Skip to content

feat: bump ghcr.io/devcontainers/features/desktop-lite from 1.2.9 to 1.2.10 - #107

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/devcontainers/ghcr.io/devcontainers/features/desktop-lite-1.2.10
Open

feat: bump ghcr.io/devcontainers/features/desktop-lite from 1.2.9 to 1.2.10#107
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/devcontainers/ghcr.io/devcontainers/features/desktop-lite-1.2.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps ghcr.io/devcontainers/features/desktop-lite from 1.2.9 to 1.2.10.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps ghcr.io/devcontainers/features/desktop-lite from 1.2.9 to 1.2.10.

---
updated-dependencies:
- dependency-name: ghcr.io/devcontainers/features/desktop-lite
  dependency-version: 1.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file devcontainers_package_manager Pull requests that update Devcontainers_package_manager code labels Sep 1, 2026
@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 24 0 0 0.79s
✅ ACTION zizmor 24 0 0 0 6.22s
✅ DOCKERFILE hadolint 3 0 0 0.43s
✅ JSON npm-package-json-lint yes no no 0.8s
✅ JSON prettier 22 3 0 0 1.13s
✅ JSON v8r 22 0 0 11.63s
✅ MARKDOWN markdownlint 12 0 0 0 1.42s
✅ MARKDOWN markdown-table-formatter 12 1 0 0 0.24s
✅ REPOSITORY checkov yes no no 32.36s
✅ REPOSITORY gitleaks yes no no 1.93s
✅ REPOSITORY git_diff yes no no 0.02s
✅ REPOSITORY grype yes no no 73.01s
✅ REPOSITORY osv-scanner yes no no 0.96s
✅ REPOSITORY secretlint yes no no 1.64s
✅ REPOSITORY syft yes no no 3.71s
✅ REPOSITORY trivy yes no no 13.91s
✅ REPOSITORY trivy-sbom yes no no 0.42s
✅ REPOSITORY trufflehog yes no no 3.8s
⚠️ SPELL lychee 86 2 0 116.76s
✅ YAML prettier 32 0 0 0 1.21s
❌ YAML v8r 32 1 0 15.72s
✅ YAML yamllint 32 0 0 1.09s

Detailed Issues

❌ YAML / v8r - 1 error
✖ .github/workflows/wc-publish-templates.yml is invalid

.github/workflows/wc-publish-templates.yml#/on must be string
.github/workflows/wc-publish-templates.yml#/on must be equal to one of the allowed values
.github/workflows/wc-publish-templates.yml#/on must be array
.github/workflows/wc-publish-templates.yml#/on/workflow_call must be object
.github/workflows/wc-publish-templates.yml#/on must match exactly one schema in oneOf
⚠️ SPELL / lychee - 2 errors
📝 Summary
---------------------
🔍 Total..........133
🔗 Unique.........112
✅ Successful.....124
⏳ Timeouts.........2
🔀 Redirected......13
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........2
⛔ Unsupported......2

Errors in .github/TOOL_VERSION_ISSUE_TEMPLATE.md
[403] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads (at 30:7) | Rejected status code: 403 Forbidden

Errors in test/cpp/features/security.feature
[TIMEOUT] https://slsa.dev/spec/v1.0/levels (at 20:30) | Request timed out
[ERROR] https://slsa.dev/spec/v1.0/threats (at 42:44) | Connection failed. Check network connectivity and firewall settings
[TIMEOUT] https://slsa.dev/spec/v1.0/verifying-artifacts (at 24:25) | Request timed out

Hint: Followed 13 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file devcontainers_package_manager Pull requests that update Devcontainers_package_manager code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants