Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 21, 2025

Bumps github.com/aquasecurity/trivy from 0.59.1 to 0.61.1.

Release notes

Sourced from github.com/aquasecurity/trivy's releases.

v0.61.1

Changelog

  • 7d3b4ffdd6b22ae80215f3a04421606b1f78de6a release: v0.61.1 [release/v0.61] (#8704)
  • 80d120fa0f96695e09eb97f43fb7413e5c773e50 fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)
  • 9d6290b31977b1bd4ab47349cd26498bc3b079c3 fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)
  • 3799ebbb5a9bc78041492d1f191fb94ce1aa389b test: use aquasecurity repository for test images [backport: release/v0.61] (#8698)

v0.61.0

⚡Release highlights and summary⚡

👉 aquasecurity/trivy#8639

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0610-2025-03-28

v0.60.0

⚡Release highlights and summary⚡

👉 aquasecurity/trivy#8495

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0600-2025-03-05

Changelog

Sourced from github.com/aquasecurity/trivy's changelog.

0.61.1 (2025-04-17)

Bug Fixes

  • k8s: correct compare artifact versions [backport: release/v0.61] (#8699) (9d6290b)
  • k8s: skip passed misconfigs for the summary report [backport: release/v0.61] (#8748) (80d120f)

0.61.0 (2025-03-28)

Features

  • fs: optimize scanning performance by direct file access for known paths (#8525) (8bf6caf)
  • k8s: add support for controllers (#8614) (1bf0117)
  • misconf: adapt aws_default_security_group (#8538) (b57eccb)
  • misconf: adapt aws_opensearch_domain (#8550) (9913465)
  • misconf: adapt AWS::DynamoDB::Table (#8529) (8112cdf)
  • misconf: adapt AWS::EC2::VPC (#8534) (0d9865f)
  • misconf: Add support for aws_ami (#8499) (573502e)
  • replace TinyGo with standard Go for WebAssembly modules (#8496) (529957e)

Bug Fixes

  • debian: don't include empty licenses for dpkgs (#8623) (346f5b3)
  • fs: check postAnalyzers for StaticPaths (#8543) (c228307)
  • k8s: show report for --report all (#8613) (dbb6f28)
  • misconf: add ephemeral block type to config schema (#8513) (41512f8)
  • misconf: Check values wholly prior to evalution (#8604) (ad58cf4)
  • misconf: do not skip loading documents from subdirectories (#8526) (de7eb13)
  • misconf: do not use cty.NilVal for non-nil values (#8567) (400a79c)
  • misconf: identify the chart file exactly by name (#8590) (ba77dbe)
  • misconf: Improve logging for unsupported checks (#8634) (5b7704d)
  • misconf: set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548) (1f05b45)
  • misconf: skip Azure CreateUiDefinition (#8503) (c7814f1)
  • spdx: save text licenses into otherLicenses without normalize (#8502) (e5072f1)
  • use --file-patterns flag for all post analyzers (#7365) (8b88238)

Performance Improvements

  • misconf: parse input for Rego once (#8483) (0e5e909)
  • misconf: retrieve check metadata from annotations once (#8478) (7b96351)

0.60.0 (2025-03-05)

Features

... (truncated)

Commits
  • 7d3b4ff release: v0.61.1 [release/v0.61] (#8704)
  • 80d120f fix(k8s): skip passed misconfigs for the summary report [backport: release/v0...
  • 9d6290b fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)
  • 3799ebb test: use aquasecurity repository for test images [backport: release/v0.61]...
  • 7f41822 release: v0.61.0 [main] (#8507)
  • 5b7704d fix(misconf): Improve logging for unsupported checks (#8634)
  • 1bf0117 feat(k8s): add support for controllers (#8614)
  • 346f5b3 fix(debian): don't include empty licenses for dpkgs (#8623)
  • ad58cf4 fix(misconf): Check values wholly prior to evalution (#8604)
  • c76764e chore(deps): Bump trivy-checks (#8619)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) from 0.59.1 to 0.61.1.
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/v0.61.1/CHANGELOG.md)
- [Commits](aquasecurity/trivy@v0.59.1...v0.61.1)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-version: 0.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 21, 2025
@dependabot dependabot bot requested a review from a team as a code owner April 21, 2025 11:25
@github-actions github-actions bot enabled auto-merge (squash) April 21, 2025 11:25
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 5, 2025

Superseded by #150.

@dependabot dependabot bot closed this May 5, 2025
auto-merge was automatically disabled May 5, 2025 11:19

Pull request was closed

@dependabot dependabot bot deleted the dependabot/go_modules/github.com/aquasecurity/trivy-0.61.1 branch May 5, 2025 11:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant