chore(deps): update docker

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aquasec/trivy (source)	stage	minor	0.69.3 → 0.72.0
eclipse-temurin	final	patch	25.0.1_8-jre-jammy → 25.0.3_9-jre-jammy

---

Release Notes

aquasecurity/trivy (aquasec/trivy)

v0.72.0

Compare Source

⚠ BREAKING CHANGES

• migrate docker config to dockers_v2 (#​10783)

Features

• bottlerocket: add vulnerability matching for Bottlerocket OS (#​10893) (246ee3c)
• dotnet: detect bundled runtime in self-contained deployments (#​10786) (bd78842)
• java: detect JAR licenses from packaged LICENSE files (#​10856) (b8a1ccd)
• java: detect JAR licenses from the embedded pom.xml (#​10851) (0a166c3)
• misconf: Adds CloudFront standard logging v2 support to AVD-AWS-0010 (#​10848) (a848925)
• secret: add OpenAI secret detection rules (#​10798) (65e5128)
• secret: support new stateless format for GitHub App installation tokens (#​10826) (e68f3d2)

Bug Fixes

• correct format verbs in diagnostic messages (#​10805) (859a933)
• forward ospkg detector options through ospkg.NewScanner (#​10811) (28d44d3)
• image: deterministic OS package deduplication for images with embedded SBOMs (#​10777) (888911b)
• image: lookup origin layer for custom resources in merged layers (#​10788) (dccb128)
• misconf: support github_repository_vulnerability_alerts resource (#​10680) (abb5174)
• nodejs: parse project dependencies from multi-document pnpm-lock.yaml (#​10861) (a10291b)
• server: propagate package repository class in client/server mode (#​10874) (a2777ae)
• spdx: guard against nil root component in SPDX marshaler (#​10771) (c0654e1)
• surface the original analysis error instead of context cancellation (#​10793) (3054b3b)
• terraform: avoid data race on global getter.Getters in remote module resolver (#​10843) (0aff3fd)
• use random suffix for process temp directory instead of PID (#​10431) (c8d1d0d)
• vex: load VEX documents from within the repository directory (#​10820) (1f56a34)
• vuln: fall back to UNKNOWN severity when vulnerability details are missing (#​10795) (dfd53cf)

Continuous Integration

• migrate docker config to dockers_v2 (#​10783) (848d135)

v0.71.2

Compare Source

Changelog

• 055a5c8 release: v0.71.2 [release/v0.71] (#​10871)
• 875328a fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#​10870)
• 998f7b3 chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#​10867)

v0.71.1

Compare Source

Changelog

• 164b383 release: v0.71.1 [release/v0.71] (#​10818)
• a72d9a4 fix(oci): validate artifact filename
• 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#​10825)
• a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#​10821)
• 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#​10812)
• ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#​10815)

v0.71.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10767

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

v0.70.0

Compare Source

Features

• go: detect version from ELF symbol table for binaries built with -trimpath (#​10197) (7acb5f6)
• java: add support for proxy configuration from Maven settings.xml (#​10187) (350fe33)
• misconf: adapt ARM k8s clusters (#​9696) (#​10125) (66bdec4)
• misconf: resolve Azure resources via resource_id (#​10173) (823f363)
• misconf: support for azurerm_network_interface_security_group_association (#​10215) (da94d5f)
• python: add pylock.toml (PEP 751) parser (#​9632) (1a72b32)
• python: add pylock.toml support (#​10137) (d0a3f63)
• server: include server version info in JSON output for client/server mode (#​10075) (4c46d41)
• ubuntu: add eol data for 25.10 (#​10181) (2c1f65b)
• vuln: skip third-party packages in common Detect function (#​10129) (d6e6331)

Bug Fixes

• cyclonedx: include CVSS v4 vulnerability ratings (#​10313) (2a4dfbf)
• detected vulnerability fields in azure and mariner detector (#​10275) (77f5cb5)
• flag: validate template file extension (#​10296) (20458b8)
• handle Go 1.26 GOEXPERIMENT version format change (#​10351) (f207ec6)
• java: Disable overwriting exclusions (#​10088) (9a3e0a8)
• misconf: apply check aliases when filtering results via .trivyignore (#​10112) (b775a1b)
• misconf: initialize custom annotation field if empty (#​10123) (0f0d6db)
• python: handle multiple version specifiers in requirements.txt (#​10361) (4cf4498)
• python: nil pointer dereference with optional poetry groups without dependencies (#​10359) (12ab3ce)
• remove os.Stdout from wazero module config (#​10403) (bda9710)
• report: set correct sarif ROOTPATH uri when scanning a git repository (#​10366) (e5da6de)
• sbom: add NOASSERTION for licenseDeclared/licenseConcluded in SPDX non-library packages (#​10368) (33b9d8e)
• sbom: preserve Red Hat BuildInfo when scanning SBOMs without layer info (#​10378) (e9e9e8c)
• server: exclude JavaDB and CheckBundle from /version endpoint (#​10100) (b9a8d2d)
• update PhotonOS feed URL (#​10122) (fa195b4)
• use Development category for GoReleaser discussions (#​10530) (7ee3e1e)

Performance Improvements

• plugin: optimize directory traversal by replacing filepath.Walk with filepath.WalkDir (#​10325) (d7fb355)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 06:59 AM (* 0-6 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud