chore(deps): update dependency aquasecurity/trivy to v0.75.0

[renovate]

This PR contains the following updates:

Package	Update	Change
aquasecurity/trivy	minor	v0.64.1 → v0.75.0

---

Release Notes

aquasecurity/trivy (aquasecurity/trivy)

v0.75.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/11333

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0750-2026-10-01

v0.74.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/11096

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0740-2026-08-14

v0.73.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/11033

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0730-2026-08-03

v0.72.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10907

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

v0.71.2

Compare Source

Changelog

• 055a5c8 release: v0.71.2 [release/v0.71] (#​10871)
• 875328a fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#​10870)
• 998f7b3 chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#​10867)

v0.71.1

Compare Source

Changelog

• 164b383 release: v0.71.1 [release/v0.71] (#​10818)
• a72d9a4 fix(oci): validate artifact filename
• 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#​10825)
• a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#​10821)
• 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#​10812)
• ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#​10815)

v0.71.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10767

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

v0.70.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10546

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0700-2026-04-16

v0.69.3

Compare Source

Changelog

• 6fb20c8 release: v0.69.3 [release/v0.69] (#​10293)
• dabefec fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#​10291)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

❌ Plan Failed (koyashiro.com)

CI link

Error: Error acquiring the state lock

Error message: workspace already locked (lock ID: "koyashiro/koyashiro-com")
Lock Info:
  ID:        c1bd8687-3446-0e73-b613-257cf60136bc
  Path:      
  Operation: OperationTypePlan
  Who:       runner@runnervmzvulz
  Version:   1.12.2
  Created:   2026-08-14 18:16:11.998169015 +0000 UTC
  Info:      


Terraform acquires a state lock to protect the state from being written
by multiple users at the same time. Please resolve the issue above and try
again. For most commands, you can disable locking with the "-lock=false"
flag, but this is not recommended.

[github-actions]

❌ Plan Failed (koyashiro.net)

CI link

Error: Error acquiring the state lock

Error message: workspace already locked (lock ID: "koyashiro/koyashiro-net")
Lock Info:
  ID:        ad7a472a-b622-8019-8b40-908f16d7ce0c
  Path:      
  Operation: OperationTypePlan
  Who:       runner@runnervmzvulz
  Version:   1.12.2
  Created:   2026-08-14 18:16:08.166724394 +0000 UTC
  Info:      


Terraform acquires a state lock to protect the state from being written
by multiple users at the same time. Please resolve the issue above and try
again. For most commands, you can disable locking with the "-lock=false"
flag, but this is not recommended.

[github-actions]

❌ Plan Failed (vpm.koyashiro.net)

CI link

Error: Error acquiring the state lock

Error message: workspace already locked (lock ID:
"koyashiro/vpm-koyashiro-net")
Lock Info:
  ID:        d275a0c4-6588-e35d-bf61-a74fb67d7125
  Path:      
  Operation: OperationTypePlan
  Who:       runner@runnervmzvulz
  Version:   1.12.2
  Created:   2026-08-14 18:16:08.457426901 +0000 UTC
  Info:      


Terraform acquires a state lock to protect the state from being written
by multiple users at the same time. Please resolve the issue above and try
again. For most commands, you can disable locking with the "-lock=false"
flag, but this is not recommended.

[github-actions]

❌ Plan Failed (koyashiro.sh)

CI link

Error: Authentication error (10000)

  with cloudflare_record.cname_root,
  on dns_records.tf line 1, in resource "cloudflare_record" "cname_root":
   1: resource "cloudflare_record" "cname_root" {


Error: Authentication error (10000)

  with cloudflare_record.cname_dotfiles,
  on dns_records.tf line 9, in resource "cloudflare_record" "cname_dotfiles":
   9: resource "cloudflare_record" "cname_dotfiles" {


Error: Authentication error (10000)

  with cloudflare_record.txt_spf,
  on dns_records.tf line 17, in resource "cloudflare_record" "txt_spf":
  17: resource "cloudflare_record" "txt_spf" {


Error: Authentication error (10000)

  with cloudflare_record.txt_dkim,
  on dns_records.tf line 25, in resource "cloudflare_record" "txt_dkim":
  25: resource "cloudflare_record" "txt_dkim" {


Error: Authentication error (10000)

  with cloudflare_record.txt_dmarc,
  on dns_records.tf line 33, in resource "cloudflare_record" "txt_dmarc":
  33: resource "cloudflare_record" "txt_dmarc" {


Error: Authentication error (10000)

  with cloudflare_record.txt_keybase_site_verification,
  on dns_records.tf line 41, in resource "cloudflare_record" "txt_keybase_site_verification":
  41: resource "cloudflare_record" "txt_keybase_site_verification" {

[github-actions]

Plan Result (koyashiro.jp)

CI link

No changes. Your infrastructure matches the configuration.

[github-actions]

Plan Result (cdn.koyashiro.net)

CI link

No changes. Your infrastructure matches the configuration.

[github-actions]

Plan Result (koyashi.ro)

CI link

No changes. Your infrastructure matches the configuration.

[github-actions]

Plan Result (koyashiro.dev)

CI link

Plan: 2 to add, 0 to change, 0 to destroy.

• Create
  • cloudflare_record.cname_root
  • cloudflare_record.txt_keybase_site_verification

Change Result (Click me)

  # cloudflare_record.cname_root will be created
  + resource "cloudflare_record" "cname_root" {
      + allow_overwrite = false
      + content         = "koyashi.ro"
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "@"
      + proxiable       = (known after apply)
      + proxied         = true
      + ttl             = (known after apply)
      + type            = "CNAME"
      + value           = (known after apply)
      + zone_id         = (sensitive value)
    }

  # cloudflare_record.txt_keybase_site_verification will be created
  + resource "cloudflare_record" "txt_keybase_site_verification" {
      + allow_overwrite = false
      + content         = "keybase-site-verification=cgtWui1rP9uCabMptNv5HvLRW6yWnQpHTvfTjhlSPFA"
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "@"
      + proxiable       = (known after apply)
      + ttl             = 1
      + type            = "TXT"
      + value           = (known after apply)
      + zone_id         = (sensitive value)
    }

Plan: 2 to add, 0 to change, 0 to destroy.

[github-actions]

❌ Plan Failed (koyashiro.live)

CI link

Error: Error acquiring the state lock

Error message: workspace already locked (lock ID: "koyashiro/koyashiro-live")
Lock Info:
  ID:        adb33235-6b61-2ce9-475a-5dd34186bdfb
  Path:      
  Operation: OperationTypePlan
  Who:       runner@runnervmzvulz
  Version:   1.12.2
  Created:   2026-08-14 18:16:14.819487786 +0000 UTC
  Info:      


Terraform acquires a state lock to protect the state from being written
by multiple users at the same time. Please resolve the issue above and try
again. For most commands, you can disable locking with the "-lock=false"
flag, but this is not recommended.

[github-actions]

Plan Result (koyashiro.me)

CI link

Plan: 2 to add, 0 to change, 0 to destroy.

• Create
  • cloudflare_record.cname_root
  • cloudflare_record.txt_keybase_site_verification

Change Result (Click me)

  # cloudflare_record.cname_root will be created
  + resource "cloudflare_record" "cname_root" {
      + allow_overwrite = false
      + content         = "koyashi.ro"
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "@"
      + proxiable       = (known after apply)
      + proxied         = true
      + ttl             = (known after apply)
      + type            = "CNAME"
      + value           = (known after apply)
      + zone_id         = (sensitive value)
    }

  # cloudflare_record.txt_keybase_site_verification will be created
  + resource "cloudflare_record" "txt_keybase_site_verification" {
      + allow_overwrite = false
      + content         = "keybase-site-verification=mXW1Jxxi9Cxm_w4TvEv1g3eFJVpm95-i0VCWsxSmr8M"
      + created_on      = (known after apply)
      + hostname        = (known after apply)
      + id              = (known after apply)
      + metadata        = (known after apply)
      + modified_on     = (known after apply)
      + name            = "@"
      + proxiable       = (known after apply)
      + ttl             = 1
      + type            = "TXT"
      + value           = (known after apply)
      + zone_id         = (sensitive value)
    }

Plan: 2 to add, 0 to change, 0 to destroy.