Upgrade python version (#2312)

* Upgrade python version

* cspell

* [MegaLinter] Apply linters fixes

* Upgrade dart & glibc versions

Workaround for https://github.com/sgerrand/alpine-pkg-glibc/issues/185

* Update used by

* Build

* Do not try to upgrade dartanalyzer

* checkov config

---------

Co-authored-by: nvuillam <[email protected]>

Author: nvuillam

.automation/build.py

@@ -2292,7 +2292,7 @@ def finalize_doc_build():
 [![Docker Pulls](https://img.shields.io/badge/docker%20pulls-4.0M-blue?color=%23FD80CD)](https://megalinter.github.io/flavors/)
 [![Downloads/week](https://img.shields.io/npm/dw/mega-linter-runner.svg?color=%23FD80CD)](https://npmjs.org/package/mega-linter-runner)
 [![GitHub stars](https://img.shields.io/github/stars/oxsecurity/megalinter?cacheSeconds=3600&color=%23FD80CD)](https://github.com/oxsecurity/megalinter/stargazers/)
-[![Dependents](https://img.shields.io/static/v1?label=Used%20by&message=1690&color=%23FD80CD&logo=slickpic)](https://github.com/oxsecurity/megalinter/network/dependents)
+[![Dependents](https://img.shields.io/static/v1?label=Used%20by&message=2011&color=%23FD80CD&logo=slickpic)](https://github.com/oxsecurity/megalinter/network/dependents)
 [![GitHub contributors](https://img.shields.io/github/contributors/oxsecurity/megalinter.svg?color=%23FD80CD)](https://github.com/oxsecurity/megalinter/graphs/contributors/)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat-square&color=%23FD80CD)](http://makeapullrequest.com)""",  # noqa: E501
     )

.github/linters/.checkov.yml

@@ -6,3 +6,4 @@ skip-check:
   - CKV_DOCKER_3
   - CKV_DOCKER_7
   - CKV_GHA_2
+  - CKV2_GHA_1

.github/linters/.cspell.json

@@ -104,6 +104,7 @@
         "DRMAA",
         "DTDs",
         "DUSTILOCK",
+        "Deneuve",
         "Dependabot",
         "Detekt",
         "Devcontainer",
@@ -123,6 +124,7 @@
         "Ekubernetes",
         "Emegalinter",
         "Envir",
+        "Etienne",
         "Excpt",
         "FATA",
         "FILEIO",
@@ -190,6 +192,7 @@
         "LINTR",
         "LOCALFOLDER",
         "LUACHECK",
+        "Laven",
         "Lfiles",
         "Libxml",
         "Lintr",
@@ -522,6 +525,7 @@
         "customrules",
         "cyclomatic",
         "dartanalyzer",
+        "davidjeddy",
         "debugent",
         "decamelize",
         "dedup",
@@ -678,6 +682,7 @@
         "goodcheck",
         "goodwithtech",
         "gosec",
+        "gotit",
         "govet",
         "gridftp",
         "grimmjo",
@@ -778,7 +783,6 @@
         "kxdddddddoc",
         "lacheck",
         "langserver",
-        "Laven",
         "leavevmode",
         "leveldb",
         "levn",
@@ -995,6 +999,7 @@
         "pipeverb",
         "pipfile",
         "pipvenv",
+        "pjungermann",
         "pkgs",
         "plone",
         "pluggable",

CHANGELOG.md

@@ -8,6 +8,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-linter.yml file, or with `oxsecurity/megalinter:beta` docker image
 
+- Core
+  - Upgrade base docker image from python:3.10.4-alpine3.16 to python:3.11.1-alpine3.17
+
 - Linter versions upgrades
   - [golangci-lint](https://golangci-lint.run/) from 1.51.0 to **1.51.1** on 2023-02-06
   - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 6.21.0 to **6.22.0** on 2023-02-06

Dockerfile

@@ -27,7 +27,7 @@ FROM checkmarx/kics:alpine as kics
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
@@ -42,7 +42,7 @@ ARG BICEP_EXE='bicep'
 ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-linux-musl-x64'
 ARG BICEP_DIR='/usr/local/bin'
 ARG DART_VERSION='2.8.4'
-ARG GLIBC_VERSION='2.31-r0'
+ARG GLIBC_VERSION='2.34-r0'
 ARG PMD_VERSION=6.48.0
 ARG PSSA_VERSION='latest'
 #ARG__END
@@ -410,7 +410,7 @@ RUN curl --retry 5 --retry-delay 5 -sLO "${ARM_TTK_URI}" \
 # dartanalyzer installation
     && wget --tries=50 -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub \
     && wget --tries=5 -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk \
-    && apk add --no-cache glibc-${GLIBC_VERSION}.apk && rm glibc-${GLIBC_VERSION}.apk \
+    && apk add --force-overwrite --no-cache glibc-${GLIBC_VERSION}.apk && rm glibc-${GLIBC_VERSION}.apk \
     && wget --tries=5 https://storage.googleapis.com/dart-archive/channels/stable/release/${DART_VERSION}/sdk/dartsdk-linux-x64-release.zip -O - -q | unzip -q - \
     && chmod +x dart-sdk/bin/dart* \
     && mv dart-sdk/bin/* /usr/bin/ && mv dart-sdk/lib/* /usr/lib/ && mv dart-sdk/include/* /usr/include/ \

flavors/ci_light/Dockerfile

@@ -20,7 +20,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

flavors/cupcake/Dockerfile

@@ -26,7 +26,7 @@ FROM checkmarx/kics:alpine as kics
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

flavors/documentation/Dockerfile

@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

flavors/dotnet/Dockerfile

@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##

flavors/go/Dockerfile

@@ -22,7 +22,7 @@ FROM zricethezav/gitleaks:v8.15.3 as gitleaks
 # Get base image #
 ##################
 # 3.10.5 is not usable until https://github.com/jruere/multiprocessing-logging/issues/56 is fixed
-FROM python:3.10.4-alpine3.16
+FROM python:3.11.1-alpine3.17
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##