khyretos/voice-translator
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Update python Docker tag to v3.15 #35

Merged
kompas-review merged 1 commit from renovate/docker-non-major into main 2026-11-01 14:00:23 +01:00
Conversation 3 Commits 1 Files changed 1 +1 -1
kompas-deps commented 2026-11-01 13:57:21 +01:00
Collaborator
Copy link

This PR contains the following updates:

Package Type Update Change
python (source) final minor 3.11-slim → 3.15-slim

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [python](https://hub.docker.com/_/python) ([source](https://github.com/docker-library/python)) | final | minor | `3.11-slim` → `3.15-slim` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOTguMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE5OC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBzIl19-->
Update python Docker tag to v3.15
All checks were successful
kreative-pr/review reviewed: 0 finding(s)
Details
lint / megalinter (pull_request) Successful in 2m57s
Details
kk / all-checks All 2 checks passed
696b7ee36a
kompas-review commented 2026-11-01 13:57:37 +01:00
Collaborator
Copy link

Title

Update python Docker tag to v3.15

PR Type

Bug fix

Description

  • Update Python Docker base image version.

  • Upgrade from python:3.11-slim to 3.15-slim.

  • Ensures compatibility with latest Python runtime.

Diagram Walkthrough

flowchart LR
  OldImage["Old Image: python:3.11-slim"] -->|"Upgrade"| NewImage["New Image: python:3.15-slim"]

File Walkthrough
Relevant files
Dependencies
Dockerfile
Upgrade Python base image version                                               

Dockerfile

  • Updated base image tag from python:3.11-slim to python:3.15-slim.
  • No other logic or dependency changes were made in this file.
 +1/-1     
## Title <!-- pr-agent:describe:persistent --> Update python Docker tag to v3.15 ___ ### **PR Type** Bug fix ___ ### **Description** - Update Python Docker base image version. - Upgrade from `python:3.11-slim` to `3.15-slim`. - Ensures compatibility with latest Python runtime. ___ ### Diagram Walkthrough ```mermaid flowchart LR OldImage["Old Image: python:3.11-slim"] -->|"Upgrade"| NewImage["New Image: python:3.15-slim"] ``` <details> <summary><h3> File Walkthrough</h3></summary> <table><thead><tr><th></th><th align="left">Relevant files</th></tr></thead><tbody><tr><td><strong>Dependencies</strong></td><td><table> <tr> <td> <details> <summary><strong>Dockerfile</strong><dd><code>Upgrade Python base image version</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></summary> <hr> Dockerfile <ul><li>Updated base image tag from <code>python:3.11-slim</code> to <code>python:3.15-slim</code>.<br> <li> No other logic or dependency changes were made in this file.</ul> </details> </td> <td><a href="https://git.kreative-kompas.com/khyretos/voice-translator/src/branch/renovate/docker-non-major/Dockerfile">+1/-1</a>&nbsp; &nbsp; &nbsp; </td> </tr> </table></td></tr></tr></tbody></table> </details> ___
kompas-review commented 2026-11-01 13:57:43 +01:00
Collaborator
Copy link

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
⚡ No major issues detected
## PR Reviewer Guide 🔍 <!-- pr-agent:review:full --> Here are some key observations to aid the review process: <table> <tr><td>🧪&nbsp;<strong>No relevant tests</strong></td></tr> <tr><td>🔒&nbsp;<strong>No security concerns identified</strong></td></tr> <tr><td>⚡&nbsp;<strong>No major issues detected</strong></td></tr> </table>
forgejo-actions commented 2026-11-01 14:00:17 +01:00
Copy link

🧹 Lint report · ❌ 46 problems in 7 checks · 🧹 5 formatting checks to tidy

Nothing here blocks the merge (report only).

Check Errors Warnings Files
❌ REPOSITORY · grype 18 0 –
❌ PYTHON · bandit 14 0 28
❌ MARKDOWN · markdownlint 7 0 13
❌ PYTHON · ruff 4 0 28
❌ BASH · shellcheck 1 0 4
❌ DOCKERFILE · hadolint 1 0 1
❌ REPOSITORY · trivy 1 0 –
REPOSITORY · grype: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/repository_grype/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME       INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS         RISK   
tar        6.2.1      7.5.19    npm   GHSA-23hp-3jrh-7fpw  Critical  0.6% (47th)  0.5    
tar        6.2.1      7.5.7     npm   GHSA-34x7-hfp2-rc4v  High      0.6% (49th)  0.5    
tar        6.2.1      7.5.21    npm   GHSA-r292-9mhp-454m  High      0.5% (44th)  0.4    
tar        6.2.1      7.5.10    npm   GHSA-qffp-2rhf-9h96  High      0.5% (40th)  0.4    
tar        6.2.1      7.5.18    npm   GHSA-8x88-c5mf-7j5w  High      0.4% (37th)  0.3    
tar        6.2.1      7.5.18    npm   GHSA-w8wr-v893-vjvp  Medium    0.6% (50th)  0.3    
tar        6.2.1      7.5.3     npm   GHSA-8qq5-rm4j-mr97  High      0.4% (31st)  0.3    
undici     6.28.1     6.29.1    npm   GHSA-xjj6-f33q-929c  High      0.3% (27th)  0.3    
tar        6.2.1      7.5.8     npm   GHSA-83g3-92jg-28cx  High      0.3% (25th)  0.2    
tar        6.2.1      7.5.4     npm   GHSA-r6q2-hw4h-h46w  High      0.3% (18th)  0.2    
tar        6.2.1      7.5.11    npm   GHSA-9ppj-qmqm-q256  High      0.3% (19th)  0.2    
tar        6.2.1      7.5.17    npm   GHSA-gvwx-54wh-qm9j  Medium    0.4% (29th)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-4qv8-2p9j-2685  Medium    0.3% (25th)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-9fm3-97px-rjf6  Medium    0.3% (25th)  0.2    
minimatch  3.1.5      11.0.1    npm   GHSA-g3hv-75wg-m249  Medium    0.3% (21st)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-qrxm-fqhp-jwvm  High      0.2% (8th)   0.1    
undici     6.28.1     6.29.1    npm   GHSA-2m5v-pch6-74hx  High      0.2% (8th)   0.1    
tar        6.2.1      7.5.16    npm   GHSA-vmf3-w455-68vh  Medium    0.2% (4th)   < 0.1
[0162] ERROR discovered vulnerabilities at or above the severity threshold
PYTHON · bandit: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/python_bandit/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
Run started:2026-11-01 12:57:37.152704+00:00
Test results:
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:44:13
43	    try:
44	        with urllib.request.urlopen(MODEL_LIST_URL, timeout=15) as resp:
45	            return json.load(resp)
--------------------------------------------------
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:114:8
113	        print(f"   URL: {url}")
114	        urllib.request.urlretrieve(url, archive_path, show_progress)
115	        print()  # newline after progress bar
--------------------------------------------------
>> Issue: [B202:tarfile_unsafe_members] tarfile.extractall used without any validation. Please check and discard dangerous members.
…
MARKDOWN · markdownlint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
AI_TRANSLATION.md:94 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Whisper recognition/translatio..."]
AI_TRANSLATION.md:122 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Vosk model sharing across sess..."]
docs/qwen-situations/VT1/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. It put `pip install moonshi..."]
docs/qwen-situations/VT2/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. vt-w1 put the `VT_FORCE_PYT..."]
README.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "🎤 Voice Translator - Real-tim..."]
README.md:61 error MD001/heading-increment Heading levels should only increment by one level at a time [Expected: h3; Actual: h4]
REFACTOR.md:14 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
PYTHON · ruff: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/python_ruff/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
F841 Local variable `display_html` is assigned to but never used
    --> voice_translator.py:3354:17
     |
3353 |                 # Filled in by the page's JS polling (/display_data), not by Gradio.
3354 |                 display_html = gr.HTML(
     |                 ^^^^^^^^^^^^
3355 |                     label="Display",
3356 |                     value='<div id="vt-display"><div>Loading...</div></div>',
     |
help: Remove assignment to unused variable `display_html`
F841 Local variable `recognized_output` is assigned to but never used
    --> voice_translator.py:3360:21
     |
3359 |                 with gr.Accordion("Outputs", open=False):
3360 |                     recognized_output = gr.Textbox(
     |                     ^^^^^^^^^^^^^^^^^
3361 |                         label="Recognized",
3362 |                         elem_id="recognized-output-text",
     |
help: Remove assignment to unused variable `recognized_output`
F841 Local variable `translated_output` is assigned to but never used
…
BASH · shellcheck: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
In setup.sh line 41:
source venv/bin/activate
       ^---------------^ SC1091 (info): Not following: venv/bin/activate: openBinaryFile: does not exist (No such file or directory)
For more information:
  https://www.shellcheck.net/wiki/SC1091 -- Not following: venv/bin/activate:...
DOCKERFILE · hadolint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
Dockerfile:13 DL3015 info: Avoid additional packages by specifying `--no-install-recommends`
REPOSITORY · trivy: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
2026-11-01T12:57:33Z	INFO	[vulndb] Need to update DB
2026-11-01T12:57:33Z	INFO	[vulndb] Downloading vulnerability DB...
2026-11-01T12:57:33Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
2.44 MiB / 131.14 MiB [->____________________________________________________________] 1.86% ? p/s ?7.80 MiB / 131.14 MiB [--->__________________________________________________________] 5.94% ? p/s ?10.93 MiB / 131.14 MiB [----->_______________________________________________________] 8.34% ? p/s ?14.74 MiB / 131.14 MiB [----->_________________________________________] 11.24% 20.88 MiB p/s ETA 5s17.48 MiB / 131.14 MiB [------>________________________________________] 13.33% 20.88 MiB p/s ETA 5s20.59 MiB / 131.14 MiB [------->_______________________________________] 15.70% 20.88 MiB p/s ETA 5s22.77 MiB / 131.14 MiB [-------->______________________________________] 17.36% 20.40 MiB p/s ETA 5s25.17 MiB / 131.14 MiB [--------->_____________________________________] 19.19% 20.40 MiB p/s ETA 5s29.57 MiB / 131.14 MiB [---------->____________________________________] 22.55% 20.40 MiB p/s ETA 4s35.76 MiB / 131.14 MiB [------------>__________________________________] 27.27% 20.48 MiB p/s ETA 4s41.74 MiB / 131.14 MiB [-------------->________________________________] 31.83% 20.48 MiB p/s ETA 4s45.76 MiB / 131.14 MiB [---------------->______________________________] 34.89% 20.48 MiB p/s ETA 4s49.75 MiB / 131.14 MiB [----------------->_____________________________] 37.93% 20.66 MiB p/s ETA 3s54.45 MiB / 131.14 MiB [------------------->___________________________] 41.52% 20.66 MiB p/s ETA 3s63.04 MiB / 131.14 MiB [---------------------->________________________] 48.07% 20.66 MiB p/s ETA 3s71.21 MiB / 131.14 MiB [------------------------->_____________________] 54.30% 21.63 MiB p/s ETA 2s84.43 MiB / 131.14 MiB [------------------------------>________________] 64.38% 21.63 MiB p/s ETA 2s96.84 MiB / 131.14 MiB [---------------------------------->____________] 73.84% 21.63 MiB p/s ETA 1s104.94 MiB / 131.14 MiB [------------------------------------>_________] 80.02% 23.87 MiB p/s ETA 1s116.29 MiB / 131.14 MiB [---------------------------------------->_____] 88.67% 23.87 MiB p/s ETA 0s126.13 MiB / 131.14 MiB [-------------------------------------------->_] 96.18% 23.87 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.53 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.53 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.53 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 20.59 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 20.59 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 20.59 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 19.26 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 19.26 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 19.26 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 18.02 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 18.02 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 18.02 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 16.86 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 16.86 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 16.86 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 15.77 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 15.77 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 15.77 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 14.75 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 14.75 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 14.75 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 13.80 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 13.80 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 13.80 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.91 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.91 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.91 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 11.30 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 11.30 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 11.30 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 10.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 10.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 10.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.89 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.89 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.89 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.25 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.25 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.25 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.65 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.65 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.65 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.09 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.09 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.09 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.63 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.63 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.63 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.20 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------------] 100.00% 7.75 MiB p/s 17s2026-11-01T12:57:50Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-11-01T12:57:50Z	INFO	[vuln] Vulnerability scanning is enabled
2026-11-01T12:57:50Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-11-01T12:57:50Z	INFO	[checks-client] Need to update the checks bundle
2026-11-01T12:57:50Z	INFO	[checks-client] Downloading the checks bundle...
234.57 KiB / 234.57 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-11-01T12:57:53Z	WARN	[rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0"
2026-11-01T12:57:53Z	INFO	[npm] To collect the license information of packages, "npm install" needs to be performed beforehand	dir="discord_bridge/node_modules"
2026-11-01T12:57:53Z	INFO	Number of language-specific files	num=1
2026-11-01T12:57:53Z	INFO	[npm] Detecting vulnerabilities...
2026-11-01T12:57:53Z	INFO	Detected config files	num=1
Report Summary
┌──────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│              Target              │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ discord_bridge/package-lock.json │    npm     │       18        │         -         │
├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile                       │ dockerfile │        -        │         3         │
└──────────────────────────────────┴────────────┴─────────────────┴───────────────────┘
…

🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): PYTHON · isort (28 files checked), YAML · prettier (7 files checked), BASH · shfmt (4 files checked), JSON · prettier (4 files checked), PYTHON · black (28 files checked)

✅ Clean: git_diff, gitleaks, jsonlint, secretlint, trufflehog, yamllint

MegaLinter on soucouyant · full logs in the Actions run · comment /improve for AI fix suggestions

<!-- kk-lint --> ## 🧹 Lint report · ❌ 46 problems in 7 checks · 🧹 5 formatting checks to tidy Nothing here blocks the merge (report only). | | Check | Errors | Warnings | Files | |---|---|---:|---:|---:| | ❌ | REPOSITORY · grype | 18 | 0 | – | | ❌ | PYTHON · bandit | 14 | 0 | 28 | | ❌ | MARKDOWN · markdownlint | 7 | 0 | 13 | | ❌ | PYTHON · ruff | 4 | 0 | 28 | | ❌ | BASH · shellcheck | 1 | 0 | 4 | | ❌ | DOCKERFILE · hadolint | 1 | 0 | 1 | | ❌ | REPOSITORY · trivy | 1 | 0 | – | <details><summary>REPOSITORY · grype: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_grype/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft NAME INSTALLED FIXED IN TYPE VULNERABILITY SEVERITY EPSS RISK tar 6.2.1 7.5.19 npm GHSA-23hp-3jrh-7fpw Critical 0.6% (47th) 0.5 tar 6.2.1 7.5.7 npm GHSA-34x7-hfp2-rc4v High 0.6% (49th) 0.5 tar 6.2.1 7.5.21 npm GHSA-r292-9mhp-454m High 0.5% (44th) 0.4 tar 6.2.1 7.5.10 npm GHSA-qffp-2rhf-9h96 High 0.5% (40th) 0.4 tar 6.2.1 7.5.18 npm GHSA-8x88-c5mf-7j5w High 0.4% (37th) 0.3 tar 6.2.1 7.5.18 npm GHSA-w8wr-v893-vjvp Medium 0.6% (50th) 0.3 tar 6.2.1 7.5.3 npm GHSA-8qq5-rm4j-mr97 High 0.4% (31st) 0.3 undici 6.28.1 6.29.1 npm GHSA-xjj6-f33q-929c High 0.3% (27th) 0.3 tar 6.2.1 7.5.8 npm GHSA-83g3-92jg-28cx High 0.3% (25th) 0.2 tar 6.2.1 7.5.4 npm GHSA-r6q2-hw4h-h46w High 0.3% (18th) 0.2 tar 6.2.1 7.5.11 npm GHSA-9ppj-qmqm-q256 High 0.3% (19th) 0.2 tar 6.2.1 7.5.17 npm GHSA-gvwx-54wh-qm9j Medium 0.4% (29th) 0.2 undici 6.28.1 6.29.1 npm GHSA-4qv8-2p9j-2685 Medium 0.3% (25th) 0.2 undici 6.28.1 6.29.1 npm GHSA-9fm3-97px-rjf6 Medium 0.3% (25th) 0.2 minimatch 3.1.5 11.0.1 npm GHSA-g3hv-75wg-m249 Medium 0.3% (21st) 0.2 undici 6.28.1 6.29.1 npm GHSA-qrxm-fqhp-jwvm High 0.2% (8th) 0.1 undici 6.28.1 6.29.1 npm GHSA-2m5v-pch6-74hx High 0.2% (8th) 0.1 tar 6.2.1 7.5.16 npm GHSA-vmf3-w455-68vh Medium 0.2% (4th) < 0.1 [0162] ERROR discovered vulnerabilities at or above the severity threshold ``` </details> <details><summary>PYTHON · bandit: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/python_bandit/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: Run started:2026-11-01 12:57:37.152704+00:00 Test results: >> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. Severity: Medium Confidence: High CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html) More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:44:13 43 try: 44 with urllib.request.urlopen(MODEL_LIST_URL, timeout=15) as resp: 45 return json.load(resp) -------------------------------------------------- >> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. Severity: Medium Confidence: High CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html) More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:114:8 113 print(f" URL: {url}") 114 urllib.request.urlretrieve(url, archive_path, show_progress) 115 print() # newline after progress bar -------------------------------------------------- >> Issue: [B202:tarfile_unsafe_members] tarfile.extractall used without any validation. Please check and discard dangerous members. … ``` </details> <details><summary>MARKDOWN · markdownlint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: AI_TRANSLATION.md:94 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Whisper recognition/translatio..."] AI_TRANSLATION.md:122 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Vosk model sharing across sess..."] docs/qwen-situations/VT1/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. It put `pip install moonshi..."] docs/qwen-situations/VT2/README.md:6 error MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. vt-w1 put the `VT_FORCE_PYT..."] README.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "🎤 Voice Translator - Real-tim..."] README.md:61 error MD001/heading-increment Heading levels should only increment by one level at a time [Expected: h3; Actual: h4] REFACTOR.md:14 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] ``` </details> <details><summary>PYTHON · ruff: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/python_ruff/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: F841 Local variable `display_html` is assigned to but never used --> voice_translator.py:3354:17 | 3353 | # Filled in by the page's JS polling (/display_data), not by Gradio. 3354 | display_html = gr.HTML( | ^^^^^^^^^^^^ 3355 | label="Display", 3356 | value='<div id="vt-display"><div>Loading...</div></div>', | help: Remove assignment to unused variable `display_html` F841 Local variable `recognized_output` is assigned to but never used --> voice_translator.py:3360:21 | 3359 | with gr.Accordion("Outputs", open=False): 3360 | recognized_output = gr.Textbox( | ^^^^^^^^^^^^^^^^^ 3361 | label="Recognized", 3362 | elem_id="recognized-output-text", | help: Remove assignment to unused variable `recognized_output` F841 Local variable `translated_output` is assigned to but never used … ``` </details> <details><summary>BASH · shellcheck: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: In setup.sh line 41: source venv/bin/activate ^---------------^ SC1091 (info): Not following: venv/bin/activate: openBinaryFile: does not exist (No such file or directory) For more information: https://www.shellcheck.net/wiki/SC1091 -- Not following: venv/bin/activate:... ``` </details> <details><summary>DOCKERFILE · hadolint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: Dockerfile:13 DL3015 info: Avoid additional packages by specifying `--no-install-recommends` ``` </details> <details><summary>REPOSITORY · trivy: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: 2026-11-01T12:57:33Z INFO [vulndb] Need to update DB 2026-11-01T12:57:33Z INFO [vulndb] Downloading vulnerability DB... 2026-11-01T12:57:33Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2" 2.44 MiB / 131.14 MiB [->____________________________________________________________] 1.86% ? p/s ?7.80 MiB / 131.14 MiB [--->__________________________________________________________] 5.94% ? p/s ?10.93 MiB / 131.14 MiB [----->_______________________________________________________] 8.34% ? p/s ?14.74 MiB / 131.14 MiB [----->_________________________________________] 11.24% 20.88 MiB p/s ETA 5s17.48 MiB / 131.14 MiB [------>________________________________________] 13.33% 20.88 MiB p/s ETA 5s20.59 MiB / 131.14 MiB [------->_______________________________________] 15.70% 20.88 MiB p/s ETA 5s22.77 MiB / 131.14 MiB [-------->______________________________________] 17.36% 20.40 MiB p/s ETA 5s25.17 MiB / 131.14 MiB [--------->_____________________________________] 19.19% 20.40 MiB p/s ETA 5s29.57 MiB / 131.14 MiB [---------->____________________________________] 22.55% 20.40 MiB p/s ETA 4s35.76 MiB / 131.14 MiB [------------>__________________________________] 27.27% 20.48 MiB p/s ETA 4s41.74 MiB / 131.14 MiB [-------------->________________________________] 31.83% 20.48 MiB p/s ETA 4s45.76 MiB / 131.14 MiB [---------------->______________________________] 34.89% 20.48 MiB p/s ETA 4s49.75 MiB / 131.14 MiB [----------------->_____________________________] 37.93% 20.66 MiB p/s ETA 3s54.45 MiB / 131.14 MiB [------------------->___________________________] 41.52% 20.66 MiB p/s ETA 3s63.04 MiB / 131.14 MiB [---------------------->________________________] 48.07% 20.66 MiB p/s ETA 3s71.21 MiB / 131.14 MiB [------------------------->_____________________] 54.30% 21.63 MiB p/s ETA 2s84.43 MiB / 131.14 MiB [------------------------------>________________] 64.38% 21.63 MiB p/s ETA 2s96.84 MiB / 131.14 MiB [---------------------------------->____________] 73.84% 21.63 MiB p/s ETA 1s104.94 MiB / 131.14 MiB [------------------------------------>_________] 80.02% 23.87 MiB p/s ETA 1s116.29 MiB / 131.14 MiB [---------------------------------------->_____] 88.67% 23.87 MiB p/s ETA 0s126.13 MiB / 131.14 MiB [-------------------------------------------->_] 96.18% 23.87 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 25.15 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.53 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.53 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 23.53 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 22.01 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 20.59 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 20.59 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 20.59 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 19.26 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 19.26 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 19.26 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 18.02 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 18.02 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 18.02 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 16.86 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 16.86 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 16.86 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 15.77 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 15.77 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 15.77 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 14.75 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 14.75 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 14.75 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 13.80 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 13.80 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 13.80 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.91 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.91 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.91 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 12.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 11.30 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 11.30 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 11.30 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 10.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 10.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------->] 100.00% 10.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.89 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.89 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.89 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.25 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.25 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 9.25 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.65 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.65 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.65 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.09 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.09 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 8.09 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.57 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 7.08 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.63 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.63 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.63 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [--------------------------------------------->] 100.00% 6.20 MiB p/s ETA 0s131.14 MiB / 131.14 MiB [-------------------------------------------------] 100.00% 7.75 MiB p/s 17s2026-11-01T12:57:50Z INFO [vulndb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-db:2" 2026-11-01T12:57:50Z INFO [vuln] Vulnerability scanning is enabled 2026-11-01T12:57:50Z INFO [misconfig] Misconfiguration scanning is enabled 2026-11-01T12:57:50Z INFO [checks-client] Need to update the checks bundle 2026-11-01T12:57:50Z INFO [checks-client] Downloading the checks bundle... 234.57 KiB / 234.57 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-11-01T12:57:53Z WARN [rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0" 2026-11-01T12:57:53Z INFO [npm] To collect the license information of packages, "npm install" needs to be performed beforehand dir="discord_bridge/node_modules" 2026-11-01T12:57:53Z INFO Number of language-specific files num=1 2026-11-01T12:57:53Z INFO [npm] Detecting vulnerabilities... 2026-11-01T12:57:53Z INFO Detected config files num=1 Report Summary ┌──────────────────────────────────┬────────────┬─────────────────┬───────────────────┐ │ Target │ Type │ Vulnerabilities │ Misconfigurations │ ├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ discord_bridge/package-lock.json │ npm │ 18 │ - │ ├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ Dockerfile │ dockerfile │ - │ 3 │ └──────────────────────────────────┴────────────┴─────────────────┴───────────────────┘ … ``` </details> 🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): PYTHON · isort (28 files checked), YAML · prettier (7 files checked), BASH · shfmt (4 files checked), JSON · prettier (4 files checked), PYTHON · black (28 files checked) ✅ Clean: git_diff, gitleaks, jsonlint, secretlint, trufflehog, yamllint <sub>MegaLinter on soucouyant · full logs in the Actions run · comment <code>/improve</code> for AI fix suggestions</sub>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
deps
Renovate: patch/minor/digest update

  
deps-major
Renovate: major or 0.x minor update

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
hold
kompas-review waits until Kees replies merge

  
invalid
This doesn't seem right

  
question
Further information is requested

  
security
Renovate: fixes a known vulnerability

  
wontfix
This will not be worked on

No labels
bug
deps
deps-major
documentation
duplicate
enhancement
good first issue
help wanted
hold
invalid
question
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
khyretos/voice-translator!35
No description provided.