chore(deps): update terraform-linters/tflint to 0.64.0

[zon-renovate]

This PR contains the following updates:

Package	Update	Change
terraform-linters/tflint	minor	0.61.0 → 0.64.0

---

Release Notes

terraform-linters/tflint (terraform-linters/tflint)

v0.64.0

Compare Source

What's Changed

Enhancements

• cmd: include worker dir for no-range recursive issues by @​Zakharden in #​2524
• config: add ignorable rule setting by @​Zakharden in #​2525
• formatter(junit): include range in testcase name by @​Zakharden in #​2538

Bug Fixes

• plugin: fetch attestation bundles from bundle_url by @​Kunalbehbud in #​2593
  • Merged as #​2600

Chores

• Refactor formatter dispatch into format adapters by @​bendrucker in #​2556
• Inline per-format print methods into their adapters by @​bendrucker in #​2557
• build(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2559
• build(deps): Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 by @​dependabot[bot] in #​2560
• build(deps): Bump golang from 1.26.3-alpine3.23 to 1.26.4-alpine3.23 by @​dependabot[bot] in #​2558
• release: Set branch name for Homebrew tap by @​wata727 in #​2561
• Extract the shared runner-setup pipeline by @​bendrucker in #​2555
• formatter: guard diagnostics with no source range by @​bendrucker in #​2562
• docs: add Go install instructions to README by @​RoseSecurity in #​2563
• build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​2565
• build(deps): Bump alpine from 3.23.4 to 3.24.0 by @​dependabot[bot] in #​2566
• build(deps): Bump the go-x group with 2 updates by @​dependabot[bot] in #​2567
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 by @​dependabot[bot] in #​2568
• fix(install): close download and zip readers by @​RoseSecurity in #​2564
• build(deps): Bump alpine from 3.24.0 to 3.24.1 by @​dependabot[bot] in #​2570
• build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-x group by @​dependabot[bot] in #​2571
• build(deps): Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 by @​dependabot[bot] in #​2572
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in #​2579
• build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 by @​dependabot[bot] in #​2580
• build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @​dependabot[bot] in #​2583
• build(deps): Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @​dependabot[bot] in #​2582
• build(deps): Bump actions/attest from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​2581
• build(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @​dependabot[bot] in #​2584
• build(deps): Bump golang.org/x/text from 0.38.0 to 0.39.0 in the go-x group by @​dependabot[bot] in #​2585
• build(deps): Bump github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by @​dependabot[bot] in #​2588
• build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​2587

New Contributors

• @​Zakharden made their first contribution in #​2524
• @​RoseSecurity made their first contribution in #​2563
• @​Kunalbehbud made their first contribution in #​2593

Full Changelog: terraform-linters/tflint@v0.63.1...v0.64.0

v0.63.1

Compare Source

What's Changed

[!NOTE]
This release contains only a fix for the release pipeline; the actual behavior remains unchanged from v0.63.0.

Chores

• Pass the GitHub App token as the step output by @​wata727 in #​2553
• Remove unneeded job dependency by @​wata727 in #​2554

Full Changelog: terraform-linters/tflint@v0.63.0...v0.63.1

v0.63.0

Compare Source

What's Changed

[!NOTE]
Due to a release pipeline issue, this release does not have a corresponding artifact attestation.
If you need to pass gh attestation verify, please use v0.63.1.

Enhancements

• Add support for Terraform v1.15 by @​wata727 in #​2521
• Bump tflint-ruleset-terraform to v0.15.0 by @​wata727 in #​2551

Chores

• Migrate homebrew-core to third-party tap by @​wata727 in #​2531
• Revise installation instructions in README.md by @​wata727 in #​2532
• build(deps): Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​2535
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2536
• Migrate homebrew auto bump action to GoReleaser by @​wata727 in #​2534
• Fix variable reference for client-id in release.yml by @​wata727 in #​2537
• build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @​dependabot[bot] in #​2546
• build(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @​dependabot[bot] in #​2548
• build(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​2549
• build(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2550
• build(deps): Bump the go-x group with 2 updates by @​dependabot[bot] in #​2547
• build(deps): Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​2542
• build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @​dependabot[bot] in #​2540
• build(deps): Bump golang from 1.26-alpine3.23 to 1.26.3-alpine3.23 by @​dependabot[bot] in #​2541
• build(deps): Bump alpine from 3.23 to 3.23.4 by @​dependabot[bot] in #​2539
• Add warning message to installation script by @​wata727 in #​2533

Full Changelog: terraform-linters/tflint@v0.62.1...v0.63.0

v0.62.1

Compare Source

What's Changed

Bug Fixes

• plugin: Skip fetching artifact attestations in GHES by @​wata727 in #​2527

Chores

• build(deps): Bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 by @​dependabot[bot] in #​2511
• build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​2512
• docs: deprecate curl pipe bash installation by @​dbuaon in #​2514
• build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @​dependabot[bot] in #​2516
• build(deps): Bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 by @​dependabot[bot] in #​2517
• build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 by @​dependabot[bot] in #​2518
• build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​2519
• build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​2520

New Contributors

• @​dbuaon made their first contribution in #​2514

Full Changelog: terraform-linters/tflint@v0.62.0...v0.62.1

v0.62.0

Compare Source

What's Changed

Enhancements

• plugin: Add signature mode to control plugin verifications by @​wata727 in #​2483

Bug Fixes

• plugin: Ignore forbidden attestation fetch errors by @​wata727 in #​2481

Chores

• build(deps): Bump the go-x group with 4 updates by @​dependabot[bot] in #​2461
• build(deps): Bump docker/build-push-action from 6.18.0 to 6.19.2 by @​dependabot[bot] in #​2463
• build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.1 by @​dependabot[bot] in #​2464
• build(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @​dependabot[bot] in #​2467
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @​dependabot[bot] in #​2469
• build(deps): Bump actions/setup-go from 6.2.0 to 6.3.0 by @​dependabot[bot] in #​2470
• build(deps): Bump golang.org/x/net from 0.50.0 to 0.51.0 in the go-x group by @​dependabot[bot] in #​2472
• build(deps): Bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 by @​dependabot[bot] in #​2473
• build(deps): Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @​dependabot[bot] in #​2471
• build(deps): Bump docker/metadata-action from 5.10.0 to 6.0.0 by @​dependabot[bot] in #​2474
• build(deps): Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2476
• build(deps): Bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in the go-x group by @​dependabot[bot] in #​2479
• build(deps): Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @​dependabot[bot] in #​2480
• build(deps): Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @​dependabot[bot] in #​2475
• build(deps): Bump docker/build-push-action from 6.19.2 to 7.0.0 by @​dependabot[bot] in #​2477
• build(deps): Bump docker/login-action from 3.7.0 to 4.0.0 by @​dependabot[bot] in #​2478
• deps: Bump Go version to 1.26 by @​wata727 in #​2482
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2484
• build(deps): Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @​dependabot[bot] in #​2489
• build(deps): Bump mislav/bump-homebrew-formula-action from 3.6 to 4.1 by @​dependabot[bot] in #​2490
• build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.1 to 0.24.0 by @​dependabot[bot] in #​2491
• build(deps): Bump github.com/fatih/color from 1.18.0 to 1.19.0 by @​dependabot[bot] in #​2492
• dependabot: Set cooldown period by @​wata727 in #​2493
• build(deps): Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in #​2495
• build(deps): Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by @​dependabot[bot] in #​2496
• build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​2498
• build(deps): Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.4 to 1.7.8 by @​dependabot[bot] in #​2499
• build(deps): Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by @​dependabot[bot] in #​2500
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @​dependabot[bot] in #​2501
• build(deps): Bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.6 by @​dependabot[bot] in #​2502
• build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @​dependabot[bot] in #​2506
• build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @​dependabot[bot] in #​2503
• build(deps): Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​2497
• build(deps): Bump docker/login-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2504
• build(deps): Bump docker/build-push-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​2507
• release: Migrate attest-build-provenance to attest by @​wata727 in #​2508

Full Changelog: terraform-linters/tflint@v0.61.0...v0.62.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.