Skip to content

build(deps): bump github.com/fhirlint/fhirlint from 1.4.0 to 1.5.0 - #52

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fhirlint/fhirlint-1.5.0
Closed

build(deps): bump github.com/fhirlint/fhirlint from 1.4.0 to 1.5.0#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fhirlint/fhirlint-1.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/fhirlint/fhirlint from 1.4.0 to 1.5.0.

Release notes

Sourced from github.com/fhirlint/fhirlint's releases.

v1.5.0

Changelog

  • ad82077da5bb44e4fda9013ce5780f3a5b0cf3d0 build(deps): bump actions/setup-java from 5.4.0 to 5.5.0 (#211)
  • a6a658d1762b22928b3b6be6ad38e3cf84801bb7 build(deps): bump golang from 1.26.4-alpine to 1.26.5-alpine (#210)
  • 13496bad7eee9e78047ac4648235dbac088c6795 chore: bump version references to 1.5.0 (#265)
  • 0e2f247fa846aa6102e6637c2b2189a615e798d7 ci(#212): sign the image and attest provenance + SBOM (#232)
  • 350b8477234b621b04616d0b1f8e27d88ed4389d ci(#213): attest release binary provenance and generate SBOMs (#233)
  • c39394e03fcae6077c312026bdd1ed49066a3e73 ci(#215): add Docker security gates (hadolint, Trivy, dockle) (#225)
  • c58db7ffd5308e6a839e68df571e3d669279c065 ci(#226): run checks once per PR instead of twice (#227)
  • cd2602dccb8cc2866d592431808ac773359fd642 ci(#241): require a green CI run before releasing or publishing the image (#249)
  • 275ddbb7da141bc053f58bb9f560a5961effca91 ci(#263): fail the zizmor job on findings and correct two pin comments (#264)
  • d3e0fdd730a87575e7527a42cdf318bcda129159 ci(gitlab): auto-publish CI/CD Catalog component on tags + fix version docs (#209)
  • 2c15f85d0ed1b191d1e071ef514a8dbdccc116fc docs(#242): attest archive SBOM provenance and record why they are not SBOM-attested (#250)
  • b1879a4dc9669b52ac76627c73bbed286e422b2d docs(#244): add a trust boundary to SECURITY.md and correct the signing claim (#261)
  • 2b0c0ad2392415924bb2817567bbe61dd2fa6e45 feat(#214): add OCI image labels and inject version metadata into the image build (#231)
  • 76c9cb6be5322330bfa76aec103d0d2fb731bc42 feat(#217): add --validator-arg passthrough for raw validator arguments (#236)
  • 9441d872ced70dba2813e7196bc0d151cc8d9ccd feat(#218): pre-commit framework hooks (+ multiple file paths in validate) (#223)
  • 9e5b865ea84dcac8ff9cf98667739f2308d8661d feat(#219): publish a JSON Schema for fhirlint.yml (#238)
  • bea4ceda049414582a851c35ec7a8d0d10e254a8 feat(#220): add --format github for Actions workflow-command annotations (#239)
  • fcde96ac22f98e0b1df412941261b0bf34d8e072 feat(#224): add --skip-non-fhir to skip files that are not FHIR resources (#229)
  • a9d8ab43a43f6750a12a5abcad2fcb3b1d5fa24f feat(#245): support expiry dates on suppression rules (#251)
  • a6a7ac9762bbd9bdea270ccb4facc62ac8e57c23 feat(#246): add require-suppress-reason to enforce documented suppressions (#255)
  • 6fec27b9de9af1a0ebb638ea500a2076422466cd feat(#247): add --show-source to print the offending line under each finding (#259)
  • abe060ee825c39bd77bb2efa121a6bb503da3ed3 fix(#216): run the container as a non-root user (#228)
  • aca6ff19bbf96c0b8156e44e7bfc7e209106ea7c fix(#222): parse the validator version from the correct redirect hop (#230)
  • 16f45d8f56d24bfa3a03c19330378e38687724ab fix(#234): avoid SIGPIPE in the image smoke-test version assertion (#235)
  • 16a4740ab268bba17243bb0abc37fc6e331df836 fix(#240): attest checksums.txt alongside the release archives (#248)
  • 18940bc28ede7f9ca4f05b947f9a5892bfa4c0d7 fix(#252): honour suppression expiry for rules under overrides (#253)
  • 21307696b5c58e5e9cb772464b282e2eda2c6f58 fix(#254): fail on invalid suppress rules under overrides instead of discarding them (#256)
  • d338d449b31913c4e3fe69b36c239d8e43079d70 fix(#257): stop --extract and --ignore from overwriting the source file (#258)
  • 5db51893068845178c89270df2382159e0aa611f fix(#260): warn and record when the JAR checksum cannot be verified (#262)
Commits
  • 13496ba chore: bump version references to 1.5.0 (#265)
  • 275ddbb ci(#263): fail the zizmor job on findings and correct two pin comments (#264)
  • 5db5189 fix(#260): warn and record when the JAR checksum cannot be verified (#262)
  • b1879a4 docs(#244): add a trust boundary to SECURITY.md and correct the signing claim...
  • 6fec27b feat(#247): add --show-source to print the offending line under each finding ...
  • d338d44 fix(#257): stop --extract and --ignore from overwriting the source file (#258)
  • 2130769 fix(#254): fail on invalid suppress rules under overrides instead of discardi...
  • a6a7ac9 feat(#246): add require-suppress-reason to enforce documented suppressions (#...
  • 18940bc fix(#252): honour suppression expiry for rules under overrides (#253)
  • a9d8ab4 feat(#245): support expiry dates on suppression rules (#251)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/fhirlint/fhirlint](https://github.com/fhirlint/fhirlint) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/fhirlint/fhirlint/releases)
- [Commits](fhirlint/fhirlint@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/fhirlint/fhirlint
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #55.

@dependabot dependabot Bot closed this Aug 5, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/fhirlint/fhirlint-1.5.0 branch August 5, 2026 05:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants