Update all non-major dependencies by csi-components-e2e · Pull Request #167 · aws/csi-components

csi-components-e2e · 2026-10-01T00:50:08Z

This PR contains the following updates:

Package	Type	Update	Change
public.ecr.aws/aquasecurity/trivy (source)		minor	`0.74.0` → `0.75.0`
public.ecr.aws/eks-distro-build-tooling/eks-distro-minimal-base	stage	digest	`c8a0394` → `0c4c51b`

Release Notes

aquasecurity/trivy (public.ecr.aws/aquasecurity/trivy)

`v0.75.0`

Compare Source

⚠ BREAKING CHANGES

report: remove getHostByName from templates (#11206)

Features

add cryptographic asset model and parser (#10970) (64e1715)
cli: allow disabling configuration files with empty paths (#11210) (5f00edd)
crypto: add analyzer and pass assets to the scan report (#11104) (fb7ad28)
crypto: add the crypto scanner to the image command (#11144) (dc9a384)
crypto: describe ML-DSA keys and signature algorithms (#11137) (20c3c35)
crypto: describe parsed material as cryptographic assets (#11092) (7d0a892)
crypto: output cryptographic assets in CycloneDX (#11125) (3897d5c)
crypto: transfer cryptographic assets in client/server mode (#11141) (4128b7f)
echo: add vulnerability detection for Echo-patched Python packages (#10555) (98787b8)

Bug Fixes

avoid panics on malformed dependency files and version-less Amazon Linux release (#10996) (ef28d95)
correct grammar and typos in user-facing error messages (#11211) (a8c8409)
correct grammar and typos in user-facing error messages and CLI flags (#11281) (5ba5be0)
crypto: read RSA private keys without validating their math (#11319) (3683d7d)
go: honor go directive when merging go.sum (#11169) (71190a6)
go: restore stdlib version parsing for vendor-patched Go toolchains (#11119) (a851889)
license: report unparsable license names with UNKNOWN severity (#11254) (7b598ab)
license: use canonical SPDX casing for license.id (#11165) (89d3acf)
misconf: report correct line numbers in multi-document manifests (#11207) (4eac9a0)
nodejs: support boolean resolved field in package-lock.json (#11156) (a2474b8)
os: keep the fullest OS version when merging analyzer results (#11039) (0afeae0)
purl: classify julia, bottlerocket and centos stream packages (#11326) (3a1b311)
python: skip pip requirement lines with malformed extras brackets (#11300) (7e71d21)
python: support uv workspace lockfiles (#10553) (a072319)
report: remove getHostByName from templates (#11206) (9b2b830)
repo: strip credentials from remote repository URL in artifact name (#11213) (c961eeb)
sbom: skip null entries in SPDX file and package arrays (#11101) (0aaaa71)
server: propagate package modularity label, build info and installed files (#11188) (bf9f5b7)
set locations for JSON values sharing a line (#11231) (e5b5a3a)
terraform: do not override --skip-files with --skip-dirs (#11191) (1c8c54f)
vex: avoid panic on CSAF relationships without a sub-component (#11067) (ae561f8)

Performance Improvements

avoid regrowing the buffer when reading a cached file (#11134) (25521f4)
crypto: report repeated x509 material once per file (#11263) (f6423f6)
reuse one JSON unmarshaler per document (#11232) (e97dfcc)
secret: avoid cloning the logger for every rule (#11133) (ab3cf86)
secret: replace per-rule keyword search with one Aho-Corasick pass (#11179) (f372e56)
take JSON line numbers from decoder offsets (#11233) (7e21433)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

github-actions · 2026-10-01T00:50:43Z

Trivy Output

702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-snapshotter:b1e76360a80487809f9994dcf51caaa681270a13-v8.6.0-eksbuild.8

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-snapshotter:b1e76360a80487809f- │  amazon  │        0        │    -    │
│ 9994dcf51caaa681270a13-v8.6.0-eksbuild.8 (amazon 2023.12.20260930 (Amazon        │          │                 │         │
│ Linux))                                                                          │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-snapshotter                                                                  │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-snapshotter (gobinary)
==========================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.43.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-attacher:b1e76360a80487809f9994dcf51caaa681270a13-v4.12.0-eksbuild.8

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-attacher:b1e76360a80487809f999- │  amazon  │        0        │    -    │
│ 4dcf51caaa681270a13-v4.12.0-eksbuild.8 (amazon 2023.12.20260930 (Amazon Linux))  │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-attacher                                                                     │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-attacher (gobinary)
=======================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.43.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-provisioner:b1e76360a80487809f9994dcf51caaa681270a13-v6.3.0-eksbuild.7

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-provisioner:b1e76360a80487809f- │  amazon  │        0        │    -    │
│ 9994dcf51caaa681270a13-v6.3.0-eksbuild.7 (amazon 2023.12.20260930 (Amazon        │          │                 │         │
│ Linux))                                                                          │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-provisioner                                                                  │ gobinary │        3        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-provisioner (gobinary)
==========================
Total: 3 (UNKNOWN: 0, LOW: 3, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.44.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/sdk                                 │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-resizer:b1e76360a80487809f9994dcf51caaa681270a13-v2.2.1-eksbuild.6

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-resizer:b1e76360a80487809f9994- │  amazon  │        0        │    -    │
│ dcf51caaa681270a13-v2.2.1-eksbuild.6 (amazon 2023.12.20260930 (Amazon Linux))    │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-resizer                                                                      │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


csi-resizer (gobinary)
======================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.40.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-node-driver-registrar:b1e76360a80487809f9994dcf51caaa681270a13-v2.17.0-eksbuild.7

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/csi-node-driver-registrar:b1e76360- │  amazon  │        0        │    -    │
│ a80487809f9994dcf51caaa681270a13-v2.17.0-eksbuild.7 (amazon 2023.12.20260930     │          │                 │         │
│ (Amazon Linux))                                                                  │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ csi-node-driver-registrar                                                        │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

702945799511.dkr.ecr.us-west-2.amazonaws.com/livenessprobe:b1e76360a80487809f9994dcf51caaa681270a13-v2.19.0-eksbuild.7

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/livenessprobe:b1e76360a80487809f99- │  amazon  │        0        │    -    │
│ 94dcf51caaa681270a13-v2.19.0-eksbuild.7 (amazon 2023.12.20260930 (Amazon Linux)) │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ livenessprobe                                                                    │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

702945799511.dkr.ecr.us-west-2.amazonaws.com/snapshot-controller:b1e76360a80487809f9994dcf51caaa681270a13-v8.6.0-eksbuild.8

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/snapshot-controller:b1e76360a80487- │  amazon  │        0        │    -    │
│ 809f9994dcf51caaa681270a13-v8.6.0-eksbuild.8 (amazon 2023.12.20260930 (Amazon    │          │                 │         │
│ Linux))                                                                          │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ snapshot-controller                                                              │ gobinary │        2        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


snapshot-controller (gobinary)
==============================
Total: 2 (UNKNOWN: 0, LOW: 2, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                         │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────┤
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace            │ CVE-2026-81870 │ LOW      │ fixed  │ v1.43.0           │ 1.45.0        │ github.com/open-telemetry/opentelemetry-go:           │
│                                                              │                │          │        │                   │               │ OpenTelemetry-Go: Information disclosure via exporter │
│                                                              │                │          │        │                   │               │ configuration logging                                 │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-81870            │
├──────────────────────────────────────────────────────────────┤                │          │        │                   │               │                                                       │
│ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace- │                │          │        │                   │               │                                                       │
│ grpc                                                         │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
│                                                              │                │          │        │                   │               │                                                       │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────┘
702945799511.dkr.ecr.us-west-2.amazonaws.com/volume-modifier-for-k8s:b1e76360a80487809f9994dcf51caaa681270a13-v0.9.6-eksbuild.1

Report Summary

┌──────────────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                                      Target                                      │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 702945799511.dkr.ecr.us-west-2.amazonaws.com/volume-modifier-for-k8s:b1e76360a8- │  amazon  │        0        │    -    │
│ 0487809f9994dcf51caaa681270a13-v0.9.6-eksbuild.1 (amazon 2023.12.20260930        │          │                 │         │
│ (Amazon Linux))                                                                  │          │                 │         │
├──────────────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ volume-modifier-for-k8s                                                          │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)

public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.66.0

Report Summary

┌──────────────────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                              Target                              │   Type   │ Vulnerabilities │ Secrets │
├──────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.66.0 (amazon │  amazon  │        2        │    -    │
│ 2023.12.20260831 (Amazon Linux))                                 │          │                 │         │
├──────────────────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ usr/bin/aws-ebs-csi-driver                                       │ gobinary │        0        │    -    │
└──────────────────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.66.0 (amazon 2023.12.20260831 (Amazon Linux))
=================================================================================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 2, CRITICAL: 0)

┌──────────────┬────────────────┬──────────┬────────┬──────────────────────┬──────────────────────┬────────────────────────────────────────────────────────┐
│   Library    │ Vulnerability  │ Severity │ Status │  Installed Version   │    Fixed Version     │                         Title                          │
├──────────────┼────────────────┼──────────┼────────┼──────────────────────┼──────────────────────┼────────────────────────────────────────────────────────┤
│ pcre2        │ CVE-2026-89161 │ HIGH     │ fixed  │ 10.40-1.amzn2023.0.3 │ 10.40-1.amzn2023.0.4 │ pcre2: PCRE2: Memory corruption vulnerability in       │
│              │                │          │        │                      │                      │ pcre2_jit_match                                        │
│              │                │          │        │                      │                      │ https://avd.aquasec.com/nvd/cve-2026-89161             │
├──────────────┼────────────────┤          │        ├──────────────────────┼──────────────────────┼────────────────────────────────────────────────────────┤
│ systemd-libs │ CVE-2026-16742 │          │        │ 252.23-12.amzn2023   │ 252.23-13.amzn2023   │ systemd: systemd-homed: Local privilege escalation via │
│              │                │          │        │                      │                      │ missing home-record signature verification             │
│              │                │          │        │                      │                      │ https://avd.aquasec.com/nvd/cve-2026-16742             │
└──────────────┴────────────────┴──────────┴────────┴──────────────────────┴──────────────────────┴────────────────────────────────────────────────────────┘

ConnorJC3

Hold merging this until #165 is merged to avoid merge conflicts

| datasource | package | from | to | | ---------- | --------------------------------- | ------ | ------ | | docker | public.ecr.aws/aquasecurity/trivy | 0.74.0 | 0.75.0 |

csi-components-e2e added the dependencies Pull requests that update a dependency file label Oct 1, 2026

csi-components-e2e enabled auto-merge (squash) October 1, 2026 00:50

ConnorJC3 requested changes Oct 1, 2026

View reviewed changes

csi-components-e2e force-pushed the renovate/all-non-major-dependencies branch from 4328f90 to 4c87121 Compare October 1, 2026 13:45

csi-components-e2e changed the title ~~Update public.ecr.aws/eks-distro-build-tooling/eks-distro-minimal-base:latest-al23 Docker digest to ef1b387~~ Update all non-major dependencies Oct 1, 2026

csi-components-e2e force-pushed the renovate/all-non-major-dependencies branch from 4c87121 to 064d50f Compare October 1, 2026 14:59

Update all non-major dependencies

d218f05

| datasource | package | from | to | | ---------- | --------------------------------- | ------ | ------ | | docker | public.ecr.aws/aquasecurity/trivy | 0.74.0 | 0.75.0 |

csi-components-e2e force-pushed the renovate/all-non-major-dependencies branch from 064d50f to d218f05 Compare October 1, 2026 23:22

torredil approved these changes Oct 2, 2026

View reviewed changes

ConnorJC3 approved these changes Oct 2, 2026

View reviewed changes

csi-components-e2e merged commit dee8607 into main Oct 2, 2026
13 checks passed

csi-components-e2e deleted the renovate/all-non-major-dependencies branch October 2, 2026 13:53

Navigation Menu

Repository navigation

Update all non-major dependencies - #167

Update all non-major dependencies#167
csi-components-e2e merged 1 commit into
mainfrom
renovate/all-non-major-dependencies

csi-components-e2e commented Oct 1, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 1, 2026 •

edited

Loading

Uh oh!

ConnorJC3 left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

csi-components-e2e commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.75.0

⚠ BREAKING CHANGES

Features

Bug Fixes

Performance Improvements

Configuration

Uh oh!

github-actions Bot commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Trivy Output

Uh oh!

ConnorJC3 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

csi-components-e2e commented Oct 1, 2026 •

edited

Loading

`v0.75.0`

github-actions Bot commented Oct 1, 2026 •

edited

Loading