Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 17, 2025

Bumps terraform-linters/tflint from v0.59.1 to v0.60.0.

Release notes

Sourced from terraform-linters/tflint's releases.

v0.60.0

What's Changed

This release introduces a new configuration file format: .tflint.json. This is useful for workflows such as automatically generating configuration files. Please note that in order to use the .tflint.json, enabled plugins must be built with SDK v0.23+.

From this release, Cosign signatures (checksums.txt.keyless.sig and checksums.txt.pem) are deprecated. They will not be included in future releases. If your installation scripts depend on them, please migrate to gh attestation verify.

Enhancements

Changes

Bug Fixes

Chores

New Contributors

Full Changelog: terraform-linters/tflint@v0.59.1...v0.60.0

Commits
  • c932c4d Bump up version to v0.60.0
  • c132acc Bump Go patch version
  • 26c49c4 fix: only read TF_VAR environment variables for root module (#2413)
  • 09a61cf build(deps): Bump golang.org/x/oauth2 in the go-x group (#2410)
  • 25059cf build(deps): Bump docker/metadata-action from 5.8.0 to 5.9.0 (#2409)
  • 9da1a58 build(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#2408)
  • 63d5d8a Report structured errors in JUnit and CheckStyle XML formatters (#2407)
  • 38cab05 Add JSON configuration file support (#2391)
  • 3bc0bfa Pin Cosign version and deprecate Cosign signatures (#2405)
  • 56b6432 Alphabetize rulesets in version output (#2404)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.59.1 to v0.60.0.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](terraform-linters/tflint@v0.59.1...v0.60.0)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-version: v0.60.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Nov 17, 2025
@dependabot dependabot bot requested review from a team and ChristophShyper as code owners November 17, 2025 05:01
@ChristophShyper ChristophShyper merged commit bc84b1b into master Nov 21, 2025
@ChristophShyper ChristophShyper deleted the dependabot/docker/terraform-linters/tflint-v0.60.0 branch November 21, 2025 19:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Development

Successfully merging this pull request may close these issues.

1 participant