khyretos/voice-translator
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Update dependency discord.js to v14.28.0 #34

Merged
kompas-review merged 1 commit from renovate/npm-non-major into main 2026-11-01 14:00:39 +01:00
Conversation 1 Commits 1 Files changed 1 +10 -10
kompas-deps commented 2026-11-01 13:57:18 +01:00
Collaborator
Copy link

This PR contains the following updates:

Package Change Age Confidence
discord.js (source) 14.27.0 → 14.28.0 age confidence

Release Notes

discordjs/discord.js (discord.js)

v14.28.0

Compare Source

Features

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [discord.js](https://discord.js.org) ([source](https://github.com/discordjs/discord.js/tree/HEAD/packages/discord.js)) | [`14.27.0` → `14.28.0`](https://renovatebot.com/diffs/npm/discord.js/14.27.0/14.28.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/discord.js/14.28.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/discord.js/14.27.0/14.28.0?slim=true) | --- ### Release Notes <details> <summary>discordjs/discord.js (discord.js)</summary> ### [`v14.28.0`](https://github.com/discordjs/discord.js/releases/tag/14.28.0) [Compare Source](https://github.com/discordjs/discord.js/compare/14.27.0...14.28.0) #### Features - **invites:** Backport invite target users and role ([#&#8203;11590](https://github.com/discordjs/discord.js/issues/11590)) ([e779c1c](https://github.com/discordjs/discord.js/commit/e779c1c522b22b19ba6eb664c7d63532091dacab)) - `file types` for discord.js ([#&#8203;11580](https://github.com/discordjs/discord.js/issues/11580)) ([cffb0b5](https://github.com/discordjs/discord.js/commit/cffb0b588f573df785124b34a10048b9c0a550d8)) - **BaseChannel:** Add `permissions` and `appPermissions` ([#&#8203;11577](https://github.com/discordjs/discord.js/issues/11577)) ([75a5eaa](https://github.com/discordjs/discord.js/commit/75a5eaadc1af2ec95613826862196e5c7c488ad2)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOTguMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE5OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBzIl19-->
Update dependency discord.js to v14.28.0
All checks were successful
kreative-pr/review nothing to review: no changed file left after the ignore rules
Details
lint / megalinter (pull_request) Successful in 2m58s
Details
kk / all-checks All 2 checks passed
e1bdbc0747
forgejo-actions commented 2026-11-01 14:00:16 +01:00
Copy link

🧹 Lint report · ❌ 46 problems in 7 checks · 🧹 5 formatting checks to tidy

Nothing here blocks the merge (report only).

