leap-16.0 #27

Manually merged
pool merged 3 commits from dirkmueller/trivy:leap-16.0 into leap-16.0 2025-12-10 09:41:31 +01:00

3 Commits

Author SHA256 Message Date
Dirk Müller
cdbf0f01cd Merge remote-tracking branch 'my/factory' into leap-16.0 2025-12-03 11:45:17 +01:00
9be48396ff Update to 0.68.1 2025-12-03 11:31:58 +01:00
1fa0f4e999 Accepting request 1316946 from Virtualization:containers
- Update to version 0.67.2 (bsc#1250625, CVE-2025-11065,
  bsc#1248897, CVE-2025-58058):
  * release: v0.67.2 [release/v0.67] (#9639)
  * fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638)
  * release: v0.67.1 [release/v0.67] (#9614)
  * fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631)
  * fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629)
  * fix: add `buildInfo` for `BlobInfo` in `rpc` package [backport: release/v0.67] (#9615)
  * fix(vex): don't use reused BOM [backport: release/v0.67] (#9612)
  * release: v0.67.0 [main] (#9432)
  * fix(vex): don't  suppress vulns for packages with infinity loop (#9465)
  * fix(aws): use `BuildableClient` insead of `xhttp.Client` (#9436)
  * refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282)
  * docs: clarify inline ignore limitations for resource-less checks (#9537)
  * fix(k8s): disable parallel traversal with fs cache for k8s images (#9534)
  * fix(misconf): handle tofu files in module detection (#9486)
  * feat(seal): add seal support (#9370)
  * docs: fix modules path and update code example (#9539)
  * fix: close file descriptors and pipes on error paths (#9536)
  * feat: add documentation URL for database lock errors (#9531)
  * fix(db): Dowload database when missing but metadata still exists (#9393)
  * feat(cloudformation): support default values and list results in Fn::FindInMap (#9515)
  * fix(misconf): unmark cty values before access (#9495)
  * feat(cli): change --list-all-pkgs default to true (#9510)
  * fix(nodejs): parse workspaces as objects for package-lock.json files (#9518)
  * refactor(fs): use underlyingPath to determine virtual files more reliably (#9302)
  * refactor: remove google/wire dependency and implement manual DI (#9509)
  * chore(deps): bump the aws group with 6 updates (#9481)
  * chore(deps): bump the common group across 1 directory with 24 updates (#9507)
  * fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497)

OBS-URL: https://build.opensuse.org/request/show/1316946
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/trivy?expand=0&rev=82
2025-11-10 18:21:00 +00:00