chore(deps-dev): bump megalinter docker tag to v6.20.1

| datasource | package                          | from    | to      |
| ---------- | -------------------------------- | ------- | ------- |
| docker     | oxsecurity/megalinter-javascript | v6.10.0 | v6.20.1 |

.dictionary.txt

@@ -1,3 +1,3 @@
-checkov
 Laven
-setuptools
+npmpackagejsonlintignore
+trivyignore

.github/workflows/notify-assignee.yaml

@@ -3,12 +3,12 @@ on:
   pull_request:
     types:
       - assigned
+permissions:
+  contents: read
 jobs:
   notify-assignee:
     name: Notify Assignee
     uses: ScribeMD/slack-templates/.github/workflows/[email protected]
-    permissions:
-      contents: read
     secrets:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       SLACK_ASSIGN_CHANNEL_ID: ${{ secrets.SLACK_ASSIGN_CHANNEL_ID }}

.github/workflows/notify-reviewers.yaml

@@ -3,12 +3,12 @@ on:
   pull_request:
     types:
       - review_requested
+permissions:
+  contents: read
 jobs:
   notify-reviewers:
     name: Notify Reviewers
     uses: ScribeMD/slack-templates/.github/workflows/[email protected]
-    permissions:
-      contents: read
     secrets:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       SLACK_REVIEW_CHANNEL_ID: ${{ secrets.SLACK_REVIEW_CHANNEL_ID }}

.github/workflows/test.yaml

@@ -6,13 +6,13 @@ on:
   push:
     branches:
       - main
+permissions:
+  checks: write # https://github.com/EnricoMi/publish-unit-test-result-action#permissions
+  contents: write # for pre-commit-action
 jobs:
   pre-commit:
     name: Run Pre-commit Hooks
     runs-on: ubuntu-22.04
-    permissions:
-      checks: write # https://github.com/EnricoMi/publish-unit-test-result-action#permissions
-      contents: write # for pre-commit-action
     steps:
       - name: Check out repository.
         uses: actions/[email protected]

.npmpackagejsonlintignore

@@ -0,0 +1 @@
+dist/

.pre-commit-config.yaml

@@ -27,7 +27,7 @@ repos:
       - id: poetry-install
       - id: pre-commit-install
       - id: megalinter-incremental
-        args: &megalinter-args [--flavor, javascript, --release, v6.10.0]
+        args: &megalinter-args [--flavor, javascript, --release, v6.20.1]
       - id: megalinter-full
         args: *megalinter-args
       - id: yarn-install

.trivyignore

@@ -1 +1,2 @@
-DS002 # Dockerfile only used for testing, so it's okay that user is root.
+AVD-DS-0002 # Dockerfile only used for testing, so it's okay that user is root.
+AVD-DS-0026 # Dockerfile only used for testing, so health check isn't needed.

cspell.config.yaml

@@ -11,3 +11,4 @@ dictionaries:
   - fullstack
   - npm
   - python
+  - python-common