Skip to content

fix(deps): update font awesome (major)#495

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-font-awesome
Open

fix(deps): update font awesome (major)#495
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-font-awesome

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025

This PR contains the following updates:

Package Change Age Confidence
@fortawesome/fontawesome-svg-core (source) 1.2.367.2.0 age confidence
@fortawesome/free-solid-svg-icons (source) 5.15.47.2.0 age confidence
@fortawesome/vue-fontawesome 2.0.103.1.3 age confidence

Release Notes

FortAwesome/Font-Awesome (@​fortawesome/fontawesome-svg-core)

v7.2.0

Compare Source

v7.1.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v7.0.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v7.0.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.2

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.6.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.5.2

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.5.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.5.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.4.2

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.4.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.3.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.2.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.2.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.1.2

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.1.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.1.0

Compare Source

Change log available at https://fontawesome.com/v6/changelog

FortAwesome/vue-fontawesome (@​fortawesome/vue-fontawesome)

v3.1.3

Compare Source

Changed
  • ci.yml update for node-versions
  • a markdown lint fixup in CONTRIUBUTING.md
  • update vitest version to 4.0.16 in package.json

v3.1.2

Compare Source

Changed
  • Replaced Jest with Vitest as the test runner for unit tests. This will help improve test performance and better aligns
    with the Vue 3 + Vite ecosystem.

  • Updated FontAwesomeIconProps:

    • flip now accepts the boolean type in addition to 'horizontal' | 'vertical' | 'both'
    • maskId is now correctly typed as string
  • Updated DEVELOPMENT.md with revised release instructions


v3.1.1

Compare Source

Changed
  • Removed version checks related to props.fixedWidth, iconProps.title, and iconProps.title.

  • The use of require to retrieve the version from @fortawesome/fontawesome-svg-core for version checks has been
    removed to help ensure compatibility with ESM builds.


v3.1.0

Compare Source

Changed
  • Font Awesome Pro+ icons are now available with an active Pro+ subscription.

  • Added widthAuto prop

  • Added rotateBy prop

  • Deprecated fa-fw prop


v3.0.8

Compare Source

Changed
  • Updated package-lock.json to help fix faililng tests

v3.0.7

Compare Source

Changed
  • Updated nodejs version in .tool-versions
  • Updated Jest configuration for local testing
  • Removed an unused import in FontAwesomeLayers.test.js
  • Updated node-versions in ci.yml
  • Added additional exports in index.d.ts
  • Updated README.md for new Font Awesome Doc link

v3.0.6

Compare Source

Changed
  • Added missing exports to TS definition in index.d.ts

v3.0.5

Compare Source

Changed
  • Removed .tgz file

v3.0.4

Compare Source

Added
  • Tests for Sharp Family
  • Ability to include a title prop (github issue #181)
  • Prettier config file

v3.0.3

Compare Source

Changed
  • NPM download @fortawesome/vue-fontawesome-latest is now set to Vue 3; to download the Vue 2 package you will have to use @fortawesome/vue-fontawesome-latest-2, which is described in our Vue setup docs
  • CI workflow updated for testing
  • README.md and package.json updated for new contributor
Added
  • Missing TypeScript animations added (github issue #428)
  • Missing TypeScript sizes added (github issue #415)

v3.0.2

Compare Source

Changed
  • Vue 3 Composition API TypeScript support (github issue #276)
  • Updated README.md with a spelling correction, linter fixes, and new contributor
  • Updated icon example in App.vue to use fixed-width rather than full-width
Added
  • Missing tests

v3.0.1

Compare Source

Changed

v3.0.0

Compare Source

Added
  • New animations for bounce and shake
  • Feature to call icons using a string format
Fixed
  • Animations for beat, fade, beat-fade, flash, spin-pulse, and spin-reverse
  • Tee-shirt sizes to include 2xs, lg, xl, and 2xl
  • Flip animation when used by itself


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Oct 1, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/list/package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: list@0.0.0
npm error Found: vue@2.7.16
npm error node_modules/vue
npm error   vue@"2.7.16" from list@0.0.0
npm error   frontend
npm error     list@0.0.0
npm error     node_modules/list
npm error       workspace frontend from the root project
npm error
npm error Could not resolve dependency:
npm error peer vue@">= 3.0.0 < 4" from @fortawesome/vue-fontawesome@3.1.3
npm error node_modules/@fortawesome/vue-fontawesome
npm error   @fortawesome/vue-fontawesome@"3.1.3" from list@0.0.0
npm error   frontend
npm error     list@0.0.0
npm error     node_modules/list
npm error       workspace frontend from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-03-05T14_39_11_041Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-03-05T14_39_11_041Z-debug-0.log

@github-actions
Copy link

github-actions bot commented Oct 1, 2025

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 14 0 0 0.34s
✅ BASH bash-exec 7 0 0 0.04s
✅ BASH shellcheck 4 0 0 0.18s
⚠️ BASH shfmt 7 1 0 0.01s
✅ CSHARP csharpier 3 0 0 2.48s
⚠️ CSHARP roslynator 1 1 0 12.07s
✅ CSS stylelint 1 0 0 1.75s
✅ DOCKERFILE hadolint 5 0 0 0.21s
✅ EDITORCONFIG editorconfig-checker 435 0 0 2.03s
✅ ENV dotenv-linter 1 0 0 0.0s
⚠️ GROOVY npm-groovy-lint 8 0 20 26.97s
✅ HTML djlint 2 0 0 1.8s
✅ HTML htmlhint 2 0 0 0.45s
⚠️ JAVA checkstyle 64 0 90 13.03s
✅ JSON jsonlint 53 0 0 0.71s
✅ JSON prettier 53 0 0 5.74s
✅ JSON v8r 53 0 0 38.76s
⚠️ MARKDOWN markdownlint 23 282 0 2.58s
✅ PYTHON bandit 1 0 0 3.56s
✅ PYTHON black 1 0 0 3.36s
✅ PYTHON flake8 1 0 0 1.12s
✅ PYTHON isort 1 0 0 0.74s
✅ PYTHON mypy 1 0 0 12.05s
✅ PYTHON ruff 1 0 0 0.04s
✅ REPOSITORY checkov yes no no 62.58s
✅ REPOSITORY gitleaks yes no no 5.88s
✅ REPOSITORY git_diff yes no no 0.34s
⚠️ REPOSITORY kics yes no 109 58.68s
✅ REPOSITORY secretlint yes no no 4.36s
✅ REPOSITORY syft yes no no 20.07s
⚠️ REPOSITORY trivy yes 22 no 27.74s
✅ REPOSITORY trivy-sbom yes no no 7.47s
✅ REPOSITORY trufflehog yes no no 7.59s
✅ XML xmllint 4 0 0 0.92s
✅ YAML prettier 118 0 0 3.65s

Detailed Issues

⚠️ JAVA / checkstyle - 90 warnings
warning: First sentence of Javadoc is missing an ending period.

warning: First sentence of Javadoc is missing an ending period.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 103).

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: First sentence of Javadoc is missing an ending period.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 107).

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: First sentence of Javadoc is missing an ending period.

warning: Line is longer than 100 characters (found 115).

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 220).

warning: Line is longer than 100 characters (found 104).

warning: Line is longer than 100 characters (found 117).

warning: Line is longer than 100 characters (found 154).

warning: Line is longer than 100 characters (found 111).

warning: Line is longer than 100 characters (found 128).

warning: Line is longer than 100 characters (found 142).

