       at Roslynator.AnalyzerLoader.GetAnalyzersAndFixers(Project project, Boolean loadFixers) in /_/src/Workspaces.Core/AnalyzerLoader.cs:line 112
       at Roslynator.AnalyzerLoader.GetAnalyzers(Project project) in /_/src/Workspaces.Core/AnalyzerLoader.cs:line 55
       at Roslynator.Diagnostics.CodeAnalyzer.AnalyzeProjectCoreAsync(Project project, CancellationToken cancellationToken) in /_/src/Workspaces.Core/Diagnostics/CodeAnalyzer.cs:line 124
       at Roslynator.Diagnostics.CodeAnalyzer.AnalyzeProjectAsync(Project project, CancellationToken cancellationToken) in /_/src/Workspaces.Core/Diagnostics/CodeAnalyzer.cs:line 99
       at Roslynator.CommandLine.AnalyzeCommand.ExecuteAsync(ProjectOrSolution projectOrSolution, CancellationToken cancellationToken) in /_/src/CommandLine/Commands/AnalyzeCommand.cs:line 73
       at Roslynator.CommandLine.MSBuildWorkspaceCommand`1.ExecuteAsync(String path, MSBuildWorkspace workspace, CancellationToken cancellationToken) in /_/src/CommandLine/Commands/MSBuildWorkspaceCommand.cs:line 164
       at Roslynator.CommandLine.MSBuildWorkspaceCommand`1.ExecuteAsync(IEnumerable`1 paths, String msbuildPath, IEnumerable`1 properties) in /_/src/CommandLine/Commands/MSBuildWorkspaceCommand.cs:line 89
       at Roslynator.CommandLine.Program.AnalyzeAsync(AnalyzeCommandLineOptions options) in /_/src/CommandLine/Program.cs:line 346
       --- End of inner exception stack trace ---
       at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
       at Roslynator.CommandLine.Program.<>c.<Main>b__0_3(MSBuildCommandLineOptions options) in /_/src/CommandLine/Program.cs:line 175
       at CommandLine.ParserResultExtensions.MapResult[T1,T2,TResult](ParserResult`1 result, Func`2 parsedFunc1, Func`2 parsedFunc2, Func`2 notParsedFunc)
       at Roslynator.CommandLine.Program.Main(String[] args) in /_/src/CommandLine/Program.cs:line 169

❌ [ERROR] src/FhirPseudonymizer.Tests/FhirPseudonymizer.Tests.csproj
    Loading project 'src/FhirPseudonymizer.Tests/FhirPseudonymizer.Tests.csproj'...
    Analyze 'FhirPseudonymizer.Tests'
    System.AggregateException: One or more errors occurred. (Could not load file or assembly 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'. The system cannot find the file specified.
    )
     ---> System.IO.FileNotFoundException: Could not load file or assembly 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'. The system cannot find the file specified.
    
    File name: 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'
       at System.ModuleHandle.ResolveType(QCallModule module, Int32 typeToken, IntPtr* typeInstArgs, Int32 typeInstCount, IntPtr* methodInstArgs, Int32 methodInstCount, ObjectHandleOnStack type)
       at System.ModuleHandle.ResolveTypeHandle(Int32 typeToken, RuntimeTypeHandle[] typeInstantiationContext, RuntimeTypeHandle[] methodInstantiationContext)
       at System.Reflection.RuntimeModule.ResolveType(Int32 metadataToken, Type[] genericTypeArguments, Type[] genericMethodArguments)
       at System.Reflection.CustomAttribute.FilterCustomAttributeRecord(MetadataToken caCtorToken, MetadataImport& scope, RuntimeModule decoratedModule, MetadataToken decoratedToken, RuntimeType attributeFilterType, Boolean mustBeInheritable, ListBuilder`1& derivedAttributes, RuntimeType& attributeType, IRuntimeMethodInfo& ctorWithParameters, Boolean& isVarArg)
       at System.Reflection.CustomAttribute.AddCustomAttributes(ListBuilder`1& attributes, RuntimeModule decoratedModule, Int32 decoratedMetadataToken, RuntimeType attributeFilterType, Boolean mustBeInheritable, ListBuilder`1 derivedAttributes)
       at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeModule decoratedModule, Int32 decoratedMetadataToken, Int32 pcaCount, RuntimeType attributeFilterType)
       at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeType type, RuntimeType caType, Boolean inherit)
       at System.Attribute.GetCustomAttributes(MemberInfo element, Type attributeType, Boolean inherit)
       at Roslynator.AnalyzerAssembly.Load(Assembly analyzerAssembly, Boolean loadAnalyzers, Boolean loadFixers, String language) in /_/src/Workspaces.Core/AnalyzerAssembly.cs:line 129
       at Roslynator.AnalyzerLoader.GetAnalyzersAndFixers(Project project, Boolean loadFixers) in /_/src/Workspaces.Core/AnalyzerLoader.cs:line 112
       at Roslynator.AnalyzerLoader.GetAnalyzers(Project project) in /_/src/Workspaces.Core/AnalyzerLoader.cs:line 55
       at Roslynator.Diagnostics.CodeAnalyzer.AnalyzeProjectCoreAsync(Project project, CancellationToken cancellationToken) in /_/src/Workspaces.Core/Diagnostics/CodeAnalyzer.cs:line 124
       at Roslynator.Diagnostics.CodeAnalyzer.AnalyzeProjectAsync(Project project, CancellationToken cancellationToken) in /_/src/Workspaces.Core/Diagnostics/CodeAnalyzer.cs:line 99
       at Roslynator.CommandLine.AnalyzeCommand.ExecuteAsync(ProjectOrSolution projectOrSolution, CancellationToken cancellationToken) in /_/src/CommandLine/Commands/AnalyzeCommand.cs:line 73
       at Roslynator.CommandLine.MSBuildWorkspaceCommand`1.ExecuteAsync(String path, MSBuildWorkspace workspace, CancellationToken cancellationToken) in /_/src/CommandLine/Commands/MSBuildWorkspaceCommand.cs:line 164
       at Roslynator.CommandLine.MSBuildWorkspaceCommand`1.ExecuteAsync(IEnumerable`1 paths, String msbuildPath, IEnumerable`1 properties) in /_/src/CommandLine/Commands/MSBuildWorkspaceCommand.cs:line 89
       at Roslynator.CommandLine.Program.AnalyzeAsync(AnalyzeCommandLineOptions options) in /_/src/CommandLine/Program.cs:line 346
       --- End of inner exception stack trace ---
       at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
       at Roslynator.CommandLine.Program.<>c.<Main>b__0_3(MSBuildCommandLineOptions options) in /_/src/CommandLine/Program.cs:line 175
       at CommandLine.ParserResultExtensions.MapResult[T1,T2,TResult](ParserResult`1 result, Func`2 parsedFunc1, Func`2 parsedFunc2, Func`2 notParsedFunc)
       at Roslynator.CommandLine.Program.Main(String[] args) in /_/src/CommandLine/Program.cs:line 169

❌ [ERROR] src/FhirPseudonymizer/FhirPseudonymizer.csproj
    Loading project 'src/FhirPseudonymizer/FhirPseudonymizer.csproj'...
    Analyze 'FhirPseudonymizer'
    System.AggregateException: One or more errors occurred. (Could not load file or assembly 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'. The system cannot find the file specified.
    )
     ---> System.IO.FileNotFoundException: Could not load file or assembly 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'. The system cannot find the file specified.
    
    File name: 'System.Composition.AttributedModel, Version=9.0.0.10, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'
       at System.ModuleHandle.ResolveType(QCallModule module, Int32 typeToken, IntPtr* typeInstArgs, Int32 typeInstCount, IntPtr* methodInstArgs, Int32 methodInstCount, ObjectHandleOnStack type)
       at System.ModuleHandle.ResolveTypeHandle(Int32 typeToken, RuntimeTypeHandle[] typeInstantiationContext, RuntimeTypeHandle[] methodInstantiationContext)
       at System.Reflection.RuntimeModule.ResolveType(Int32 metadataToken, Type[] genericTypeArguments, Type[] genericMethodArguments)
       at System.Reflection.CustomAttribute.FilterCustomAttributeRecord(MetadataToken caCtorToken, MetadataImport& scope, RuntimeModule decoratedModule, MetadataToken decoratedToken, RuntimeType attributeFilterType, Boolean mustBeInheritable, ListBuilder`1& derivedAttributes, RuntimeType& attributeType, IRuntimeMethodInfo& ctorWithParameters, Boolean& isVarArg)
       at System.Reflection.CustomAttribute.AddCustomAttributes(ListBuilder`1& attributes, RuntimeModule decoratedModule, Int32 decoratedMetadataToken, RuntimeType attributeFilterType, Boolean mustBeInheritable, ListBuilder`1 derivedAttributes)
       at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeModule decoratedModule, Int32 decoratedMetadataToken, Int32 pcaCount, RuntimeType attributeFilterType)
       at System.Reflection.CustomAttribute.GetCustomAttributes(RuntimeType type, RuntimeType caType, Boolean inherit)
       at System.Attribute.GetCustomAttributes(MemberInfo element, Type attributeType, Boolean inherit)
       at Roslynator.AnalyzerAssembly.Load(Assembly analyzerAssembly, Boolean loadAnalyzers, Boolean loadFixers, String language) in /_/src/Workspaces.Core/AnalyzerAssembly.cs:line 129
       at Roslynator.AnalyzerLoader.GetAnalyzersAndFixers(Project project, Boolean loadFixers) in /_/src/Workspaces.Core/AnalyzerLoader.cs:line 112
       at Roslynator.AnalyzerLoader.GetAnalyzers(Project project) in /_/src/Workspaces.Core/AnalyzerLoader.cs:line 55
       at Roslynator.Diagnostics.CodeAnalyzer.AnalyzeProjectCoreAsync(Project project, CancellationToken cancellationToken) in /_/src/Workspaces.Core/Diagnostics/CodeAnalyzer.cs:line 124
       at Roslynator.Diagnostics.CodeAnalyzer.AnalyzeProjectAsync(Project project, CancellationToken cancellationToken) in /_/src/Workspaces.Core/Diagnostics/CodeAnalyzer.cs:line 99
       at Roslynator.CommandLine.AnalyzeCommand.ExecuteAsync(ProjectOrSolution projectOrSolution, CancellationToken cancellationToken) in /_/src/CommandLine/Commands/AnalyzeCommand.cs:line 73
       at Roslynator.CommandLine.MSBuildWorkspaceCommand`1.ExecuteAsync(String path, MSBuildWorkspace workspace, CancellationToken cancellationToken) in /_/src/CommandLine/Commands/MSBuildWorkspaceCommand.cs:line 164
       at Roslynator.CommandLine.MSBuildWorkspaceCommand`1.ExecuteAsync(IEnumerable`1 paths, String msbuildPath, IEnumerable`1 properties) in /_/src/CommandLine/Commands/MSBuildWorkspaceCommand.cs:line 89
       at Roslynator.CommandLine.Program.AnalyzeAsync(AnalyzeCommandLineOptions options) in /_/src/CommandLine/Program.cs:line 346
       --- End of inner exception stack trace ---
       at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
       at Roslynator.CommandLine.Program.<>c.<Main>b__0_3(MSBuildCommandLineOptions options) in /_/src/CommandLine/Program.cs:line 175
       at CommandLine.ParserResultExtensions.MapResult[T1,T2,TResult](ParserResult`1 result, Func`2 parsedFunc1, Func`2 parsedFunc2, Func`2 notParsedFunc)
       at Roslynator.CommandLine.Program.Main(String[] args) in /_/src/CommandLine/Program.cs:line 169

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.2.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,CSHARP_CSHARPIER,CSHARP_ROSLYNATOR,DOCKERFILE_HADOLINT,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,PROTOBUF_PROTOLINT,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

github-actions · 2025-12-02T02:29:27Z

Trivy image scan report

`ghcr.io/miracum/fhir-pseudonymizer:pr-274 (ubuntu 24.04)`

No Vulnerabilities found

No Misconfigurations found

`opt/fhir-pseudonymizer/FhirPseudonymizer.deps.json`

No Vulnerabilities found

No Misconfigurations found

`opt/fhir-pseudonymizer/packages.lock.json`

No Vulnerabilities found

No Misconfigurations found

`usr/share/dotnet/shared/Microsoft.AspNetCore.App/9.0.10/Microsoft.AspNetCore.App.deps.json`

No Vulnerabilities found

No Misconfigurations found

`usr/share/dotnet/shared/Microsoft.NETCore.App/9.0.10/Microsoft.NETCore.App.deps.json`

No Vulnerabilities found

No Misconfigurations found

github-actions · 2025-12-02T02:30:15Z

Package	Line Rate	Branch Rate	Health
FhirPseudonymizer	74%	65%	✔
FhirPseudonymizer.Tests	100%	100%	✔
Summary	81% (823 / 1015)	69% (95 / 138)	✔

Minimum allowed line rate is 50%

renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from a2eabe0 to 5fa00bd Compare September 10, 2025 22:31

renovate bot force-pushed the renovate/github-actions branch 7 times, most recently from f11c032 to 5869dc4 Compare September 30, 2025 21:09

renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from 64e042a to d4cb736 Compare October 7, 2025 18:39

renovate bot force-pushed the renovate/github-actions branch from d4cb736 to b2e2589 Compare October 10, 2025 17:45

renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from b0a2ab7 to 4b940e8 Compare October 23, 2025 22:52

renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 52e6659 to 0d2942f Compare October 31, 2025 00:11

renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from 82e1407 to aa08a5a Compare November 6, 2025 23:01

renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 9634925 to 16c7d07 Compare November 11, 2025 13:38

renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from fe5f374 to c42f26a Compare November 19, 2025 17:33

renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from 4048f33 to e247bd1 Compare December 1, 2025 10:35

chore(deps): update github-actions

3ecc0bd

renovate bot force-pushed the renovate/github-actions branch from e247bd1 to 3ecc0bd Compare December 2, 2025 02:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github-actions #274

chore(deps): update github-actions #274

renovate bot commented Sep 2, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Sep 2, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 2, 2025

Uh oh!

github-actions bot commented Dec 2, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update github-actions #274

Are you sure you want to change the base?

chore(deps): update github-actions #274

Conversation

renovate bot commented Sep 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

Features

Bug Fixes

Features

What's Changed

New Contributors

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Features

Features

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

What's Changed

Documentation

Other

New Contributors

Configuration

Uh oh!

github-actions bot commented Sep 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Uh oh!

github-actions bot commented Dec 2, 2025

Trivy image scan report

ghcr.io/miracum/fhir-pseudonymizer:pr-274 (ubuntu 24.04)

No Vulnerabilities found

No Misconfigurations found

opt/fhir-pseudonymizer/FhirPseudonymizer.deps.json

No Vulnerabilities found

No Misconfigurations found

opt/fhir-pseudonymizer/packages.lock.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/9.0.10/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/9.0.10/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

Uh oh!

github-actions bot commented Dec 2, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Sep 2, 2025 •

edited

Loading

github-actions bot commented Sep 2, 2025 •

edited

Loading

`ghcr.io/miracum/fhir-pseudonymizer:pr-274 (ubuntu 24.04)`

`opt/fhir-pseudonymizer/FhirPseudonymizer.deps.json`

`opt/fhir-pseudonymizer/packages.lock.json`

`usr/share/dotnet/shared/Microsoft.AspNetCore.App/9.0.10/Microsoft.AspNetCore.App.deps.json`

`usr/share/dotnet/shared/Microsoft.NETCore.App/9.0.10/Microsoft.NETCore.App.deps.json`