chore(deps): update hadolint/hadolint docker tag to v2.15.0 #22

Merged

renovate-bot merged 1 commit from renovate/hadolint-hadolint-2.x into main 2026-07-30 17:03:48 +02:00

Conversation 1 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-07-30 16:01:49 +02:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
hadolint/hadolint	minor	v2.14.0-alpine → v2.15.0-alpine

---

Release Notes

hadolint/hadolint (hadolint/hadolint)

v2.15.0

Compare Source

What's Changed

• build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @​dependabot[bot] in #​1135
• Check if clean is after install package by @​matmarczak in #​962
• Enable file-path-in-report flag for codeclimate formatters by @​bpfoster in #​1018
• SonarQube Formatter: Support --file-path-in-report by @​m-ildefons in #​1151
• (doc) Add missing steps for developing this software by @​ghoneycutt in #​1021
• Toil: bump GitHub action versions by @​m-ildefons in #​1153
• Automatically update Third party licenses by @​m-ildefons in #​1154
• Bump upload/download artifacts action by @​m-ildefons in #​1161
• Added SonarQube format test by @​304NotModified in #​1157
• Update README: tell about comments on ignore rules by @​304NotModified in #​1162
• Fix DL3018 for apk ~ pins by @​nothankyouzzz in #​1168
• Online Linter: Revive the online linter by @​m-ildefons in #​1178
• Update Readme by @​m-ildefons in #​1181
• Fix: propagating shell options across build stages by @​m-ildefons in #​1180
• Ignore dnf group install from DL3041 by @​kpumuk in #​1148
• build(deps): bump actions/upload-artifact from 6 to 7 by @​dependabot[bot] in #​1170
• build(deps): bump actions/download-artifact from 7 to 8 by @​dependabot[bot] in #​1169
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @​dependabot[bot] in #​1173
• build(deps): bump docker/login-action from 3 to 4 by @​dependabot[bot] in #​1172
• build(deps): bump docker/build-push-action from 6 to 7 by @​dependabot[bot] in #​1171
• DL3062: relax DL3062, fix readme by @​m-ildefons in #​1131
• DL3040: Match different install command variations by @​m-ildefons in #​1182
• DL3063: New rule, stage name reserved word by @​m-ildefons in #​1183
• readme: fixup readme by @​m-ildefons in #​1184
• build(deps): bump EndBug/add-and-commit from 9 to 10 by @​dependabot[bot] in #​1186
• build(deps): bump softprops/action-gh-release from 2 to 3 by @​dependabot[bot] in #​1187
• fix: fix hlint warnings by @​m-ildefons in #​1189
• Shellcheck: fix false-positives with exec notation by @​m-ildefons in #​1194
• DL3065: New Rule: No FROM with $TARGETPLATFORM by @​m-ildefons in #​1190
• Ignore Pragma: Add stage ignore pragma by @​m-ildefons in #​1195
• Fix DL3013 false positive on pipx --python flag by @​eyupcanakman in #​1196
• Add JUnit output formatter by @​m-ildefons in #​1192
• Fix DL3013 false positive on pip --root-user-action flag by @​eyupcanakman in #​1198
• Update to Alpine 3.24 by @​jnoordsij in #​1206
• Fix DL3016 false positive on npm --registry flag by @​eyupcanakman in #​1210
• New Rule: DL3066 Non-numeric user-id by @​m-ildefons in #​1212
• build(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​1211
• DL3025: Trigger on HEALTHCHECK instructions too by @​m-ildefons in #​1209
• DL3018: Allow fuzzy version matching by @​m-ildefons in #​1201
• Checkstyle: Output file node on empty result by @​m-ildefons in #​1204
• build(deps): bump actions/cache from 5 to 6 by @​dependabot[bot] in #​1213
• Add rule against copying root from another stage by @​Develop-KIM in #​1215
• DL3026: Warn on COPY --from untrusted registry by @​m-ildefons in #​1205
• DL3026: Disallow mounting from untrusted registies by @​m-ildefons in #​1216
• DL3041: Accept package versions in environment variables by @​m-ildefons in #​1185
• Add output to file/multiple files by @​m-ildefons in #​1197
• Dependencies: Bump language-docker to v16.0.0 by @​m-ildefons in #​1218
• New Rule: DL3064 ARG or ENV with sensitive data by @​m-ildefons in #​1188
• Hadolint Embedded: Fix output interface by @​m-ildefons in #​1219
• CI: Improve Release Workflow by @​m-ildefons in #​1220
• Release v2.15.0 by @​m-ildefons in #​1221

New Contributors

• @​matmarczak made their first contribution in #​962
• @​bpfoster made their first contribution in #​1018
• @​304NotModified made their first contribution in #​1157
• @​nothankyouzzz made their first contribution in #​1168
• @​kpumuk made their first contribution in #​1148
• @​eyupcanakman made their first contribution in #​1196
• @​jnoordsij made their first contribution in #​1206
• @​Develop-KIM made their first contribution in #​1215

Full Changelog: https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [hadolint/hadolint](https://github.com/hadolint/hadolint) | minor | `v2.14.0-alpine` → `v2.15.0-alpine` | --- ### Release Notes <details> <summary>hadolint/hadolint (hadolint/hadolint)</summary> ### [`v2.15.0`](https://github.com/hadolint/hadolint/releases/tag/v2.15.0) [Compare Source](https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0) #### What's Changed - build(deps): bump actions/cache from 4.2.4 to 4.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1135](https://github.com/hadolint/hadolint/pull/1135) - Check if clean is after install package by [@&#8203;matmarczak](https://github.com/matmarczak) in [#&#8203;962](https://github.com/hadolint/hadolint/pull/962) - Enable file-path-in-report flag for codeclimate formatters by [@&#8203;bpfoster](https://github.com/bpfoster) in [#&#8203;1018](https://github.com/hadolint/hadolint/pull/1018) - SonarQube Formatter: Support --file-path-in-report by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1151](https://github.com/hadolint/hadolint/pull/1151) - (doc) Add missing steps for developing this software by [@&#8203;ghoneycutt](https://github.com/ghoneycutt) in [#&#8203;1021](https://github.com/hadolint/hadolint/pull/1021) - Toil: bump GitHub action versions by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1153](https://github.com/hadolint/hadolint/pull/1153) - Automatically update Third party licenses by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1154](https://github.com/hadolint/hadolint/pull/1154) - Bump upload/download artifacts action by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1161](https://github.com/hadolint/hadolint/pull/1161) - Added SonarQube format test by [@&#8203;304NotModified](https://github.com/304NotModified) in [#&#8203;1157](https://github.com/hadolint/hadolint/pull/1157) - Update README: tell about comments on ignore rules by [@&#8203;304NotModified](https://github.com/304NotModified) in [#&#8203;1162](https://github.com/hadolint/hadolint/pull/1162) - Fix DL3018 for apk \~ pins by [@&#8203;nothankyouzzz](https://github.com/nothankyouzzz) in [#&#8203;1168](https://github.com/hadolint/hadolint/pull/1168) - Online Linter: Revive the online linter by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1178](https://github.com/hadolint/hadolint/pull/1178) - Update Readme by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1181](https://github.com/hadolint/hadolint/pull/1181) - Fix: propagating shell options across build stages by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1180](https://github.com/hadolint/hadolint/pull/1180) - Ignore dnf group install from DL3041 by [@&#8203;kpumuk](https://github.com/kpumuk) in [#&#8203;1148](https://github.com/hadolint/hadolint/pull/1148) - build(deps): bump actions/upload-artifact from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1170](https://github.com/hadolint/hadolint/pull/1170) - build(deps): bump actions/download-artifact from 7 to 8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1169](https://github.com/hadolint/hadolint/pull/1169) - build(deps): bump docker/setup-buildx-action from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1173](https://github.com/hadolint/hadolint/pull/1173) - build(deps): bump docker/login-action from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1172](https://github.com/hadolint/hadolint/pull/1172) - build(deps): bump docker/build-push-action from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1171](https://github.com/hadolint/hadolint/pull/1171) - DL3062: relax DL3062, fix readme by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1131](https://github.com/hadolint/hadolint/pull/1131) - DL3040: Match different install command variations by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1182](https://github.com/hadolint/hadolint/pull/1182) - DL3063: New rule, stage name reserved word by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1183](https://github.com/hadolint/hadolint/pull/1183) - readme: fixup readme by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1184](https://github.com/hadolint/hadolint/pull/1184) - build(deps): bump EndBug/add-and-commit from 9 to 10 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1186](https://github.com/hadolint/hadolint/pull/1186) - build(deps): bump softprops/action-gh-release from 2 to 3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1187](https://github.com/hadolint/hadolint/pull/1187) - fix: fix hlint warnings by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1189](https://github.com/hadolint/hadolint/pull/1189) - Shellcheck: fix false-positives with exec notation by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1194](https://github.com/hadolint/hadolint/pull/1194) - DL3065: New Rule: No FROM with $TARGETPLATFORM by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1190](https://github.com/hadolint/hadolint/pull/1190) - Ignore Pragma: Add stage ignore pragma by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1195](https://github.com/hadolint/hadolint/pull/1195) - Fix DL3013 false positive on pipx --python flag by [@&#8203;eyupcanakman](https://github.com/eyupcanakman) in [#&#8203;1196](https://github.com/hadolint/hadolint/pull/1196) - Add JUnit output formatter by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1192](https://github.com/hadolint/hadolint/pull/1192) - Fix DL3013 false positive on pip --root-user-action flag by [@&#8203;eyupcanakman](https://github.com/eyupcanakman) in [#&#8203;1198](https://github.com/hadolint/hadolint/pull/1198) - Update to Alpine 3.24 by [@&#8203;jnoordsij](https://github.com/jnoordsij) in [#&#8203;1206](https://github.com/hadolint/hadolint/pull/1206) - Fix DL3016 false positive on npm --registry flag by [@&#8203;eyupcanakman](https://github.com/eyupcanakman) in [#&#8203;1210](https://github.com/hadolint/hadolint/pull/1210) - New Rule: DL3066 Non-numeric user-id by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1212](https://github.com/hadolint/hadolint/pull/1212) - build(deps): bump actions/checkout from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1211](https://github.com/hadolint/hadolint/pull/1211) - DL3025: Trigger on HEALTHCHECK instructions too by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1209](https://github.com/hadolint/hadolint/pull/1209) - DL3018: Allow fuzzy version matching by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1201](https://github.com/hadolint/hadolint/pull/1201) - Checkstyle: Output file node on empty result by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1204](https://github.com/hadolint/hadolint/pull/1204) - build(deps): bump actions/cache from 5 to 6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1213](https://github.com/hadolint/hadolint/pull/1213) - Add rule against copying root from another stage by [@&#8203;Develop-KIM](https://github.com/Develop-KIM) in [#&#8203;1215](https://github.com/hadolint/hadolint/pull/1215) - DL3026: Warn on `COPY --from` untrusted registry by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1205](https://github.com/hadolint/hadolint/pull/1205) - DL3026: Disallow mounting from untrusted registies by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1216](https://github.com/hadolint/hadolint/pull/1216) - DL3041: Accept package versions in environment variables by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1185](https://github.com/hadolint/hadolint/pull/1185) - Add output to file/multiple files by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1197](https://github.com/hadolint/hadolint/pull/1197) - Dependencies: Bump language-docker to v16.0.0 by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1218](https://github.com/hadolint/hadolint/pull/1218) - New Rule: DL3064 ARG or ENV with sensitive data by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1188](https://github.com/hadolint/hadolint/pull/1188) - Hadolint Embedded: Fix output interface by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1219](https://github.com/hadolint/hadolint/pull/1219) - CI: Improve Release Workflow by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1220](https://github.com/hadolint/hadolint/pull/1220) - Release v2.15.0 by [@&#8203;m-ildefons](https://github.com/m-ildefons) in [#&#8203;1221](https://github.com/hadolint/hadolint/pull/1221) #### New Contributors - [@&#8203;matmarczak](https://github.com/matmarczak) made their first contribution in [#&#8203;962](https://github.com/hadolint/hadolint/pull/962) - [@&#8203;bpfoster](https://github.com/bpfoster) made their first contribution in [#&#8203;1018](https://github.com/hadolint/hadolint/pull/1018) - [@&#8203;304NotModified](https://github.com/304NotModified) made their first contribution in [#&#8203;1157](https://github.com/hadolint/hadolint/pull/1157) - [@&#8203;nothankyouzzz](https://github.com/nothankyouzzz) made their first contribution in [#&#8203;1168](https://github.com/hadolint/hadolint/pull/1168) - [@&#8203;kpumuk](https://github.com/kpumuk) made their first contribution in [#&#8203;1148](https://github.com/hadolint/hadolint/pull/1148) - [@&#8203;eyupcanakman](https://github.com/eyupcanakman) made their first contribution in [#&#8203;1196](https://github.com/hadolint/hadolint/pull/1196) - [@&#8203;jnoordsij](https://github.com/jnoordsij) made their first contribution in [#&#8203;1206](https://github.com/hadolint/hadolint/pull/1206) - [@&#8203;Develop-KIM](https://github.com/Develop-KIM) made their first contribution in [#&#8203;1215](https://github.com/hadolint/hadolint/pull/1215) **Full Changelog**: <https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI4MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

renovate-bot added 1 commit 2026-07-30 16:01:49 +02:00

chore(deps): update hadolint/hadolint docker tag to v2.15.0 3cc090fd5c

renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-07-30 16:01:50 +02:00

renovate-bot commented 2026-07-30 16:01:50 +02:00

Author

Collaborator

Copy link

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

### Branch automerge failure This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead. ___ * Branch has one or more failed status checks

renovate-bot merged commit 3cc090fd5c into main 2026-07-30 17:03:48 +02:00

renovate-bot deleted branch renovate/hadolint-hadolint-2.x 2026-07-30 17:03:48 +02:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

public/distroless!22

No description provided.