update superlinter from known-vulnerable version

.github/linters/.yamllint.yml

@@ -0,0 +1 @@
+../../.yamllint.yml

.github/linters/actionlint.yml

@@ -10,17 +10,21 @@ paths:
 #    ignore: []
 
   .github/workflows/cleanup-ci-resources.yml:
-    ignore: [ "string should not be empty" ]
+    ignore:
+      - "string should not be empty"
 
   .github/workflows/test-backup-restore.yml:
-    ignore: [ "string should not be empty" ]
+    ignore:
+      - "string should not be empty"
 
   .github/workflows/test-ha.yml:
-    ignore: [ "string should not be empty" ]
+    ignore:
+      - "string should not be empty"
 
   .github/workflows/test-singlenode.yml:
-    ignore: [ "string should not be empty" ]
+    ignore:
+      - "string should not be empty"
 
   .github/workflows/test-upgrade.yml:
-    ignore: [ "string should not be empty" ]
-
+    ignore:
+      - "string should not be empty"

.github/workflows/lint.yml

@@ -27,6 +27,7 @@ jobs:
           # list of files that changed across commits
           fetch-depth: 0
           submodules: true
+          persist-credentials: false
 
       - name: Run ansible-lint
         uses: ansible/ansible-lint@e98f9b38769d45cbe3c55a23b2eb25631babe7c4 # v25.4.0
@@ -41,7 +42,7 @@ jobs:
         if: always()
 
       - name: Run super-linter
-        uses: super-linter/super-linter@4e8a7c2bf106c4c766c816b35ec612638dc9b6b2 # v7.3.0
+        uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         if: always()
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr.yml

@@ -1,26 +1,26 @@
 ---
-    name: Build and test PR
+name: Build and test PR
 
-    permissions:
-      contents: read
-      packages: read
-      # To report GitHub Actions status checks
-      statuses: write
+permissions:
+  contents: read
+  packages: read
+  # To report GitHub Actions status checks
+  statuses: write
 
-    concurrency:
-      group: ${{ github.workflow }}-${{ github.ref }}
-      cancel-in-progress: true
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
-    on:
-      pull_request:
-        types:
-          - opened
-          - synchronize
-          - ready_for_review
-          - reopened
-        branches:
-          - main
+on: # yamllint disable-line rule:truthy
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - ready_for_review
+      - reopened
+    branches:
+      - main
 
-    jobs:
-      lint:
-        uses: ./.github/workflows/lint.yml
+jobs:
+  lint:
+    uses: ./.github/workflows/lint.yml

roles/cluster_infra/templates/resources.tf.j2

@@ -1,6 +1,6 @@
 #####
 ##### The identity scope we are operating in
-##### Used to add tge OpenStack user name to instance metadata
+##### Used to add the OpenStack user name to instance metadata
 #####
 data "openstack_identity_auth_scope_v3" "scope" {
   name = "{{ cluster_name }}"

super-linter.env

@@ -1,17 +1,31 @@
-# Detect that default branch is devel when running locally
+# Exclude vendor submodules
+FILTER_REGEX_EXCLUDE=.*vendor/.*
+
+# Detect that default branch is main when running locally
 DEFAULT_BRANCH=main
 
 # Don't validate JSCPD
 VALIDATE_JSCPD=false
 
-# Don't validate JS standard because it conflicts with JS prettier
-VALIDATE_JAVASCRIPT_STANDARD=false
-
 # Don't validate Ansible because ansible-lint is more flexible
 VALIDATE_ANSIBLE=false
 
 # Don't validate YAML prettier because yamllint is sufficient
 VALIDATE_YAML_PRETTIER=false
 
-# Don't validate using kubeconform because it wants an appTemplate schema
-VALIDATE_KUBERNETES_KUBECONFORM=false
+# Set to the default filename for yamllint
+YAML_CONFIG_FILE=.yamllint.yml
+
+VALIDATE_BIOME_FORMAT=false
+
+VALIDATE_BIOME_LINT=false
+
+VALIDATE_TRIVY=false
+
+# Only use ruff for python linting and formatting
+VALIDATE_PYTHON=false
+VALIDATE_PYTHON_BLACK=false
+VALIDATE_PYTHON_FLAKE8=false
+VALIDATE_PYTHON_ISORT=false
+VALIDATE_PYTHON_MYPY=false
+VALIDATE_PYTHON_PYLINT=false