Skip to content

Conversation

@syself-bot
Copy link
Contributor

@syself-bot syself-bot bot commented Apr 1, 2025

This PR contains the following updates:

Package Type Update Change
adrienverge/yamllint minor v1.36.2 -> v1.37.1
docker.io/aquasec/trivy (source) stage minor 0.60.0 -> 0.68.1
docker.io/hadolint/hadolint stage minor v2.12.0-alpine -> v2.14.0-alpine
docker.io/library/alpine stage minor 3.21.3 -> 3.23.0
docker.io/library/golang final patch 1.24.5-bullseye -> 1.24.6-bullseye
golangci/golangci-lint major v1.64.8 -> v2.7.0
helm/helm major v3.18.6 -> v4.0.1

Release Notes

adrienverge/yamllint (adrienverge/yamllint)

v1.37.1

Compare Source

v1.37.0

Compare Source

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.68.1

Compare Source

Bug Fixes
  • update cosing settings for GoReleaser after bumping cosing to v3 (#​9863) (c7accc8)

v0.67.2

Compare Source

Changelog

  • 60c57ad release: v0.67.2 [release/v0.67] (#​9639)
  • f3ee80c fix: Use fetch-level: 1 to check out trivy-repo in the release workflow [backport: release/v0.67] (#​9638)

v0.67.1

Compare Source

Changelog

  • cbed239 release: v0.67.1 [release/v0.67] (#​9614)
  • 1a84093 fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#​9631)
  • 3bc1490 fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#​9629)
  • 542eee7 fix: add buildInfo for BlobInfo in rpc package [backport: release/v0.67] (#​9615)
  • f65dd05 fix(vex): don't use reused BOM [backport: release/v0.67] (#​9612)

v0.67.0

Compare Source

Features
Bug Fixes
  • aws: use BuildableClient insead of xhttp.Client (#​9436) (fa6f1bf)
  • close file descriptors and pipes on error paths (#​9536) (a4cbd6a)
  • db: Dowload database when missing but metadata still exists (#​9393) (92ebc7e)
  • k8s: disable parallel traversal with fs cache for k8s images (#​9534) (c0c7a6b)
  • misconf: handle tofu files in module detection (#​9486) (bfd2f6b)
  • misconf: strip build metadata suffixes from image history (#​9498) (c938806)
  • misconf: unmark cty values before access (#​9495) (8e40d27)
  • misconf: wrap legacy ENV values in quotes to preserve spaces (#​9497) (267a970)
  • nodejs: parse workspaces as objects for package-lock.json files (#​9518) (404abb3)
  • nodejs: use snapshot string as Package.ID for pnpm packages (#​9330) (4517e8c)
  • vex: don't suppress vulns for packages with infinity loop (#​9465) (78f0d4a)
  • vuln: compare nuget package names in lower case (#​9456) (1ff9ac7)

v0.66.0

Compare Source

Features
  • add timeout handling for cache database operations (#​9307) (235c24e)
  • misconf: added audit config attribute (#​9249) (4d4a244)
  • secret: implement streaming secret scanner with byte offset tracking (#​9264) (5a5e097)
  • terraform: use .terraform cache for remote modules in plan scanning (#​9277) (298a994)
Bug Fixes

v0.65.0

Compare Source

Features
Bug Fixes

v0.64.1

Compare Source

Changelog

  • 86ee3c1 release: v0.64.1 [release/v0.64] (#​9122)
  • 4e12722 fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#​9127)
  • 9a7d384 fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#​9124)
  • 53adfba fix(rootio): check full version to detect root.io packages [backport: release/v0.64] (#​9120)
  • 8cf1bf9 fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#​9119)

v0.64.0

Compare Source

Features
Bug Fixes
  • Add missing version check flags (#​8951) (ef5f8de)
  • cli: add some values to the telemetry call (#​9056) (fd2bc91)
  • Correctly check for semver versions for trivy version check (#​8948) (b813527)
  • don't show corrupted trivy-db warning for first run (#​8991) (4ed78e3)
  • misconf: .Config.User always takes precedence over USER in .History (#​9050) (371b8cc)
  • misconf: correct Azure value-to-time conversion in AsTimeValue (#​9015) (40d017b)
  • misconf: move disabled checks filtering after analyzer scan (#​9002) (a58c36d)
  • misconf: reduce log noise on incompatible check (#​9029) (99c5151)
  • nodejs: correctly parse packages array of bun.lock file (#​8998) (875ec3a)
  • report: don't panic when report contains vulns, but doesn't contain packages for table format (#​8549) (87fda76)
  • sbom: remove unnecessary OS detection check in SBOM decoding (#​9034) (198789a)

v0.63.0

Compare Source

Features
Bug Fixes
Performance Improvements
  • secret: only match secrets of meaningful length, allow example strings to not be matched (#​8602) (60fef1b)

v0.62.1

Compare Source

Changelog

  • c75ed21 release: v0.62.1 [release/v0.62] (#​8825)
  • aafebeb chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#​8831)
  • 99485cf fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#​8826)
  • b4fc9e8 fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#​8824)

v0.62.0

Compare Source

Features
  • image: save layers metadata into report (#​8394) (a95cab0)
  • misconf: add option to pass Rego scanner to IaC scanner (#​8369) (890a360)
  • misconf: convert AWS managed policy to document (#​8757) (7abf5f0)
  • misconf: support auto_provisioning_defaults in google_container_cluster (#​8705) (9792611)
  • nodejs: add root and workspace for yarn packages (#​8535) (bf4cd4f)
  • rust: add root and workspace relationships/package for cargo lock files (#​8676) (93efe07)
Bug Fixes

v0.61.1

Compare Source

Changelog

  • 7d3b4ff release: v0.61.1 [release/v0.61] (#​8704)
  • 80d120f fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#​8748)
  • 9d6290b fix(k8s): correct compare artifact versions [backport: release/v0.61] (#​8699)
  • 3799ebb test: use aquasecurity repository for test images [backport: release/v0.61] (#​8698)

v0.61.0

Compare Source

Features
Bug Fixes
Performance Improvements
hadolint/hadolint (docker.io/hadolint/hadolint)

v2.14.0

Compare Source

What's Changed

New Contributors

Full Changelog: hadolint/hadolint@v2.13.1...v2.14.0

v2.13.1

Compare Source

What's Changed


Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@syself-bot syself-bot bot added type/major type/minor update/container size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. area/github Changes made in the github directory labels Apr 1, 2025
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 3 times, most recently from 8fd09a5 to 22fdd92 Compare April 18, 2025 11:03
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from d95fde7 to 23ff29a Compare May 1, 2025 11:03
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 3 times, most recently from 5f1de23 to 027f1d7 Compare May 7, 2025 11:03
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from e92f5b0 to 6d7b2be Compare May 31, 2025 11:03
@github-actions github-actions bot added size/S Denotes a PR that changes 20-50 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. labels May 31, 2025
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 4 times, most recently from da47999 to a3dd0af Compare July 4, 2025 11:03
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from 1a7a724 to 6db9a56 Compare July 16, 2025 11:03
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from 6db9a56 to 8857bf8 Compare July 22, 2025 11:04
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from 8857bf8 to 3fa17cb Compare July 31, 2025 11:03
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from 3fa17cb to 2a68080 Compare August 1, 2025 11:05
@github-actions github-actions bot added size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. and removed size/S Denotes a PR that changes 20-50 lines, ignoring generated files. labels Aug 1, 2025
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from 2a68080 to 2e7cb04 Compare August 3, 2025 11:04
> [It] should take over an existing load balancer with correct name
* 🌱 HCloudMachineType: allow all values.

The list of valid machine types gets changed by
Hetzner from time to time. CAPH no longer
validates this string. It is up to you to use a
valid type. Not all types are available in all
locations.

Additionally Remediation was fixed if providerID was nil.
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from 01ba2ab to 2e79207 Compare November 4, 2025 11:02
guettli and others added 4 commits November 5, 2025 10:12
> It("checks that no remediation is tried if HCloud server does not exist anymore
…1700)

Bump clusterctl version

Co-authored-by: don <don@pop-os.wyvern-bull.ts.net>
Co-authored-by: Thomas Güttler <thomas.guettler@syself.com>
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from 2e79207 to 5b6ea10 Compare November 11, 2025 11:05
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch 2 times, most recently from 26541aa to e2421db Compare November 15, 2025 11:04
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from e2421db to 7f7b346 Compare November 25, 2025 11:04
@syself-bot syself-bot bot force-pushed the renovate/caph-builder-image branch from 7f7b346 to 9055278 Compare December 3, 2025 11:04
guettli and others added 2 commits December 3, 2025 13:04
| datasource  | package                     | from    | to      |
| ----------- | --------------------------- | ------- | ------- |
| github-tags | adrienverge/yamllint        | v1.36.2 | v1.37.1 |
| docker      | docker.io/aquasec/trivy     | 0.60.0  | 0.68.1  |
| docker      | docker.io/hadolint/hadolint | v2.12.0 | v2.14.0 |
| docker      | docker.io/library/alpine    | 3.21.3  | 3.23.0  |
| docker      | docker.io/library/golang    | 1.24.5  | 1.24.6  |
| github-tags | golangci/golangci-lint      | v1.64.8 | v2.7.0  |
| github-tags | helm/helm                   | v3.18.6 | v4.0.1  |
@syself-bot
Copy link
Contributor Author

syself-bot bot commented Dec 5, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/github Changes made in the github directory size/S Denotes a PR that changes 20-50 lines, ignoring generated files. type/major type/minor update/container

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants