v2.15.0
Added 11
- Check if clean is after install package
- Enable file-path-in-report flag for codeclimate formatters
- SonarQube Formatter support for --file-path-in-report
- Ignore dnf group install from DL3041
- DL3063 new rule for stage name reserved word
- DL3065 new rule no FROM with $TARGETPLATFORM
- Stage ignore pragma
- Add JUnit output formatter
- DL3066 new rule for non-numeric user-id
- Add output to file or multiple files
- DL3064 new rule for ARG or ENV with sensitive data
Changed 4
- Relax DL3062
- DL3040 match different install command variations
- DL3025 trigger on HEALTHCHECK instructions too
- DL3018 allow fuzzy version matching
Fixed 6
- Fix DL3018 for apk ~ pins
- Fix propagating shell options across build stages
- Shellcheck fix false-positives with exec notation
- Fix DL3013 false positive on pipx --python flag
- Fix DL3013 false positive on pip --root-user-action flag
- Fix DL3016 false positive on npm --registry flag
What's Changed
- build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1135
- Check if clean is after install package by @matmarczak in https://github.com/hadolint/hadolint/pull/962
- Enable file-path-in-report flag for codeclimate formatters by @bpfoster in https://github.com/hadolint/hadolint/pull/1018
- SonarQube Formatter: Support --file-path-in-report by @m-ildefons in https://github.com/hadolint/hadolint/pull/1151
- (doc) Add missing steps for developing this software by @ghoneycutt in https://github.com/hadolint/hadolint/pull/1021
- Toil: bump GitHub action versions by @m-ildefons in https://github.com/hadolint/hadolint/pull/1153
- Automatically update Third party licenses by @m-ildefons in https://github.com/hadolint/hadolint/pull/1154
- Bump upload/download artifacts action by @m-ildefons in https://github.com/hadolint/hadolint/pull/1161
- Added SonarQube format test by @304NotModified in https://github.com/hadolint/hadolint/pull/1157
- Update README: tell about comments on ignore rules by @304NotModified in https://github.com/hadolint/hadolint/pull/1162
- Fix DL3018 for apk ~ pins by @nothankyouzzz in https://github.com/hadolint/hadolint/pull/1168
- Online Linter: Revive the online linter by @m-ildefons in https://github.com/hadolint/hadolint/pull/1178
- Update Readme by @m-ildefons in https://github.com/hadolint/hadolint/pull/1181
- Fix: propagating shell options across build stages by @m-ildefons in https://github.com/hadolint/hadolint/pull/1180
- Ignore dnf group install from DL3041 by @kpumuk in https://github.com/hadolint/hadolint/pull/1148
- build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1170
- build(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1169
- build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1173
- build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1172
- build(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1171
- DL3062: relax DL3062, fix readme by @m-ildefons in https://github.com/hadolint/hadolint/pull/1131
- DL3040: Match different install command variations by @m-ildefons in https://github.com/hadolint/hadolint/pull/1182
- DL3063: New rule, stage name reserved word by @m-ildefons in https://github.com/hadolint/hadolint/pull/1183
- readme: fixup readme by @m-ildefons in https://github.com/hadolint/hadolint/pull/1184
- build(deps): bump EndBug/add-and-commit from 9 to 10 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1186
- build(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1187
- fix: fix hlint warnings by @m-ildefons in https://github.com/hadolint/hadolint/pull/1189
- Shellcheck: fix false-positives with exec notation by @m-ildefons in https://github.com/hadolint/hadolint/pull/1194
- DL3065: New Rule: No FROM with $TARGETPLATFORM by @m-ildefons in https://github.com/hadolint/hadolint/pull/1190
- Ignore Pragma: Add stage ignore pragma by @m-ildefons in https://github.com/hadolint/hadolint/pull/1195
- Fix DL3013 false positive on pipx --python flag by @eyupcanakman in https://github.com/hadolint/hadolint/pull/1196
- Add JUnit output formatter by @m-ildefons in https://github.com/hadolint/hadolint/pull/1192
- Fix DL3013 false positive on pip --root-user-action flag by @eyupcanakman in https://github.com/hadolint/hadolint/pull/1198
- Update to Alpine 3.24 by @jnoordsij in https://github.com/hadolint/hadolint/pull/1206
- Fix DL3016 false positive on npm --registry flag by @eyupcanakman in https://github.com/hadolint/hadolint/pull/1210
- New Rule: DL3066 Non-numeric user-id by @m-ildefons in https://github.com/hadolint/hadolint/pull/1212
- build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1211
- DL3025: Trigger on HEALTHCHECK instructions too by @m-ildefons in https://github.com/hadolint/hadolint/pull/1209
- DL3018: Allow fuzzy version matching by @m-ildefons in https://github.com/hadolint/hadolint/pull/1201
- Checkstyle: Output file node on empty result by @m-ildefons in https://github.com/hadolint/hadolint/pull/1204
- build(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in https://github.com/hadolint/hadolint/pull/1213
- Add rule against copying root from another stage by @Develop-KIM in https://github.com/hadolint/hadolint/pull/1215
- DL3026: Warn on
COPY --fromuntrusted registry by @m-ildefons in https://github.com/hadolint/hadolint/pull/1205 - DL3026: Disallow mounting from untrusted registies by @m-ildefons in https://github.com/hadolint/hadolint/pull/1216
- DL3041: Accept package versions in environment variables by @m-ildefons in https://github.com/hadolint/hadolint/pull/1185
- Add output to file/multiple files by @m-ildefons in https://github.com/hadolint/hadolint/pull/1197
- Dependencies: Bump language-docker to v16.0.0 by @m-ildefons in https://github.com/hadolint/hadolint/pull/1218
- New Rule: DL3064 ARG or ENV with sensitive data by @m-ildefons in https://github.com/hadolint/hadolint/pull/1188
- Hadolint Embedded: Fix output interface by @m-ildefons in https://github.com/hadolint/hadolint/pull/1219
- CI: Improve Release Workflow by @m-ildefons in https://github.com/hadolint/hadolint/pull/1220
- Release v2.15.0 by @m-ildefons in https://github.com/hadolint/hadolint/pull/1221
New Contributors
- @matmarczak made their first contribution in https://github.com/hadolint/hadolint/pull/962
- @bpfoster made their first contribution in https://github.com/hadolint/hadolint/pull/1018
- @304NotModified made their first contribution in https://github.com/hadolint/hadolint/pull/1157
- @nothankyouzzz made their first contribution in https://github.com/hadolint/hadolint/pull/1168
- @kpumuk made their first contribution in https://github.com/hadolint/hadolint/pull/1148
- @eyupcanakman made their first contribution in https://github.com/hadolint/hadolint/pull/1196
- @jnoordsij made their first contribution in https://github.com/hadolint/hadolint/pull/1206
- @Develop-KIM made their first contribution in https://github.com/hadolint/hadolint/pull/1215
Full Changelog: https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0