Check Errors Warnings Files
❌ REPOSITORY · grype 18 0 –
❌ PYTHON · bandit 14 0 28
❌ MARKDOWN · markdownlint 7 0 13
❌ PYTHON · ruff 4 0 28
❌ BASH · shellcheck 1 0 4
❌ DOCKERFILE · hadolint 1 0 1
❌ REPOSITORY · trivy 1 0 –
REPOSITORY · grype: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/repository_grype/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME       INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS         RISK   
tar        6.2.1      7.5.19    npm   GHSA-23hp-3jrh-7fpw  Critical  0.6% (47th)  0.5    
tar        6.2.1      7.5.7     npm   GHSA-34x7-hfp2-rc4v  High      0.6% (49th)  0.5    
tar        6.2.1      7.5.21    npm   GHSA-r292-9mhp-454m  High      0.5% (44th)  0.4    
tar        6.2.1      7.5.10    npm   GHSA-qffp-2rhf-9h96  High      0.5% (40th)  0.4    
tar        6.2.1      7.5.18    npm   GHSA-8x88-c5mf-7j5w  High      0.4% (37th)  0.3    
tar        6.2.1      7.5.18    npm   GHSA-w8wr-v893-vjvp  Medium    0.6% (50th)  0.3    
tar        6.2.1      7.5.3     npm   GHSA-8qq5-rm4j-mr97  High      0.4% (31st)  0.3    
undici     6.28.1     6.29.1    npm   GHSA-xjj6-f33q-929c  High      0.3% (27th)  0.3    
tar        6.2.1      7.5.8     npm   GHSA-83g3-92jg-28cx  High      0.3% (25th)  0.2    
tar        6.2.1      7.5.4     npm   GHSA-r6q2-hw4h-h46w  High      0.3% (18th)  0.2    
tar        6.2.1      7.5.11    npm   GHSA-9ppj-qmqm-q256  High      0.3% (19th)  0.2    
tar        6.2.1      7.5.17    npm   GHSA-gvwx-54wh-qm9j  Medium    0.4% (29th)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-4qv8-2p9j-2685  Medium    0.3% (25th)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-9fm3-97px-rjf6  Medium    0.3% (25th)  0.2    
minimatch  3.1.5      11.0.1    npm   GHSA-g3hv-75wg-m249  Medium    0.3% (21st)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-qrxm-fqhp-jwvm  High      0.2% (8th)   0.1    
undici     6.28.1     6.29.1    npm   GHSA-2m5v-pch6-74hx  High      0.2% (8th)   0.1    
tar        6.2.1      7.5.16    npm   GHSA-vmf3-w455-68vh  Medium    0.2% (4th)   < 0.1
[0162] ERROR discovered vulnerabilities at or above the severity threshold
PYTHON · bandit: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/python_bandit/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
Run started:2026-11-01 12:57:36.030828+00:00
Test results:
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:44:13
43	    try:
44	        with urllib.request.urlopen(MODEL_LIST_URL, timeout=15) as resp:
45	            return json.load(resp)
--------------------------------------------------
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:114:8
113	        print(f"   URL: {url}")
114	        urllib.request.urlretrieve(url, archive_path, show_progress)
115	        print()  # newline after progress bar
--------------------------------------------------
>> Issue: [B202:tarfile_unsafe_members] tarfile.extractall used without any validation. Please check and discard dangerous members.
…
MARKDOWN · markdownlint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
AI_TRANSLATION.md:94 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Whisper recognition/translatio..."]
AI_TRANSLATION.md:122 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Vosk model sharing across sess..."]
docs/qwen-situations/VT1/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. It put `pip install moonshi..."]
docs/qwen-situations/VT2/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. vt-w1 put the `VT_FORCE_PYT..."]
README.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "🎤 Voice Translator - Real-tim..."]
README.md:61 error MD001/heading-increment Heading levels should only increment by one level at a time [Expected: h3; Actual: h4]
REFACTOR.md:14 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
PYTHON · ruff: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/python_ruff/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
F841 Local variable `display_html` is assigned to but never used
    --> voice_translator.py:3354:17
     |
3353 |                 # Filled in by the page's JS polling (/display_data), not by Gradio.
3354 |                 display_html = gr.HTML(
     |                 ^^^^^^^^^^^^
3355 |                     label="Display",
3356 |                     value='<div id="vt-display"><div>Loading...</div></div>',
     |
help: Remove assignment to unused variable `display_html`
F841 Local variable `recognized_output` is assigned to but never used
    --> voice_translator.py:3360:21
     |
3359 |                 with gr.Accordion("Outputs", open=False):
3360 |                     recognized_output = gr.Textbox(
     |                     ^^^^^^^^^^^^^^^^^
3361 |                         label="Recognized",
3362 |                         elem_id="recognized-output-text",
     |
help: Remove assignment to unused variable `recognized_output`
F841 Local variable `translated_output` is assigned to but never used
…
BASH · shellcheck: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
In setup.sh line 41:
source venv/bin/activate
       ^---------------^ SC1091 (info): Not following: venv/bin/activate: openBinaryFile: does not exist (No such file or directory)
For more information:
  https://www.shellcheck.net/wiki/SC1091 -- Not following: venv/bin/activate:...
DOCKERFILE · hadolint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
Dockerfile:13 DL3015 info: Avoid additional packages by specifying `--no-install-recommends`
REPOSITORY · trivy: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
2026-11-01T12:57:32Z	INFO	[vulndb] Need to update DB
2026-11-01T12:57:32Z	INFO	[vulndb] Downloading vulnerability DB...
2026-11-01T12:57:32Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
17.92 MiB / 131.14 MiB [-------->___________________________________________________] 13.67% ? p/s ?30.61 MiB / 131.14 MiB [-------------->_____________________________________________] 23.34% ? p/s ?40.59 MiB / 131.14 MiB [------------------>_________________________________________] 30.95% ? p/s ?50.60 MiB / 131.14 MiB [------------------>____________________________] 38.59% 54.23 MiB p/s ETA 1s54.82 MiB / 131.14 MiB [------------------->___________________________] 41.80% 54.23 MiB p/s ETA 1s63.38 MiB / 131.14 MiB [---------------------->________________________] 48.33% 54.23 MiB p/s ETA 1s74.54 MiB / 131.14 MiB [-------------------------->____________________] 56.84% 53.32 MiB p/s ETA 1s87.39 MiB / 131.14 MiB [------------------------------->_______________] 66.64% 53.32 MiB p/s ETA 0s95.78 MiB / 131.14 MiB [---------------------------------->____________] 73.04% 53.32 MiB p/s ETA 0s104.28 MiB / 131.14 MiB [------------------------------------>_________] 79.52% 53.08 MiB p/s ETA 0s113.73 MiB / 131.14 MiB [--------------------------------------->______] 86.72% 53.08 MiB p/s ETA 0s122.69 MiB / 131.14 MiB [------------------------------------------->__] 93.56% 53.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 52.54 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 52.54 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 52.54 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 49.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 49.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 49.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 45.98 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 45.98 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 45.98 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 43.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 43.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 43.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 40.24 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 40.24 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 40.24 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 37.64 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 37.64 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 37.64 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 35.21 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 35.21 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 35.21 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 32.94 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 32.94 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 32.94 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 30.82 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 30.82 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 30.82 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 28.83 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 28.83 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 28.83 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 26.97 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 26.97 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 26.97 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.23 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.23 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.23 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.60 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.60 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.60 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [------------------------------------------------] 100.00% 12.49 MiB p/s 11s2026-11-01T12:57:43Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-11-01T12:57:43Z	INFO	[vuln] Vulnerability scanning is enabled
2026-11-01T12:57:43Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-11-01T12:57:43Z	INFO	[checks-client] Need to update the checks bundle
2026-11-01T12:57:43Z	INFO	[checks-client] Downloading the checks bundle...
234.57 KiB / 234.57 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-11-01T12:57:45Z	WARN	[rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0"
2026-11-01T12:57:45Z	INFO	[npm] To collect the license information of packages, "npm install" needs to be performed beforehand	dir="discord_bridge/node_modules"
2026-11-01T12:57:45Z	INFO	Number of language-specific files	num=1
2026-11-01T12:57:45Z	INFO	[npm] Detecting vulnerabilities...
2026-11-01T12:57:45Z	INFO	Detected config files	num=1
Report Summary
┌──────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│              Target              │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ discord_bridge/package-lock.json │    npm     │       18        │         -         │
├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile                       │ dockerfile │        -        │         3         │
└──────────────────────────────────┴────────────┴─────────────────┴───────────────────┘
…

🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): PYTHON · isort (28 files checked), YAML · prettier (7 files checked), BASH · shfmt (4 files checked), JSON · prettier (4 files checked), PYTHON · black (28 files checked)

✅ Clean: git_diff, gitleaks, jsonlint, secretlint, trufflehog, yamllint

MegaLinter on soucouyant · full logs in the Actions run · comment /improve for AI fix suggestions

<!-- kk-lint --> ## 🧹 Lint report · ❌ 46 problems in 7 checks · 🧹 5 formatting checks to tidy Nothing here blocks the merge (report only). | | Check | Errors | Warnings | Files | |---|---|---:|---:|---:| | ❌ | REPOSITORY · grype | 18 | 0 | – | | ❌ | PYTHON · bandit | 14 | 0 | 28 | | ❌ | MARKDOWN · markdownlint | 7 | 0 | 13 | | ❌ | PYTHON · ruff | 4 | 0 | 28 | | ❌ | BASH · shellcheck | 1 | 0 | 4 | | ❌ | DOCKERFILE · hadolint | 1 | 0 | 1 | | ❌ | REPOSITORY · trivy | 1 | 0 | – | <details><summary>REPOSITORY · grype: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_grype/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft NAME INSTALLED FIXED IN TYPE VULNERABILITY SEVERITY EPSS RISK tar 6.2.1 7.5.19 npm GHSA-23hp-3jrh-7fpw Critical 0.6% (47th) 0.5 tar 6.2.1 7.5.7 npm GHSA-34x7-hfp2-rc4v High 0.6% (49th) 0.5 tar 6.2.1 7.5.21 npm GHSA-r292-9mhp-454m High 0.5% (44th) 0.4 tar 6.2.1 7.5.10 npm GHSA-qffp-2rhf-9h96 High 0.5% (40th) 0.4 tar 6.2.1 7.5.18 npm GHSA-8x88-c5mf-7j5w High 0.4% (37th) 0.3 tar 6.2.1 7.5.18 npm GHSA-w8wr-v893-vjvp Medium 0.6% (50th) 0.3 tar 6.2.1 7.5.3 npm GHSA-8qq5-rm4j-mr97 High 0.4% (31st) 0.3 undici 6.28.1 6.29.1 npm GHSA-xjj6-f33q-929c High 0.3% (27th) 0.3 tar 6.2.1 7.5.8 npm GHSA-83g3-92jg-28cx High 0.3% (25th) 0.2 tar 6.2.1 7.5.4 npm GHSA-r6q2-hw4h-h46w High 0.3% (18th) 0.2 tar 6.2.1 7.5.11 npm GHSA-9ppj-qmqm-q256 High 0.3% (19th) 0.2 tar 6.2.1 7.5.17 npm GHSA-gvwx-54wh-qm9j Medium 0.4% (29th) 0.2 undici 6.28.1 6.29.1 npm GHSA-4qv8-2p9j-2685 Medium 0.3% (25th) 0.2 undici 6.28.1 6.29.1 npm GHSA-9fm3-97px-rjf6 Medium 0.3% (25th) 0.2 minimatch 3.1.5 11.0.1 npm GHSA-g3hv-75wg-m249 Medium 0.3% (21st) 0.2 undici 6.28.1 6.29.1 npm GHSA-qrxm-fqhp-jwvm High 0.2% (8th) 0.1 undici 6.28.1 6.29.1 npm GHSA-2m5v-pch6-74hx High 0.2% (8th) 0.1 tar 6.2.1 7.5.16 npm GHSA-vmf3-w455-68vh Medium 0.2% (4th) < 0.1 [0162] ERROR discovered vulnerabilities at or above the severity threshold ``` </details> <details><summary>PYTHON · bandit: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/python_bandit/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: Run started:2026-11-01 12:57:36.030828+00:00 Test results: >> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. Severity: Medium Confidence: High CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html) More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:44:13 43 try: 44 with urllib.request.urlopen(MODEL_LIST_URL, timeout=15) as resp: 45 return json.load(resp) -------------------------------------------------- >> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. Severity: Medium Confidence: High CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html) More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:114:8 113 print(f" URL: {url}") 114 urllib.request.urlretrieve(url, archive_path, show_progress) 115 print() # newline after progress bar -------------------------------------------------- >> Issue: [B202:tarfile_unsafe_members] tarfile.extractall used without any validation. Please check and discard dangerous members. … ``` </details> <details><summary>MARKDOWN · markdownlint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: AI_TRANSLATION.md:94 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Whisper recognition/translatio..."] AI_TRANSLATION.md:122 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Vosk model sharing across sess..."] docs/qwen-situations/VT1/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. It put `pip install moonshi..."] docs/qwen-situations/VT2/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. vt-w1 put the `VT_FORCE_PYT..."] README.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "🎤 Voice Translator - Real-tim..."] README.md:61 error MD001/heading-increment Heading levels should only increment by one level at a time [Expected: h3; Actual: h4] REFACTOR.md:14 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] ``` </details> <details><summary>PYTHON · ruff: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/python_ruff/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: F841 Local variable `display_html` is assigned to but never used --> voice_translator.py:3354:17 | 3353 | # Filled in by the page's JS polling (/display_data), not by Gradio. 3354 | display_html = gr.HTML( | ^^^^^^^^^^^^ 3355 | label="Display", 3356 | value='<div id="vt-display"><div>Loading...</div></div>', | help: Remove assignment to unused variable `display_html` F841 Local variable `recognized_output` is assigned to but never used --> voice_translator.py:3360:21 | 3359 | with gr.Accordion("Outputs", open=False): 3360 | recognized_output = gr.Textbox( | ^^^^^^^^^^^^^^^^^ 3361 | label="Recognized", 3362 | elem_id="recognized-output-text", | help: Remove assignment to unused variable `recognized_output` F841 Local variable `translated_output` is assigned to but never used … ``` </details> <details><summary>BASH · shellcheck: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: In setup.sh line 41: source venv/bin/activate ^---------------^ SC1091 (info): Not following: venv/bin/activate: openBinaryFile: does not exist (No such file or directory) For more information: https://www.shellcheck.net/wiki/SC1091 -- Not following: venv/bin/activate:... ``` </details> <details><summary>DOCKERFILE · hadolint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: Dockerfile:13 DL3015 info: Avoid additional packages by specifying `--no-install-recommends` ``` </details> <details><summary>REPOSITORY · trivy: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: 2026-11-01T12:57:32Z INFO [vulndb] Need to update DB 2026-11-01T12:57:32Z INFO [vulndb] Downloading vulnerability DB... 