Update Docker images

renovate-bot commented

2026-07-20 00:01:56 +00:00

Member

This PR contains the following updates:

Package	Update	Change
hadolint/hadolint	minor	`v2.12.1-beta-alpine` → `v2.15.1`
ruby (source)	patch	`4.0` → `4.0.9`

Release Notes

hadolint/hadolint

`v2.15.1`

Compare Source

What's Changed

CI: Fix Macos Cache and image name by @m-ildefons in #1225
DL3066: Fix false positive when UID is an argument by @m-ildefons in #1226

Full Changelog: https://github.com/hadolint/hadolint/compare/v2.15.0...v2.15.1

`v2.15.0`

Compare Source

What's Changed

build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #1135
Check if clean is after install package by @matmarczak in #962
Enable file-path-in-report flag for codeclimate formatters by @bpfoster in #1018
SonarQube Formatter: Support --file-path-in-report by @m-ildefons in #1151
(doc) Add missing steps for developing this software by @ghoneycutt in #1021
Toil: bump GitHub action versions by @m-ildefons in #1153
Automatically update Third party licenses by @m-ildefons in #1154
Bump upload/download artifacts action by @m-ildefons in #1161
Added SonarQube format test by @304NotModified in #1157
Update README: tell about comments on ignore rules by @304NotModified in #1162
Fix DL3018 for apk ~ pins by @nothankyouzzz in #1168
Online Linter: Revive the online linter by @m-ildefons in #1178
Update Readme by @m-ildefons in #1181
Fix: propagating shell options across build stages by @m-ildefons in #1180
Ignore dnf group install from DL3041 by @kpumuk in #1148
build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1170
build(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #1169
build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1173
build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #1172
build(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #1171
DL3062: relax DL3062, fix readme by @m-ildefons in #1131
DL3040: Match different install command variations by @m-ildefons in #1182
DL3063: New rule, stage name reserved word by @m-ildefons in #1183
readme: fixup readme by @m-ildefons in #1184
build(deps): bump EndBug/add-and-commit from 9 to 10 by @dependabot[bot] in #1186
build(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #1187
fix: fix hlint warnings by @m-ildefons in #1189
Shellcheck: fix false-positives with exec notation by @m-ildefons in #1194
DL3065: New Rule: No FROM with $TARGETPLATFORM by @m-ildefons in #1190
Ignore Pragma: Add stage ignore pragma by @m-ildefons in #1195
Fix DL3013 false positive on pipx --python flag by @eyupcanakman in #1196
Add JUnit output formatter by @m-ildefons in #1192
Fix DL3013 false positive on pip --root-user-action flag by @eyupcanakman in #1198
Update to Alpine 3.24 by @jnoordsij in #1206
Fix DL3016 false positive on npm --registry flag by @eyupcanakman in #1210
New Rule: DL3066 Non-numeric user-id by @m-ildefons in #1212
build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1211
DL3025: Trigger on HEALTHCHECK instructions too by @m-ildefons in #1209
DL3018: Allow fuzzy version matching by @m-ildefons in #1201
Checkstyle: Output file node on empty result by @m-ildefons in #1204
build(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #1213
Add rule against copying root from another stage by @Develop-KIM in #1215
DL3026: Warn on COPY --from untrusted registry by @m-ildefons in #1205
DL3026: Disallow mounting from untrusted registies by @m-ildefons in #1216
DL3041: Accept package versions in environment variables by @m-ildefons in #1185
Add output to file/multiple files by @m-ildefons in #1197
Dependencies: Bump language-docker to v16.0.0 by @m-ildefons in #1218
New Rule: DL3064 ARG or ENV with sensitive data by @m-ildefons in #1188
Hadolint Embedded: Fix output interface by @m-ildefons in #1219
CI: Improve Release Workflow by @m-ildefons in #1220
Release v2.15.0 by @m-ildefons in #1221

New Contributors

@matmarczak made their first contribution in #962
@bpfoster made their first contribution in #1018
@304NotModified made their first contribution in #1157
@nothankyouzzz made their first contribution in #1168
@kpumuk made their first contribution in #1148
@eyupcanakman made their first contribution in #1196
@jnoordsij made their first contribution in #1206
@Develop-KIM made their first contribution in #1215

Full Changelog: https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0

`v2.14.0`

Compare Source

What's Changed

Enhance INTEGRATION.md with a toc and ordering by @jammsen in #1118
DL3041, DL3033: Handle RPM package epoch by @m-ildefons in #1121
DL3009: Allow either cache or tmpfs mounts by @m-ildefons in #1123
added new rule DL3062 to check go install by @Danil42Russia in #1111
DL3041, DL3033: Handle RPM package with plus sign by @samcranford in #1125
relax dependencies by @m-ildefons in #1128
fixup release workflow by @m-ildefons in #1129

New Contributors

@jammsen made their first contribution in #1118
@Danil42Russia made their first contribution in #1111
@samcranford made their first contribution in #1125

Full Changelog: https://github.com/hadolint/hadolint/compare/v2.13.1...v2.14.0

`v2.13.1`

What's Changed

build(deps): bump actions/cache from 3.0.4 to 3.0.11 by @dependabot[bot] in #888
build(deps): bump cachix/install-nix-action from 17 to 18 by @dependabot[bot] in #890
build(deps): bump cachix/cachix-action from 10 to 12 by @dependabot[bot] in #894
docs: use cabal instead of stack in readme by @m-ildefons in #903
DL3011: fixup changes in AST by @m-ildefons in #902
fix: false positive in DL3022 by @swarnimarun in #900
Correct documentation example for failure-threshold by @ericcornelissen in #901
update hadolint's config json schema to support latest properties by @omissis in #910
Update INTEGRATION.md steps for pre-commit by @tangyfruits in #908
chore: fix typos in rule descriptions by @AndreyBozhko in #912
Add LABEL org.opencontainers.image.source="https://github.com/hadolin… by @marwin1991 in #927
DL3014: Fix false positive on double quiet by @m-ildefons in #913
Update README.md by @ding-ma in #918
Spelling by @jsoref in #936
fix: misidentification of pipenv (#366) by @kthy in #940
build(deps): bump cachix/install-nix-action from 18 to 20 by @dependabot[bot] in #944
build(deps): bump actions/cache from 3.0.11 to 3.3.1 by @dependabot[bot] in #946
build(deps): bump docker/build-push-action from 3 to 4 by @dependabot[bot] in #931
build(deps): bump svenstaro/upx-action from 2.0.1 to 2.2.0 by @dependabot[bot] in #922
delete rule DL3005 by @deronnax in #964
docs: Add new section for Ignoring Rules in README by @tanmay-pnaik in #1008
docs: Add Table of Contents for README by @tanmay-pnaik in #1007
DL3060 should be suppressed if cache mounts are used by @slimslenderslacks in #1003
Improve parsing of gem install flag patterns to reduce false positives by @mkusaka in #954
fix: fp in DL3006 by @swarnimarun in #942
docs: Update TOC with Ignoring Rules section by @tanmay-pnaik in #1013
build(deps): bump svenstaro/upx-action from 2.2.0 to 2.3.0 by @dependabot[bot] in #959
Pragma: Allow comments following inline by @m-ildefons in #1059
build(deps): bump actions/cache from 3.3.1 to 4.2.0 by @dependabot[bot] in #1063
Ignore unsatisfiable shellcheck error 1091 by @ghoneycutt in #1020
build(deps): bump cachix/install-nix-action from 26 to 30 by @dependabot[bot] in #1045
build(deps): bump actions/checkout from 3 to 4 by @dependabot[bot] in #1046
build(deps): bump cachix/cachix-action from 14 to 15 by @dependabot[bot] in #1047
build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot[bot] in #1048
Fix casing in Dockerfile by @JEnglandOhalo in #1093
fix: replace actor with repository_owner in ghcr login by @aweiher in #1086
Fix GitHub Actions badge in README.md by @PeterDaveHello in #1072
Add SC1091 to yaml Schema by @psmey in #1088
DL3048 accepting LABEL keys that contain underscore(s) or slash(es) by @mschmeitz in #1034
Improve DL3009 rule to properly handle all apt-based package managers by @PeterDaveHello in #1074
Replace cryptonite with cryptohash-sha1 by @anuraaga in #1090
build(deps): bump actions/cache from 4.2.0 to 4.2.3 by @dependabot[bot] in #1082
fix(DL3041): Prevent false negatives for packages which include a dash in their package name by @egfx-notifications in #1098
fix character escaping in checkstyle formatter by @m-ildefons in #1104
build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @dependabot[bot] in #1115
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1113
build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1114
Added CI integration instructions for Azure Devops by @joelbourbon in #1112
Release v2.13.1 by @m-ildefons in #1116

New Contributors

@swarnimarun made their first contribution in #900
@ericcornelissen made their first contribution in #901
@omissis made their first contribution in #910
@tangyfruits made their first contribution in #908
@AndreyBozhko made their first contribution in #912
@marwin1991 made their first contribution in #927
@ding-ma made their first contribution in #918
@jsoref made their first contribution in #936
@kthy made their first contribution in #940
@deronnax made their first contribution in #964
@tanmay-pnaik made their first contribution in #1008
@slimslenderslacks made their first contribution in #1003
@mkusaka made their first contribution in #954
@ghoneycutt made their first contribution in #1020
@JEnglandOhalo made their first contribution in #1093
@aweiher made their first contribution in #1086
@psmey made their first contribution in #1088
@mschmeitz made their first contribution in #1034
@anuraaga made their first contribution in #1090
@egfx-notifications made their first contribution in #1098
@joelbourbon made their first contribution in #1112

Full Changelog: https://github.com/hadolint/hadolint/compare/v2.12.0...v2.13.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [hadolint/hadolint](https://github.com/hadolint/hadolint) | minor | `v2.12.1-beta-alpine` → `v2.15.1` | | [ruby](https://hub.docker.com/_/ruby) ([source](https://github.com/docker-library/ruby)) | patch | `4.0` → `4.0.9` | --- ### Release Notes <details> <summary>hadolint/hadolint</summary> ### [`v2.15.1`](https://github.com/hadolint/hadolint/releases/tag/v2.15.1) [Compare Source](https://github.com/hadolint/hadolint/compare/v2.15.0...v2.15.1) #### What's Changed - CI: Fix Macos Cache and image name by [@m-ildefons](https://github.com/m-ildefons) in [#1225](https://github.com/hadolint/hadolint/pull/1225) - DL3066: Fix false positive when UID is an argument by [@m-ildefons](https://github.com/m-ildefons) in [#1226](https://github.com/hadolint/hadolint/pull/1226) **Full Changelog**: <https://github.com/hadolint/hadolint/compare/v2.15.0...v2.15.1> ### [`v2.15.0`](https://github.com/hadolint/hadolint/releases/tag/v2.15.0) [Compare Source](https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0) #### What's Changed - build(deps): bump actions/cache from 4.2.4 to 4.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1135](https://github.com/hadolint/hadolint/pull/1135) - Check if clean is after install package by [@matmarczak](https://github.com/matmarczak) in [#962](https://github.com/hadolint/hadolint/pull/962) - Enable file-path-in-report flag for codeclimate formatters by [@bpfoster](https://github.com/bpfoster) in [#1018](https://github.com/hadolint/hadolint/pull/1018) - SonarQube Formatter: Support --file-path-in-report by [@m-ildefons](https://github.com/m-ildefons) in [#1151](https://github.com/hadolint/hadolint/pull/1151) - (doc) Add missing steps for developing this software by [@ghoneycutt](https://github.com/ghoneycutt) in [#1021](https://github.com/hadolint/hadolint/pull/1021) - Toil: bump GitHub action versions by [@m-ildefons](https://github.com/m-ildefons) in [#1153](https://github.com/hadolint/hadolint/pull/1153) - Automatically update Third party licenses by [@m-ildefons](https://github.com/m-ildefons) in [#1154](https://github.com/hadolint/hadolint/pull/1154) - Bump upload/download artifacts action by [@m-ildefons](https://github.com/m-ildefons) in [#1161](https://github.com/hadolint/hadolint/pull/1161) - Added SonarQube format test by [@304NotModified](https://github.com/304NotModified) in [#1157](https://github.com/hadolint/hadolint/pull/1157) - Update README: tell about comments on ignore rules by [@304NotModified](https://github.com/304NotModified) in [#1162](https://github.com/hadolint/hadolint/pull/1162) - Fix DL3018 for apk \~ pins by [@nothankyouzzz](https://github.com/nothankyouzzz) in [#1168](https://github.com/hadolint/hadolint/pull/1168) - Online Linter: Revive the online linter by [@m-ildefons](https://github.com/m-ildefons) in [#1178](https://github.com/hadolint/hadolint/pull/1178) - Update Readme by [@m-ildefons](https://github.com/m-ildefons) in [#1181](https://github.com/hadolint/hadolint/pull/1181) - Fix: propagating shell options across build stages by [@m-ildefons](https://github.com/m-ildefons) in [#1180](https://github.com/hadolint/hadolint/pull/1180) - Ignore dnf group install from DL3041 by [@kpumuk](https://github.com/kpumuk) in [#1148](https://github.com/hadolint/hadolint/pull/1148) - build(deps): bump actions/upload-artifact from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1170](https://github.com/hadolint/hadolint/pull/1170) - build(deps): bump actions/download-artifact from 7 to 8 by [@dependabot](https://github.com/dependabot)\[bot] in [#1169](https://github.com/hadolint/hadolint/pull/1169) - build(deps): bump docker/setup-buildx-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1173](https://github.com/hadolint/hadolint/pull/1173) - build(deps): bump docker/login-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1172](https://github.com/hadolint/hadolint/pull/1172) - build(deps): bump docker/build-push-action from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1171](https://github.com/hadolint/hadolint/pull/1171) - DL3062: relax DL3062, fix readme by [@m-ildefons](https://github.com/m-ildefons) in [#1131](https://github.com/hadolint/hadolint/pull/1131) - DL3040: Match different install command variations by [@m-ildefons](https://github.com/m-ildefons) in [#1182](https://github.com/hadolint/hadolint/pull/1182) - DL3063: New rule, stage name reserved word by [@m-ildefons](https://github.com/m-ildefons) in [#1183](https://github.com/hadolint/hadolint/pull/1183) - readme: fixup readme by [@m-ildefons](https://github.com/m-ildefons) in [#1184](https://github.com/hadolint/hadolint/pull/1184) - build(deps): bump EndBug/add-and-commit from 9 to 10 by [@dependabot](https://github.com/dependabot)\[bot] in [#1186](https://github.com/hadolint/hadolint/pull/1186) - build(deps): bump softprops/action-gh-release from 2 to 3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1187](https://github.com/hadolint/hadolint/pull/1187) - fix: fix hlint warnings by [@m-ildefons](https://github.com/m-ildefons) in [#1189](https://github.com/hadolint/hadolint/pull/1189) - Shellcheck: fix false-positives with exec notation by [@m-ildefons](https://github.com/m-ildefons) in [#1194](https://github.com/hadolint/hadolint/pull/1194) - DL3065: New Rule: No FROM with $TARGETPLATFORM by [@m-ildefons](https://github.com/m-ildefons) in [#1190](https://github.com/hadolint/hadolint/pull/1190) - Ignore Pragma: Add stage ignore pragma by [@m-ildefons](https://github.com/m-ildefons) in [#1195](https://github.com/hadolint/hadolint/pull/1195) - Fix DL3013 false positive on pipx --python flag by [@eyupcanakman](https://github.com/eyupcanakman) in [#1196](https://github.com/hadolint/hadolint/pull/1196) - Add JUnit output formatter by [@m-ildefons](https://github.com/m-ildefons) in [#1192](https://github.com/hadolint/hadolint/pull/1192) - Fix DL3013 false positive on pip --root-user-action flag by [@eyupcanakman](https://github.com/eyupcanakman) in [#1198](https://github.com/hadolint/hadolint/pull/1198) - Update to Alpine 3.24 by [@jnoordsij](https://github.com/jnoordsij) in [#1206](https://github.com/hadolint/hadolint/pull/1206) - Fix DL3016 false positive on npm --registry flag by [@eyupcanakman](https://github.com/eyupcanakman) in [#1210](https://github.com/hadolint/hadolint/pull/1210) - New Rule: DL3066 Non-numeric user-id by [@m-ildefons](https://github.com/m-ildefons) in [#1212](https://github.com/hadolint/hadolint/pull/1212) - build(deps): bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1211](https://github.com/hadolint/hadolint/pull/1211) - DL3025: Trigger on HEALTHCHECK instructions too by [@m-ildefons](https://github.com/m-ildefons) in [#1209](https://github.com/hadolint/hadolint/pull/1209) - DL3018: Allow fuzzy version matching by [@m-ildefons](https://github.com/m-ildefons) in [#1201](https://github.com/hadolint/hadolint/pull/1201) - Checkstyle: Output file node on empty result by [@m-ildefons](https://github.com/m-ildefons) in [#1204](https://github.com/hadolint/hadolint/pull/1204) - build(deps): bump actions/cache from 5 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#1213](https://github.com/hadolint/hadolint/pull/1213) - Add rule against copying root from another stage by [@Develop-KIM](https://github.com/Develop-KIM) in [#1215](https://github.com/hadolint/hadolint/pull/1215) - DL3026: Warn on `COPY --from` untrusted registry by [@m-ildefons](https://github.com/m-ildefons) in [#1205](https://github.com/hadolint/hadolint/pull/1205) - DL3026: Disallow mounting from untrusted registies by [@m-ildefons](https://github.com/m-ildefons) in [#1216](https://github.com/hadolint/hadolint/pull/1216) - DL3041: Accept package versions in environment variables by [@m-ildefons](https://github.com/m-ildefons) in [#1185](https://github.com/hadolint/hadolint/pull/1185) - Add output to file/multiple files by [@m-ildefons](https://github.com/m-ildefons) in [#1197](https://github.com/hadolint/hadolint/pull/1197) - Dependencies: Bump language-docker to v16.0.0 by [@m-ildefons](https://github.com/m-ildefons) in [#1218](https://github.com/hadolint/hadolint/pull/1218) - New Rule: DL3064 ARG or ENV with sensitive data by [@m-ildefons](https://github.com/m-ildefons) in [#1188](https://github.com/hadolint/hadolint/pull/1188) - Hadolint Embedded: Fix output interface by [@m-ildefons](https://github.com/m-ildefons) in [#1219](https://github.com/hadolint/hadolint/pull/1219) - CI: Improve Release Workflow by [@m-ildefons](https://github.com/m-ildefons) in [#1220](https://github.com/hadolint/hadolint/pull/1220) - Release v2.15.0 by [@m-ildefons](https://github.com/m-ildefons) in [#1221](https://github.com/hadolint/hadolint/pull/1221) #### New Contributors - [@matmarczak](https://github.com/matmarczak) made their first contribution in [#962](https://github.com/hadolint/hadolint/pull/962) - [@bpfoster](https://github.com/bpfoster) made their first contribution in [#1018](https://github.com/hadolint/hadolint/pull/1018) - [@304NotModified](https://github.com/304NotModified) made their first contribution in [#1157](https://github.com/hadolint/hadolint/pull/1157) - [@nothankyouzzz](https://github.com/nothankyouzzz) made their first contribution in [#1168](https://github.com/hadolint/hadolint/pull/1168) - [@kpumuk](https://github.com/kpumuk) made their first contribution in [#1148](https://github.com/hadolint/hadolint/pull/1148) - [@eyupcanakman](https://github.com/eyupcanakman) made their first contribution in [#1196](https://github.com/hadolint/hadolint/pull/1196) - [@jnoordsij](https://github.com/jnoordsij) made their first contribution in [#1206](https://github.com/hadolint/hadolint/pull/1206) - [@Develop-KIM](https://github.com/Develop-KIM) made their first contribution in [#1215](https://github.com/hadolint/hadolint/pull/1215) **Full Changelog**: <https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0> ### [`v2.14.0`](https://github.com/hadolint/hadolint/releases/tag/v2.14.0) [Compare Source](https://github.com/hadolint/hadolint/compare/v2.13.1...v2.14.0) #### What's Changed - Enhance INTEGRATION.md with a toc and ordering by [@jammsen](https://github.com/jammsen) in [#1118](https://github.com/hadolint/hadolint/pull/1118) - DL3041, DL3033: Handle RPM package epoch by [@m-ildefons](https://github.com/m-ildefons) in [#1121](https://github.com/hadolint/hadolint/pull/1121) - DL3009: Allow either cache or tmpfs mounts by [@m-ildefons](https://github.com/m-ildefons) in [#1123](https://github.com/hadolint/hadolint/pull/1123) - added new rule `DL3062` to check `go install` by [@Danil42Russia](https://github.com/Danil42Russia) in [#1111](https://github.com/hadolint/hadolint/pull/1111) - DL3041, DL3033: Handle RPM package with plus sign by [@samcranford](https://github.com/samcranford) in [#1125](https://github.com/hadolint/hadolint/pull/1125) - relax dependencies by [@m-ildefons](https://github.com/m-ildefons) in [#1128](https://github.com/hadolint/hadolint/pull/1128) - fixup release workflow by [@m-ildefons](https://github.com/m-ildefons) in [#1129](https://github.com/hadolint/hadolint/pull/1129) #### New Contributors - [@jammsen](https://github.com/jammsen) made their first contribution in [#1118](https://github.com/hadolint/hadolint/pull/1118) - [@Danil42Russia](https://github.com/Danil42Russia) made their first contribution in [#1111](https://github.com/hadolint/hadolint/pull/1111) - [@samcranford](https://github.com/samcranford) made their first contribution in [#1125](https://github.com/hadolint/hadolint/pull/1125) **Full Changelog**: <https://github.com/hadolint/hadolint/compare/v2.13.1...v2.14.0> ### [`v2.13.1`](https://github.com/hadolint/hadolint/releases/tag/v2.13.1) #### What's Changed - build(deps): bump actions/cache from 3.0.4 to 3.0.11 by [@dependabot](https://github.com/dependabot)\[bot] in [#888](https://github.com/hadolint/hadolint/pull/888) - build(deps): bump cachix/install-nix-action from 17 to 18 by [@dependabot](https://github.com/dependabot)\[bot] in [#890](https://github.com/hadolint/hadolint/pull/890) - build(deps): bump cachix/cachix-action from 10 to 12 by [@dependabot](https://github.com/dependabot)\[bot] in [#894](https://github.com/hadolint/hadolint/pull/894) - docs: use cabal instead of stack in readme by [@m-ildefons](https://github.com/m-ildefons) in [#903](https://github.com/hadolint/hadolint/pull/903) - DL3011: fixup changes in AST by [@m-ildefons](https://github.com/m-ildefons) in [#902](https://github.com/hadolint/hadolint/pull/902) - fix: false positive in `DL3022` by [@swarnimarun](https://github.com/swarnimarun) in [#900](https://github.com/hadolint/hadolint/pull/900) - Correct documentation example for `failure-threshold` by [@ericcornelissen](https://github.com/ericcornelissen) in [#901](https://github.com/hadolint/hadolint/pull/901) - update hadolint's config json schema to support latest properties by [@omissis](https://github.com/omissis) in [#910](https://github.com/hadolint/hadolint/pull/910) - Update INTEGRATION.md steps for pre-commit by [@tangyfruits](https://github.com/tangyfruits) in [#908](https://github.com/hadolint/hadolint/pull/908) - chore: fix typos in rule descriptions by [@AndreyBozhko](https://github.com/AndreyBozhko) in [#912](https://github.com/hadolint/hadolint/pull/912) - Add LABEL org.opencontainers.image.source="<https://github.com/hadolin…> by [@marwin1991](https://github.com/marwin1991) in [#927](https://github.com/hadolint/hadolint/pull/927) - DL3014: Fix false positive on double quiet by [@m-ildefons](https://github.com/m-ildefons) in [#913](https://github.com/hadolint/hadolint/pull/913) - Update README.md by [@ding-ma](https://github.com/ding-ma) in [#918](https://github.com/hadolint/hadolint/pull/918) - Spelling by [@jsoref](https://github.com/jsoref) in [#936](https://github.com/hadolint/hadolint/pull/936) - fix: misidentification of pipenv ([#366](https://github.com/hadolint/hadolint/issues/366)) by [@kthy](https://github.com/kthy) in [#940](https://github.com/hadolint/hadolint/pull/940) - build(deps): bump cachix/install-nix-action from 18 to 20 by [@dependabot](https://github.com/dependabot)\[bot] in [#944](https://github.com/hadolint/hadolint/pull/944) - build(deps): bump actions/cache from 3.0.11 to 3.3.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#946](https://github.com/hadolint/hadolint/pull/946) - build(deps): bump docker/build-push-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#931](https://github.com/hadolint/hadolint/pull/931) - build(deps): bump svenstaro/upx-action from 2.0.1 to 2.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#922](https://github.com/hadolint/hadolint/pull/922) - delete rule DL3005 by [@deronnax](https://github.com/deronnax) in [#964](https://github.com/hadolint/hadolint/pull/964) - docs: Add new section for Ignoring Rules in README by [@tanmay-pnaik](https://github.com/tanmay-pnaik) in [#1008](https://github.com/hadolint/hadolint/pull/1008) - docs: Add Table of Contents for README by [@tanmay-pnaik](https://github.com/tanmay-pnaik) in [#1007](https://github.com/hadolint/hadolint/pull/1007) - DL3060 should be suppressed if cache mounts are used by [@slimslenderslacks](https://github.com/slimslenderslacks) in [#1003](https://github.com/hadolint/hadolint/pull/1003) - Improve parsing of gem install flag patterns to reduce false positives by [@mkusaka](https://github.com/mkusaka) in [#954](https://github.com/hadolint/hadolint/pull/954) - fix: fp in `DL3006` by [@swarnimarun](https://github.com/swarnimarun) in [#942](https://github.com/hadolint/hadolint/pull/942) - docs: Update TOC with Ignoring Rules section by [@tanmay-pnaik](https://github.com/tanmay-pnaik) in [#1013](https://github.com/hadolint/hadolint/pull/1013) - build(deps): bump svenstaro/upx-action from 2.2.0 to 2.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#959](https://github.com/hadolint/hadolint/pull/959) - Pragma: Allow comments following inline by [@m-ildefons](https://github.com/m-ildefons) in [#1059](https://github.com/hadolint/hadolint/pull/1059) - build(deps): bump actions/cache from 3.3.1 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1063](https://github.com/hadolint/hadolint/pull/1063) - Ignore unsatisfiable shellcheck error 1091 by [@ghoneycutt](https://github.com/ghoneycutt) in [#1020](https://github.com/hadolint/hadolint/pull/1020) - build(deps): bump cachix/install-nix-action from 26 to 30 by [@dependabot](https://github.com/dependabot)\[bot] in [#1045](https://github.com/hadolint/hadolint/pull/1045) - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1046](https://github.com/hadolint/hadolint/pull/1046) - build(deps): bump cachix/cachix-action from 14 to 15 by [@dependabot](https://github.com/dependabot)\[bot] in [#1047](https://github.com/hadolint/hadolint/pull/1047) - build(deps): bump docker/setup-buildx-action from 2 to 3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1048](https://github.com/hadolint/hadolint/pull/1048) - Fix casing in Dockerfile by [@JEnglandOhalo](https://github.com/JEnglandOhalo) in [#1093](https://github.com/hadolint/hadolint/pull/1093) - fix: replace actor with repository_owner in ghcr login by [@aweiher](https://github.com/aweiher) in [#1086](https://github.com/hadolint/hadolint/pull/1086) - Fix GitHub Actions badge in README.md by [@PeterDaveHello](https://github.com/PeterDaveHello) in [#1072](https://github.com/hadolint/hadolint/pull/1072) - Add SC1091 to yaml Schema by [@psmey](https://github.com/psmey) in [#1088](https://github.com/hadolint/hadolint/pull/1088) - DL3048 accepting LABEL keys that contain underscore(s) or slash(es) by [@mschmeitz](https://github.com/mschmeitz) in [#1034](https://github.com/hadolint/hadolint/pull/1034) - Improve DL3009 rule to properly handle all apt-based package managers by [@PeterDaveHello](https://github.com/PeterDaveHello) in [#1074](https://github.com/hadolint/hadolint/pull/1074) - Replace cryptonite with cryptohash-sha1 by [@anuraaga](https://github.com/anuraaga) in [#1090](https://github.com/hadolint/hadolint/pull/1090) - build(deps): bump actions/cache from 4.2.0 to 4.2.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1082](https://github.com/hadolint/hadolint/pull/1082) - fix(DL3041): Prevent false negatives for packages which include a dash in their package name by [@egfx-notifications](https://github.com/egfx-notifications) in [#1098](https://github.com/hadolint/hadolint/pull/1098) - fix character escaping in checkstyle formatter by [@m-ildefons](https://github.com/m-ildefons) in [#1104](https://github.com/hadolint/hadolint/pull/1104) - build(deps): bump actions/cache from 4.2.3 to 4.2.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1115](https://github.com/hadolint/hadolint/pull/1115) - build(deps): bump actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1113](https://github.com/hadolint/hadolint/pull/1113) - build(deps): bump actions/download-artifact from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1114](https://github.com/hadolint/hadolint/pull/1114) - Added CI integration instructions for Azure Devops by [@joelbourbon](https://github.com/joelbourbon) in [#1112](https://github.com/hadolint/hadolint/pull/1112) - Release v2.13.1 by [@m-ildefons](https://github.com/m-ildefons) in [#1116](https://github.com/hadolint/hadolint/pull/1116) #### New Contributors - [@swarnimarun](https://github.com/swarnimarun) made their first contribution in [#900](https://github.com/hadolint/hadolint/pull/900) - [@ericcornelissen](https://github.com/ericcornelissen) made their first contribution in [#901](https://github.com/hadolint/hadolint/pull/901) - [@omissis](https://github.com/omissis) made their first contribution in [#910](https://github.com/hadolint/hadolint/pull/910) - [@tangyfruits](https://github.com/tangyfruits) made their first contribution in [#908](https://github.com/hadolint/hadolint/pull/908) - [@AndreyBozhko](https://github.com/AndreyBozhko) made their first contribution in [#912](https://github.com/hadolint/hadolint/pull/912) - [@marwin1991](https://github.com/marwin1991) made their first contribution in [#927](https://github.com/hadolint/hadolint/pull/927) - [@ding-ma](https://github.com/ding-ma) made their first contribution in [#918](https://github.com/hadolint/hadolint/pull/918) - [@jsoref](https://github.com/jsoref) made their first contribution in [#936](https://github.com/hadolint/hadolint/pull/936) - [@kthy](https://github.com/kthy) made their first contribution in [#940](https://github.com/hadolint/hadolint/pull/940) - [@deronnax](https://github.com/deronnax) made their first contribution in [#964](https://github.com/hadolint/hadolint/pull/964) - [@tanmay-pnaik](https://github.com/tanmay-pnaik) made their first contribution in [#1008](https://github.com/hadolint/hadolint/pull/1008) - [@slimslenderslacks](https://github.com/slimslenderslacks) made their first contribution in [#1003](https://github.com/hadolint/hadolint/pull/1003) - [@mkusaka](https://github.com/mkusaka) made their first contribution in [#954](https://github.com/hadolint/hadolint/pull/954) - [@ghoneycutt](https://github.com/ghoneycutt) made their first contribution in [#1020](https://github.com/hadolint/hadolint/pull/1020) - [@JEnglandOhalo](https://github.com/JEnglandOhalo) made their first contribution in [#1093](https://github.com/hadolint/hadolint/pull/1093) - [@aweiher](https://github.com/aweiher) made their first contribution in [#1086](https://github.com/hadolint/hadolint/pull/1086) - [@psmey](https://github.com/psmey) made their first contribution in [#1088](https://github.com/hadolint/hadolint/pull/1088) - [@mschmeitz](https://github.com/mschmeitz) made their first contribution in [#1034](https://github.com/hadolint/hadolint/pull/1034) - [@anuraaga](https://github.com/anuraaga) made their first contribution in [#1090](https://github.com/hadolint/hadolint/pull/1090) - [@egfx-notifications](https://github.com/egfx-notifications) made their first contribution in [#1098](https://github.com/hadolint/hadolint/pull/1098) - [@joelbourbon](https://github.com/joelbourbon) made their first contribution in [#1112](https://github.com/hadolint/hadolint/pull/1112) **Full Changelog**: <https://github.com/hadolint/hadolint/compare/v2.12.0...v2.13.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-20 00:01:56 +00:00

chore(deps): update docker images

ci/crow/push/lint Pipeline failed

Details

2360222fd4

renovate-bot force-pushed renovate/docker-images from 2360222fd4

ci/crow/push/lint Pipeline failed

Details

to 77ec27b337

ci/crow/pr/container Pipeline is pending

Details

ci/crow/push/lint Pipeline failed

Details

ci/crow/pr/lint Pipeline failed

Details

2026-07-21 02:02:37 +00:00

Compare

renovate-bot force-pushed renovate/docker-images from 83bf87f5a8 to 286dda7640

2026-09-21 19:02:54 +00:00

Compare

renovate-bot force-pushed renovate/docker-images from 286dda7640 to 21bf793f7f

ci/crow/pr/container Pipeline is pending

Details

ci/crow/push/lint Pipeline failed

Details

ci/crow/pr/lint Pipeline failed

Details

2026-10-22 23:01:52 +00:00

Compare

renovate-bot changed title from ~~chore(deps): update docker images~~ to Update Docker images

2026-11-05 06:02:48 +00:00

renovate-bot added the

version

patch 🩹

automerge 🔀

labels

2026-11-05 06:02:48 +00:00

ci/crow/pr/container Pipeline is pending

Details

ci/crow/push/lint Pipeline failed

Details

ci/crow/pr/lint Pipeline failed

Details

This pull request is broken due to missing fork information.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin 'renovate/docker-images:renovate/docker-images'

git switch 'renovate/docker-images'

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch 'main'

git merge --no-ff 'renovate/docker-images'

git switch 'renovate/docker-images'

git rebase 'main'

git switch 'main'

git merge --ff-only 'renovate/docker-images'

git switch 'renovate/docker-images'

git rebase 'main'

git switch 'main'

git merge --no-ff 'renovate/docker-images'

git switch 'main'

git merge --squash 'renovate/docker-images'

git switch 'main'

git merge --ff-only 'renovate/docker-images'

git switch 'main'

git merge 'renovate/docker-images'

git push origin 'main'

Rows
Columns

Update Docker images #1

Release Notes

v2.15.1

What's Changed

v2.15.0

What's Changed

New Contributors

v2.14.0

What's Changed

New Contributors

v2.13.1

What's Changed

New Contributors

Configuration

Checkout

Merge

`v2.15.1`

`v2.15.0`

`v2.14.0`

`v2.13.1`