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 104).

warning: Line is longer than 100 characters (found 132).

warning: Line is longer than 100 characters (found 141).

warning: 90 warnings emitted
⚠️ REPOSITORY / kics - 109 warnings
urity_opt' attribute
   ┌─ src/list/frontend/tests/e2e/docker-compose.yaml:19:1
   │
19 │   tester:
   │ ^^^^^^^^^
   │
   = Security Opt Not Set
   = Attribute 'security_opt' should be defined.

warning: The 'Dockerfile' contains the 'chown' flag
  ┌─ src/Dockerfile:4:1
  │
4 │ COPY --chown=gradle:gradle . .
  │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  │
  = Chown Flag Exists
  = It is considered a best practice for every executable in a container to be owned by the root user even if it is executed by a non-root user, only execution permissions are required on the file, not ownership

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:33:1
   │
33 │   tester:
   │ ^^^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:26:1
   │
26 │   jobstore-db:
   │ ^^^^^^^^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:47:1
   │
47 │   fhir:
   │ ^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:56:1
   │
56 │   maildev:
   │ ^^^^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
  ┌─ src/notify/tests/e2e/docker-compose.yaml:4:1
  │
4 │   notify:
  │ ^^^^^^^^^
  │
  = Cpus Not Limited
  = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
   ┌─ src/list/Dockerfile:29:1
   │
29 │ FROM gcr.io/distroless/nodejs24-debian13:nonroot@sha256:38792f83f35f2df89d403f49491782981dd13a853bbcb09ff978d79328263463
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Healthcheck Instruction Missing
   = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
  ┌─ src/list/frontend/tests/e2e/Dockerfile:1:1
  │
1 │ FROM docker.io/cypress/included:14.5.4@sha256:848fb0d361178e695aa3ebd0f9632f2966232907c0fc02fbd6432e07d4d08d8b
  │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  │
  = Healthcheck Instruction Missing
  = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
   ┌─ src/Dockerfile:20:1
   │
20 │ FROM gcr.io/distroless/java25-debian13:nonroot@sha256:ace83a068839dbfb151b0d80693df23120f6d13f963427fde7e43d9a175fd54a
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Healthcheck Instruction Missing
   = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
  ┌─ src/query/tests/e2e/Dockerfile:1:1
  │
1 │ FROM docker.io/library/python:3.14.2-slim-bookworm@sha256:e87711ef5c86aaeaa7031718a69db79d334d94c545c709583f651b8185870941
  │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  │
  = Healthcheck Instruction Missing
  = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: There are COPY instructions that could be grouped
   ┌─ src/Dockerfile:24:1
   │
24 │ COPY --from=build /home/gradle/project/${MODULE_NAME}/dependencies/ ./
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Multiple RUN, ADD, COPY, Instructions Listed
   = Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

warning: Volume {"target": "/tmp", "tmpfs": {"size": 1024}, "type": "tmpfs"} shared between containers
    ┌─ docker-compose/docker-compose.yaml:118:1
    │
118 │       - type: tmpfs
    │ ^^^^^^^^^^^^^^^^^^^
    │
    = Shared Volumes Between Containers
    = Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

warning: Volume {"target": "/tmp", "tmpfs": {"size": 1024}, "type": "tmpfs"} shared between containers
   ┌─ docker-compose/docker-compose.yaml:67:1
   │
67 │       - type: tmpfs
   │ ^^^^^^^^^^^^^^^^^^^
   │
   = Shared Volumes Between Containers
   = Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

warning: Volume {"target": "/tmp", "tmpfs": {"size": 1024}, "type": "tmpfs"} shared between containers
   ┌─ docker-compose/docker-compose.yaml:93:1
   │
93 │       - type: tmpfs
   │ ^^^^^^^^^^^^^^^^^^^
   │
   = Shared Volumes Between Containers
   = Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

