Accepting request 1324695 from Virtualization:containers

- Update to version 0.68.2:
  * release: v0.68.2 [release/v0.68] (#9950)
  * fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)
  * ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)

- Update to version 0.68.1 (bsc#1251363, CVE-2025-47911,
  bsc#1251547, CVE-2025-58190, bsc#1253512, CVE-2025-47913,
  bsc#1253512, CVE-2025-47913, bsc#1253786, CVE-2025-58181,
  bsc#1253977, CVE-2025-47914):

OBS-URL: https://build.opensuse.org/request/show/1324695
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/trivy?expand=0&rev=84

_constraints

@@ -2,7 +2,7 @@
 <constraints>
   <hardware>
     <disk>
-      <size unit="G">10</size>
+      <size unit="G">14</size>
     </disk>
   </hardware>
 </constraints>

_scmsync.obsinfo

@@ -1,4 +1,4 @@
-mtime: 1717679875
-commit: 579ede4865fcf5783c98eab0446e1c095dd85e84
+mtime: 1767005426
+commit: 2a31742e2345f9d7617b0b7bfde8e3f5c3e6682ad3833fa3b5f7718e12942f32
 url: https://src.opensuse.org/dirkmueller/trivy.git
-revision: 579ede4865fcf5783c98eab0446e1c095dd85e84
+revision: factory

_service

@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="manual">
     <param name="url">https://github.com/aquasecurity/trivy</param>
     <param name="scm">git</param>
-    <param name="revision">v0.52.0</param>
+    <param name="revision">v0.68.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/aquasecurity/trivy</param>
-              <param name="changesrevision">c24dfbab68056a42aff9589b024c6f2d067f9f52</param></service></servicedata>
+              <param name="changesrevision">0c40a8d4b9b943f1b679a20f8ba3cb61c94831de</param></service></servicedata>

trivy.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package trivy
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           trivy
-Version:        0.52.0
+Version:        0.68.2
 Release:        0
 Summary:        A Simple and Comprehensive Vulnerability Scanner for Containers
 License:        Apache-2.0
@@ -25,12 +25,11 @@ Group:          System/Management
 URL:            https://github.com/aquasecurity/trivy
 Source:         %{name}-%{version}.tar.zst
 Source1:        vendor.tar.zst
-BuildRequires:  golang(API) = 1.22
 BuildRequires:  golang-packaging
 BuildRequires:  zstd
+BuildRequires:  golang(API) = 1.25
 Requires:       ca-certificates
 Requires:       git-core
-Requires:       rpm
 
 %description
 Trivy (`tri` pronounced like trigger, `vy` pronounced like envy) is a simple and
@@ -43,11 +42,12 @@ scan. All you need to do for scanning is to specify a target such as an image
 name of the container.
 
 %prep
-%autosetup -p1 -a1
+%setup -a1
 
 %build
 export CGO_ENABLED=1
-go build -o trivy -mod=vendor -buildmode=pie -trimpath -ldflags "-s -w -X=main.version=%{version}" cmd/trivy/main.go
+export GOEXPERIMENT=jsonv2
+go build -o trivy -mod=vendor -buildmode=pie -trimpath -ldflags "-s -w -X github.com/aquasecurity/trivy/pkg/version/app.ver=%{version}" cmd/trivy/main.go
 
 %install
 install -D -m 755 trivy %{buildroot}/%{_bindir}/%{name}