maint: Update docker.io/hadolint/hadolint Docker tag to v2.15.0

renovate-bot commented

2026-07-30 20:10:11 +00:00

Owner

This PR contains the following updates:

Package	Type	Update	Change
docker.io/hadolint/hadolint	stage	minor	`v2.14.0-debian` → `v2.15.0-debian`

Release Notes

hadolint/hadolint (docker.io/hadolint/hadolint)

`v2.15.0`

Compare Source

What's Changed

build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #1135
Check if clean is after install package by @matmarczak in #962
Enable file-path-in-report flag for codeclimate formatters by @bpfoster in #1018
SonarQube Formatter: Support --file-path-in-report by @m-ildefons in #1151
(doc) Add missing steps for developing this software by @ghoneycutt in #1021
Toil: bump GitHub action versions by @m-ildefons in #1153
Automatically update Third party licenses by @m-ildefons in #1154
Bump upload/download artifacts action by @m-ildefons in #1161
Added SonarQube format test by @304NotModified in #1157
Update README: tell about comments on ignore rules by @304NotModified in #1162
Fix DL3018 for apk ~ pins by @nothankyouzzz in #1168
Online Linter: Revive the online linter by @m-ildefons in #1178
Update Readme by @m-ildefons in #1181
Fix: propagating shell options across build stages by @m-ildefons in #1180
Ignore dnf group install from DL3041 by @kpumuk in #1148
build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1170
build(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #1169
build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1173
build(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #1172
build(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #1171
DL3062: relax DL3062, fix readme by @m-ildefons in #1131
DL3040: Match different install command variations by @m-ildefons in #1182
DL3063: New rule, stage name reserved word by @m-ildefons in #1183
readme: fixup readme by @m-ildefons in #1184
build(deps): bump EndBug/add-and-commit from 9 to 10 by @dependabot[bot] in #1186
build(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #1187
fix: fix hlint warnings by @m-ildefons in #1189
Shellcheck: fix false-positives with exec notation by @m-ildefons in #1194
DL3065: New Rule: No FROM with $TARGETPLATFORM by @m-ildefons in #1190
Ignore Pragma: Add stage ignore pragma by @m-ildefons in #1195
Fix DL3013 false positive on pipx --python flag by @eyupcanakman in #1196
Add JUnit output formatter by @m-ildefons in #1192
Fix DL3013 false positive on pip --root-user-action flag by @eyupcanakman in #1198
Update to Alpine 3.24 by @jnoordsij in #1206
Fix DL3016 false positive on npm --registry flag by @eyupcanakman in #1210
New Rule: DL3066 Non-numeric user-id by @m-ildefons in #1212
build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1211
DL3025: Trigger on HEALTHCHECK instructions too by @m-ildefons in #1209
DL3018: Allow fuzzy version matching by @m-ildefons in #1201
Checkstyle: Output file node on empty result by @m-ildefons in #1204
build(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #1213
Add rule against copying root from another stage by @Develop-KIM in #1215
DL3026: Warn on COPY --from untrusted registry by @m-ildefons in #1205
DL3026: Disallow mounting from untrusted registies by @m-ildefons in #1216
DL3041: Accept package versions in environment variables by @m-ildefons in #1185
Add output to file/multiple files by @m-ildefons in #1197
Dependencies: Bump language-docker to v16.0.0 by @m-ildefons in #1218
New Rule: DL3064 ARG or ENV with sensitive data by @m-ildefons in #1188
Hadolint Embedded: Fix output interface by @m-ildefons in #1219
CI: Improve Release Workflow by @m-ildefons in #1220
Release v2.15.0 by @m-ildefons in #1221

New Contributors

@matmarczak made their first contribution in #962
@bpfoster made their first contribution in #1018
@304NotModified made their first contribution in #1157
@nothankyouzzz made their first contribution in #1168
@kpumuk made their first contribution in #1148
@eyupcanakman made their first contribution in #1196
@jnoordsij made their first contribution in #1206
@Develop-KIM made their first contribution in #1215

Full Changelog: https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker.io/hadolint/hadolint](https://github.com/hadolint/hadolint) | stage | minor | `v2.14.0-debian` → `v2.15.0-debian` | --- ### Release Notes <details> <summary>hadolint/hadolint (docker.io/hadolint/hadolint)</summary> ### [`v2.15.0`](https://github.com/hadolint/hadolint/releases/tag/v2.15.0) [Compare Source](https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0) #### What's Changed - build(deps): bump actions/cache from 4.2.4 to 4.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1135](https://github.com/hadolint/hadolint/pull/1135) - Check if clean is after install package by [@matmarczak](https://github.com/matmarczak) in [#962](https://github.com/hadolint/hadolint/pull/962) - Enable file-path-in-report flag for codeclimate formatters by [@bpfoster](https://github.com/bpfoster) in [#1018](https://github.com/hadolint/hadolint/pull/1018) - SonarQube Formatter: Support --file-path-in-report by [@m-ildefons](https://github.com/m-ildefons) in [#1151](https://github.com/hadolint/hadolint/pull/1151) - (doc) Add missing steps for developing this software by [@ghoneycutt](https://github.com/ghoneycutt) in [#1021](https://github.com/hadolint/hadolint/pull/1021) - Toil: bump GitHub action versions by [@m-ildefons](https://github.com/m-ildefons) in [#1153](https://github.com/hadolint/hadolint/pull/1153) - Automatically update Third party licenses by [@m-ildefons](https://github.com/m-ildefons) in [#1154](https://github.com/hadolint/hadolint/pull/1154) - Bump upload/download artifacts action by [@m-ildefons](https://github.com/m-ildefons) in [#1161](https://github.com/hadolint/hadolint/pull/1161) - Added SonarQube format test by [@304NotModified](https://github.com/304NotModified) in [#1157](https://github.com/hadolint/hadolint/pull/1157) - Update README: tell about comments on ignore rules by [@304NotModified](https://github.com/304NotModified) in [#1162](https://github.com/hadolint/hadolint/pull/1162) - Fix DL3018 for apk \~ pins by [@nothankyouzzz](https://github.com/nothankyouzzz) in [#1168](https://github.com/hadolint/hadolint/pull/1168) - Online Linter: Revive the online linter by [@m-ildefons](https://github.com/m-ildefons) in [#1178](https://github.com/hadolint/hadolint/pull/1178) - Update Readme by [@m-ildefons](https://github.com/m-ildefons) in [#1181](https://github.com/hadolint/hadolint/pull/1181) - Fix: propagating shell options across build stages by [@m-ildefons](https://github.com/m-ildefons) in [#1180](https://github.com/hadolint/hadolint/pull/1180) - Ignore dnf group install from DL3041 by [@kpumuk](https://github.com/kpumuk) in [#1148](https://github.com/hadolint/hadolint/pull/1148) - build(deps): bump actions/upload-artifact from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1170](https://github.com/hadolint/hadolint/pull/1170) - build(deps): bump actions/download-artifact from 7 to 8 by [@dependabot](https://github.com/dependabot)\[bot] in [#1169](https://github.com/hadolint/hadolint/pull/1169) - build(deps): bump docker/setup-buildx-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1173](https://github.com/hadolint/hadolint/pull/1173) - build(deps): bump docker/login-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1172](https://github.com/hadolint/hadolint/pull/1172) - build(deps): bump docker/build-push-action from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1171](https://github.com/hadolint/hadolint/pull/1171) - DL3062: relax DL3062, fix readme by [@m-ildefons](https://github.com/m-ildefons) in [#1131](https://github.com/hadolint/hadolint/pull/1131) - DL3040: Match different install command variations by [@m-ildefons](https://github.com/m-ildefons) in [#1182](https://github.com/hadolint/hadolint/pull/1182) - DL3063: New rule, stage name reserved word by [@m-ildefons](https://github.com/m-ildefons) in [#1183](https://github.com/hadolint/hadolint/pull/1183) - readme: fixup readme by [@m-ildefons](https://github.com/m-ildefons) in [#1184](https://github.com/hadolint/hadolint/pull/1184) - build(deps): bump EndBug/add-and-commit from 9 to 10 by [@dependabot](https://github.com/dependabot)\[bot] in [#1186](https://github.com/hadolint/hadolint/pull/1186) - build(deps): bump softprops/action-gh-release from 2 to 3 by [@dependabot](https://github.com/dependabot)\[bot] in [#1187](https://github.com/hadolint/hadolint/pull/1187) - fix: fix hlint warnings by [@m-ildefons](https://github.com/m-ildefons) in [#1189](https://github.com/hadolint/hadolint/pull/1189) - Shellcheck: fix false-positives with exec notation by [@m-ildefons](https://github.com/m-ildefons) in [#1194](https://github.com/hadolint/hadolint/pull/1194) - DL3065: New Rule: No FROM with $TARGETPLATFORM by [@m-ildefons](https://github.com/m-ildefons) in [#1190](https://github.com/hadolint/hadolint/pull/1190) - Ignore Pragma: Add stage ignore pragma by [@m-ildefons](https://github.com/m-ildefons) in [#1195](https://github.com/hadolint/hadolint/pull/1195) - Fix DL3013 false positive on pipx --python flag by [@eyupcanakman](https://github.com/eyupcanakman) in [#1196](https://github.com/hadolint/hadolint/pull/1196) - Add JUnit output formatter by [@m-ildefons](https://github.com/m-ildefons) in [#1192](https://github.com/hadolint/hadolint/pull/1192) - Fix DL3013 false positive on pip --root-user-action flag by [@eyupcanakman](https://github.com/eyupcanakman) in [#1198](https://github.com/hadolint/hadolint/pull/1198) - Update to Alpine 3.24 by [@jnoordsij](https://github.com/jnoordsij) in [#1206](https://github.com/hadolint/hadolint/pull/1206) - Fix DL3016 false positive on npm --registry flag by [@eyupcanakman](https://github.com/eyupcanakman) in [#1210](https://github.com/hadolint/hadolint/pull/1210) - New Rule: DL3066 Non-numeric user-id by [@m-ildefons](https://github.com/m-ildefons) in [#1212](https://github.com/hadolint/hadolint/pull/1212) - build(deps): bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1211](https://github.com/hadolint/hadolint/pull/1211) - DL3025: Trigger on HEALTHCHECK instructions too by [@m-ildefons](https://github.com/m-ildefons) in [#1209](https://github.com/hadolint/hadolint/pull/1209) - DL3018: Allow fuzzy version matching by [@m-ildefons](https://github.com/m-ildefons) in [#1201](https://github.com/hadolint/hadolint/pull/1201) - Checkstyle: Output file node on empty result by [@m-ildefons](https://github.com/m-ildefons) in [#1204](https://github.com/hadolint/hadolint/pull/1204) - build(deps): bump actions/cache from 5 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#1213](https://github.com/hadolint/hadolint/pull/1213) - Add rule against copying root from another stage by [@Develop-KIM](https://github.com/Develop-KIM) in [#1215](https://github.com/hadolint/hadolint/pull/1215) - DL3026: Warn on `COPY --from` untrusted registry by [@m-ildefons](https://github.com/m-ildefons) in [#1205](https://github.com/hadolint/hadolint/pull/1205) - DL3026: Disallow mounting from untrusted registies by [@m-ildefons](https://github.com/m-ildefons) in [#1216](https://github.com/hadolint/hadolint/pull/1216) - DL3041: Accept package versions in environment variables by [@m-ildefons](https://github.com/m-ildefons) in [#1185](https://github.com/hadolint/hadolint/pull/1185) - Add output to file/multiple files by [@m-ildefons](https://github.com/m-ildefons) in [#1197](https://github.com/hadolint/hadolint/pull/1197) - Dependencies: Bump language-docker to v16.0.0 by [@m-ildefons](https://github.com/m-ildefons) in [#1218](https://github.com/hadolint/hadolint/pull/1218) - New Rule: DL3064 ARG or ENV with sensitive data by [@m-ildefons](https://github.com/m-ildefons) in [#1188](https://github.com/hadolint/hadolint/pull/1188) - Hadolint Embedded: Fix output interface by [@m-ildefons](https://github.com/m-ildefons) in [#1219](https://github.com/hadolint/hadolint/pull/1219) - CI: Improve Release Workflow by [@m-ildefons](https://github.com/m-ildefons) in [#1220](https://github.com/hadolint/hadolint/pull/1220) - Release v2.15.0 by [@m-ildefons](https://github.com/m-ildefons) in [#1221](https://github.com/hadolint/hadolint/pull/1221) #### New Contributors - [@matmarczak](https://github.com/matmarczak) made their first contribution in [#962](https://github.com/hadolint/hadolint/pull/962) - [@bpfoster](https://github.com/bpfoster) made their first contribution in [#1018](https://github.com/hadolint/hadolint/pull/1018) - [@304NotModified](https://github.com/304NotModified) made their first contribution in [#1157](https://github.com/hadolint/hadolint/pull/1157) - [@nothankyouzzz](https://github.com/nothankyouzzz) made their first contribution in [#1168](https://github.com/hadolint/hadolint/pull/1168) - [@kpumuk](https://github.com/kpumuk) made their first contribution in [#1148](https://github.com/hadolint/hadolint/pull/1148) - [@eyupcanakman](https://github.com/eyupcanakman) made their first contribution in [#1196](https://github.com/hadolint/hadolint/pull/1196) - [@jnoordsij](https://github.com/jnoordsij) made their first contribution in [#1206](https://github.com/hadolint/hadolint/pull/1206) - [@Develop-KIM](https://github.com/Develop-KIM) made their first contribution in [#1215](https://github.com/hadolint/hadolint/pull/1215) **Full Changelog**: <https://github.com/hadolint/hadolint/compare/v2.14.0...v2.15.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-30 20:10:11 +00:00

maint: Update docker.io/hadolint/hadolint Docker tag to v2.15.0

ci/woodpecker/pr/pr_check Pipeline was successful

Details

ci/woodpecker/pr/ci Pipeline was successful

Details

ea122c5b8f