warning: 109 warnings emitted

(Truncated to last 5714 characters out of 33943)
⚠️ MARKDOWN / markdownlint - 282 errors
Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:24:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:25:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:26:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:27:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:28:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:31:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:32:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:33:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:34:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:35:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:39:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:40:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:41:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:42:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:43:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:44:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:45:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:46:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:47:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:49:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:50:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:52:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:53:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:54:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:55:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:56:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:57:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:58:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:59:218 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/configuration/options.md:63:121 error MD013/line-length Line length [Expected: 120; Actual: 126]
docs/configuration/options.md:68:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:69:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:70:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:71:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:72:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:73:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:74:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:75:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:76:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:77:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:80:121 error MD013/line-length Line length [Expected: 120; Actual: 293]
docs/deployment/docker-compose.md:43:121 error MD013/line-length Line length [Expected: 120; Actual: 171]
docs/deployment/docker-compose.md:44:121 error MD013/line-length Line length [Expected: 120; Actual: 171]
docs/deployment/kubernetes.md:12:121 error MD013/line-length Line length [Expected: 120; Actual: 125]
docs/deployment/resource-requirements.md:7:2 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/deployment/resource-requirements.md:8:6 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/deployment/resource-requirements.md:36 error MD039/no-space-in-links Spaces inside link text [Context: "...ment for Pods and Containers ]"]
docs/development/contributing.md:64:121 error MD013/line-length Line length [Expected: 120; Actual: 174]
docs/development/contributing.md:70:121 error MD013/line-length Line length [Expected: 120; Actual: 172]
docs/index.md:23:121 error MD013/line-length Line length [Expected: 120; Actual: 302]
docs/index.md:39:121 error MD013/line-length Line length [Expected: 120; Actual: 125]
docs/trino/index.md:10:121 error MD013/line-length Line length [Expected: 120; Actual: 132]
docs/trino/index.md:19:121 error MD013/line-length Line length [Expected: 120; Actual: 151]
docs/trino/index.md:22:121 error MD013/line-length Line length [Expected: 120; Actual: 147]
docs/trino/index.md:23:121 error MD013/line-length Line length [Expected: 120; Actual: 144]

(Truncated to last 5714 characters out of 28508)
⚠️ GROOVY / npm-groovy-lint - 20 warnings
uildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:74:24
   │
74 │             intoLayer("application")
   │                        ^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'module-dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:77:24
   │
77 │             intoLayer("module-dependencies") {
   │                        ^^^^^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'org.miracum:*:*' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:78:26
   │
78 │                 include("org.miracum:*:*")
   │                          ^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:80:24
   │
80 │             intoLayer("dependencies")
   │                        ^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:25
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                         ^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'spring-boot-loader' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:41
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                                         ^^^^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'module-dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:63
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                                                               ^^^^^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'application' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:86
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                                                                                      ^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: The statement on line 16 in class None is at the incorrect indent level: Expected one of columns [5, 9, 13] but was 3
 = Check indentation for class and method declarations, and initial statements.

note: The statement on line 17 in class None is at the incorrect indent level: Expected one of columns [9, 13, 17] but was 5
 = Check indentation for class and method declarations, and initial statements.

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

(Truncated to last 5714 characters out of 7255)
⚠️ CSHARP / roslynator - 1 error
not defined or imported
      Program.cs(180,26): error CS0518: Predefined type 'System.Exception' is not defined or imported
      Program.cs(180,30): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(180,40): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(182,16): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(184,13): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(185,17): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(185,17): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(185,85): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(187,17): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(187,17): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(187,32): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(192,19): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(192,53): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(192,74): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(196,9): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(197,13): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(197,13): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(197,105): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(200,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(200,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(202,13): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(202,31): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(206,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(206,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(206,28): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(208,19): error CS0518: Predefined type 'System.Exception' is not defined or imported
      Program.cs(208,23): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(209,17): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(209,17): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(209,107): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(213,15): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(213,49): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(213,70): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(217,1): error CS0518: Predefined type 'System.Void' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.IEquatable`1' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.IEquatable`1' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Void' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Type' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Text.StringBuilder' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(217,24): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(217,24): error CS0518: Predefined type 'System.Void' is not defined or imported
      Program.cs(217,28): error CS0518: Predefined type 'System.Runtime.CompilerServices.IsExternalInit' is not defined or imported
      Program.cs(9,1): error CS1729: 'object' does not contain a constructor that takes 0 arguments
      Program.cs(217,8): error CS1729: 'object' does not contain a constructor that takes 0 arguments
      Program.cs(217,8): error CS1729: 'object' does not contain a constructor that takes 0 arguments
      error CS5001: Program does not contain a static 'Main' method suitable for an entry point
    Analyzed project 'tests/chaos/tester/tester.csproj' (in 5.3 s)
    
     20 CS0103 
      3 CS0161 
     43 CS0246 
    169 CS0518 
      3 CS1729 
      1 CS5001 
    
    239 diagnostics found



(Truncated to last 5714 characters out of 26578)
⚠️ BASH / shfmt - 1 error
ACMD=$JAVA_HOME/bin/java
+  fi
+  if [ ! -x "$JAVACMD" ]; then
+    die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+  fi
 else
-    JAVACMD=java
-    if ! command -v java >/dev/null 2>&1
-    then
-        die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
-
-Please set the JAVA_HOME variable in your environment to match the
-location of your Java installation."
-    fi
+  JAVACMD=java
+  if ! command -v java >/dev/null 2>&1; then
+    die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+  fi
 fi
 
 # Increase the maximum file descriptors if we can.
-if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then
-    case $MAX_FD in #(
-      max*)
-        # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
-        # shellcheck disable=SC2039,SC3045
-        MAX_FD=$( ulimit -H -n ) ||
-            warn "Could not query maximum file descriptor limit"
-    esac
-    case $MAX_FD in  #(
-      '' | soft) :;; #(
-      *)
-        # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
-        # shellcheck disable=SC2039,SC3045
-        ulimit -n "$MAX_FD" ||
-            warn "Could not set maximum file descriptor limit to $MAX_FD"
-    esac
+if ! "$cygwin" && ! "$darwin" && ! "$nonstop"; then
+  case $MAX_FD in #(
+  max*)
+    # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
+    # shellcheck disable=SC2039,SC3045
+    MAX_FD=$(ulimit -H -n) ||
+      warn "Could not query maximum file descriptor limit"
+    ;;
+  esac
+  case $MAX_FD in #(
+  '' | soft) : ;; #(
+  *)
+    # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
+    # shellcheck disable=SC2039,SC3045
+    ulimit -n "$MAX_FD" ||
+      warn "Could not set maximum file descriptor limit to $MAX_FD"
+    ;;
+  esac
 fi
 
 # Collect all arguments for the java command, stacking in reverse order:
@@ -169,35 +168,36 @@
 #   * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables.
 
 # For Cygwin or MSYS, switch paths to Windows format before running java
-if "$cygwin" || "$msys" ; then
-    APP_HOME=$( cygpath --path --mixed "$APP_HOME" )
-
-    JAVACMD=$( cygpath --unix "$JAVACMD" )
-
-    # Now convert the arguments - kludge to limit ourselves to /bin/sh
-    for arg do
-        if
-            case $arg in                                #(
-              -*)   false ;;                            # don't mess with options #(
-              /?*)  t=${arg#/} t=/${t%%/*}              # looks like a POSIX filepath
-                    [ -e "$t" ] ;;                      #(
-              *)    false ;;
-            esac
-        then
-            arg=$( cygpath --path --ignore --mixed "$arg" )
-        fi
-        # Roll the args list around exactly as many times as the number of
-        # args, so each arg winds up back in the position where it started, but
-        # possibly modified.
-        #
-        # NB: a `for` loop captures its iteration list before it begins, so
-        # changing the positional parameters here affects neither the number of
-        # iterations, nor the values presented in `arg`.
-        shift                   # remove old arg
-        set -- "$@" "$arg"      # push replacement arg
-    done
-fi
-
+if "$cygwin" || "$msys"; then
+  APP_HOME=$(cygpath --path --mixed "$APP_HOME")
+
+  JAVACMD=$(cygpath --unix "$JAVACMD")
+
+  # Now convert the arguments - kludge to limit ourselves to /bin/sh
+  for arg; do
+    if
+      case $arg in #(
+      -*) false ;; # don't mess with options #(
+      /?*)
+        t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath
+        [ -e "$t" ]
+        ;; #(
+      *) false ;;
+      esac
+    then
+      arg=$(cygpath --path --ignore --mixed "$arg")
+    fi
+    # Roll the args list around exactly as many times as the number of
+    # args, so each arg winds up back in the position where it started, but
+    # possibly modified.
+    #
+    # NB: a `for` loop captures its iteration list before it begins, so
+    # changing the positional parameters here affects neither the number of
+    # iterations, nor the values presented in `arg`.
+    shift              # remove old arg
+    set -- "$@" "$arg" # push replacement arg
+  done
+fi
 
 # Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
 DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
@@ -209,14 +209,13 @@
 #     treated as '${Hostname}' itself on the command line.
 
 set -- \
-        "-Dorg.gradle.appname=$APP_BASE_NAME" \
-        -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
-        "$@"
+  "-Dorg.gradle.appname=$APP_BASE_NAME" \
+  -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
+  "$@"
 
 # Stop when "xargs" is not available.
-if ! command -v xargs >/dev/null 2>&1
-then
-    die "xargs is not available"
+if ! command -v xargs >/dev/null 2>&1; then
+  die "xargs is not available"
 fi
 
 # Use "xargs" to parse quoted args.
@@ -239,10 +238,10 @@
 #
 
 eval "set -- $(
-        printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
-        xargs -n1 |
-        sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
-        tr '\n' ' '
-    )" '"$@"'
+  printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
+    xargs -n1 |
+    sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
+    tr '\n' ' '
+)" '"$@"'
 
 exec "$JAVACMD" "$@"

(Truncated to last 5714 characters out of 8251)
⚠️ REPOSITORY / trivy - 22 errors
8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;">
            ]>
            <lolz>&lol9;</lolz>
          `;
        
        + const parser = SAX.parser();
        + /** @param {string} doctype */
        + parser.ondoctype = (doctype) => {
        +   original = original.replace(doctype, '');
        + }
        + parser.write(original);
        
          optimize(original);
        ```
        
        ### Resources
        
        * [Wikipedia: Billion laughs attack](https://en.wikipedia.org/wiki/Billion_laughs_attack)

error: Package: ws
Installed Version: 6.2.2
Vulnerability CVE-2024-37890
Severity: HIGH
Fixed Version: 5.2.4, 6.2.3, 7.5.10, 8.17.1
Link: [CVE-2024-37890](https://avd.aquasec.com/nvd/cve-2024-37890)
      ┌─ src/list/package-lock.json:29393:1
      │  
29393 │ ╭     "node_modules/ws": {
29394 │ │       "version": "6.2.2",
29395 │ │       "license": "MIT",
29396 │ │       "optional": true,
      · │
29400 │ │       }
29401 │ │     },
      │ ╰^
      │  
      = nodejs-ws: denial of service when handling a request with many HTTP headers
      = ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.

error: Package: ws
Installed Version: 7.5.9
Vulnerability CVE-2024-37890
Severity: HIGH
Fixed Version: 5.2.4, 6.2.3, 7.5.10, 8.17.1
Link: [CVE-2024-37890](https://avd.aquasec.com/nvd/cve-2024-37890)
      ┌─ src/list/package-lock.json:7364:1
      │  
 7364 │ ╭     "node_modules/@react-native-community/cli-server-api/node_modules/ws": {
 7365 │ │       "version": "7.5.9",
 7366 │ │       "license": "MIT",
 7367 │ │       "optional": true,
      · │
 7383 │ │       }
 7384 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:21047:1
      │  
21047 │ ╭     "node_modules/jsdom/node_modules/ws": {
21048 │ │       "version": "7.5.9",
21049 │ │       "dev": true,
21050 │ │       "license": "MIT",
      · │
21065 │ │       }
21066 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:22479:1
      │  
22479 │ ╭     "node_modules/metro-inspector-proxy/node_modules/ws": {
22480 │ │       "version": "7.5.9",
22481 │ │       "license": "MIT",
22482 │ │       "optional": true,
      · │
22498 │ │       }
22499 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:22835:1
      │  
22835 │ ╭     "node_modules/metro/node_modules/ws": {
22836 │ │       "version": "7.5.9",
22837 │ │       "license": "MIT",
22838 │ │       "optional": true,
      · │
22854 │ │       }
22855 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:25166:1
      │  
25166 │ ╭     "node_modules/react-devtools-core/node_modules/ws": {
25167 │ │       "version": "7.5.9",
25168 │ │       "license": "MIT",
25169 │ │       "optional": true,
      · │
25185 │ │       }
25186 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:28816:1
      │  
28816 │ ╭     "node_modules/webpack-bundle-analyzer/node_modules/ws": {
28817 │ │       "version": "7.5.9",
28818 │ │       "devOptional": true,
28819 │ │       "license": "MIT",
      · │
28834 │ │       }
28835 │ │     },
      │ ╰^
      │  
      = nodejs-ws: denial of service when handling a request with many HTTP headers
      = ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.

error: Package: ws
Installed Version: 8.13.0
Vulnerability CVE-2024-37890
Severity: HIGH
Fixed Version: 5.2.4, 6.2.3, 7.5.10, 8.17.1
Link: [CVE-2024-37890](https://avd.aquasec.com/nvd/cve-2024-37890)
      ┌─ src/list/package-lock.json:29067:1
      │  
29067 │ ╭     "node_modules/webpack-dev-server/node_modules/ws": {
29068 │ │       "version": "8.13.0",
29069 │ │       "devOptional": true,
29070 │ │       "license": "MIT",
      · │
29085 │ │       }
29086 │ │     },
      │ ╰^
      │  
      = nodejs-ws: denial of service when handling a request with many HTTP headers
      = ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.

error: 17 errors emitted

(Truncated to last 5714 characters out of 27950)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_RUFF,ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,CSHARP_CSHARPIER,CSHARP_ROSLYNATOR,CSS_STYLELINT,DOCKERFILE_HADOLINT,EDITORCONFIG_EDITORCONFIG_CHECKER,ENV_DOTENV_LINTER,GROOVY_NPM_GROOVY_LINT,HTML_DJLINT,HTML_HTMLHINT,JAVA_CHECKSTYLE,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,XML_XMLLINT,YAML_PRETTIER

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@renovate renovate bot force-pushed the renovate/major-font-awesome branch 3 times, most recently from 12d36a2 to 9c79181 Compare October 2, 2025 00:55
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 6 times, most recently from 76e20ee to 11404fd Compare November 6, 2025 23:10
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 2 times, most recently from ec28788 to cfb554e Compare November 11, 2025 08:59
@renovate renovate bot force-pushed the renovate/major-font-awesome branch from cfb554e to 57df32b Compare December 3, 2025 07:54
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 5 times, most recently from 30ed494 to 53bac30 Compare December 14, 2025 21:58
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 4 times, most recently from 0feea48 to 53fa742 Compare January 8, 2026 08:05
@renovate renovate bot force-pushed the renovate/major-font-awesome branch from 53fa742 to 38e610f Compare January 10, 2026 20:50
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 6 times, most recently from 94af0a0 to a6df83f Compare February 4, 2026 14:01
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 3 times, most recently from ea313e4 to aae4b63 Compare February 4, 2026 16:08
@renovate renovate bot force-pushed the renovate/major-font-awesome branch from aae4b63 to e79882e Compare February 13, 2026 21:09
@renovate renovate bot force-pushed the renovate/major-font-awesome branch 3 times, most recently from 93bbd7f to feac784 Compare March 5, 2026 13:04
@renovate renovate bot force-pushed the renovate/major-font-awesome branch from feac784 to 88206d5 Compare March 5, 2026 14:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants