🌱 Update Builder Image group

[syself-bot]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/aquasec/trivy (source)	stage	minor	0.56.2 -> 0.57.1
docker.io/library/alpine	stage	digest	beefdbd -> 1e42bbe
golangci/golangci-lint		minor	v1.61.0 -> v1.62.2

---

Release Notes

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.57.1

Compare Source

⚡Release highlights and summary⚡

👉https://github.com/aquasecurity/trivy/discussions/7951

Changelog

https://github.com/aquasecurity/trivy/blob/release/v0.57/CHANGELOG.md#0571-2024-11-18

v0.57.0

Compare Source

⚠ BREAKING CHANGES

• k8s: support k8s multi container (#​7444)

Features

• add end of life date for Ubuntu 24.10 (#​7787) (ad3c09e)
• cli: add trivy auth (#​7664) (27117f8)
• cli: error out when ignore file cannot be found (#​7624) (cb0b3a9)
• cli: rename trivy auth to trivy registry (#​7727) (633a7ab)
• cyclonedx: add file checksums to CycloneDX reports (#​7507) (c225883)
• db: append errors (#​7843) (5e78b6c)
• misconf: export unresolvable field of IaC types to Rego (#​7765) (9514148)
• misconf: public network support for Azure Storage Account (#​7601) (ad91412)
• misconf: Show misconfig ID in output (#​7762) (f75c0d1)
• misconf: ssl_mode support for GCP SQL DB instance (#​7564) (2eaa17e)
• parser: ignore white space in pom.xml files (#​7747) (a7baa93)
• report: update gitlab template to populate operating_system value (#​7735) (c0d79fa)

Bug Fixes

• cli: clean --all deletes only relevant dirs (#​7704) (672e886)
• cli: add config name to skip-policy-update alias (#​7820) (b661d68)
• db: fix javadb downloading error handling (#​7642) (2c87f0c)
• enable usestdlibvars linter (#​7770) (57e24aa)
• go: Do not trim v prefix from versions in Go Mod Analyzer (#​7733) (e872ec0)
• helm: properly handle multiple archived dependencies (#​7782) (6fab88d)
• java: correctly inherit version and scope from upper/root depManagement and dependencies into parents (#​7541) (778df82)
• k8s: skip resources without misconfigs (#​7797) (7882776)
• k8s: support k8s multi container (#​7444) (c434775)
• k8s: support kubernetes v1.31 (#​7810) (7a4f4d8)
• license: fix license normalization for Universal Permissive License (#​7766) (f6acdf7)
• misconf: change default ACL of digitalocean_spaces_bucket to private (#​7577) (9da84f5)
• misconf: check if property is not nil before conversion (#​7578) (c8c14d3)
• misconf: fix for Azure Storage Account network acls adaptation (#​7602) (35fd018)
• misconf: properly expand dynamic blocks (#​7612) (8d5dbc9)
• redhat: include arch in PURL qualifiers (#​7654) (a585e95)
• repo: git clone output to Stderr (#​7561) (fdf203c)
• report: Fix invalid URI in SARIF report (#​7645) (015bb88)
• sbom: add options for DBs in private registries (#​7660) (1f2e91b)
• sbom: use Annotation instead of AttributionTexts for SPDX formats (#​7811) (f2bb9c6)

golangci/golangci-lint (golangci/golangci-lint)

v1.62.2

Compare Source

1. Updated linters
   • fatcontext: from 0.5.2 to 0.5.3
   • ginkgolinter: from 0.18.0 to 0.18.3
   • go-errorlint: from 1.6.0 to 1.7.0
   • iface: from 1.2.0 to 1.2.1
   • revive: from 1.5.0 to 1.5.1
   • testifylint: from 1.5.0 to 1.5.2
2. Misc.
   • fix: ignore cache error when file not found

v1.62.1

Compare Source

Cancelled due to CI failure.

v1.62.0

Compare Source

1. New linters
   • Add recvcheck linter https://github.com/raeperd/recvcheck
   • Add iface linter https://github.com/uudashr/iface
2. Updated linters
   • ⚠️ execinquery: deprecation step 2
   • ⚠️ gomnd: deprecation step 2 (replaced by mnd)
   • bidichk: from 0.2.7 to 0.3.2 (important performance improvement)
   • canonicalheader: from 1.1.1 to 1.1.2
   • cyclop: from 1.2.1 to 1.2.3
   • dupword: from 0.1.1 to 0.1.3
   • errcheck: from 1.7.0 to 1.8.0
   • errchkjson: from 0.3.6 to 0.4.0
   • errname: from 0.1.13 to 1.0.0
   • ginkgolinter: from 0.17.0 to 0.18.0 (new option: force-succeed)
   • go-check-sumtype: from 0.1.4 to 0.2.0 (new option: default-signifies-exhaustive)
   • go-critic: from 0.11.4 to 0.11.5
   • go-printf-func-name: from 7558a9e to v0.1.0
   • godot: from 1.4.17 to 1.4.18
   • gosec: from 2.21.2 to 2.21.4
   • intrange: from 0.2.0 to 0.2.1
   • loggercheck: from 0.9.4 to 0.10.1 (log/slog support)
   • musttag: from 0.12.2 to 0.13.0
   • nakedret: from 2.0.4 to 2.0.5
   • nilnil: from 0.1.9 to 1.0.0 (new option: detect-opposite)
   • noctx: from 0.0.2 to 0.1.0
   • protogetter: from 0.3.6 to 0.3.8
   • revive: from 1.3.9 to 1.5.0 (new rules: filename-format, and file-length-limit)
   • tenv: from 1.10.0 to 1.12.1 (handle dot import)
   • testifylint: from 1.4.3 to 1.5.0 (new checkers: contains, encoded-compare, regexp)
3. Misc.
   • Type sizing when cross-compiling (32-bit).
   • code-climate: add check_name field
   • Improve Go version detection
   • Fix Go version propagation
4. Documentation
   • Adds a section about exclude-dirs-use-default
   • Improve 'install from sources' section
   • Improve FAQ about Go versions
   • Improve linter/rule/check docs
   • Improve new linter section
   • Improve forbidigo pattern examples for built-in functions

---

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box