Skip to content

build(deps): bump github.com/fhirlint/fhirlint from 1.4.0 to 1.5.0 - #52

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fhirlint/fhirlint-1.5.0
Open

build(deps): bump github.com/fhirlint/fhirlint from 1.4.0 to 1.5.0#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fhirlint/fhirlint-1.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/fhirlint/fhirlint from 1.4.0 to 1.5.0.

Release notes

Sourced from github.com/fhirlint/fhirlint's releases.

v1.5.0

Changelog

  • ad82077da5bb44e4fda9013ce5780f3a5b0cf3d0 build(deps): bump actions/setup-java from 5.4.0 to 5.5.0 (#211)
  • a6a658d1762b22928b3b6be6ad38e3cf84801bb7 build(deps): bump golang from 1.26.4-alpine to 1.26.5-alpine (#210)
  • 13496bad7eee9e78047ac4648235dbac088c6795 chore: bump version references to 1.5.0 (#265)
  • 0e2f247fa846aa6102e6637c2b2189a615e798d7 ci(#212): sign the image and attest provenance + SBOM (#232)
  • 350b8477234b621b04616d0b1f8e27d88ed4389d ci(#213): attest release binary provenance and generate SBOMs (#233)
  • c39394e03fcae6077c312026bdd1ed49066a3e73 ci(#215): add Docker security gates (hadolint, Trivy, dockle) (#225)
  • c58db7ffd5308e6a839e68df571e3d669279c065 ci(#226): run checks once per PR instead of twice (#227)
  • cd2602dccb8cc2866d592431808ac773359fd642 ci(#241): require a green CI run before releasing or publishing the image (#249)
  • 275ddbb7da141bc053f58bb9f560a5961effca91 ci(#263): fail the zizmor job on findings and correct two pin comments (#264)
  • d3e0fdd730a87575e7527a42cdf318bcda129159 ci(gitlab): auto-publish CI/CD Catalog component on tags + fix version docs (#209)
  • 2c15f85d0ed1b191d1e071ef514a8dbdccc116fc docs(#242): attest archive SBOM provenance and record why they are not SBOM-attested (#250)
  • b1879a4dc9669b52ac76627c73bbed286e422b2d docs(#244): add a trust boundary to SECURITY.md and correct the signing claim (#261)
  • 2b0c0ad2392415924bb2817567bbe61dd2fa6e45 feat(#214): add OCI image labels and inject version metadata into the image build (#231)
  • 76c9cb6be5322330bfa76aec103d0d2fb731bc42 feat(#217): add --validator-arg passthrough for raw validator arguments (#236)
  • 9441d872ced70dba2813e7196bc0d151cc8d9ccd feat(#218): pre-commit framework hooks (+ multiple file paths in validate) (#223)
  • 9e5b865ea84dcac8ff9cf98667739f2308d8661d feat(#219): publish a JSON Schema for fhirlint.yml (#238)
  • bea4ceda049414582a851c35ec7a8d0d10e254a8 feat(#220): add --format github for Actions workflow-command annotations (#239)
  • fcde96ac22f98e0b1df412941261b0bf34d8e072 feat(#224): add --skip-non-fhir to skip files that are not FHIR resources (#229)
  • a9d8ab43a43f6750a12a5abcad2fcb3b1d5fa24f feat(#245): support expiry dates on suppression rules (#251)
  • a6a7ac9762bbd9bdea270ccb4facc62ac8e57c23 feat(#246): add require-suppress-reason to enforce documented suppressions (#255)
  • 6fec27b9de9af1a0ebb638ea500a2076422466cd feat(#247): add --show-source to print the offending line under each finding (#259)
  • abe060ee825c39bd77bb2efa121a6bb503da3ed3 fix(#216): run the container as a non-root user (#228)
  • aca6ff19bbf96c0b8156e44e7bfc7e209106ea7c fix(#222): parse the validator version from the correct redirect hop (#230)
  • 16f45d8f56d24bfa3a03c19330378e38687724ab fix(#234): avoid SIGPIPE in the image smoke-test version assertion (#235)
  • 16a4740ab268bba17243bb0abc37fc6e331df836 fix(#240): attest checksums.txt alongside the release archives (#248)
  • 18940bc28ede7f9ca4f05b947f9a5892bfa4c0d7 fix(#252): honour suppression expiry for rules under overrides (#253)
  • 21307696b5c58e5e9cb772464b282e2eda2c6f58 fix(#254): fail on invalid suppress rules under overrides instead of discarding them (#256)
  • d338d449b31913c4e3fe69b36c239d8e43079d70 fix(#257): stop --extract and --ignore from overwriting the source file (#258)
  • 5db51893068845178c89270df2382159e0aa611f fix(#260): warn and record when the JAR checksum cannot be verified (#262)
Commits
  • 13496ba chore: bump version references to 1.5.0 (#265)
  • 275ddbb ci(#263): fail the zizmor job on findings and correct two pin comments (#264)
  • 5db5189 fix(#260): warn and record when the JAR checksum cannot be verified (#262)
  • b1879a4 docs(#244): add a trust boundary to SECURITY.md and correct the signing claim...
  • 6fec27b feat(#247): add --show-source to print the offending line under each finding ...
  • d338d44 fix(#257): stop --extract and --ignore from overwriting the source file (#258)
  • 2130769 fix(#254): fail on invalid suppress rules under overrides instead of discardi...
  • a6a7ac9 feat(#246): add require-suppress-reason to enforce documented suppressions (#...
  • 18940bc fix(#252): honour suppression expiry for rules under overrides (#253)
  • a9d8ab4 feat(#245): support expiry dates on suppression rules (#251)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/fhirlint/fhirlint](https://github.com/fhirlint/fhirlint) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/fhirlint/fhirlint/releases)
- [Commits](fhirlint/fhirlint@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/fhirlint/fhirlint
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants