[nvuillam]

Renovate now opens an upgrade PR only once a release is 14 days old (minimumReleaseAge: "14 days"), so a compromised version has time to be detected and pulled before it lands here. There was no delay before.

internalChecksFilter: "strict" keeps Renovate from creating the branch before the 14 days have passed.

Security fixes are not delayed: Renovate vulnerability alerts have minimumReleaseAge: null, so they are still proposed right away.

---

Generated by Claude Code

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
⚠️ ACTION	actionlint	4		2		0	0.05s
✅ ACTION	zizmor	4		0		0	1.98s
✅ COPYPASTE	jscpd	yes		no		no	0.56s
✅ JAVASCRIPT	eslint	11		0		0	0.8s
✅ JSON	jsonlint	8		0		0	0.09s
✅ JSON	npm-package-json-lint	yes		no		no	0.4s
✅ JSON	prettier	8		0		0	0.37s
✅ JSON	v8r	8		0		0	12.04s
⚠️ MARKDOWN	markdownlint	7		19		0	0.78s
⚠️ MARKDOWN	markdown-table-formatter	7		1		0	0.27s
✅ REPOSITORY	betterleaks	yes		no		no	1.17s
✅ REPOSITORY	checkov	yes		no		no	14.84s
✅ REPOSITORY	git_diff	yes		no		no	0.01s
✅ REPOSITORY	grype	yes		no		no	71.17s
✅ REPOSITORY	osv-scanner	yes		no		no	0.54s
✅ REPOSITORY	secretlint	yes		no		no	0.94s
✅ REPOSITORY	syft	yes		no		no	2.39s
✅ REPOSITORY	trivy	yes		no		no	10.47s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.22s
✅ REPOSITORY	trufflehog	yes		no		no	2.9s
✅ SPELL	cspell	39		0		0	3.58s
⚠️ SPELL	lychee	26		4		0	1.09s
✅ TYPESCRIPT	eslint	1		0		0	0.4s
✅ TYPESCRIPT	prettier	1		0		0	0.34s
⚠️ TYPESCRIPT	ts-standard	1		1		0	0.64s
✅ YAML	prettier	9		0		0	0.78s
✅ YAML	v8r	9		0		0	5.72s
✅ YAML	yamllint	9		0		0	0.49s

Detailed Issues

⚠️ ACTION / actionlint - 2 errors

.github/workflows/github-dependents-info.yml:55:9: shellcheck reported issue in this script: SC2086:info:1:15: Double quote to prevent globbing and word splitting [shellcheck]
   |
55 |         run: sudo chown -R $USER:$USER .
   |         ^~~~
.github/workflows/github-dependents-info.yml:55:9: shellcheck reported issue in this script: SC2086:info:1:21: Double quote to prevent globbing and word splitting [shellcheck]
   |
55 |         run: sudo chown -R $USER:$USER .
   |         ^~~~

⚠️ SPELL / lychee - 4 errors

📝 Summary
---------------------
🔍 Total...........75
🔗 Unique..........63
✅ Successful......24
⏳ Timeouts.........0
🔀 Redirected.......7
👻 Excluded........47
❓ Unknown..........0
🚫 Errors...........4
⛔ Unsupported......4

Errors in README.md
[403] https://npmjs.org/package/java-caller (at 5:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/java-caller --[301]--> https://www.npmjs.com/package/java-caller
[403] https://npmjs.org/package/java-caller (at 6:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/java-caller --[301]--> https://www.npmjs.com/package/java-caller
[403] https://www.npmjs.com/package/java-caller (at 4:1) | Rejected status code: 403 Forbidden
[403] https://www.npmjs.com/package/njre (at 16:145) | Rejected status code: 403 Forbidden

Hint: Followed 7 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

⚠️ MARKDOWN / markdown-table-formatter - 1 error

1 files contain markdown tables to format:
- README.md

⚠️ MARKDOWN / markdownlint - 19 errors

CHANGELOG.md:7:401 error MD013/line-length Line length [Expected: 400; Actual: 518]
CHANGELOG.md:14:401 error MD013/line-length Line length [Expected: 400; Actual: 442]
CODE_OF_CONDUCT.md:58:44 error MD034/no-bare-urls Bare URL used [Context: "nicolas.vuillamy@gmail.com"]
CODE_OF_CONDUCT.md:71:14 error MD034/no-bare-urls Bare URL used [Context: "https://www.contributor-covena..."]
CODE_OF_CONDUCT.md:76:1 error MD034/no-bare-urls Bare URL used [Context: "https://www.contributor-covena..."]
README.md:66:13 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:27 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:37 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:47 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:1 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:13 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:27 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:37 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:67:361 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:69:123 error MD060/table-column-style Table column style [Table pipe has extra space to the left for style "compact"]
README.md:73:315 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:74:310 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:75:208 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:76:233 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]

⚠️ TYPESCRIPT / ts-standard - 1 error

Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository