Closed renovate[bot] closed 4 months ago
This PR contains the following updates:
0.52.0
0.52.2
📅 Schedule: Branch creation - "on sunday" in timezone America/Montreal, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
0.52.0
->0.52.2
Release Notes
aquasecurity/trivy (aquasec/trivy)
### [`v0.52.2`](https://togithub.com/aquasecurity/trivy/releases/tag/v0.52.2) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.52.1...v0.52.2) #### Changelog - [`8709d4f`](https://togithub.com/aquasecurity/trivy/commit/8709d4f9c) release: v0.52.2 \[release/v0.52] ([#6896](https://togithub.com/aquasecurity/trivy/issues/6896)) - [`a4b8ad7`](https://togithub.com/aquasecurity/trivy/commit/a4b8ad767) ci: use `ubuntu-latest-m` runner \[backport: release/v0.52] ([#6933](https://togithub.com/aquasecurity/trivy/issues/6933)) - [`2b711bc`](https://togithub.com/aquasecurity/trivy/commit/2b711bc26) chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 \[backport: release/v0.52] ([#6919](https://togithub.com/aquasecurity/trivy/issues/6919)) - [`191d31e`](https://togithub.com/aquasecurity/trivy/commit/191d31ef8) test: bump docker API to 1.45 \[backport: release/v0.52] ([#6922](https://togithub.com/aquasecurity/trivy/issues/6922)) - [`3f5874c`](https://togithub.com/aquasecurity/trivy/commit/3f5874c8a) ci: bump `github.com/goreleaser/goreleaser` to `v2.0.0` \[backport: release/v0.52] ([#6893](https://togithub.com/aquasecurity/trivy/issues/6893)) - [`8f8c76a`](https://togithub.com/aquasecurity/trivy/commit/8f8c76a2a) fix(debian): take installed files from the origin layer \[backport: release/v0.52] ([#6892](https://togithub.com/aquasecurity/trivy/issues/6892)) ### [`v0.52.1`](https://togithub.com/aquasecurity/trivy/releases/tag/v0.52.1) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.52.0...v0.52.1) #### Changelog - [`a3caf06`](https://togithub.com/aquasecurity/trivy/commit/a3caf0658) release: v0.52.1 \[release/v0.52] ([#6877](https://togithub.com/aquasecurity/trivy/issues/6877)) - [`01dbb42`](https://togithub.com/aquasecurity/trivy/commit/01dbb42ae) fix(nodejs): fix infinite loop when package link from `package-lock.json` file is broken \[backport: release/v0.52] ([#6888](https://togithub.com/aquasecurity/trivy/issues/6888)) - [`f186d22`](https://togithub.com/aquasecurity/trivy/commit/f186d22bf) fix(sbom): don't overwrite `srcEpoch` when decoding SBOM files \[backport: release/v0.52] ([#6881](https://togithub.com/aquasecurity/trivy/issues/6881)) - [`093c0ae`](https://togithub.com/aquasecurity/trivy/commit/093c0ae02) fix(python): compare pkg names from `poetry.lock` and `pyproject.toml` in lowercase \[backport: release/v0.52] ([#6878](https://togithub.com/aquasecurity/trivy/issues/6878)) - [`6bfda76`](https://togithub.com/aquasecurity/trivy/commit/6bfda7602) Merge pull request [#6879](https://togithub.com/aquasecurity/trivy/issues/6879) from aquasecurity/backport-pr-6864-to-release/v0.52 - [`53850c8`](https://togithub.com/aquasecurity/trivy/commit/53850c8b2) docs: explain how VEX is applied ([#6864](https://togithub.com/aquasecurity/trivy/issues/6864)) - [`2211962`](https://togithub.com/aquasecurity/trivy/commit/221196202) Merge pull request [#6875](https://togithub.com/aquasecurity/trivy/issues/6875) from aquasecurity/backport-pr-6857-to-release/v0.52 - [`a614b69`](https://togithub.com/aquasecurity/trivy/commit/a614b693d) fix(nodejs): fix infinity loops for `pnpm` with cyclic imports ([#6857](https://togithub.com/aquasecurity/trivy/issues/6857))Configuration
📅 Schedule: Branch creation - "on sunday" in timezone America/Montreal, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.