Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Bumps philips-software/amp-devcontainer-cpp from 6.7.0 to 6.8.0.

Release notes

Sourced from philips-software/amp-devcontainer-cpp's releases.

v6.8.0

6.8.0 (2026-02-05)

📋 Summary

This release updates LLVM/Clang to version 20 in amp-devcontainer-cpp, CPM.cmake is updated to version 0.42.1.

🔖 Packages

Container Full identifier
amp-devcontainer-base ghcr.io/philips-software/amp-devcontainer-base:v6.8.0@sha256:030326f1971e6474dcdd58f152e0f02a1d737b1b0a9b0d045a9ee0bcac76b601
amp-devcontainer-cpp ghcr.io/philips-software/amp-devcontainer-cpp:v6.8.0@sha256:5c6d33d6d4642163481eb5cab49ccd861be6b558c45b4902616bc653c7e22e2a
amp-devcontainer-rust ghcr.io/philips-software/amp-devcontainer-rust:v6.8.0@sha256:a6f75a8b35d9d713431c1e26914deea6a13a5b321da865de224e40d7e51f3cb5

Features

Chores

v6.7.2

6.7.2 (2026-02-04)

📋 Summary

The devcontainer flavors published as part of amp-devcontainer are now listed on containers.dev, and can be directly used from supporting tooling (like the devcontainer cli, or VS Code).

In amp-devcontainer-cpp, Mull is updated to version 0.29.0.

Several Extensions have been updated to the latest version.

[!NOTE]

This is the last release of amp-devcontainer-cpp that is based upon LLVM/Clang 19, the next release will include an update to LLVM/Clang 20.

🔖 Packages

Container Full identifier
amp-devcontainer-base ghcr.io/philips-software/amp-devcontainer-base:v6.7.2@sha256:d78cffe713847ecc5a5c038c8e0393322d6323752823694be6c904dff71e34f9
amp-devcontainer-cpp ghcr.io/philips-software/amp-devcontainer-cpp:v6.7.2@sha256:8e45c04483ce4a1ed8dd40172580ae28326031d8ffd5f157c8325fe096369634
amp-devcontainer-rust ghcr.io/philips-software/amp-devcontainer-rust:v6.7.2@sha256:55afae1966bfe135ff090a57174cfa186063c50002c5035b4e203adf3f8b147b

Bug Fixes

... (truncated)

Changelog

Sourced from philips-software/amp-devcontainer-cpp's changelog.

6.8.0 (2026-02-05)

Features

Chores

6.7.2 (2026-02-04)

Bug Fixes

Chores

  • deps, cpp: Update github.vscode-github-actions, ms-vscode.cmake-tools, sonarsource.sonarlint-vscode, usernamehw.errorlens in devcontainer.json (#1122) (07f8c44)
  • deps, cpp: Update ms-vscode.cmake-tools, sonarsource.sonarlint-vscode in devcontainer-metadata.json (#1121) (8b663ed)
  • deps, cpp: Update ms-vscode.cpptools, sonarsource.sonarlint-vscode in devcontainer-metadata.json (#1127) (c0081cf)
  • deps, cpp: Update ms-vscode.cpptools, sonarsource.sonarlint-vscode in devcontainer.json (#1129) (4615474)
  • deps, cpp: Update mull-19 (#1131) (8ccc9eb)
  • deps, rust: Update github.vscode-github-actions, github.vscode-pull-request-github, rust-lang.rust-analyzer, sonarsource.sonarlint-vscode, usernamehw.errorlens in devcontainer.json (#1130) (b93db92)
  • deps, rust: Update rust-lang.rust-analyzer in devcontainer-metadata.json (#1128) (7626d5b)
  • deps, rust: Update rust-lang.rust-analyzer, usernamehw.errorlens in devcontainer-metadata.json (#1123) (f69df6d)

6.7.1 (2026-01-27)

Bug Fixes

  • Expose enable-edge-tag on reusable workflow (#1098) (5d8ba52)

Chores

  • Add checksum to umbrella certificate (#1089) (f42f104)
  • deps, cpp: Update github.vscode-github-actions, sonarsource.sonarlint-vscode in devcontainer.json (#1106) (36f7684)
  • deps, cpp: Update llvm-vs-code-extensions.vscode-clangd, sonarsource.sonarlint-vscode in devcontainer-metadata.json (#1105) (30b6a59)
  • deps, rust: Update rust-lang.rust-analyzer in devcontainer-metadata.json (#1107) (986d741)
  • deps: Bump gcovr from 8.5 to 8.6 in /.devcontainer (#1091) (1101b59)
  • deps: Bump ubuntu from c35e29c to cd1dba6 in amp-devcontainer-base (#1095) (46ddc60)
  • deps: Update bats-core to v1.13.0 and bats-assert to v2.2.4 (#1094) (8498764)
  • Verify ccache checksum (#1100) (9254783)
  • Verify signatures for apt keys (#1104) (5286994)

... (truncated)

Commits
  • 0b102f3 chore(main): release 6.8.0 (#1133)
  • 20dddd7 feat: update LLVM/Clang to version 20 (#1125)
  • fea1e09 chore(deps): update CPM to version 0.42.1 (#1126)
  • 44e57c1 chore(main): release 6.7.2 (#1124)
  • ef21f17 fix: update devcontainer template structure (#1132)
  • c0081cf chore(deps, cpp): update ms-vscode.cpptools, sonarsource.sonarlint-vscode in ...
  • 7626d5b chore(deps, rust): update rust-lang.rust-analyzer in devcontainer-metadata.js...
  • b93db92 chore(deps, rust): update github.vscode-github-actions, github.vscode-pull-re...
  • 4615474 chore(deps, cpp): update ms-vscode.cpptools, sonarsource.sonarlint-vscode in ...
  • 8ccc9eb chore(deps, cpp): update mull-19 (#1131)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [philips-software/amp-devcontainer-cpp](https://github.com/philips-software/amp-devcontainer) from 6.7.0 to 6.8.0.
- [Release notes](https://github.com/philips-software/amp-devcontainer/releases)
- [Changelog](https://github.com/philips-software/amp-devcontainer/blob/main/CHANGELOG.md)
- [Commits](philips-software/amp-devcontainer@v6.7.0...v6.8.0)

---
updated-dependencies:
- dependency-name: philips-software/amp-devcontainer-cpp
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Feb 6, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 6, 2026 01:33
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Feb 6, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 33 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: The number of snapshots compared for the base SHA (0) and the head SHA (1) do not match. You may see unexpected additions in the diff.
Consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

infra/syntax/CMakeLists.txt

PackageVersionLicenseIssue Type
zeux/pugixmlef856bf975f4b1909af1b40ed3d7e28af9263d95NullUnknown License
zeux/pugixmlef856bf975f4b1909af1b40ed3d7e28af9263d95NullUnknown License
zeux/pugixmlef856bf975f4b1909af1b40ed3d7e28af9263d95NullUnknown License

osal/threadx/CMakeLists.txt

PackageVersionLicenseIssue Type
eclipse-threadx/threadx06dabb0ad0403f59889ce85eeb3d48dbd9d3759bNullUnknown License
eclipse-threadx/threadx06dabb0ad0403f59889ce85eeb3d48dbd9d3759bNullUnknown License
eclipse-threadx/threadx06dabb0ad0403f59889ce85eeb3d48dbd9d3759bNullUnknown License

lwip/lwip/CMakeLists.txt

PackageVersionLicenseIssue Type
lwip-tcpip/lwip77dcd25a72509eb83f72b033d219b1d40cd8eb95NullUnknown License
lwip-tcpip/lwip77dcd25a72509eb83f72b033d219b1d40cd8eb95NullUnknown License
lwip-tcpip/lwip77dcd25a72509eb83f72b033d219b1d40cd8eb95NullUnknown License

external/crypto/micro-ecc/CMakeLists.txt

PackageVersionLicenseIssue Type
kmackay/micro-ecc24c60e243580c7868f4334a1ba3123481fe1aa48NullUnknown License
kmackay/micro-ecc24c60e243580c7868f4334a1ba3123481fe1aa48NullUnknown License
kmackay/micro-ecc24c60e243580c7868f4334a1ba3123481fe1aa48NullUnknown License

cmake/emil_test_helpers.cmake

PackageVersionLicenseIssue Type
google/googletestv1.14.0NullUnknown License
google/googletestv1.14.0NullUnknown License
google/googletestv1.14.0NullUnknown License

external/protobuf/CMakeLists.txt

PackageVersionLicenseIssue Type
protocolbuffers/protobufedaa823d8b36a8656d7b2b9241b7d0bfe50af878NullUnknown License
protocolbuffers/protobufedaa823d8b36a8656d7b2b9241b7d0bfe50af878NullUnknown License
protocolbuffers/protobufedaa823d8b36a8656d7b2b9241b7d0bfe50af878NullUnknown License

external/crypto/mbedtls/CMakeLists.txt

PackageVersionLicenseIssue Type
mbed-tls/mbedtls107ea89daaefb9867ea9121002fbbdf926780e98NullUnknown License
mbed-tls/mbedtls107ea89daaefb9867ea9121002fbbdf926780e98NullUnknown License
mbed-tls/mbedtls107ea89daaefb9867ea9121002fbbdf926780e98NullUnknown License

osal/freertos/CMakeLists.txt

PackageVersionLicenseIssue Type
freertos/freertos-kerneldef7d2df2b0506d3d249334974f51e427c17a41cNullUnknown License
freertos/freertos-kerneldef7d2df2b0506d3d249334974f51e427c17a41cNullUnknown License
freertos/freertos-kerneldef7d2df2b0506d3d249334974f51e427c17a41cNullUnknown License

external/crypto/tiny-aes128/CMakeLists.txt

PackageVersionLicenseIssue Type
kokke/tiny-aes-c7e42e693288bdf22d8e677da94248115168211b9NullUnknown License
kokke/tiny-aes-c7e42e693288bdf22d8e677da94248115168211b9NullUnknown License
kokke/tiny-aes-c7e42e693288bdf22d8e677da94248115168211b9NullUnknown License

external/args/CMakeLists.txt

PackageVersionLicenseIssue Type
taywee/args114200a9ad5fe06c8dea76e15d92325695cf3e34NullUnknown License
taywee/args114200a9ad5fe06c8dea76e15d92325695cf3e34NullUnknown License
taywee/args114200a9ad5fe06c8dea76e15d92325695cf3e34NullUnknown License

external/segger_rtt/CMakeLists.txt

PackageVersionLicenseIssue Type
seggermicro/rttff57c3d516ea59b0a2d4d5cafb33a48572b09c0bNullUnknown License
seggermicro/rttff57c3d516ea59b0a2d4d5cafb33a48572b09c0bNullUnknown License
seggermicro/rttff57c3d516ea59b0a2d4d5cafb33a48572b09c0bNullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
unknown/zeux/pugixml ef856bf975f4b1909af1b40ed3d7e28af9263d95 UnknownUnknown
unknown/eclipse-threadx/threadx 06dabb0ad0403f59889ce85eeb3d48dbd9d3759b UnknownUnknown
unknown/lwip-tcpip/lwip 77dcd25a72509eb83f72b033d219b1d40cd8eb95 UnknownUnknown
unknown/kmackay/micro-ecc 24c60e243580c7868f4334a1ba3123481fe1aa48 UnknownUnknown
unknown/google/googletest v1.14.0 UnknownUnknown
unknown/protocolbuffers/protobuf edaa823d8b36a8656d7b2b9241b7d0bfe50af878 UnknownUnknown
unknown/mbed-tls/mbedtls 107ea89daaefb9867ea9121002fbbdf926780e98 UnknownUnknown
unknown/freertos/freertos-kernel def7d2df2b0506d3d249334974f51e427c17a41c UnknownUnknown
unknown/kokke/tiny-aes-c 7e42e693288bdf22d8e677da94248115168211b9 UnknownUnknown
unknown/taywee/args 114200a9ad5fe06c8dea76e15d92325695cf3e34 UnknownUnknown
unknown/seggermicro/rtt ff57c3d516ea59b0a2d4d5cafb33a48572b09c0b UnknownUnknown
unknown/mbed-tls/mbedtls 107ea89daaefb9867ea9121002fbbdf926780e98 UnknownUnknown
unknown/kmackay/micro-ecc 24c60e243580c7868f4334a1ba3123481fe1aa48 UnknownUnknown
unknown/kokke/tiny-aes-c 7e42e693288bdf22d8e677da94248115168211b9 UnknownUnknown
unknown/zeux/pugixml ef856bf975f4b1909af1b40ed3d7e28af9263d95 UnknownUnknown
unknown/eclipse-threadx/threadx 06dabb0ad0403f59889ce85eeb3d48dbd9d3759b UnknownUnknown
unknown/taywee/args 114200a9ad5fe06c8dea76e15d92325695cf3e34 UnknownUnknown
unknown/seggermicro/rtt ff57c3d516ea59b0a2d4d5cafb33a48572b09c0b UnknownUnknown
unknown/google/googletest v1.14.0 UnknownUnknown
unknown/protocolbuffers/protobuf edaa823d8b36a8656d7b2b9241b7d0bfe50af878 UnknownUnknown
unknown/lwip-tcpip/lwip 77dcd25a72509eb83f72b033d219b1d40cd8eb95 UnknownUnknown
unknown/freertos/freertos-kernel def7d2df2b0506d3d249334974f51e427c17a41c UnknownUnknown
unknown/seggermicro/rtt ff57c3d516ea59b0a2d4d5cafb33a48572b09c0b UnknownUnknown
unknown/lwip-tcpip/lwip 77dcd25a72509eb83f72b033d219b1d40cd8eb95 UnknownUnknown
unknown/google/googletest v1.14.0 UnknownUnknown
unknown/taywee/args 114200a9ad5fe06c8dea76e15d92325695cf3e34 UnknownUnknown
unknown/mbed-tls/mbedtls 107ea89daaefb9867ea9121002fbbdf926780e98 UnknownUnknown
unknown/kmackay/micro-ecc 24c60e243580c7868f4334a1ba3123481fe1aa48 UnknownUnknown
unknown/freertos/freertos-kernel def7d2df2b0506d3d249334974f51e427c17a41c UnknownUnknown
unknown/eclipse-threadx/threadx 06dabb0ad0403f59889ce85eeb3d48dbd9d3759b UnknownUnknown
unknown/zeux/pugixml ef856bf975f4b1909af1b40ed3d7e28af9263d95 UnknownUnknown
unknown/protocolbuffers/protobuf edaa823d8b36a8656d7b2b9241b7d0bfe50af878 UnknownUnknown
unknown/kokke/tiny-aes-c 7e42e693288bdf22d8e677da94248115168211b9 UnknownUnknown

Scanned Files

  • cmake/emil_test_helpers.cmake
  • external/args/CMakeLists.txt
  • external/crypto/mbedtls/CMakeLists.txt
  • external/crypto/micro-ecc/CMakeLists.txt
  • external/crypto/tiny-aes128/CMakeLists.txt
  • external/protobuf/CMakeLists.txt
  • external/segger_rtt/CMakeLists.txt
  • infra/syntax/CMakeLists.txt
  • lwip/lwip/CMakeLists.txt
  • osal/freertos/CMakeLists.txt
  • osal/threadx/CMakeLists.txt

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 12 0 0 0.28s
✅ CPP clang-format 1053 7 0 0 8.63s
✅ DOCKERFILE hadolint 2 0 0 0.31s
✅ JSON jsonlint 7 0 0 0.16s
✅ JSON prettier 7 0 0 0 0.49s
⚠️ MARKDOWN markdownlint 6 0 4 0 1.43s
✅ MARKDOWN markdown-table-formatter 6 0 0 0 0.38s
✅ REPOSITORY checkov yes no no 21.24s
✅ REPOSITORY git_diff yes no no 0.05s
✅ REPOSITORY grype yes no no 27.82s
✅ REPOSITORY ls-lint yes no no 0.07s
✅ REPOSITORY secretlint yes no no 7.83s
✅ REPOSITORY syft yes no no 1.33s
✅ REPOSITORY trivy yes no no 5.69s
✅ REPOSITORY trivy-sbom yes no no 0.22s
✅ REPOSITORY trufflehog yes no no 2.47s
⚠️ SPELL lychee 139 2 0 7.09s
⚠️ YAML prettier 22 1 1 0 1.07s
✅ YAML v8r 22 0 0 6.68s
✅ YAML yamllint 22 0 0 0.88s

Detailed Issues

⚠️ SPELL / lychee - 2 errors
[ERROR] https://conventionalcommits.org/ | Network error: error sending request for url (https://conventionalcommits.org/) Maybe a certificate error?
[404] https://github.com/protocolbuffers/protobuf/releases/download/v$%7Bprotobuf_tag%7D/protoc-$%7Bprotobuf_version%7D-$%7Bos_postfix%7D.zip | Network error: Not Found
📝 Summary
---------------------
🔍 Total..........544
✅ Successful.....539
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........3
❓ Unknown..........0
🚫 Errors...........2

Errors in README.md
[ERROR] https://conventionalcommits.org/ | Network error: error sending request for url (https://conventionalcommits.org/) Maybe a certificate error?

Errors in external/protoc/CMakeLists.txt
[404] https://github.com/protocolbuffers/protobuf/releases/download/v$%7Bprotobuf_tag%7D/protoc-$%7Bprotobuf_version%7D-$%7Bos_postfix%7D.zip | Network error: Not Found
⚠️ MARKDOWN / markdownlint - 4 errors
external/crypto/tiny-aes128/README.md:1 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "### Tiny AES128 in C"]
external/crypto/tiny-aes128/README.md:29 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
external/crypto/tiny-aes128/README.md:39 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
external/crypto/tiny-aes128/README.md:49 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
⚠️ YAML / prettier - 1 error
[error] Explicitly specified pattern "documents/modules/ROOT/examples/clangformat.yaml" is a symbolic link.
.clusterfuzzlite/project.yaml 38ms (unchanged)
.github/dependabot.yml 26ms (unchanged)
.github/workflows/ci.yml 126ms (unchanged)
.github/workflows/dependency-scanner.yml 27ms (unchanged)
.github/workflows/documentation.yml 19ms (unchanged)
.github/workflows/fuzzing-batch.yml 7ms (unchanged)
.github/workflows/fuzzing-cron.yml 7ms (unchanged)
.github/workflows/fuzzing-pr.yml 10ms (unchanged)
.github/workflows/linting-formatting.yml 22ms (unchanged)
.github/workflows/release-please.yml 18ms (unchanged)
.github/workflows/security.yml 14ms (unchanged)
.github/workflows/social-interaction.yml 7ms (unchanged)
.github/workflows/static-analysis.yml 32ms (unchanged)
.github/workflows/validate-pr.yml 14ms (unchanged)
.ls-lint.yml 4ms
.mega-linter.yml 3ms (unchanged)
antora-playbook-branch.yml 6ms (unchanged)
antora-playbook-site.yml 4ms (unchanged)
documents/antora.yml 7ms (unchanged)
documents/supplemental-ui/ui.yml 1ms (unchanged)
mull.yml 4ms (unchanged)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.3.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,CPP_CLANG_FORMAT,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GRYPE,REPOSITORY_LS_LINT,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

@andjordan
Copy link
Contributor

@copilot make sure the container version is also updated in all github workflows

Copy link
Contributor

Copilot AI commented Feb 6, 2026

@andjordan I've opened a new pull request, #1100, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot AI and others added 2 commits February 6, 2026 09:42
… 6.8.0 (#1100)

* Initial plan

* Update amp-devcontainer-cpp to 6.8.0 in all workflows

Co-authored-by: andjordan <3933856+andjordan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: andjordan <3933856+andjordan@users.noreply.github.com>
@andjordan andjordan enabled auto-merge (squash) February 6, 2026 08:45
@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 6, 2026

@andjordan andjordan merged commit e6eb747 into main Feb 6, 2026
38 checks passed
@andjordan andjordan deleted the dependabot/docker/dot-devcontainer/philips-software/amp-devcontainer-cpp-6.8.0 branch February 6, 2026 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants