build(deps): bump github.com/fhirlint/fhirlint from 1.4.0 to 1.14.2

[dependabot]

Bumps github.com/fhirlint/fhirlint from 1.4.0 to 1.14.2.

Release notes

Sourced from github.com/fhirlint/fhirlint's releases.

v1.14.2

Changelog

• 22bc289b2cc2936a9581ea7d7df1183cd59cd0b5 build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 (#441)
• efa713b4e4bd4f803a7debee913afd40318e494d build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#442)
• 1d1dd47120c58c7073c4ae3fa0905e5b4dff1f33 build(deps): bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 (#443)
• 1f9be927d02955f63b0e946a3565396a879c60d8 fix(#444): keep files named *template.json from being silently skipped as IG content (#446)
• f317c2c3bf84eda655ace0e99aefb1a8277e0a5a fix(#445): omit a quoted server page from the validator's profile fetch errors (#447)

v1.14.1

Changelog

• 60e0f4a689e3ec4f49ab50e548a4a7b2e991207b build(deps): bump actions/setup-java from 6.0.0 to 6.0.1 (#432)
• 8e8eecc966dab1087e572b66f3b519009d823403 build(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#433)
• c993b606336b85317b23ccb1addfab8715a22079 fix(#434): don't call a final pin outdated when dist-tags.latest is a pre-release (#437)
• 6394f3b9cca1534464798ed07eb1504db729b464 fix(#436): report a dangling urn: reference in a Bundle once, not as a warning and an error (#439)

v1.14.0

Changelog

• 18fd2f4460686fc810a8c98bf8c2b15c236afedf build(deps): bump golang.org/x/mod from 0.40.0 to 0.41.0 (#418)
• 5f5fcdba61d4a8c4defeda2fe936337ce6e835fa build(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#419)
• e7bdbf5123a59ae98c60bda6a1a49950de1543eb feat(#425): --watch-settle-time, and group the watch settings into WatchConfig (#426)
• e18888215ed641c18738d56905d55ea0ceb78407 feat(#428): say which validator produced a report, in every archived format (#430)
• b44738b57673ec2ce97adc738b716be2e1c7fc55 fix(#417): derive the result cache key from every option that changes the result (#423)
• bd342d3a28700d80d71511e85c475084dc7fbb1c fix(#427): ask packages2.fhir.org first and packages.fhir.org second, like the validator (#429)

v1.13.0

Changelog

• 2f171e567e919c15d47ea7e75b31075bffb8cba3 feat(#402): compare a run against the QA baseline an IG package ships about itself (#413)
• 6502dc7ee76e6a910b1a6f4856f5d4fa50755f75 feat(#406): report released versions the registry serves but has not tagged latest (#411)
• d382fe686fe5e6e7c4af4f2660e954206456cf28 feat(#407): --expansion-parameters, to pin code system versions for a run (#412)
• 004f600eb993087ef974037432bf6e2e152f1fda fix(#405): send -watch-scan-delay, the flag the validator actually has (#410)

v1.12.1

Heads-up: isik and mii now resolve to different packages

This is a patch release, but #398 changes what two built-in aliases validate against, so a resource that passed on v1.12.0 can report differently here.

• isik pinned the ISiK Stufe 4 modules. It now resolves to de.gematik.isik#6.0.0, the single package that replaced them.
• mii carried four Kerndatensatz modules — person, fall, diagnose, prozedur — that have been superseded by de.medizininformatikinitiative.kerndatensatz.base#2026.0.1. The alias now points at the replacement.

The old pins were not wrong when they were made; the packages behind them were retired. If you need the previous behaviour, name the packages explicitly with --ig instead of the alias. docs/german-profiles.md records which modules moved where.

Fixes

• #398 — repoint the isik and mii aliases at the packages that replaced them (#399)
• #401 — --skip-non-fhir kept every non-resource JSON larger than the 4 KB peek window, including the .index.json that ships in every FHIR package. Validating a package's examples reported a spurious Unable to find resourceType property fatal. The verdict no longer depends on file size (#403)

Changelog

• 6b0dd7f9dc9924f26a9d6f1c26b46df41997ea8e fix(#398): repoint the isik and mii aliases at the packages that replaced them (#399)
• a9d4447534f2f6b9cd30418d5bb85041955483f0 fix(#401): decide --skip-non-fhir from the top-level keys, not a byte prefix (#403)

... (truncated)

Commits

• 688996d chore: bump version references to 1.14.2 (#448)
• f317c2c fix(#445): omit a quoted server page from the validator's profile fetch error...
• 1f9be92 fix(#444): keep files named *template.json from being silently skipped as IG ...
• 1d1dd47 build(deps): bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 (#443)
• efa713b build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#442)
• 22bc289 build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 (#441)
• ffed6c6 chore: bump version references to 1.14.1 (#440)
• 6394f3b fix(#436): report a dangling urn: reference in a Bundle once, not as a warnin...
• 6a58d8d docs(#435): record what the alias pin rule does when dist-tags.latest is a pr...
• c993b60 fix(#434): don't call a final pin outdated when dist-tags.latest is a pre-rel...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)