Skip to content

chore(deps): Update dependency trivy to v0.67.0

This MR contains the following updates:

Package Update Change
trivy minor 0.66.0 -> 0.67.0

Release Notes

aquasecurity/trivy (trivy)

v0.67.0

Compare Source

Features
Bug Fixes
  • aws: use BuildableClient insead of xhttp.Client (#​9436) (fa6f1bf)
  • close file descriptors and pipes on error paths (#​9536) (a4cbd6a)
  • db: Dowload database when missing but metadata still exists (#​9393) (92ebc7e)
  • k8s: disable parallel traversal with fs cache for k8s images (#​9534) (c0c7a6b)
  • misconf: handle tofu files in module detection (#​9486) (bfd2f6b)
  • misconf: strip build metadata suffixes from image history (#​9498) (c938806)
  • misconf: unmark cty values before access (#​9495) (8e40d27)
  • misconf: wrap legacy ENV values in quotes to preserve spaces (#​9497) (267a970)
  • nodejs: parse workspaces as objects for package-lock.json files (#​9518) (404abb3)
  • nodejs: use snapshot string as Package.ID for pnpm packages (#​9330) (4517e8c)
  • vex: don't suppress vulns for packages with infinity loop (#​9465) (78f0d4a)
  • vuln: compare nuget package names in lower case (#​9456) (1ff9ac7)

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports

Loading