Skip to content

build(deps): bump philips-software/amp-devcontainer-cpp from v6.6.4 to 6.7.1 in /.devcontainer#284

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/docker/dot-devcontainer/philips-software/amp-devcontainer-cpp-6.7.1
Open

build(deps): bump philips-software/amp-devcontainer-cpp from v6.6.4 to 6.7.1 in /.devcontainer#284
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/docker/dot-devcontainer/philips-software/amp-devcontainer-cpp-6.7.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2026

Bumps philips-software/amp-devcontainer-cpp from v6.6.4 to 6.7.1.

Release notes

Sourced from philips-software/amp-devcontainer-cpp's releases.

v6.7.1

6.7.1 (2026-01-27)

📋 Summary

This release of amp-devcontainer contains updates to verify hashes of downloaded packages to prevent installing tampered versions of those packages. Next to that the Ubuntu base image is updated. The bats testing framework has been updated to version bats-core 1.13.0 and bats-assert 2.2.4. In amp-devcontainer-cpp gcovr is updated to version 8.6. As usual the VS Code Extensions have been updated to the latest versions.

The re-usable workflows have an interface change. It is now possible to set the condition for edge tags. This repository uses the merge queue, so the condition is enable-edge-tag: ${{ github.event_name == 'merge_group' }}. This should be changed to an appropriate condition for your mainline build that produces the edge image.

🔖 Packages

Container Full identifier
amp-devcontainer-base ghcr.io/philips-software/amp-devcontainer-base:v6.7.1@sha256:40671eae1393b860b5cd3bf61ad13321df031b59f3f24f65b8e046a1f0dcc8b6
amp-devcontainer-cpp ghcr.io/philips-software/amp-devcontainer-cpp:v6.7.1@sha256:7bb4d73919958465c019e08d76aa941d6987aa94773832f25e673b37bbe3f3ac
amp-devcontainer-rust ghcr.io/philips-software/amp-devcontainer-rust:v6.7.1@sha256:e68c0ae0903bdc0650e02cad16d64c4fdcb27f4b2637cb73f34ead4a2fbd34d1

Bug Fixes

  • Expose enable-edge-tag on reusable workflow (#1098) (5d8ba52)

Chores

  • deps: Bump gcovr from 8.5 to 8.6 in amp-devcontainer-cpp (#1091) (1101b59)
  • deps: Bump ubuntu from c35e29c to cd1dba6 in amp-devcontainer-base (#1095) (46ddc60)
  • deps: Update bats-core to v1.13.0 and bats-assert to v2.2.4 (#1094) (8498764)
  • Verify checksums of the umbrella certificate (#1089) (f42f104), ccache (#1100) (9254783), clang and mull apt repository keys (#1104) (5286994) and xwin (#1099) (e7aec51)
  • deps, cpp: Update github.vscode-github-actions, sonarsource.sonarlint-vscode in devcontainer.json (#1106) (36f7684)
  • deps, cpp: Update llvm-vs-code-extensions.vscode-clangd, sonarsource.sonarlint-vscode in devcontainer-metadata.json (#1105) (30b6a59)
  • deps, rust: Update rust-lang.rust-analyzer in devcontainer-metadata.json (#1107) (986d741)

v6.7.0

6.7.0 (2026-01-20)

📋 Summary

This release includes a new 'base' image that consolidates commonalities between the different container flavors. It can be used stand-alone as a drop-in replacement where a Ubuntu image was used before, and all flavors derive from the base image.

🔖 Packages

Container Full identifier
amp-devcontainer-base ghcr.io/philips-software/amp-devcontainer-base:v6.7.0@sha256:6a33f75b95fa6ddb5ab9519675b58ced61218a6d4d6d4fc45341c7a7e89ebb21
amp-devcontainer-cpp ghcr.io/philips-software/amp-devcontainer-cpp:v6.7.0@sha256:004cea4fd31114f4e341bb0d777d7c3bbacd6f51d86b8eec0ca4e79ee532509d
amp-devcontainer-rust ghcr.io/philips-software/amp-devcontainer-rust:v6.7.0@sha256:d97f3d1d305bb2ba5b9ecf1efa71b591b96288a13417f91a749d86e351c057fe

Features

... (truncated)

Changelog

Sourced from philips-software/amp-devcontainer-cpp's changelog.

6.7.1 (2026-01-27)

Bug Fixes

  • Expose enable-edge-tag on reusable workflow (#1098) (5d8ba52)

Chores

  • Add checksum to umbrella certificate (#1089) (f42f104)
  • deps, cpp: Update github.vscode-github-actions, sonarsource.sonarlint-vscode in devcontainer.json (#1106) (36f7684)
  • deps, cpp: Update llvm-vs-code-extensions.vscode-clangd, sonarsource.sonarlint-vscode in devcontainer-metadata.json (#1105) (30b6a59)
  • deps, rust: Update rust-lang.rust-analyzer in devcontainer-metadata.json (#1107) (986d741)
  • deps: Bump gcovr from 8.5 to 8.6 in /.devcontainer (#1091) (1101b59)
  • deps: Bump ubuntu from c35e29c to cd1dba6 in amp-devcontainer-base (#1095) (46ddc60)
  • deps: Update bats-core to v1.13.0 and bats-assert to v2.2.4 (#1094) (8498764)
  • Verify ccache checksum (#1100) (9254783)
  • Verify signatures for apt keys (#1104) (5286994)
  • Verify xwin checksum (#1099) (e7aec51)

6.7.0 (2026-01-20)

Features

Chores

  • deps, cpp: Update github.vscode-pull-request-github in devcontainer.json (#1081) (f5056e1)
  • deps, rust: Update rust-lang.rust-analyzer in devcontainer-metadata.json (#1080) (2299c97)
  • deps: Bump gcovr from 8.4 to 8.5 in /.devcontainer (a3aa0b9)
  • deps: Bump gcovr from 8.4 to 8.5 in amp-devcontainer-cpp (#1082) (a3aa0b9)
Commits
  • 32bc51d chore(main): release 6.7.1 (#1093)
  • 30b6a59 chore(deps, cpp): update llvm-vs-code-extensions.vscode-clangd, sonarsource.s...
  • 986d741 chore(deps, rust): update rust-lang.rust-analyzer in devcontainer-metadata.js...
  • 36f7684 chore(deps, cpp): update github.vscode-github-actions, sonarsource.sonarlint-...
  • 5293602 test(deps): bump @​types/node from 25.0.8 to 25.0.9 in the npm group (#1102)
  • 5286994 chore: verify signatures for apt keys (#1104)
  • bf5fcdc ci(deps): bump the github-actions group with 2 updates (#1103)
  • 9254783 chore: verify ccache checksum (#1100)
  • e7aec51 chore: verify xwin checksum (#1099)
  • 5d8ba52 fix: expose enable-edge-tag on reusable workflow (#1098)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [philips-software/amp-devcontainer-cpp](https://github.com/philips-software/amp-devcontainer) from v6.6.4 to 6.7.1.
- [Release notes](https://github.com/philips-software/amp-devcontainer/releases)
- [Changelog](https://github.com/philips-software/amp-devcontainer/blob/main/CHANGELOG.md)
- [Commits](philips-software/amp-devcontainer@v6.6.4...v6.7.1)

---
updated-dependencies:
- dependency-name: philips-software/amp-devcontainer-cpp
  dependency-version: 6.7.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Jan 30, 2026
@dependabot dependabot bot requested review from a team as code owners January 30, 2026 14:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code labels Jan 30, 2026
@github-actions
Copy link

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 6 0 0 0.29s
✅ CPP clang-format 114 1 0 0 1.03s
✅ DOCKERFILE hadolint 1 0 0 0.28s
✅ JSON jsonlint 8 0 0 0.16s
✅ JSON prettier 8 6 0 0 0.45s
⚠️ MARKDOWN markdownlint 4 1 13 0 0.77s
✅ MARKDOWN markdown-table-formatter 4 1 0 0 0.23s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 27.95s
✅ REPOSITORY ls-lint yes no no 0.06s
✅ REPOSITORY secretlint yes no no 1.3s
✅ REPOSITORY syft yes no no 1.26s
✅ REPOSITORY trivy yes no no 5.46s
✅ REPOSITORY trivy-sbom yes no no 0.09s
✅ REPOSITORY trufflehog yes no no 2.15s
⚠️ SPELL lychee 56 1 0 3.16s
✅ YAML prettier 10 0 0 0 0.43s
✅ YAML v8r 10 0 0 5.03s
✅ YAML yamllint 10 0 0 0.38s

Detailed Issues

⚠️ SPELL / lychee - 1 error
[404] https://github.com/yourname/amp-cucumber-cpp-runner.git | Network error: Not Found
📝 Summary
---------------------
🔍 Total..........146
✅ Successful.....145
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1

Errors in CONTRIBUTING.md
[404] https://github.com/yourname/amp-cucumber-cpp-runner.git | Network error: Not Found
⚠️ MARKDOWN / markdownlint - 13 errors
CHANGELOG.md:26 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Chores"]
CHANGELOG.md:38 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:47 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:53 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Chores"]
CHANGELOG.md:61 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "⚠ BREAKING CHANGES"]
CHANGELOG.md:65 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:70 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Bug Fixes"]
CHANGELOG.md:79 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:90 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Chores"]
CHANGELOG.md:98 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "⚠ BREAKING CHANGES"]
CHANGELOG.md:102 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:127 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Bug Fixes"]
CHANGELOG.md:134 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "Chores"]

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.3.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,CPP_CLANG_FORMAT,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_GIT_DIFF,REPOSITORY_GRYPE,REPOSITORY_LS_LINT,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

@github-actions
Copy link

Test Results

28 tests  ±0   28 ✅ ±0   3s ⏱️ ±0s
 1 suites ±0    0 💤 ±0 
 1 files   ±0    0 ❌ ±0 

Results for commit 415be51. ± Comparison against base commit 42ee292.

@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants