chore(deps): bump github.com/aquasecurity/trivy from 0.59.1 to 0.62.1

[dependabot]

Bumps github.com/aquasecurity/trivy from 0.59.1 to 0.62.1.

Release notes

Sourced from github.com/aquasecurity/trivy's releases.

v0.62.1

Changelog

• c75ed2156c8fa801d6998016f46f6b953e8a9556 release: v0.62.1 [release/v0.62] (#8825)
• aafebeb53aecbc9ed1ea44f8601183b4c25c49e3 chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)
• 99485cfea2de53570342901eac860afdaacce86f fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)
• b4fc9e8ca1ff77a2795ffa47d0fc53cecd0e1bbd fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)

v0.62.0

⚡Release highlights and summary⚡

👉 aquasecurity/trivy#8801

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0620-2025-04-30

v0.61.1

Changelog

• 7d3b4ffdd6b22ae80215f3a04421606b1f78de6a release: v0.61.1 [release/v0.61] (#8704)
• 80d120fa0f96695e09eb97f43fb7413e5c773e50 fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)
• 9d6290b31977b1bd4ab47349cd26498bc3b079c3 fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)
• 3799ebbb5a9bc78041492d1f191fb94ce1aa389b test: use aquasecurity repository for test images [backport: release/v0.61] (#8698)

v0.61.0

⚡Release highlights and summary⚡

👉 aquasecurity/trivy#8639

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0610-2025-03-28

v0.60.0

⚡Release highlights and summary⚡

👉 aquasecurity/trivy#8495

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0600-2025-03-05

Changelog

Sourced from github.com/aquasecurity/trivy's changelog.

0.62.1 (2025-05-06)

Bug Fixes

• misconf: check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826) (99485cf)
• redhat: trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824) (b4fc9e8)

0.62.0 (2025-04-30)

Features

• image: save layers metadata into report (#8394) (a95cab0)
• misconf: add option to pass Rego scanner to IaC scanner (#8369) (890a360)
• misconf: convert AWS managed policy to document (#8757) (7abf5f0)
• misconf: support auto_provisioning_defaults in google_container_cluster (#8705) (9792611)
• nodejs: add root and workspace for yarn packages (#8535) (bf4cd4f)
• rust: add root and workspace relationships/package for cargo lock files (#8676) (93efe07)

Bug Fixes

• early-return, indent-error-flow and superfluous-else rules from revive (#8796) (43350dd)
• k8s: correct compare artifact versions (#8682) (cc47711)
• k8s: remove using last-applied-configuration (#8791) (7a58ccb)
• k8s: skip passed misconfigs for the summary report (#8684) (bff0e9b)
• misconf: add missing variable as unknown (#8683) (9dcd06f)
• misconf: check if metadata is not nil (#8647) (b7dfd64)
• misconf: filter null nodes when parsing json manifest (#8785) (e10929a)
• misconf: perform operations on attribute safely (#8774) (3ce7d59)
• misconf: populate context correctly for module instances (#8656) (efd177b)
• report: clean buffer after flushing (#8725) (9a5383e)
• secret: ignore .dist-info directories during secret scanning (#8646) (a032ad6)
• server: fix redis key when trying to delete blob (#8649) (36f8d0f)
• terraform: evaluateStep to correctly set EvalContext for multiple instances of blocks (#8555) (e25de25)
• terraform: hcl object expressions to return references (#8271) (0d3efa5)
• testifylint last issues (#8768) (ee4f7dc)
• unused-parameter rule from revive (#8794) (6562082)

0.61.0 (2025-03-28)

Features

• fs: optimize scanning performance by direct file access for known paths (#8525) (8bf6caf)
• k8s: add support for controllers (#8614) (1bf0117)
• misconf: adapt aws_default_security_group (#8538) (b57eccb)
• misconf: adapt aws_opensearch_domain (#8550) (9913465)
• misconf: adapt AWS::DynamoDB::Table (#8529) (8112cdf)

... (truncated)

Commits

• c75ed21 release: v0.62.1 [release/v0.62] (#8825)
• aafebeb chore(deps): bump the common group across 1 directory with 10 updates [backpo...
• 99485cf fix(misconf): check if for-each is known when expanding dyn block [backport: ...
• b4fc9e8 fix(redhat): trim invalid suffix from content_sets in manifest parsing [backp...
• 6e6af01 release: v0.62.0 [main] (#8669)
• bf4cd4f feat(nodejs): add root and workspace for yarn packages (#8535)
• 6562082 fix: unused-parameter rule from revive (#8794)
• 573f35c chore(deps): Update trivy-checks (#8798)
• 43350dd fix: early-return, indent-error-flow and superfluous-else rules from revive ...
• 7a58ccb fix(k8s): remove using last-applied-configuration (#8791)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

The merge-base changed after approval.

[dependabot]

Superseded by #156.