🌱 Update Builder Image group

[cluster-stack-bot]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/aquasec/trivy (source)	stage	minor	0.63.0 -> 0.64.0
golangci/golangci-lint		minor	v2.1.6 -> v2.2.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.64.0

Compare Source

Features

• cli: add version constraints to annoucements (#​9023) (19efa9f)
• java: dereference all maven settings.xml env placeholders (#​9024) (5aade69)
• misconf: add OpenTofu file extension support (#​8747) (57801d0)
• misconf: normalize CreatedBy for buildah and legacy docker builder (#​8953) (65e155f)
• redhat: Add EOL date for RHEL 10. (#​8910) (48258a7)
• reject unsupported artifact types in remote image retrieval (#​9052) (1e1e1b5)
• sbom: add manufacturer field to CycloneDX tools metadata (#​9019) (41d0f94)
• terraform: add partial evaluation for policy templates (#​8967) (a9f7dcd)
• ubuntu: add end of life date for Ubuntu 25.04 (#​9077) (367564a)
• ubuntu: add eol date for 20.04-ESM (#​8981) (87118a0)
• vuln: add Root.io support for container image scanning (#​9073) (3a0ec0f)

Bug Fixes

• Add missing version check flags (#​8951) (ef5f8de)
• cli: add some values to the telemetry call (#​9056) (fd2bc91)
• Correctly check for semver versions for trivy version check (#​8948) (b813527)
• don't show corrupted trivy-db warning for first run (#​8991) (4ed78e3)
• misconf: .Config.User always takes precedence over USER in .History (#​9050) (371b8cc)
• misconf: correct Azure value-to-time conversion in AsTimeValue (#​9015) (40d017b)
• misconf: move disabled checks filtering after analyzer scan (#​9002) (a58c36d)
• misconf: reduce log noise on incompatible check (#​9029) (99c5151)
• nodejs: correctly parse packages array of bun.lock file (#​8998) (875ec3a)
• report: don't panic when report contains vulns, but doesn't contain packages for table format (#​8549) (87fda76)
• sbom: remove unnecessary OS detection check in SBOM decoding (#​9034) (198789a)

golangci/golangci-lint (golangci/golangci-lint)

v2.2.1

Compare Source

1. Linters bug fixes

• varnamelen: fix configuration

v2.2.0

Compare Source

1. New linters
   • Add arangolint linter https://github.com/Crocmagnon/arangolint
   • Add embeddedstructfieldcheck linter https://github.com/manuelarte/embeddedstructfieldcheck
   • Add noinlineerr linter https://github.com/AlwxSin/noinlineerr
   • Add swaggo formatter https://github.com/golangci/swaggoswag
2. Linters new features or changes
   • errcheck: add verbose option
   • funcorder: from 0.2.1 to 0.5.0 (new option alphabetical)
   • gomoddirectives: from 0.6.1 to 0.7.0 (new option ignore-forbidden)
   • iface: from 1.3.1 to 1.4.0 (new option unexported)
   • noctx: from 0.1.0 to 0.3.3 (new report messages, and new rules related to database/sql)
   • noctx: from 0.3.3 to 0.3.4 (new SQL functions detection)
   • revive: from 1.9.0 to 1.10.0 (new rules: time-date, unnecessary-format, use-fmt-print)
   • usestdlibvars: from 1.28.0 to 1.29.0 (new option time-date-month)
   • wsl: deprecation
   • wsl_v5: from 4.7.0 to 5.0.0 (major version with new configuration)
3. Linters bug fixes
   • dupword: from 0.1.3 to 0.1.6
   • exptostd: from 0.4.3 to 0.4.4
   • forbidigo: from 1.6.0 to 2.1.0
   • gci: consistently format the code
   • go-spancheck: from 0.6.4 to 0.6.5
   • goconst: from 1.8.1 to 1.8.2
   • gosec: from 2.22.3 to 2.22.4
   • gosec: from 2.22.4 to 2.22.5
   • makezero: from 1.2.0 to 2.0.1
   • misspell: from 0.6.0 to 0.7.0
   • usetesting: from 0.4.3 to 0.5.0
4. Misc.
   • exclusions: fix path-expect
   • formatters: write the input to stdout when using stdin and there are no changes
   • migration: improve the error message when trying to migrate a migrated config
   • typecheck: deduplicate errors
   • typecheck: stops the analysis after the first error
   • Deprecate print-resources-usage flag
   • Unique version per custom build
5. Documentation
   • Improves typecheck FAQ
   • Adds plugin systems recommendations
   • Add description for linters.default sets

---

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

[cluster-stack-bot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.