chore(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.35.0 in /.github/workflows in the github_actions group across 1 directory

[dependabot]

Bumps the github_actions group with 1 update in the /.github/workflows directory: aquasecurity/trivy-action.

Updates aquasecurity/trivy-action from 0.34.0 to 0.35.0

Release notes

Sourced from aquasecurity/trivy-action's releases.

Release: 0.35.0

What's Changed

• chore(deps): Update trivy to v0.69.3 by @​aqua-bot in aquasecurity/trivy-action#519

Full Changelog: aquasecurity/trivy-action@0.34.2...0.35.0

Release: v0.35.0

This release is a duplicate of 0.35.0 which was not compromised.

As part of our response to the recent supply chain attack, we have migrated all tags to use the v prefix (e.g., v0.35.0 instead of 0.35.0). Going forward, all new releases will use the v prefix convention.

We have intentionally kept the 0.35.0 tag intact to avoid breaking existing workflows that depend on it.

If you are currently using 0.35.0, your workflows are safe — no action is required.

Commits

• 57a97c7 chore(deps): Update trivy to v0.69.3 (#519)
• 97e0b38 chore: bump Trivy version to v0.69.2 in test workflow and README (#515)
• 4c61e63 chore: bump default Trivy version to v0.69.2 (#513)
• 1bd0625 Merge pull request #508 from nikpivkin/feat/pass-yaml-ignore-file
• bce3086 remove unused init-cache target
• 5a9fbb1 supress progress bar when download db
• 1615450 update trivyignores input description
• df85774 add comment about fd3
• 56c8dae remove unused variable
• e368e32 ci(test): add zizmor security linter for GitHub Actions (#502)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[jfreed-dev]

Superseded by PR #22 which manually bumped aquasecurity/trivy-action to v0.35.0 (pinned by SHA). Closing.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml