Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Dec 8, 2025

The super-linter 8.3.0 update failed CI due to new zizmor linter requirements and accidental npm package downgrades from a stale Dependabot PR.

Changes

  • Removed deprecated linter environment variables - VALIDATE_JAVASCRIPT_STANDARD and VALIDATE_TYPESCRIPT_STANDARD no longer supported in 8.3.0
  • Added Dependabot rate limits - open-pull-requests-limit: 10 for both GitHub Actions and npm ecosystems to prevent PR spam (zizmor requirement)
  • Fixed .checkov.yaml - Removed YAML document start marker for linter compliance
  • Reverted package downgrades - Restored package.json and package-lock.json to main branch state (Dependabot had downgraded prettier 3.7.4→3.7.3, @typescript-eslint/eslint-plugin 8.48.1→8.48.0, @vitest/coverage-v8 4.0.15→4.0.14)

The PR now contains only the intended super-linter version bump from 8.2.1 to 8.3.0.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

- Remove deprecated VALIDATE_JAVASCRIPT_STANDARD and VALIDATE_TYPESCRIPT_STANDARD env vars
- Add open-pull-requests-limit to dependabot config to prevent PR spam
- Remove YAML document start marker from .checkov.yaml
- Revert unintended package.json/package-lock.json downgrades

Co-authored-by: chrisreddington <[email protected]>
Copilot AI changed the title [WIP] Update super-linter from 8.2.1 to 8.3.0 Fix super-linter 8.3.0 compatibility and revert unintended dependency downgrades Dec 8, 2025
Copilot AI requested a review from chrisreddington December 8, 2025 09:01
@chrisreddington chrisreddington marked this pull request as ready for review December 14, 2025 21:47
@chrisreddington chrisreddington merged commit c7f02a6 into dependabot/github_actions/actions-minor-60eb3724a9 Dec 14, 2025
1 check passed
@chrisreddington chrisreddington deleted the copilot/sub-pr-99 branch December 14, 2025 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants