chore(deps): update dependency tflint to v0.64.0

[renovate]

This PR contains the following updates:

Package	Update	Change
tflint	minor	0.62.0 → 0.64.0

---

Release Notes

terraform-linters/tflint (tflint)

v0.64.0

Compare Source

What's Changed

Enhancements

• cmd: include worker dir for no-range recursive issues by @​Zakharden in #​2524
• config: add ignorable rule setting by @​Zakharden in #​2525
• formatter(junit): include range in testcase name by @​Zakharden in #​2538

Bug Fixes

• plugin: fetch attestation bundles from bundle_url by @​Kunalbehbud in #​2593
  • Merged as #​2600

Chores

• Refactor formatter dispatch into format adapters by @​bendrucker in #​2556
• Inline per-format print methods into their adapters by @​bendrucker in #​2557
• build(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2559
• build(deps): Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 by @​dependabot[bot] in #​2560
• build(deps): Bump golang from 1.26.3-alpine3.23 to 1.26.4-alpine3.23 by @​dependabot[bot] in #​2558
• release: Set branch name for Homebrew tap by @​wata727 in #​2561
• Extract the shared runner-setup pipeline by @​bendrucker in #​2555
• formatter: guard diagnostics with no source range by @​bendrucker in #​2562
• docs: add Go install instructions to README by @​RoseSecurity in #​2563
• build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​2565
• build(deps): Bump alpine from 3.23.4 to 3.24.0 by @​dependabot[bot] in #​2566
• build(deps): Bump the go-x group with 2 updates by @​dependabot[bot] in #​2567
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 by @​dependabot[bot] in #​2568
• fix(install): close download and zip readers by @​RoseSecurity in #​2564
• build(deps): Bump alpine from 3.24.0 to 3.24.1 by @​dependabot[bot] in #​2570
• build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-x group by @​dependabot[bot] in #​2571
• build(deps): Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 by @​dependabot[bot] in #​2572
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in #​2579
• build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 by @​dependabot[bot] in #​2580
• build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @​dependabot[bot] in #​2583
• build(deps): Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @​dependabot[bot] in #​2582
• build(deps): Bump actions/attest from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​2581
• build(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @​dependabot[bot] in #​2584
• build(deps): Bump golang.org/x/text from 0.38.0 to 0.39.0 in the go-x group by @​dependabot[bot] in #​2585
• build(deps): Bump github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by @​dependabot[bot] in #​2588
• build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​2587

New Contributors

• @​Zakharden made their first contribution in #​2524
• @​RoseSecurity made their first contribution in #​2563
• @​Kunalbehbud made their first contribution in #​2593

Full Changelog: terraform-linters/tflint@v0.63.1...v0.64.0

v0.63.1

Compare Source

What's Changed

[!NOTE]
This release contains only a fix for the release pipeline; the actual behavior remains unchanged from v0.63.0.

Chores

• Pass the GitHub App token as the step output by @​wata727 in #​2553
• Remove unneeded job dependency by @​wata727 in #​2554

Full Changelog: terraform-linters/tflint@v0.63.0...v0.63.1

v0.63.0

Compare Source

What's Changed

[!NOTE]
Due to a release pipeline issue, this release does not have a corresponding artifact attestation.
If you need to pass gh attestation verify, please use v0.63.1.

Enhancements

• Add support for Terraform v1.15 by @​wata727 in #​2521
• Bump tflint-ruleset-terraform to v0.15.0 by @​wata727 in #​2551

Chores

• Migrate homebrew-core to third-party tap by @​wata727 in #​2531
• Revise installation instructions in README.md by @​wata727 in #​2532
• build(deps): Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​2535
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2536
• Migrate homebrew auto bump action to GoReleaser by @​wata727 in #​2534
• Fix variable reference for client-id in release.yml by @​wata727 in #​2537
• build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @​dependabot[bot] in #​2546
• build(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @​dependabot[bot] in #​2548
• build(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​2549
• build(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2550
• build(deps): Bump the go-x group with 2 updates by @​dependabot[bot] in #​2547
• build(deps): Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​2542
• build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @​dependabot[bot] in #​2540
• build(deps): Bump golang from 1.26-alpine3.23 to 1.26.3-alpine3.23 by @​dependabot[bot] in #​2541
• build(deps): Bump alpine from 3.23 to 3.23.4 by @​dependabot[bot] in #​2539
• Add warning message to installation script by @​wata727 in #​2533

Full Changelog: terraform-linters/tflint@v0.62.1...v0.63.0

v0.62.1

Compare Source

What's Changed

Bug Fixes

• plugin: Skip fetching artifact attestations in GHES by @​wata727 in #​2527

Chores

• build(deps): Bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 by @​dependabot[bot] in #​2511
• build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​2512
• docs: deprecate curl pipe bash installation by @​dbuaon in #​2514
• build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @​dependabot[bot] in #​2516
• build(deps): Bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 by @​dependabot[bot] in #​2517
• build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 by @​dependabot[bot] in #​2518
• build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​2519
• build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​2520

New Contributors

• @​dbuaon made their first contribution in #​2514

Full Changelog: terraform-linters/tflint@v0.62.0...v0.62.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 9am every weekday,before 5am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.