search

giantswarm / starboard-exporter

A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).
Apache License 2.0
59 stars 23 forks source link

Bump github.com/aquasecurity/trivy-operator from 0.17.1 to 0.18.3 #306

Closed dependabot[bot] closed 10 months ago

dependabot[bot] commented 10 months ago

Bumps github.com/aquasecurity/trivy-operator from 0.17.1 to 0.18.3.

Release notes

Sourced from github.com/aquasecurity/trivy-operator's releases.

v0.18.3

Changelog

✨ Notable Changes ✨

  • 19a438da0d13743688ba20169712ae1304ecc71a: feat: allow configration of trivy-server pvc size (#1801) (@​jon-rei)

🐛 Notable Fixes 🐛

  • 259466ab1d1970496f1b71e7b3df366fe25ac36a: fix: use correct items list struct for ClusterVulnerabilityReportList (#1793) (@​fjogeleit)
  • b4129fbf6d2038353629fe0e32ad1484069ffe56: fix: use of node selector param (#1804) (@​chen-keinan)

📝 Documentation 📝

🔧 Miscellaneous 🔧

👷 Other work 👷

  • 54e070eef3dd2c88074e59af4f467f3a55abff7b: Update private-registries.md (#1791) (@​Utwo)
  • d1ed59ec705ca712c3d00cdf0fff9ede96f68838: build(deps): bump github.com/aws/aws-sdk-go from 1.49.22 to 1.50.0 (#1797) (@​dependabot[bot])
  • 62a93cdabf652821d2834bf15565a45a625575fa: build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1 (#1794) (@​dependabot[bot])
  • c297784d779451f9bb603cca289d2eeb23b2254c: build(deps): bump k8s.io/apiextensions-apiserver from 0.29.0 to 0.29.1 (#1795) (@​dependabot[bot])

v0.18.2

Changelog

🐛 Notable Fixes 🐛

📝 Documentation 📝

  • 349fe7bc4d2decbc86d1c0e0349e0cbdbfca9810: docs: updated managed registries (#1766) (@​dferri)

🔧 Miscellaneous 🔧

👷 Other work 👷

  • f9fe007a0c9ab02dade90bec3dadb38687e2a6a1: build(deps): bump github.com/aquasecurity/trivy from 0.48.2 to 0.48.3 (#1771) (@​dependabot[bot])
  • 91e674fd7eda06f65132bb9933ca124613058579: build(deps): bump github.com/aws/aws-sdk-go from 1.49.21 to 1.49.22 (#1783) (@​dependabot[bot])
  • 118f945c4616d35a20aec83d0294d9ed7b164e16: build(deps): bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.15.0 (#1786) (@​dependabot[bot])
  • 162b5017e2f425b7a05237d8d16814ed15e94314: build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0 (#1774) (@​dependabot[bot])

v0.18.1

Changelog

🐛 Notable Fixes 🐛

  • 7ab16c7438f6e7806a6794faab6319978aa94351: fix: sbom duplicate vol name (#1748) (@​chen-keinan)
  • f30e8615fcb5a55a4b45a68bf5f88f604511b9f5: fix: set audit config plugin trivy by default (#1746) (@​chen-keinan)

👮 Security updates👮

  • f79231b526bc647922ba501f2e547ffd4eebb8c5: sec: fix CVE GHSA-9763-4f94-gfch (#1759) (@​chen-keinan)

👷 Other work 👷

  • cebd1c049ce4cbe194d25cacfd86ad264878365e: Update trivy.yaml to support cve list (#1741) (@​gerbil)
  • 49a8be864784691850702c057f22c9fb464a2ae0: build(deps): bump github.com/aquasecurity/trivy from 0.48.1 to 0.48.2 (#1749) (@​dependabot[bot])
  • 8815129f3a9c463942ce09c5809bcdb68e188ad7: build(deps): bump github.com/aws/aws-sdk-go from 1.49.13 to 1.49.16 (#1750) (@​dependabot[bot])

v0.18.0

Changelog

✨ Notable Changes ✨

  • 1ecf6a07fc41b574929761251b3992d3b414cab3: feat: add dbRepositoryUsername and dbRepositoryPassword for dbReposit… (#1657) (@​juergen-fast)
  • 67e96c69741ee1e3cdab25b0def55db1d565b87a: feat: ingress resource on config-scan support (#1726) (@​chen-keinan)
  • e058b99405df4a6f82e994e01ae90cf7c58bb192: feat: retrieve sbom specified sources from oci registries (#1732) (@​chen-keinan)

... (truncated)

Commits
  • 9815acd chore: disable cluster cache (#1806)
  • 95d0dc1 release: prepare v0.18.3 (#1805)
  • b4129fb fix: use of node selector param (#1804)
  • ad37348 docs: helm version (#1802)
  • 19a438d feat: allow configration of trivy-server pvc size (#1801)
  • d1ed59e build(deps): bump github.com/aws/aws-sdk-go from 1.49.22 to 1.50.0 (#1797)
  • c297784 build(deps): bump k8s.io/apiextensions-apiserver from 0.29.0 to 0.29.1 (#1795)
  • 62a93cd build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.1 (#1794)
  • 259466a fix: use correct items list struct for ClusterVulnerabilityReportList (#1793)
  • 54e070e Update private-registries.md (#1791)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)