chore(deps): update oxsecurity/megalinter action to v8.3.0 (#264)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[oxsecurity/megalinter](https://redirect.github.com/oxsecurity/megalinter)
| action | minor | `v8.1.0` -> `v8.3.0` |

---

### Release Notes

<details>
<summary>oxsecurity/megalinter (oxsecurity/megalinter)</summary>

###
[`v8.3.0`](https://redirect.github.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v830---2024-11-23)

[Compare
Source](https://redirect.github.com/oxsecurity/megalinter/compare/v8.2.0...v8.3.0)

-   Core
- Display command log (truncated to 250 chars) even when LOG_LEVEL is
not DEBUG
- Allow to replace an ENV var value with the value of another ENV var
before calling a PRE_COMMAND (helps for tflint run from GitHub
Enterprise)
    -   Fix handling of git submodule paths

-   Fixes
- [trivy](https://megalinter.io/latest/descriptors/repository_trivy/):
retry in case of BLOB_UNKNOWN while downloading vulnerability list

-   Reporters
    -   Fix UpdatedSourcesReporter when `APPLY_FIXES` is list (array)
- Fix AzureCommentReporter when the repo is not found: fallback using
BUILD_REPOSITORY_ID. (+ disable space replacement in repo name with
`AZURE_COMMENT_REPORTER_REPLACE_WITH_SPACES: false`)

-   CI
    -   Fix Docker mirroring job for release context
    -   Remove max parallel jobs for release linters workflow

-   Linter versions upgrades (13)
- [cfn-lint](https://redirect.github.com/aws-cloudformation/cfn-lint)
from 1.19.0 to **1.20.0**
    -   [checkov](https://www.checkov.io/) from 3.2.298 to **3.2.311**
    -   [csharpier](https://csharpier.com/) from 0.29.2 to **0.30.2**
- [markdownlint](https://redirect.github.com/DavidAnson/markdownlint)
from 0.42.0 to **0.43.0**
    -   [phpstan](https://phpstan.org/) from 2.0.1 to **2.0.2**
- [ruff](https://redirect.github.com/astral-sh/ruff) from 0.7.4 to
**0.8.0**
-
[spectral](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview)
from 6.14.1 to **6.14.2**
- [stylua](https://redirect.github.com/JohnnyMorganz/StyLua) from 0.20.0
to **2.0.0**
- [syft](https://redirect.github.com/anchore/syft) from 1.16.0 to
**1.17.0**
- [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.57.0 to
**0.57.1**
- [trivy](https://aquasecurity.github.io/trivy/) from 0.57.0 to
**0.57.1**
- [trufflehog](https://redirect.github.com/trufflesecurity/trufflehog)
from 3.83.7 to **3.84.1**
    -   [vale](https://vale.sh/) from 3.9.0 to **3.9.1**

###
[`v8.2.0`](https://redirect.github.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v820---2024-11-17)

[Compare
Source](https://redirect.github.com/oxsecurity/megalinter/compare/v8.1.0...v8.2.0)

-   Media
- [10 MegaLinter Tips and Tricks Unlock its Full
Potential](https://flexion.us/blog/megalinter-tips-and-tricks/) by [Wes
Dean](https://redirect.github.com/wesley-dean)
- [MegaLinter Performance Tuning for Maximum
Efficiency](https://flexion.us/blog/megalinter-performance-tuning/) by
[Wes Dean](https://redirect.github.com/wesley-dean)

-   Linters enhancements
- [detekt](https://megalinter.io/latest/descriptors/kotlin_detekt/)
Enable SARIF output + count errors
- [lintr](https://megalinter.io/latest/descriptors/r_lintr/): Support
files in subdirectories, fix unit tests
- [phpcs](https://megalinter.io/latest/descriptors/php_phpcs/): Activate
APPLY_FIXES
- [Salesforce
linters](https://megalinter.io/latest/descriptors/salesforce/): Add
SF_CLI_DISABLE_AUTOUPDATE for SF CLI JIT plugins
- [trivy](https://megalinter.io/latest/descriptors/repository_trivy/):
handle retry if `failed to download Java DB` is detected
- [tsqllint](https://redirect.github.com/tsqllint/tsqllint) Re-enabled
after .net 8 and security updates

-   Fixes
- Add message in PR comment if FAIL_IF_UPDATED_SOURCES is triggered
    -   Fix linting errors in GitHub Actions template

-   Reporters
-
[UpdatedSourcesReporter](https://megalinter.io/latest/reporters/UpdatedSourcesReporter/)
will git commit & push fixed files to source branch if APPLY_FIXES is
set
    -   Fix AzureCommentReporter not adding comments to PR
    -   Fix AzureCommentReporter fails when target repo contains spaces

-   Doc
    -   Updated documentation with Azure central pipeline use case
- Update DevSkim documentation to show a valid exclusion config file
- Note about `risky` rules and how to fix rule violations with
PHP-CS-Fixer

-   CI
    -   Also prune volumes before pulling and pushing to docker hub
- Externalize mirroring from ghcr.io to docker hub in another workflow
to avoid memory issues
    -   Squash docker images to have less layers and size
- Comment jobs related to GitHub Worker images, as CodeTotal is not
actively maintained
    -   Make gitpod workflow not blocking until uv install is fixed
    -   Update stale comment
- Try several times to embed trivy db during Docker build, as a
workaround to the random failures
- Wait 10 secondes instead of 1 before retrying a failing test method,
to avoid race conditions

-   Linter versions upgrades (104)
- [actionlint](https://rhysd.github.io/actionlint/) from 1.7.3 to
**1.7.4**
- [ansible-lint](https://ansible-lint.readthedocs.io/) from 24.9.2 to
**24.10.0**
-
[bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter)
from 0.30.23 to **0.31.92**
- [cfn-lint](https://redirect.github.com/aws-cloudformation/cfn-lint)
from 1.16.1 to **1.19.0**
    -   [checkov](https://www.checkov.io/) from 3.2.257 to **3.2.298**
- [checkstyle](https://checkstyle.org/) from 10.18.2 to **10.20.1**
- [clippy](https://redirect.github.com/rust-lang/rust-clippy) from
0.1.81 to **0.1.82**
- [clj-kondo](https://redirect.github.com/borkdude/clj-kondo) from
2024.09.27 to **2024.11.14**
-
[cspell](https://redirect.github.com/streetsidesoftware/cspell/tree/master/packages/cspell)
from 8.15.1 to **8.16.0**
- [devskim](https://redirect.github.com/microsoft/DevSkim) from 1.0.33
to **1.0.44**
    -   [djlint](https://djlint.com/) from 1.35.2 to **1.36.1**
-
[dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format)
from 8.0.110 to **8.0.111**
- [gitleaks](https://redirect.github.com/gitleaks/gitleaks) from 8.20.1
to **8.21.2**
- [golangci-lint](https://golangci-lint.run/) from 1.61.0 to **1.62.0**
    -   [ktlint](https://ktlint.github.io) from 1.3.1 to **1.4.1**
-
[lightning-flow-scanner](https://redirect.github.com/Lightning-Flow-Scanner)
from 2.34.0 to **2.36.0**
    -   [lychee](https://lychee.cli.rs) from 0.16.1 to **0.17.0**
- [mypy](https://mypy.readthedocs.io/en/stable/) from 1.11.2 to
**1.13.0**
- [perlcritic](https://metacpan.org/pod/Perl::Critic) from 1.152 to
**1.156**
- [phpcs](https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer)
from 3.10.3 to **3.11.1**
- [phplint](https://redirect.github.com/overtrue/phplint) from 9.5.3 to
**9.5.4**
    -   [phpstan](https://phpstan.org/) from 1.12.6 to **2.0.1**
    -   [pmd](https://pmd.github.io/) from 7.6.0 to **7.7.0**
- [pyright](https://redirect.github.com/Microsoft/pyright) from 1.1.384
to **1.1.389**
    -   [revive](https://revive.run/) from 1.4.0 to **1.5.1**
- [roslynator](https://redirect.github.com/dotnet/Roslynator) from
0.9.1.0 to **0.9.3.0**
    -   [rubocop](https://rubocop.org/) from 1.66.1 to **1.68.0**
- [ruff](https://redirect.github.com/astral-sh/ruff) from 0.6.9 to
**0.7.4**
- [secretlint](https://redirect.github.com/secretlint/secretlint) from
8.4.0 to **9.0.0**
- [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from
4.6.0 to **4.7.0**
- [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from
4.6.0 to **4.7.0**
- [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from
4.6.0 to **4.7.0**
- [shfmt](https://redirect.github.com/mvdan/sh) from 3.9.0 to **3.10.0**
- [snakemake](https://snakemake.readthedocs.io/en/stable/) from 8.21.0
to **8.25.3**
-
[spectral](https://docs.stoplight.io/docs/spectral/674b27b261c3c-overview)
from 6.13.1 to **6.14.1**
    -   [sqlfluff](https://www.sqlfluff.com/) from 3.2.3 to **3.2.5**
- [syft](https://redirect.github.com/anchore/syft) from 1.14.0 to
**1.16.0**
-
[terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt)
from 1.9.5 to **1.9.8**
- [terragrunt](https://terragrunt.gruntwork.io) from 0.67.5 to
**0.68.14**
- [tflint](https://redirect.github.com/terraform-linters/tflint) from
0.53.0 to **0.54.0**
- [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.56.2 to
**0.57.0**
- [trivy](https://aquasecurity.github.io/trivy/) from 0.56.2 to
**0.57.0**
- [trufflehog](https://redirect.github.com/trufflesecurity/trufflehog)
from 3.82.11 to **3.83.7**
- [tsqllint](https://redirect.github.com/tsqllint/tsqllint) from
1.15.3.0 to **1.16.0.0**
- [v8r](https://redirect.github.com/chris48s/v8r) from 4.1.0 to
**4.2.0**
    -   [vale](https://vale.sh/) from 3.7.1 to **3.9.0**

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/quiltdata/nf-quilt).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dr. Ernie Prabhakar <[email protected]>

.github/workflows/mega-linter.yml

@@ -39,7 +39,7 @@ jobs:
         id: ml
         # You can override MegaLinter flavor used to have faster performances
         # More info at https://megalinter.github.io/flavors/
-        uses: oxsecurity/megalinter/flavors/dotnet@v8.1.0
+        uses: oxsecurity/megalinter/flavors/dotnet@v8.3.0
         env:
           # All available variables are described in documentation
           # https://megalinter.github.io/configuration/