Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/aquasecurity/trivy-operator from 0.13.2 to 0.14.1 #227

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 19, 2023

Bumps github.com/aquasecurity/trivy-operator from 0.13.2 to 0.14.1.

Release notes

Sourced from github.com/aquasecurity/trivy-operator's releases.

v0.14.1

Changelog

  • cb5472e chore: auto generate helm docs (#1278)
  • 374c74a chore: configure server security context (#1275)
  • dd02f4d chore: fix CVE-2023-2650 (#1280)
  • c5f72b2 chore: workload identity settings (#1282)
  • 63b6dd9 feat: azure workload identity support (#1267)
  • 3fac57d feat: node collector annotation support (#1272)
  • 97ffcb5 fix: ignore policy regex not working (#1271)
  • 870be2c fix: specify confirmation in cosign invocation (#1277)
  • c86f7e1 pointing out Helm Chart customisation (#1276)

v0.14.1-rc

Changelog

  • 30bdb98 build(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.5 (#1230)
  • cb5472e chore: auto generate helm docs (#1278)
  • 374c74a chore: configure server security context (#1275)
  • dd02f4d chore: fix CVE-2023-2650 (#1280)
  • 8e8cac1 chore: verify helm docs (#1283)
  • c5f72b2 chore: workload identity settings (#1282)
  • 63b6dd9 feat: azure workload identity support (#1267)
  • 3fac57d feat: node collector annotation support (#1272)
  • 97ffcb5 fix: ignore policy regex not working (#1271)
  • 870be2c fix: specify confirmation in cosign invocation (#1277)
  • c86f7e1 pointing out Helm Chart customisation (#1276)

v0.14.0

Changelog

  • 953023e build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (#1263)
  • 5d27b6d build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#1264)
  • 34ff98a build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#1261)
  • de4b63e chore: bump trivy v0.42.0 (#1265)
  • e2362fa fix: honor ephemeralStorage,if set (#1259)
  • 3e528c2 fix: vulnerabilities report not created after k8s v1.27.x (#1252)
  • 773f8e3 Add support fo legacy dockercfg in scan jobs (#1183)
  • 426c6e3 Add tolerations to trivy-server template (#1189)
  • 8f297a8 Read object before compare to avoid wrong cached data (#1216)
  • e866712 build(deps): bump actions/setup-python from 4.5.0 to 4.6.0 (#1186)
  • 474ce56 build(deps): bump actions/setup-python from 4.6.0 to 4.6.1 (#1244)
  • 6bb3728 build(deps): bump github.com/aquasecurity/trivy-kubernetes (#1221)
  • cd598cf build(deps): bump github.com/aquasecurity/trivy-kubernetes (#1236)
  • 176ac95 build(deps): bump github.com/aquasecurity/trivy-kubernetes (#1245)
  • cc39b09 build(deps): bump github.com/google/go-containerregistry (#1214)
  • db0a902 build(deps): bump github.com/google/go-containerregistry (#1246)
  • 56cacf4 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4 (#1213)
  • 382b065 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5 (#1219)
  • b7ed779 build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#1233)
  • e5ba124 build(deps): bump github.com/prometheus/client_golang (#1215)
  • 7e7f60a build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#1232)
  • 0084e04 build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0 (#1220)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/aquasecurity/trivy-operator](https://github.com/aquasecurity/trivy-operator) from 0.13.2 to 0.14.1.
- [Release notes](https://github.com/aquasecurity/trivy-operator/releases)
- [Changelog](https://github.com/aquasecurity/trivy-operator/blob/main/.goreleaser.yaml)
- [Commits](aquasecurity/trivy-operator@v0.13.2...v0.14.1)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy-operator
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner June 19, 2023 05:00
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 19, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 24, 2023

Superseded by #230.

@dependabot dependabot bot closed this Jul 24, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/aquasecurity/trivy-operator-0.14.1 branch July 24, 2023 04:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants