Skip to content

Bump aquasecurity/setup-trivy from 0.2.4 to 0.2.5#12083

Merged
pdurbin merged 2 commits intodevelopfrom
dependabot/github_actions/aquasecurity/setup-trivy-0.2.5
Feb 23, 2026
Merged

Bump aquasecurity/setup-trivy from 0.2.4 to 0.2.5#12083
pdurbin merged 2 commits intodevelopfrom
dependabot/github_actions/aquasecurity/setup-trivy-0.2.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 15, 2026

Bumps aquasecurity/setup-trivy from 0.2.4 to 0.2.5.

Release notes

Sourced from aquasecurity/setup-trivy's releases.

v0.2.5

What's Changed

New Contributors

Full Changelog: aquasecurity/setup-trivy@v0.2.4...v0.2.5

Commits
  • 3fb12ec Pin Trivy install script checkout to a specific commit (#28)
  • 9cf04f1 docs: use commit SHA and update Trivy version to v0.68.2: (#26)
  • e07451d ci: use restore and save instead of actions/cache (#19)
  • a451008 chore(deps): bump actions version (#25)
  • 271d4ea chore: use the -c flag on install script (#24)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aquasecurity/setup-trivy](https://github.com/aquasecurity/setup-trivy) from 0.2.4 to 0.2.5.
- [Release notes](https://github.com/aquasecurity/setup-trivy/releases)
- [Commits](aquasecurity/setup-trivy@v0.2.4...v0.2.5)

---
updated-dependencies:
- dependency-name: aquasecurity/setup-trivy
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 15, 2026
@pdurbin pdurbin moved this to Ready for Triage in IQSS Dataverse Project Jan 20, 2026
@scolapasta scolapasta moved this from Ready for Triage to Ready for Review ⏩ in IQSS Dataverse Project Jan 20, 2026
@github-project-automation github-project-automation bot moved this from Ready for Review ⏩ to Ready for QA ⏩ in IQSS Dataverse Project Jan 21, 2026
@cmbz cmbz added FY26 Sprint 15 FY26 Sprint 15 (2026-01-14 - 2026-01-28) FY26 Sprint 16 FY26 Sprint 16 (2026-01-28 - 2026-02-11) labels Jan 29, 2026
@cmbz cmbz added the FY26 Sprint 17 FY26 Sprint 17 (2026-02-11 - 2026-02-25) label Feb 11, 2026
@pdurbin
Copy link
Copy Markdown
Member

pdurbin commented Feb 17, 2026

edu.harvard.iq.dataverse.api.DataRetrieverApiIT.testRetrieveMyDataWithMetadataFields(DataRetrieverApiIT.java:429) is failing so I kicked off another run: https://jenkins.dataverse.org/job/IQSS-Dataverse-Develop-PR/job/PR-12083/3/

@pdurbin pdurbin self-assigned this Feb 17, 2026
@pdurbin pdurbin moved this from Ready for QA ⏩ to QA ✅ in IQSS Dataverse Project Feb 17, 2026
@qqmyers
Copy link
Copy Markdown
Member

qqmyers commented Feb 17, 2026

That was (hopefully) fixed in #12119 - is this branch new enough to include that? (As of now it shows the Update branch button).

@pdurbin
Copy link
Copy Markdown
Member

pdurbin commented Feb 17, 2026

Thanks, I just clicked "update branch".

@pdurbin
Copy link
Copy Markdown
Member

pdurbin commented Feb 23, 2026

@pdurbin pdurbin merged commit b761723 into develop Feb 23, 2026
7 checks passed
@github-project-automation github-project-automation bot moved this from QA ✅ to Merged 🚀 in IQSS Dataverse Project Feb 23, 2026
@pdurbin pdurbin removed their assignment Feb 23, 2026
@dependabot dependabot bot deleted the dependabot/github_actions/aquasecurity/setup-trivy-0.2.5 branch February 23, 2026 15:38
@scolapasta scolapasta moved this from Merged 🚀 to Done 🧹 in IQSS Dataverse Project Feb 23, 2026
@pdurbin pdurbin added this to the 6.10 milestone Mar 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file FY26 Sprint 15 FY26 Sprint 15 (2026-01-14 - 2026-01-28) FY26 Sprint 16 FY26 Sprint 16 (2026-01-28 - 2026-02-11) FY26 Sprint 17 FY26 Sprint 17 (2026-02-11 - 2026-02-25) github_actions Pull requests that update GitHub Actions code

Projects

Status: Done 🧹

Development

Successfully merging this pull request may close these issues.

4 participants