Skip to content

fix(deps): update trivy (8.19)#6144

Open
elastic-renovate-prod[bot] wants to merge 1 commit into8.19from
renovate/8.19-trivy
Open

fix(deps): update trivy (8.19)#6144
elastic-renovate-prod[bot] wants to merge 1 commit into8.19from
renovate/8.19-trivy

Conversation

@elastic-renovate-prod
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/aquasecurity/trivy require minor v0.66.0 -> v0.70.0
github.com/aquasecurity/trivy-db require digest c7c831e -> bd11dd4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod Bot requested a review from a team as a code owner May 8, 2026 07:18
@elastic-renovate-prod elastic-renovate-prod Bot added dependencies Pull requests that update a dependency file renovate renovate-auto-approve Team:Security-Cloud Services Security Data Experience - Cloud Services team. labels May 8, 2026
@elastic-renovate-prod elastic-renovate-prod Bot enabled auto-merge May 8, 2026 07:18
@elastic-renovate-prod
Copy link
Copy Markdown
Contributor Author

elastic-renovate-prod Bot commented May 8, 2026

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 20 additional dependencies were updated

Details:

Package Change
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
k8s.io/api v0.34.3 -> v0.35.3
k8s.io/apimachinery v0.34.3 -> v0.35.3
k8s.io/client-go v0.34.3 -> v0.35.1
github.com/aquasecurity/trivy-checks v1.11.3-0.20250604022615-9a7efa7c9169 -> v1.12.2-0.20251219190323-79d27547baf5
github.com/containerd/platforms v1.0.0-rc.2 -> v1.0.0-rc.4
github.com/sigstore/cosign/v2 v2.2.4 -> v2.6.2
github.com/sigstore/sigstore v1.10.4 -> v1.10.5
mvdan.cc/sh/v3 v3.11.0 -> v3.12.0
github.com/containerd/containerd v1.7.27 -> v1.7.30
github.com/openvex/go-vex v0.2.5 -> v0.2.7
github.com/sigstore/rekor v1.5.0 -> v1.5.1
helm.sh/helm/v3 v3.18.6 -> v3.20.2
k8s.io/apiextensions-apiserver v0.33.3 -> v0.35.1
k8s.io/apiserver v0.33.3 -> v0.35.1
k8s.io/cli-runtime v0.33.3 -> v0.35.1
k8s.io/component-base v0.33.3 -> v0.35.1
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
k8s.io/kubectl v0.33.3 -> v0.35.1
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 8, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/8.19-trivy upstream/renovate/8.19-trivy
git merge upstream/8.19
git push upstream renovate/8.19-trivy

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 8, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/8.19-trivy upstream/renovate/8.19-trivy
git merge upstream/8.19
git push upstream renovate/8.19-trivy

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 8, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/8.19-trivy upstream/renovate/8.19-trivy
git merge upstream/8.19
git push upstream renovate/8.19-trivy

@elastic-renovate-prod elastic-renovate-prod Bot force-pushed the renovate/8.19-trivy branch 3 times, most recently from 23ae23f to 86f74d3 Compare May 8, 2026 18:53
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 8, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/8.19-trivy upstream/renovate/8.19-trivy
git merge upstream/8.19
git push upstream renovate/8.19-trivy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-skip dependencies Pull requests that update a dependency file renovate renovate-auto-approve Team:Security-Cloud Services Security Data Experience - Cloud Services team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants