Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.33.1 to 0.34.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/aquasecurity/trivy-action/releases">aquasecurity/trivy-action's releases</a>.</em></p>
<blockquote>
<h2>v0.34.0</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: use setup-bats in bump-trivy workflow by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/494">aquasecurity/trivy-action#494</a></li>
<li>chore: update README by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/493">aquasecurity/trivy-action#493</a></li>
<li>ci: install trivy in bump-trivy workflow and update tests by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/495">aquasecurity/trivy-action#495</a></li>
<li>chore(deps): Update trivy to v0.68.1 by <a href="https://github.com/aqua-bot"><code>@aqua-bot</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/496">aquasecurity/trivy-action#496</a></li>
<li>ci: use checks bundle v2 in sync workflow by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/505">aquasecurity/trivy-action#505</a></li>
<li>chore(deps): Update trivy to v0.69.1 by <a href="https://github.com/aqua-bot"><code>@aqua-bot</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/506">aquasecurity/trivy-action#506</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/0.33.1...0.34.0">https://github.com/aquasecurity/trivy-action/compare/0.33.1...0.34.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/c1824fd6edce30d7ab345a9989de00bbd46ef284"><code>c1824fd</code></a> chore(deps): Update trivy to v0.69.1 (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/506">#506</a>)</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/bc61dc55704e2d5704760f3cdab0d09acf16e4ca"><code>bc61dc5</code></a> Merge commit from fork</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/5eb7ef2605dd123171cc50b6be71f3b1fefb6a13"><code>5eb7ef2</code></a> ci: use checks bundle v2 in sync workflow (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/505">#505</a>)</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/22438a435773de8c97dc0958cc0b823c45b064ac"><code>22438a4</code></a> Merge pull request <a href="https://redirect.github.com/aquasecurity/trivy-action/issues/496">#496</a> from aquasecurity/bump-trivy-1765431074</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/0024b3f39eb28238f271395b86ec43ee831aa97e"><code>0024b3f</code></a> chore(deps): Update trivy to v0.68.1</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/83690f7d38282f3c235caa2aac0043f2b4fe6134"><code>83690f7</code></a> ci: install trivy in bump-trivy workflow and update tests (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/495">#495</a>)</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/df65449f48b89ca7da6699b2d7620f4eaac2355b"><code>df65449</code></a> chore: update README (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/493">#493</a>)</li>
<li><a href="https://github.com/aquasecurity/trivy-action/commit/0317097f59169a66937f3f5b95d7f8b7cee1b7eb"><code>0317097</code></a> ci: use setup-bats in bump-trivy workflow (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/494">#494</a>)</li>
<li>See full diff in <a href="https://github.com/aquasecurity/trivy-action/compare/0.33.1...0.34.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps aquasecurity/trivy-action from 0.33.1 to 0.34.0.
Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
c1824fdchore(deps): Update trivy to v0.69.1 (#506)bc61dc5Merge commit from fork5eb7ef2ci: use checks bundle v2 in sync workflow (#505)22438a4Merge pull request #496 from aquasecurity/bump-trivy-17654310740024b3fchore(deps): Update trivy to v0.68.183690f7ci: install trivy in bump-trivy workflow and update tests (#495)df65449chore: update README (#493)0317097ci: use setup-bats in bump-trivy workflow (#494)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Preserved GitLab !44 history: source attribution, exact timestamps, discussion grouping and review positions. Historical diff snapshots: 1; visible source notes: 0.
gitlab-20-mergerequest-44.md (SHA-256
46406d6eac560298ec813e64c3c36163f02015502a793db8a8bc572e8c77c2a3)gitlab-20-mergerequest-44.json (SHA-256
4ef895c8ef710ac2202ab3f3f38900f0076b4bcd534e922563a34d4bccc24ff4)Old CI job execution and reports are omitted. Original source files and rollback backups remain protected.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.