Update dependency @discordjs/opus to ^0.11.0 #38

Merged
khyretos merged 1 commit from renovate/discordjs-opus-0.x into main 2026-11-09 02:58:03 +01:00
Collaborator

This PR contains the following updates:

Package Change Age Confidence
@discordjs/opus ^0.10.0 → ^0.11.0 age confidence

Release Notes

discordjs/opus (@​discordjs/opus)

v0.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/discordjs/opus/compare/v0.10.0...v0.11.0


Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@discordjs/opus](https://github.com/discordjs/opus) | [`^0.10.0` → `^0.11.0`](https://renovatebot.com/diffs/npm/@discordjs%2fopus/0.10.0/0.11.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@discordjs%2fopus/0.11.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@discordjs%2fopus/0.10.0/0.11.0?slim=true) | --- ### Release Notes <details> <summary>discordjs/opus (@&#8203;discordjs/opus)</summary> ### [`v0.11.0`](https://github.com/discordjs/opus/releases/tag/v0.11.0) [Compare Source](https://github.com/discordjs/opus/compare/v0.10.0...v0.11.0) #### What's Changed - chore: cleanup matrices by [@&#8203;vladfrangu](https://github.com/vladfrangu) in [#&#8203;168](https://github.com/discordjs/opus/pull/168) - chore: Use a normal space in the pull request template by [@&#8203;Jiralite](https://github.com/Jiralite) in [#&#8203;169](https://github.com/discordjs/opus/pull/169) - ci: add builds on ubuntu-24.04 by [@&#8203;krische](https://github.com/krische) in [#&#8203;170](https://github.com/discordjs/opus/pull/170) - add "opus/silk/arm/NSQ_neon.c" to the "target_arch=="arm64"" condit… by [@&#8203;deepso7](https://github.com/deepso7) in [#&#8203;166](https://github.com/discordjs/opus/pull/166) - chore: remove ubuntu-20.04 by [@&#8203;vladfrangu](https://github.com/vladfrangu) in [#&#8203;172](https://github.com/discordjs/opus/pull/172) - chore: use a submodule for opus library by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;164](https://github.com/discordjs/opus/pull/164) - fix: name conflict between libopus and the package by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;179](https://github.com/discordjs/opus/pull/179) - ci: remove old versions by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;177](https://github.com/discordjs/opus/pull/177) - ci: simplify and fix arm64 build by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;180](https://github.com/discordjs/opus/pull/180) - docs: update required Node version by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;181](https://github.com/discordjs/opus/pull/181) - chore: update opus to version 1.5.2 by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;178](https://github.com/discordjs/opus/pull/178) - ci: update setup-node to v4 by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;182](https://github.com/discordjs/opus/pull/182) - chore: update all dependencies by [@&#8203;orgads](https://github.com/orgads) in [#&#8203;183](https://github.com/discordjs/opus/pull/183) - ci: Use actions/checkout\@&#8203;v5 by [@&#8203;Jiralite](https://github.com/Jiralite) in [#&#8203;184](https://github.com/discordjs/opus/pull/184) - chore: update workflows by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;189](https://github.com/discordjs/opus/pull/189) - feat(OpusEncoder): make `rate` and `channels` optional by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;188](https://github.com/discordjs/opus/pull/188) - chore: bump dependencies by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;190](https://github.com/discordjs/opus/pull/190) - refactor!: bump minimum node version to v20 by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;192](https://github.com/discordjs/opus/pull/192) - fix(build): separate preprocessor definitions by [@&#8203;kellen-miller](https://github.com/kellen-miller) in [#&#8203;212](https://github.com/discordjs/opus/pull/212) - build: pnpm by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;215](https://github.com/discordjs/opus/pull/215) - refactor(deps): replace per-platform config.h with gyp defines by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;216](https://github.com/discordjs/opus/pull/216) - refactor!: bump minimum node version to v22 by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;218](https://github.com/discordjs/opus/pull/218) - chore: bump dependencies by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;219](https://github.com/discordjs/opus/pull/219) - ci: fix runner matrix and add Debian glibc prebuilds by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;220](https://github.com/discordjs/opus/pull/220) - fix(OpusEncoder): reject DataView input instead of aborting by [@&#8203;theosotr](https://github.com/theosotr) in [#&#8203;209](https://github.com/discordjs/opus/pull/209) - docs: separate platform support from prebuilt binaries by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;224](https://github.com/discordjs/opus/pull/224) - ci: add Ubuntu 26.04 runners for glibc 2.43 prebuilds by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;225](https://github.com/discordjs/opus/pull/225) - fix(OpusEncoder): use a fixed-size decode buffer by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;221](https://github.com/discordjs/opus/pull/221) - fix(OpusEncoder): don't abort on encode errors by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;222](https://github.com/discordjs/opus/pull/222) - build: set package.json files by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;227](https://github.com/discordjs/opus/pull/227) - chore: add release ci by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;228](https://github.com/discordjs/opus/pull/228) - chore: release v0.11.0 by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;229](https://github.com/discordjs/opus/pull/229) - fix: update release command to target specific prebuild directory by [@&#8203;almeidx](https://github.com/almeidx) in [#&#8203;230](https://github.com/discordjs/opus/pull/230) #### New Contributors - [@&#8203;krische](https://github.com/krische) made their first contribution in [#&#8203;170](https://github.com/discordjs/opus/pull/170) - [@&#8203;deepso7](https://github.com/deepso7) made their first contribution in [#&#8203;166](https://github.com/discordjs/opus/pull/166) - [@&#8203;orgads](https://github.com/orgads) made their first contribution in [#&#8203;164](https://github.com/discordjs/opus/pull/164) - [@&#8203;almeidx](https://github.com/almeidx) made their first contribution in [#&#8203;189](https://github.com/discordjs/opus/pull/189) - [@&#8203;kellen-miller](https://github.com/kellen-miller) made their first contribution in [#&#8203;212](https://github.com/discordjs/opus/pull/212) - [@&#8203;theosotr](https://github.com/theosotr) made their first contribution in [#&#8203;209](https://github.com/discordjs/opus/pull/209) - [@&#8203;github-actions](https://github.com/github-actions)\[bot] made their first contribution in [#&#8203;229](https://github.com/discordjs/opus/pull/229) **Full Changelog**: <https://github.com/discordjs/opus/compare/v0.10.0...v0.11.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOTkuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE5OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBzLW1ham9yIiwiaG9sZCJdfQ==-->
Update dependency @discordjs/opus to ^0.11.0
All checks were successful
kreative-pr/review reviewed: 0 finding(s)
lint / megalinter (pull_request) Successful in 53s
kk / all-checks All 2 checks passed
2dc22494f4
Collaborator

On hold (hold): this PR does not merge by itself. Reply merge here and it merges as soon as the checks pass.

<!-- kk-automerge:hold --> On hold (hold): this PR does not merge by itself. Reply `merge` here and it merges as soon as the checks pass.
Collaborator

Title

Update dependency @discordjs/opus to ^0.11.0


PR Type

dependencies


Description

  • Update @discordjs/opus to version ^0.11.0

  • Modify optional dependencies in package.json


Diagram Walkthrough

flowchart LR
  A["package.json"] -->|"update optional dep"| B["@discordjs/opus"]

File Walkthrough

Relevant files
Dependencies
package.json
Upgrade @discordjs/opus to 0.11.0                                               

discord_bridge/package.json

  • Updated @discordjs/opus from ^0.10.0 to ^0.11.0
  • Changed the entry within the optionalDependencies section
  • No other dependency versions were modified in this file
+1/-1     

## Title <!-- pr-agent:describe:persistent --> Update dependency @discordjs/opus to ^0.11.0 ___ ### **PR Type** dependencies ___ ### **Description** - Update `@discordjs/opus` to version `^0.11.0` - Modify optional dependencies in `package.json` ___ ### Diagram Walkthrough ```mermaid flowchart LR A["package.json"] -->|"update optional dep"| B["@discordjs/opus"] ``` <details> <summary><h3> File Walkthrough</h3></summary> <table><thead><tr><th></th><th align="left">Relevant files</th></tr></thead><tbody><tr><td><strong>Dependencies</strong></td><td><table> <tr> <td> <details> <summary><strong>package.json</strong><dd><code>Upgrade @discordjs/opus to 0.11.0</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></summary> <hr> discord_bridge/package.json <ul><li>Updated <code>@discordjs/opus</code> from <code>^0.10.0</code> to <code>^0.11.0</code><br> <li> Changed the entry within the <code>optionalDependencies</code> section<br> <li> No other dependency versions were modified in this file</ul> </details> </td> <td><a href="https://git.kreative-kompas.com/khyretos/voice-translator/src/branch/renovate/discordjs-opus-0.x/discord_bridge/package.json">+1/-1</a>&nbsp; &nbsp; &nbsp; </td> </tr> </table></td></tr></tr></tbody></table> </details> ___
Collaborator

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
⚡ No major issues detected
## PR Reviewer Guide 🔍 <!-- pr-agent:review:full --> Here are some key observations to aid the review process: <table> <tr><td>🧪&nbsp;<strong>No relevant tests</strong></td></tr> <tr><td>🔒&nbsp;<strong>No security concerns identified</strong></td></tr> <tr><td>⚡&nbsp;<strong>No major issues detected</strong></td></tr> </table>

🧹 Lint report · ❌ 44 problems in 7 checks · 🧹 5 formatting checks to tidy

Nothing here blocks the merge (report only).

Check Errors Warnings Files
❌ REPOSITORY · grype 18 0 –
❌ PYTHON · bandit 14 0 28
❌ MARKDOWN · markdownlint 5 0 13
❌ PYTHON · ruff 4 0 28
❌ BASH · shellcheck 1 0 4
❌ DOCKERFILE · hadolint 1 0 1
❌ REPOSITORY · trivy 1 0 –
REPOSITORY · grype: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/repository_grype/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME       INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS         RISK   
tar        6.2.1      7.5.19    npm   GHSA-23hp-3jrh-7fpw  Critical  0.6% (47th)  0.5    
tar        6.2.1      7.5.7     npm   GHSA-34x7-hfp2-rc4v  High      0.6% (49th)  0.5    
tar        6.2.1      7.5.21    npm   GHSA-r292-9mhp-454m  High      0.5% (44th)  0.4    
tar        6.2.1      7.5.10    npm   GHSA-qffp-2rhf-9h96  High      0.5% (40th)  0.4    
tar        6.2.1      7.5.18    npm   GHSA-8x88-c5mf-7j5w  High      0.4% (37th)  0.3    
tar        6.2.1      7.5.18    npm   GHSA-w8wr-v893-vjvp  Medium    0.6% (50th)  0.3    
tar        6.2.1      7.5.3     npm   GHSA-8qq5-rm4j-mr97  High      0.4% (31st)  0.3    
undici     6.28.1     6.29.1    npm   GHSA-xjj6-f33q-929c  High      0.3% (27th)  0.3    
tar        6.2.1      7.5.8     npm   GHSA-83g3-92jg-28cx  High      0.3% (25th)  0.2    
tar        6.2.1      7.5.4     npm   GHSA-r6q2-hw4h-h46w  High      0.3% (18th)  0.2    
tar        6.2.1      7.5.11    npm   GHSA-9ppj-qmqm-q256  High      0.3% (19th)  0.2    
tar        6.2.1      7.5.17    npm   GHSA-gvwx-54wh-qm9j  Medium    0.4% (29th)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-4qv8-2p9j-2685  Medium    0.3% (25th)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-9fm3-97px-rjf6  Medium    0.3% (25th)  0.2    
minimatch  3.1.5      11.0.1    npm   GHSA-g3hv-75wg-m249  Medium    0.3% (21st)  0.2    
undici     6.28.1     6.29.1    npm   GHSA-qrxm-fqhp-jwvm  High      0.2% (8th)   0.1    
undici     6.28.1     6.29.1    npm   GHSA-2m5v-pch6-74hx  High      0.2% (8th)   0.1    
tar        6.2.1      7.5.16    npm   GHSA-vmf3-w455-68vh  Medium    0.2% (4th)   < 0.1
[0044] ERROR discovered vulnerabilities at or above the severity threshold
PYTHON · bandit: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/python_bandit/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
Run started:2026-11-02 04:31:20.829821+00:00
Test results:
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:44:13
43	    try:
44	        with urllib.request.urlopen(MODEL_LIST_URL, timeout=15) as resp:
45	            return json.load(resp)
--------------------------------------------------
>> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
   Severity: Medium   Confidence: High
   CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen
   Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:114:8
113	        print(f"   URL: {url}")
114	        urllib.request.urlretrieve(url, archive_path, show_progress)
115	        print()  # newline after progress bar
--------------------------------------------------
>> Issue: [B202:tarfile_unsafe_members] tarfile.extractall used without any validation. Please check and discard dangerous members.
…
MARKDOWN · markdownlint: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
AI_TRANSLATION.md:94 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Whisper recognition/translatio..."]
AI_TRANSLATION.md:122 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Vosk model sharing across sess..."]
README.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "🎤 Voice Translator - Real-tim..."]
README.md:61 error MD001/heading-increment Heading levels should only increment by one level at a time [Expected: h3; Actual: h4]
REFACTOR.md:14 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
PYTHON · ruff: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/python_ruff/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
F841 Local variable `display_html` is assigned to but never used
    --> voice_translator.py:3354:17
     |
3353 |                 # Filled in by the page's JS polling (/display_data), not by Gradio.
3354 |                 display_html = gr.HTML(
     |                 ^^^^^^^^^^^^
3355 |                     label="Display",
3356 |                     value='<div id="vt-display"><div>Loading...</div></div>',
     |
help: Remove assignment to unused variable `display_html`
F841 Local variable `recognized_output` is assigned to but never used
    --> voice_translator.py:3360:21
     |
3359 |                 with gr.Accordion("Outputs", open=False):
3360 |                     recognized_output = gr.Textbox(
     |                     ^^^^^^^^^^^^^^^^^
3361 |                         label="Recognized",
3362 |                         elem_id="recognized-output-text",
     |
help: Remove assignment to unused variable `recognized_output`
F841 Local variable `translated_output` is assigned to but never used
…
BASH · shellcheck: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
In setup.sh line 41:
source venv/bin/activate
       ^---------------^ SC1091 (info): Not following: venv/bin/activate: openBinaryFile: does not exist (No such file or directory)
For more information:
  https://www.shellcheck.net/wiki/SC1091 -- Not following: venv/bin/activate:...
DOCKERFILE · hadolint: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
Dockerfile:13 DL3015 info: Avoid additional packages by specifying `--no-install-recommends`
REPOSITORY · trivy: first lines of the output
See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/voice-translator
Linter raw log:
2026-11-02T04:31:19Z	INFO	[vulndb] Need to update DB
2026-11-02T04:31:19Z	INFO	[vulndb] Downloading vulnerability DB...
2026-11-02T04:31:19Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
19.84 MiB / 131.42 MiB [--------->__________________________________________________] 15.10% ? p/s ?32.67 MiB / 131.42 MiB [-------------->_____________________________________________] 24.86% ? p/s ?42.03 MiB / 131.42 MiB [------------------->________________________________________] 31.98% ? p/s ?51.55 MiB / 131.42 MiB [------------------>____________________________] 39.22% 52.83 MiB p/s ETA 1s60.36 MiB / 131.42 MiB [--------------------->_________________________] 45.93% 52.83 MiB p/s ETA 1s69.16 MiB / 131.42 MiB [------------------------>______________________] 52.62% 52.83 MiB p/s ETA 1s78.14 MiB / 131.42 MiB [--------------------------->___________________] 59.46% 52.28 MiB p/s ETA 1s87.05 MiB / 131.42 MiB [------------------------------->_______________] 66.24% 52.28 MiB p/s ETA 0s96.30 MiB / 131.42 MiB [---------------------------------->____________] 73.27% 52.28 MiB p/s ETA 0s105.27 MiB / 131.42 MiB [------------------------------------>_________] 80.10% 51.83 MiB p/s ETA 0s114.33 MiB / 131.42 MiB [---------------------------------------->_____] 86.99% 51.83 MiB p/s ETA 0s123.49 MiB / 131.42 MiB [------------------------------------------->__] 93.96% 51.83 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 51.30 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 51.30 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 51.30 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 47.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 47.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 47.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 44.89 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 44.89 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 44.89 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 41.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 41.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 41.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 39.29 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 39.29 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 39.29 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-----------------------------------------------] 100.00% 24.42 MiB p/s 5.6s2026-11-02T04:31:25Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-11-02T04:31:25Z	INFO	[vuln] Vulnerability scanning is enabled
2026-11-02T04:31:25Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-11-02T04:31:25Z	INFO	[checks-client] Need to update the checks bundle
2026-11-02T04:31:25Z	INFO	[checks-client] Downloading the checks bundle...
234.57 KiB / 234.57 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2026-11-02T04:31:26Z	WARN	[rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0"
2026-11-02T04:31:26Z	INFO	[npm] To collect the license information of packages, "npm install" needs to be performed beforehand	dir="discord_bridge/node_modules"
2026-11-02T04:31:26Z	INFO	Number of language-specific files	num=1
2026-11-02T04:31:26Z	INFO	[npm] Detecting vulnerabilities...
2026-11-02T04:31:26Z	INFO	Detected config files	num=1
Report Summary
┌──────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│              Target              │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ discord_bridge/package-lock.json │    npm     │       18        │         -         │
├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile                       │ dockerfile │        -        │         3         │
└──────────────────────────────────┴────────────┴─────────────────┴───────────────────┘
…

🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): PYTHON · isort (28 files checked), YAML · prettier (7 files checked), BASH · shfmt (4 files checked), JSON · prettier (4 files checked), PYTHON · black (28 files checked)

✅ Clean: git_diff, gitleaks, jsonlint, secretlint, trufflehog, yamllint

MegaLinter on soucouyant · full logs in the Actions run · comment /improve for AI fix suggestions

<!-- kk-lint --> ## 🧹 Lint report · ❌ 44 problems in 7 checks · 🧹 5 formatting checks to tidy Nothing here blocks the merge (report only). | | Check | Errors | Warnings | Files | |---|---|---:|---:|---:| | ❌ | REPOSITORY · grype | 18 | 0 | – | | ❌ | PYTHON · bandit | 14 | 0 | 28 | | ❌ | MARKDOWN · markdownlint | 5 | 0 | 13 | | ❌ | PYTHON · ruff | 4 | 0 | 28 | | ❌ | BASH · shellcheck | 1 | 0 | 4 | | ❌ | DOCKERFILE · hadolint | 1 | 0 | 1 | | ❌ | REPOSITORY · trivy | 1 | 0 | – | <details><summary>REPOSITORY · grype: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_grype/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft NAME INSTALLED FIXED IN TYPE VULNERABILITY SEVERITY EPSS RISK tar 6.2.1 7.5.19 npm GHSA-23hp-3jrh-7fpw Critical 0.6% (47th) 0.5 tar 6.2.1 7.5.7 npm GHSA-34x7-hfp2-rc4v High 0.6% (49th) 0.5 tar 6.2.1 7.5.21 npm GHSA-r292-9mhp-454m High 0.5% (44th) 0.4 tar 6.2.1 7.5.10 npm GHSA-qffp-2rhf-9h96 High 0.5% (40th) 0.4 tar 6.2.1 7.5.18 npm GHSA-8x88-c5mf-7j5w High 0.4% (37th) 0.3 tar 6.2.1 7.5.18 npm GHSA-w8wr-v893-vjvp Medium 0.6% (50th) 0.3 tar 6.2.1 7.5.3 npm GHSA-8qq5-rm4j-mr97 High 0.4% (31st) 0.3 undici 6.28.1 6.29.1 npm GHSA-xjj6-f33q-929c High 0.3% (27th) 0.3 tar 6.2.1 7.5.8 npm GHSA-83g3-92jg-28cx High 0.3% (25th) 0.2 tar 6.2.1 7.5.4 npm GHSA-r6q2-hw4h-h46w High 0.3% (18th) 0.2 tar 6.2.1 7.5.11 npm GHSA-9ppj-qmqm-q256 High 0.3% (19th) 0.2 tar 6.2.1 7.5.17 npm GHSA-gvwx-54wh-qm9j Medium 0.4% (29th) 0.2 undici 6.28.1 6.29.1 npm GHSA-4qv8-2p9j-2685 Medium 0.3% (25th) 0.2 undici 6.28.1 6.29.1 npm GHSA-9fm3-97px-rjf6 Medium 0.3% (25th) 0.2 minimatch 3.1.5 11.0.1 npm GHSA-g3hv-75wg-m249 Medium 0.3% (21st) 0.2 undici 6.28.1 6.29.1 npm GHSA-qrxm-fqhp-jwvm High 0.2% (8th) 0.1 undici 6.28.1 6.29.1 npm GHSA-2m5v-pch6-74hx High 0.2% (8th) 0.1 tar 6.2.1 7.5.16 npm GHSA-vmf3-w455-68vh Medium 0.2% (4th) < 0.1 [0044] ERROR discovered vulnerabilities at or above the severity threshold ``` </details> <details><summary>PYTHON · bandit: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/python_bandit/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: Run started:2026-11-02 04:31:20.829821+00:00 Test results: >> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. Severity: Medium Confidence: High CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html) More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:44:13 43 try: 44 with urllib.request.urlopen(MODEL_LIST_URL, timeout=15) as resp: 45 return json.load(resp) -------------------------------------------------- >> Issue: [B310:blacklist] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. Severity: Medium Confidence: High CWE: CWE-22 (https://cwe.mitre.org/data/definitions/22.html) More Info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b310-urllib-urlopen Location: ./docs/qwen-situations/VT2/corrected-download_vosk_models.py:114:8 113 print(f" URL: {url}") 114 urllib.request.urlretrieve(url, archive_path, show_progress) 115 print() # newline after progress bar -------------------------------------------------- >> Issue: [B202:tarfile_unsafe_members] tarfile.extractall used without any validation. Please check and discard dangerous members. … ``` </details> <details><summary>MARKDOWN · markdownlint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: AI_TRANSLATION.md:94 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Whisper recognition/translatio..."] AI_TRANSLATION.md:122 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Vosk model sharing across sess..."] README.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "🎤 Voice Translator - Real-tim..."] README.md:61 error MD001/heading-increment Heading levels should only increment by one level at a time [Expected: h3; Actual: h4] REFACTOR.md:14 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] ``` </details> <details><summary>PYTHON · ruff: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/python_ruff/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: F841 Local variable `display_html` is assigned to but never used --> voice_translator.py:3354:17 | 3353 | # Filled in by the page's JS polling (/display_data), not by Gradio. 3354 | display_html = gr.HTML( | ^^^^^^^^^^^^ 3355 | label="Display", 3356 | value='<div id="vt-display"><div>Loading...</div></div>', | help: Remove assignment to unused variable `display_html` F841 Local variable `recognized_output` is assigned to but never used --> voice_translator.py:3360:21 | 3359 | with gr.Accordion("Outputs", open=False): 3360 | recognized_output = gr.Textbox( | ^^^^^^^^^^^^^^^^^ 3361 | label="Recognized", 3362 | elem_id="recognized-output-text", | help: Remove assignment to unused variable `recognized_output` F841 Local variable `translated_output` is assigned to but never used … ``` </details> <details><summary>BASH · shellcheck: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: In setup.sh line 41: source venv/bin/activate ^---------------^ SC1091 (info): Not following: venv/bin/activate: openBinaryFile: does not exist (No such file or directory) For more information: https://www.shellcheck.net/wiki/SC1091 -- Not following: venv/bin/activate:... ``` </details> <details><summary>DOCKERFILE · hadolint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: Dockerfile:13 DL3015 info: Avoid additional packages by specifying `--no-install-recommends` ``` </details> <details><summary>REPOSITORY · trivy: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/voice-translator Linter raw log: 2026-11-02T04:31:19Z INFO [vulndb] Need to update DB 2026-11-02T04:31:19Z INFO [vulndb] Downloading vulnerability DB... 2026-11-02T04:31:19Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2" 19.84 MiB / 131.42 MiB [--------->__________________________________________________] 15.10% ? p/s ?32.67 MiB / 131.42 MiB [-------------->_____________________________________________] 24.86% ? p/s ?42.03 MiB / 131.42 MiB [------------------->________________________________________] 31.98% ? p/s ?51.55 MiB / 131.42 MiB [------------------>____________________________] 39.22% 52.83 MiB p/s ETA 1s60.36 MiB / 131.42 MiB [--------------------->_________________________] 45.93% 52.83 MiB p/s ETA 1s69.16 MiB / 131.42 MiB [------------------------>______________________] 52.62% 52.83 MiB p/s ETA 1s78.14 MiB / 131.42 MiB [--------------------------->___________________] 59.46% 52.28 MiB p/s ETA 1s87.05 MiB / 131.42 MiB [------------------------------->_______________] 66.24% 52.28 MiB p/s ETA 0s96.30 MiB / 131.42 MiB [---------------------------------->____________] 73.27% 52.28 MiB p/s ETA 0s105.27 MiB / 131.42 MiB [------------------------------------>_________] 80.10% 51.83 MiB p/s ETA 0s114.33 MiB / 131.42 MiB [---------------------------------------->_____] 86.99% 51.83 MiB p/s ETA 0s123.49 MiB / 131.42 MiB [------------------------------------------->__] 93.96% 51.83 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 51.30 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 51.30 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 51.30 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 47.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 47.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 47.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 44.89 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 44.89 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 44.89 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 41.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 41.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 41.99 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 39.29 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 39.29 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-------------------------------------------->] 100.00% 39.29 MiB p/s ETA 0s131.42 MiB / 131.42 MiB [-----------------------------------------------] 100.00% 24.42 MiB p/s 5.6s2026-11-02T04:31:25Z INFO [vulndb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-db:2" 2026-11-02T04:31:25Z INFO [vuln] Vulnerability scanning is enabled 2026-11-02T04:31:25Z INFO [misconfig] Misconfiguration scanning is enabled 2026-11-02T04:31:25Z INFO [checks-client] Need to update the checks bundle 2026-11-02T04:31:25Z INFO [checks-client] Downloading the checks bundle... 234.57 KiB / 234.57 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2026-11-02T04:31:26Z WARN [rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0" 2026-11-02T04:31:26Z INFO [npm] To collect the license information of packages, "npm install" needs to be performed beforehand dir="discord_bridge/node_modules" 2026-11-02T04:31:26Z INFO Number of language-specific files num=1 2026-11-02T04:31:26Z INFO [npm] Detecting vulnerabilities... 2026-11-02T04:31:26Z INFO Detected config files num=1 Report Summary ┌──────────────────────────────────┬────────────┬─────────────────┬───────────────────┐ │ Target │ Type │ Vulnerabilities │ Misconfigurations │ ├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ discord_bridge/package-lock.json │ npm │ 18 │ - │ ├──────────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ Dockerfile │ dockerfile │ - │ 3 │ └──────────────────────────────────┴────────────┴─────────────────┴───────────────────┘ … ``` </details> 🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): PYTHON · isort (28 files checked), YAML · prettier (7 files checked), BASH · shfmt (4 files checked), JSON · prettier (4 files checked), PYTHON · black (28 files checked) ✅ Clean: git_diff, gitleaks, jsonlint, secretlint, trufflehog, yamllint <sub>MegaLinter on soucouyant · full logs in the Actions run · comment <code>/improve</code> for AI fix suggestions</sub>
khyretos deleted branch renovate/discordjs-opus-0.x 2026-11-09 02:58:03 +01:00
Sign in to join this conversation.
No description provided.