Bump oxsecurity/megalinter/flavors/c_cpp from a151007c426d6bc89bfde35a7bd3cd64cf373493 to 1ea03641515d2a19f7ad157fa6d12af38c731c7c

[dependabot]

Bumps oxsecurity/megalinter/flavors/c_cpp from a151007c426d6bc89bfde35a7bd3cd64cf373493 to 1ea03641515d2a19f7ad157fa6d12af38c731c7c.

Changelog

Sourced from oxsecurity/megalinter/flavors/c_cpp's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

• Breaking changes

• Core

• New linters

• Disabled linters

• Re-enabled linters

• Deprecated linters

• Removed linters

• Media

• Linters enhancements

• Fixes

  • Keep the Docker Pulls badge in docs/index.md in sync by having docker_stats.py also update the hardcoded badge total in .automation/build.py

• Reporters

• Flavors

• Doc

• mega-linter-runner

• Dev

• CI

  • Fix per-linter Docker images being published single-arch. The BETA and RELEASE linter workflows split each linter into independent per-platform jobs that all pushed the same tag (:beta, :v9, :vX.Y.Z, :latest), so the last push won and overwrote the other architecture. They now push each platform by digest and a dedicated merge job assembles a proper multi-arch manifest list per linter, restoring linux/amd64 + linux/arm64 support for megalinter-only-* images.

• Linter versions upgrades (N)

  • pyright from 1.1.410 to 1.1.411 on 2026-06-28
  • stylelint from 17.13.0 to 17.14.0 on 2026-06-28
  • editorconfig-checker from 3.7.0 to 3.8.0 on 2026-06-28
  • rumdl from 0.2.24 to 0.2.25 on 2026-06-28

... (truncated)

Commits

• 1ea0364 chore(deps): update dependency @​eslint-react/eslint-plugin to v5.9.4 (#8264)
• f9392a0 [automation] Auto-update linters version, help and documentation (#8266)
• 63fd5e1 chore(deps): update dependency djlint to v1.39.5 (#8262)
• 21e58f1 chore(renovate): pin js-yaml below v5 (ESM-only breaks runner) (#8263)
• e210c40 chore(deps): update dependency regex to v2026.6.28 (#8261)
• 8379891 [automation] Auto-update linters version, help and documentation (#8260)
• a354b3f [automation] Auto-update linters version, help and documentation (#8257)
• 1d1924d chore(deps): update mstruebing/editorconfig-checker docker tag to v3.8.0 (#8256)
• 2311c3a chore(deps): update dependency stylelint to v17.14.0 (#8255)
• 4affe8a chore(deps): update dependency sfdx-hardis to v7.18.0 (#8254)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
❌ COPYPASTE	jscpd	yes		14	no	0.5s
✅ REPOSITORY	betterleaks	yes		no	no	0.67s
✅ REPOSITORY	gitleaks	yes		no	no	0.47s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	34.39s
✅ REPOSITORY	osv-scanner	yes		no	no	0.35s
✅ REPOSITORY	secretlint	yes		no	no	0.69s
✅ REPOSITORY	syft	yes		no	no	1.34s
✅ REPOSITORY	trivy	yes		no	no	8.14s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.1s
✅ REPOSITORY	trufflehog	yes		no	no	2.63s

Detailed Issues

❌ COPYPASTE / jscpd - 14 errors

Using config from /action/lib/.automation/.jscpd.json
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 30:2] (30 lines, 769 tokens)
   WinMTRDialog-display.cpp [1:1 - 29:2]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 35:14] (35 lines, 785 tokens)
   WinMTRDialog-exporter.cpp [1:1 - 33:9]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 35:7] (35 lines, 783 tokens)
   WinMTRDialog-registry.cpp [1:1 - 32:22]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 26:2] (26 lines, 748 tokens)
   WinMTRDialog-tracing.cpp [1:1 - 25:2]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 19:3] (19 lines, 731 tokens)
   WinMTRMain.cpp [1:1 - 19:3]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 26:9] (26 lines, 749 tokens)
   WinMTRNet-Getters.cpp [1:1 - 24:8]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [1:1 - 21:7] (21 lines, 732 tokens)
   WinMTRProperties.cpp [1:1 - 22:80]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [4:24 - 19:3] (16 lines, 637 tokens)
   WinMTRGlobal.cpp [4:24 - 19:3]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [4:24 - 32:35] (29 lines, 684 tokens)
   WinMTRNet-Tracing.cpp [4:24 - 32:22]
Clone found (cpp)
 - WinMTRDialog-StateMachine.cpp [46:1 - 54:7] (9 lines, 62 tokens)
   WinMTRNet-Tracing.cpp [40:1 - 48:7]
Clone found (c-header)
 - WinMTRGlobal.h [1:1 - 19:3] (19 lines, 731 tokens)
   WinMTRICMPPIOdef.h [1:1 - 19:3]
Clone found (c-header)
 - WinMTRGlobal.h [1:1 - 21:80] (21 lines, 732 tokens)
   WinMTRMain.h [1:1 - 21:80]
Clone found (c-header)
 - WinMTRGlobal.h [1:1 - 21:80] (21 lines, 732 tokens)
   WinMTRProperties.h [1:1 - 22:80]
Clone found (cpp)
 - WinMTRNet-Getters.cpp [18:50 - 33:7] (16 lines, 78 tokens)
   WinMTRNet-Tracing.cpp [18:50 - 33:2]
┌──────────┬────────────────┬─────────────┬──────────────┬──────────────┬──────────────────┬───────────────────┐
│ Format   │ Files analyzed │ Total lines │ Total tokens │ Clones found │ Duplicated lines │ Duplicated tokens │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ c-header │ 5              │ 351         │ 3627         │ 3            │ 58 (16.52%)      │ 2195 (60.52%)     │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ cpp      │ 10             │ 2097        │ 17346        │ 11           │ 251 (11.97%)     │ 6758 (38.96%)     │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ txt      │ 1              │ 36          │ 162          │ 0            │ 0 (0.00%)        │ 0 (0.00%)         │
├──────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ Total:   │ 16             │ 2484        │ 21135        │ 14           │ 309 (12.44%)     │ 8953 (42.36%)     │
└──────────┴────────────────┴─────────────┴──────────────┴──────────────┴──────────────────┴───────────────────┘
Found 14 clones.
HTML report saved to megalinter-reports/copy-paste/jscpd-report.html
ERROR: jscpd found too many duplicates (12.4%) over threshold (0.0%)
time: 64.071ms

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository