update trivy version (#5057)

* update trivy version

Updated licensing information and dependencies for the build process.

* Update print statement from 'Hello' to 'Goodbye'

* Update setup.py

Author: vizhur

scripts/azureml-assets/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.17.4 (2026-05-19)
+### 🚀 New Features
+- [#5036](https://github.com/Azure/azureml-assets/pull/5057) Update Trivy and Oras versions
+
 ## 1.17.3 (2026-05-13)
 ### 🚀 New Features
 - [#5036](https://github.com/Azure/azureml-assets/pull/5036) Add isArchived to unsupported SDK fields list

scripts/azureml-assets/azureml/assets/environment/build.py

@@ -28,8 +28,8 @@
 SCAN_STEP_TIMEOUT_SECONDS = 60 * 20
 DEFAULT_STEP_TIMEOUT_SECONDS = 60 * 30
 TRIVY_TIMEOUT = "15m0s"
-TRIVY_VERSION = "v0.64.1-1"
-ORAS_VERSION = "v1.2.3-2"
+TRIVY_VERSION = "v0.68.2-8"
+ORAS_VERSION = "v1.3.0-7"
 SUCCESS_COUNT = "success_count"
 FAILED_COUNT = "failed_count"
 COUNTERS = [SUCCESS_COUNT, FAILED_COUNT]

scripts/azureml-assets/setup.py

@@ -7,7 +7,7 @@
 
 setup(
    name="azureml-assets",
-   version="1.17.3",
+   version="1.17.4",
    description="Utilities for publishing assets to Azure Machine Learning system registries.",
    author="Microsoft Corp",
    packages=find_packages(),