From 7fee9ea4688977466bd24fe3ce85f168a014536b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Feb 2026 22:34:00 +0000 Subject: [PATCH 1/3] Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.33.1 to 0.34.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.33.1...0.34.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/python.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python.yaml b/.github/workflows/python.yaml index a8847e8..dcd4d41 100644 --- a/.github/workflows/python.yaml +++ b/.github/workflows/python.yaml @@ -241,7 +241,7 @@ jobs: fi # this comes as last or scan results won't be uploaded - name: Run Trivy vulnerability scanner (security treshold) - uses: aquasecurity/trivy-action@0.33.1 + uses: aquasecurity/trivy-action@0.34.0 with: scan-type: fs scan-ref: . From ac39d0a79ee1e002e406b3db8d68c8a87c9cd332 Mon Sep 17 00:00:00 2001 From: chicco785 <777218+chicco785@users.noreply.github.com> Date: Thu, 19 Feb 2026 10:28:10 +0000 Subject: [PATCH 2/3] docs(release_notes): update RELEASE_NOTES.md [dependabot skip] --- RELEASE_NOTES.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 4706e54..c53ab5e 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,6 +1,6 @@ # GitHub Workflows Release Notes -## 0.0.3-dev - 2026-02-13 +## 0.0.3-dev - 2026-02-19 ### Features @@ -86,6 +86,8 @@ ### Dependencies +- Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (PR #247 by + @dependabot[bot]) - Bump reproducible-containers/buildkit-cache-dance from 3.3.0 to 3.3.1 (PR #244 by @dependabot[bot]) - Bump WyriHaximus/github-action-get-previous-tag from 1 to 2 (PR #245 by From b1ab2174ab13e75f86e38384faace31f5eee3d17 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 19 Feb 2026 10:30:40 +0000 Subject: [PATCH 3/3] docs(release_notes): update RELEASE_NOTES.md [dependabot skip] --- RELEASE_NOTES.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 5476b20..31cc1b4 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -86,9 +86,9 @@ ### Dependencies +- Bump actions/cache from 4 to 5 (PR #248 by @dependabot[bot]) - Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (PR #247 by @dependabot[bot]) -- Bump actions/cache from 4 to 5 (PR #248 by @dependabot[bot]) - Bump reproducible-containers/buildkit-cache-dance from 3.3.0 to 3.3.1 (PR #244 by @dependabot[bot]) - Bump WyriHaximus/github-action-get-previous-tag from 1 to 2 (PR #245 by