From b6aeffb335e37fae4b242747737aa876ed077303 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:22:25 +0000 Subject: [PATCH 1/2] Bump hadolint/hadolint-action from 3.3.0 to 3.4.0 Bumps [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](https://github.com/hadolint/hadolint-action/compare/v3.3.0...v3.4.0) --- updated-dependencies: - dependency-name: hadolint/hadolint-action dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Signed-off-by: Andy Bavier --- .github/workflows/master.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index 1b4b237..1e52477 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -18,7 +18,7 @@ jobs: - uses: actions/checkout@v7 - name: Dockerfile linter - uses: hadolint/hadolint-action@v3.3.0 + uses: hadolint/hadolint-action@v3.4.0 # For now, ignoring: # DL3008 warning: Pin versions in apt get install (e.g., apt-get install =); # DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it; and @@ -33,7 +33,7 @@ jobs: - uses: actions/checkout@v7 - name: Dockerfile linter - uses: hadolint/hadolint-action@v3.3.0 + uses: hadolint/hadolint-action@v3.4.0 # For now, ignoring: # DL3008 warning: Pin versions in apt get install (e.g., apt-get install =) with: @@ -46,7 +46,7 @@ jobs: - uses: actions/checkout@v7 - name: Dockerfile linter - uses: hadolint/hadolint-action@v3.3.0 + uses: hadolint/hadolint-action@v3.4.0 # For now, ignoring: # DL3008 warning: Pin versions in apt get install (e.g., apt-get install =) with: @@ -59,7 +59,7 @@ jobs: - uses: actions/checkout@v7 - name: Dockerfile linter - uses: hadolint/hadolint-action@v3.3.0 + uses: hadolint/hadolint-action@v3.4.0 # For now, ignoring: # DL3008 warning: Pin versions in apt get install (e.g., apt-get install =) with: From 2a61d85bda6dc120fdb2bde5079d55f0ad265344 Mon Sep 17 00:00:00 2001 From: Andy Bavier Date: Mon, 3 Aug 2026 13:58:03 -0700 Subject: [PATCH 2/2] Ignore Bash array warning in OCUDU hadolint check Signed-off-by: Andy Bavier --- .github/workflows/master.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index 1e52477..aa8c66c 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -36,9 +36,10 @@ jobs: uses: hadolint/hadolint-action@v3.4.0 # For now, ignoring: # DL3008 warning: Pin versions in apt get install (e.g., apt-get install =) + # SC3054 warning: Dockerfile-ocudu intentionally uses Bash arrays after declaring Bash via SHELL. with: dockerfile: Dockerfile-ocudu - ignore: DL3008 + ignore: DL3008,SC3054 hadolint-ue: runs-on: ubuntu-latest