2026-11-01T12:57:32Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2" 17.92 MiB / 131.14 MiB [-------->___________________________________________________] 13.67% ? p/s ?30.61 MiB / 131.14 MiB [-------------->_____________________________________________] 23.34% ? p/s ?40.59 MiB / 131.14 MiB [------------------>_________________________________________] 30.95% ? p/s ?50.60 MiB / 131.14 MiB [------------------>____________________________] 38.59% 54.23 MiB p/s ETA 1s54.82 MiB / 131.14 MiB [------------------->___________________________] 41.80% 54.23 MiB p/s ETA 1s63.38 MiB / 131.14 MiB [---------------------->________________________] 48.33% 54.23 MiB p/s ETA 1s74.54 MiB / 131.14 MiB [-------------------------->____________________] 56.84% 53.32 MiB p/s ETA 1s87.39 MiB / 131.14 MiB [------------------------------->_______________] 66.64% 53.32 MiB p/s ETA 0s95.78 MiB / 131.14 MiB [---------------------------------->____________] 73.04% 53.32 MiB p/s ETA 0s104.28 MiB / 131.14 MiB [------------------------------------>_________] 79.52% 53.08 MiB p/s ETA 0s113.73 MiB / 131.14 MiB [--------------------------------------->______] 86.72% 53.08 MiB p/s ETA 0s122.69 MiB / 131.14 MiB [------------------------------------------->__] 93.56% 53.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 52.54 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 52.54 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 52.54 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 49.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 49.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 49.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 45.98 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 45.98 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 45.98 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 43.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 43.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 43.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 40.24 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 40.24 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 40.24 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 37.64 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 37.64 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 37.64 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 35.21 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 35.21 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 35.21 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 32.94 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 32.94 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 32.94 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 30.82 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 30.82 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 30.82 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 28.83 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 28.83 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 28.83 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 26.97 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 26.97 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 26.97 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.23 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.23 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.23 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.60 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.60 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.60 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [------------------------------------------------] 100.00% 12.49 MiB p/s 11s2026-11-01T12:57:43Z INFO [vulndb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-db:2" 2026-11-01T12:57:43Z INFO [vuln] Vulnerability scanning is enabled 2026-11-01T12:57:43Z INFO [misconfig] Misconfiguration scanning is enabled 2026-11-01T12:57:43Z INFO [checks-client] Need to update the checks bundle 2026-11-01T12:57:43Z INFO [checks-client] Downloading the checks bundle... 234.57 KiB / 234.57 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-11-01T12:57:45Z WARN [rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0" 2026-11-01T12:57:45Z INFO [npm] To collect the license information of packages, "npm install" needs to be performed beforehand dir="discord_bridge/node_modules" 2026-11-01T12:57:45Z INFO Number of language-specific files num=1 2026-11-01T12:57:45Z INFO [npm] Detecting vulnerabilities... 2026-11-01T12:57:45Z INFO Detected config files num=1 Report Summary ┌──────────────────────────────────┬────────────┬─────────────────┬───────────────────┐ │ Target │ Type │ Vulnerabilities │ Misconfigurations │ ├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ discord_bridge/package-lock.json │ npm │ 18 │ - │ ├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ Dockerfile │ dockerfile │ - │ 3 │ └──────────────────────────────────┴────────────┴─────────────────┴───────────────────┘ … ``` </details> 🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): PYTHON · isort (28 files checked), YAML · prettier (7 files checked), BASH · shfmt (4 files checked), JSON · prettier (4 files checked), PYTHON · black (28 files checked) ✅ Clean: git_diff, gitleaks, jsonlint, secretlint, trufflehog, yamllint <sub>MegaLinter on soucouyant · full logs in the Actions run · comment <code>/improve</code> for AI fix suggestions</sub>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
deps
Renovate: patch/minor/digest update

  
deps-major
Renovate: major or 0.x minor update

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
hold
kompas-review waits until Kees replies merge

  
invalid
This doesn't seem right

  
question
Further information is requested

  
security
Renovate: fixes a known vulnerability

  
wontfix
This will not be worked on

No labels
bug
deps
deps-major
documentation
duplicate
enhancement
good first issue
help wanted
hold
invalid
question
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
khyretos/voice-translator!34
No description provided.