chore(deps): update dependency mega-linter-runner to v8.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
mega-linter-runner	8.7.0 -> 8.8.0

---

Release Notes

oxsecurity/megalinter (mega-linter-runner)

v8.8.0

Compare Source

• Core

  • Retrieve SARIF errors and warnings correctly, by @​bdovaz in #​4837

• Linters enhancements

  • More config file name checks for ansible-lint activation, by @​nvuillam in #​5590

• Fixes

  • Fix crash when the markdown table summary is empty, by @​nvuillam in #​5363
  • Downgrade click to make rstcheck work again, by @​nvuillam in #​5387

• Doc

  • Display hash as plain text in markdown, by @​johndutchover in #​5420

• Flavors

  • Add Gherkin descriptor in java flavor, by @​nvuillam in #​5592

• CI

  • Fix rust setup & disable codecov-cli, by @​nvuillam in #​5579

• Linter versions upgrades (50)

  • ansible-lint from 25.4.0 to 25.5.0
  • bicep_linter from 0.35.1 to 0.36.1
  • cfn-lint from 1.34.2 to 1.36.0
  • checkstyle from 10.23.1 to 10.25.0
  • clippy from 0.1.86 to 0.1.87
  • clj-kondo from 2025.04.07 to 2025.06.05
  • csharpier from 1.0.1 to 1.0.2
  • cspell from 8.19.4 to 9.1.1
  • dartanalyzer from 3.7.3 to 3.8.1
  • devskim from 1.0.56 to 1.0.59
  • dotnet-format from 9.0.105 to 9.0.106
  • editorconfig-checker from 3.2.1 to 3.3.0
  • gitleaks from 8.25.1 to 8.27.2
  • golangci-lint from 2.1.5 to 2.1.6
  • grype from 0.91.2 to 0.94.0
  • htmlhint from 1.1.4 to 1.5.1
  • kics from 2.1.7 to 2.1.10
  • ktlint from 1.5.0 to 1.6.0
  • kubeconform from 0.6.7 to 0.7.0
  • lightning-flow-scanner from 3.8.0 to 3.23.0
  • ls-lint from 2.3.0 to 2.3.1
  • markdownlint from 0.44.0 to 0.45.0
  • mypy from 1.15.0 to 1.16.0
  • npm-groovy-lint from 15.1.0 to 15.2.0
  • phpcs from 3.12.2 to 3.13.1
  • phpstan from 2.1.14 to 2.1.17
  • pmd from 7.13.0 to 7.14.0
  • protolint from 0.54.1 to 0.55.6
  • psalm from Psalm.6.10.2@​ to Psalm.6.12.0@​
  • pylint from 3.3.6 to 3.3.7
  • pyright from 1.1.400 to 1.1.402
  • revive from 1.9.0 to 1.10.0
  • rstcheck from 6.2.4 to 6.2.5
  • rubocop from 1.75.4 to 1.76.1
  • ruff from 0.11.8 to 0.11.13
  • ruff-format from 0.11.8 to 0.11.13
  • scalafix from 0.14.2 to 0.14.3
  • secretlint from 9.3.2 to 10.1.0
  • semgrep from 3.12 to 3.13
  • sfdx-scanner-apex from 4.11.0 to 4.12.0
  • sfdx-scanner-aura from 4.11.0 to 4.12.0
  • sfdx-scanner-lwc from 4.11.0 to 4.12.0
  • snakemake from 8.27.1 to 9.5.1
  • sqlfluff from 3.4.0 to 3.4.1
  • stylelint from 16.19.1 to 16.20.0
  • syft from 1.23.1 to 1.27.1
  • terraform-fmt from 1.11.4 to 1.12.2
  • terragrunt from 0.78.0 to 0.81.6
  • tflint from 0.57.0 to 0.58.0
  • trivy from 0.62.0 to 0.63.0
  • trivy-sbom from 0.62.0 to 0.63.0
  • trufflehog from 3.88.27 to 3.89.1
  • v8r from 4.4.0 to 5.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ API	spectral	1		0	0	1.72s
⚠️ BASH	bash-exec	6		1	0	0.01s
✅ BASH	shellcheck	6		0	0	0.13s
✅ BASH	shfmt	6	0	0	0	0.58s
✅ COPYPASTE	jscpd	yes		no	no	3.03s
✅ DOCKERFILE	hadolint	131		0	0	28.49s
✅ JSON	jsonlint	20		0	0	0.2s
✅ JSON	v8r	22		0	0	14.08s
⚠️ MARKDOWN	markdownlint	269	0	306	0	20.06s
✅ MARKDOWN	markdown-table-formatter	269	0	0	0	144.21s
⚠️ PYTHON	bandit	222		67	0	5.48s
✅ PYTHON	black	222	0	0	0	4.97s
✅ PYTHON	flake8	222		0	0	1.89s
✅ PYTHON	isort	222	0	0	0	1.03s
✅ PYTHON	mypy	222		0	0	11.84s
✅ PYTHON	pylint	222		0	0	21.99s
✅ PYTHON	ruff	222	0	0	0	0.68s
✅ REPOSITORY	checkov	yes		no	no	36.53s
✅ REPOSITORY	git_diff	yes		no	no	0.45s
⚠️ REPOSITORY	grype	yes		30	no	32.22s
✅ REPOSITORY	secretlint	yes		no	no	9.03s
✅ REPOSITORY	syft	yes		no	no	2.53s
✅ REPOSITORY	trivy	yes		no	no	10.3s
✅ REPOSITORY	trivy-sbom	yes		no	no	21.49s
✅ REPOSITORY	trufflehog	yes		no	no	4.41s
✅ SPELL	cspell	730		0	0	14.03s
⚠️ SPELL	lychee	351		45	0	69.83s
✅ XML	xmllint	3	0	0	0	1.3s
✅ YAML	prettier	160	0	0	0	3.64s
✅ YAML	v8r	103		0	0	23.08s
✅ YAML	yamllint	161		0	0	3.6s

See detailed report in MegaLinter reports

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.