0 Fork 0

mirror of https://github.com/thegeeklab/docker-tidy.git synced 2026-11-10 13:56:42 +00:00

T

renovate[bot] 7cf9ab4141 build(deps): update ghcr.io/aquasecurity/trivy docker tag to v0.76.2 (#1172 )

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/aquasecurity/trivy](https://www.aquasec.com/products/trivy/)
([source](https://redirect.github.com/aquasecurity/trivy)) | patch |
`0.76.1` → `0.76.2` |

---

### Release Notes

<details>
<summary>aquasecurity/trivy (ghcr.io/aquasecurity/trivy)</summary>

###
[`v0.76.2`](https://redirect.github.com/aquasecurity/trivy/releases/tag/v0.76.2)

[Compare
Source](https://redirect.github.com/aquasecurity/trivy/compare/v0.76.1...v0.76.2)

#### 🔐 Security update 🛡️

Trivy v0.76.2 bundles several security fixes:

- Official container images are rebuilt on Alpine 3.24.3, which fixes
`musl`/`musl-utils` (CVE-2026-107891), and the build picks up fixed
`libcurl` (24 CVEs, including HIGH CVE-2026-92392) and `brotli-libs`
(CVE-2026-111497) from the `v3.24` package repository.
- `golang.org/x/net` is bumped to v0.62.0, fixing two vulnerabilities in
`golang.org/x/net/html`: CVE-2026-78661 (quadratic complexity when
coalescing text nodes) and CVE-2026-97045 (missing ancestor namespace
check when rendering raw text).
- `github.com/go-jose/go-jose/v4` is bumped to v4.1.6, fixing
[GHSA-mgcc-cww5-fp2q](https://redirect.github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q).

We recommend upgrading to v0.76.2 and redeploying container images to
apply these updates.

#### Changelog

-
[`3f6334d`](https://redirect.github.com/aquasecurity/trivy/commit/3f6334d223b52188324af3b9923b4249cd206652)
release: v0.76.2 \[release/v0.76]
([#&#8203;11552](https://redirect.github.com/aquasecurity/trivy/issues/11552))
-
[`1cabe83`](https://redirect.github.com/aquasecurity/trivy/commit/1cabe83c11ffed6e984ab46be8886e1e01516ead)
fix(deps): bump golang.org/x/net from 0.61.0 to 0.62.0 \[backport:
release/v0.76]
([#&#8203;11554](https://redirect.github.com/aquasecurity/trivy/issues/11554))
-
[`be08de4`](https://redirect.github.com/aquasecurity/trivy/commit/be08de47d0d76fca7e992c0f47fbcf7853f8a713)
chore(deps): bump the common group across 1 directory with 14 updates
\[backport: release/v0.76]
([#&#8203;11555](https://redirect.github.com/aquasecurity/trivy/issues/11555))
-
[`a8537d3`](https://redirect.github.com/aquasecurity/trivy/commit/a8537d389cbd0fa215eddfddc27150fc7bc82a6c)
fix(deps): bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6
\[backport: release/v0.76]
([#&#8203;11553](https://redirect.github.com/aquasecurity/trivy/issues/11553))
-
[`ae26b88`](https://redirect.github.com/aquasecurity/trivy/commit/ae26b88c3b3c380808e767dfb63f9b8dcd5f64fd)
fix(deps): bump alpine to 3.24.3 in container images \[backport:
release/v0.76]
([#&#8203;11551](https://redirect.github.com/aquasecurity/trivy/issues/11551))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/thegeeklab/docker-tidy).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjIyMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>