chore(deps): bump the trivy group with 2 updates

[dependabot]

Bumps the trivy group with 2 updates: github.com/aquasecurity/trivy and github.com/aquasecurity/trivy-db.

Updates github.com/aquasecurity/trivy from 0.64.1 to 0.65.0

Release notes

Sourced from github.com/aquasecurity/trivy's releases.

v0.65.0

👉 Trivy v.65.0 release notes (click here)

⬇️ Download Trivy

• MacOS Apple Silicon
• MacOS Intel
• Linux Intel
• Linux ARM
• Windows Intel

Full changelog

Changelog

Sourced from github.com/aquasecurity/trivy's changelog.

0.65.0 (2025-07-30)

Features

• add graceful shutdown with signal handling (#9242) (2c05882)
• add HTTP request/response tracing support (#9125) (aa5b32a)
• alma: add AlmaLinux 10 support (#9207) (861d51e)
• flag: add schema validation for --server flag (#9270) (ed4640e)
• image: add Docker context resolution (#9166) (99cd4e7)
• license: observe pkg types option in license scanner (#9091) (d44af8c)
• misconf: add private ip google access attribute to subnetwork (#9199) (263845c)
• misconf: added logging and versioning to the gcp storage bucket (#9226) (110f80e)
• repo: add git repository metadata to reports (#9252) (f4b2cf1)
• report: add CVSS vectors in sarif report (#9157) (60723e6)
• sbom: add SHA-512 hash support for CycloneDX SBOM (#9126) (12d6706)

Bug Fixes

• alma: parse epochs from rpmqa file (#9101) (82db2fc)
• also check filepath when removing duplicate packages (#9142) (4d10a81)
• aws: update amazon linux 2 EOL date (#9176) (0ecfed6)
• cli: Add more non-sensitive flags to telemetry (#9110) (7041a39)
• cli: ensure correct command is picked by telemetry (#9260) (b4ad00f)
• cli: panic: attempt to get os.Args[1] when len(os.Args) < 2 (#9206) (adfa879)
• license: add missed GFDL-NIV-1.1 and GFDL-NIV-1.2 into Trivy mapping (#9116) (a692f29)
• license: handle WITH operator for LaxSplitLicenses (#9232) (b4193d0)
• migrate from *.list to *.md5sums files for dpkg (#9131) (f224de3)
• misconf: correctly adapt azure storage account (#9138) (51aa022)
• misconf: correctly parse empty port ranges in google_compute_firewall (#9237) (77bab7b)
• misconf: fix log bucket in schema (#9235) (7ebc129)
• misconf: skip rewriting expr if attr is nil (#9113) (42ccd3d)
• nodejs: don't use prerelease logic for compare npm constraints (#9208) (fe96436)
• prevent graceful shutdown message on normal exit (#9244) (6095984)
• rootio: check full version to detect root.io packages (#9117) (c2ddd44)
• rootio: fix severity selection (#9181) (6fafbeb)
• sbom: merge in-graph and out-of-graph OS packages in scan results (#9194) (aa944cc)
• sbom: use correct field for licenses in CycloneDX reports (#9057) (143da88)
• secret: add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253) (54832a7)
• secret: fix line numbers for multiple-line secrets (#9104) (e579746)
• server: add HTTP transport setup to server mode (#9217) (1163b04)
• supporting .egg-info/METADATA in python.Packaging analyzer (#9151) (e306e2d)
• terraform: for_each on a map returns a resource for every key (#9156) (153318f)

0.64.0 (2025-06-30)

Features

... (truncated)

Commits

• b2b1545 release: v0.65.0 [main] (#9108)
• b4ad00f fix(cli): ensure correct command is picked by telemetry (#9260)
• ed4640e feat(flag): add schema validation for --server flag (#9270)
• 1a0c038 chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3...
• 011cefc ci: skip undefined labels in discussion triage action (#9175)
• f4b2cf1 feat(repo): add git repository metadata to reports (#9252)
• b4193d0 fix(license): handle WITH operator for LaxSplitLicenses (#9232)
• d2d0ec2 chore: add modernize tool integration for code modernization (#9251)
• 54832a7 fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marsh...
• 8f5b560 chore: implement process-safe temp file cleanup (#9241)
• Additional commits viewable in compare view

Updates github.com/aquasecurity/trivy-db from 0.0.0-20250627124416-ca81c496a932 to 0.0.0-20250723062229-56ec1e482238

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
github.com/aquasecurity/trivy	[>= 0.50.2.a, < 0.50.3]
github.com/aquasecurity/trivy	[< 0.51, > 0.50.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.