Changelog

🐛 Notable Fixes 🐛

• 14263dd: fix(configaudit): restore ConfigMap data for content-based… (#3054) (@LaibaBareera)

🔧 Miscellaneous 🔧

• dab9341: chore: bump up Trivy version to 0.75.0 (#3091) (@afdesk)

Changelog

🔧 Miscellaneous 🔧

• 2eb8709: chore: bump up Trivy version to 0.74.0 (#3041) (@afdesk)

👷 Other work 👷

• 1b1c61b: build(deps): bump golang.org/x/text (#3046) (@dependabot[bot])
• 5874a7d: build(deps): bump the common group across 1 directory with 7 updates (#3048) (@dependabot[bot])

Changelog

🔧 Miscellaneous 🔧

• 7d7874f: chore: bump up Trivy version to v0.73.0 (#3031) (@afdesk)

👷 Other work 👷

• df3877a: build(deps): bump golang.org/x/text in the golang group (#3020) (@dependabot[bot])
• 698db6d: build(deps): bump the k8s group with 5 updates (#3028) (@dependabot[bot])

Changelog

🐛 Notable Fixes 🐛

• 9e6aa0b: fix: handle missing report CRDs during old report cleanup (#3018) (@LaibaBareera)

🔧 Miscellaneous 🔧

• 8501418: chore: bump up Trivy version to v0.72.0 (#3017) (@afdesk)

👷 Other work 👷

• 39b5203: build(deps): bump github.com/onsi/ginkgo/v2 in the common group (#3004) (@dependabot[bot])
• d74f1c3: build(deps): bump golang.org/x/text in the golang group (#3005) (@dependabot[bot])
• 508e7a4: build(deps): bump the k8s group across 1 directory with 5 updates (#3003) (@dependabot[bot])
• daf91cf: build(deps): bump ubi9/ubi-minimal in /build/trivy-operator (#3015) (@dependabot[bot])

Changelog

✨ Notable Changes ✨

• 559fdc2: feat: add Persistent Volume and Persistent Volume Claim resources (#2999) (@LaibaBareera)

🔧 Miscellaneous 🔧

• 213bb92: chore: bump up Go version to 1.26.4 (#2990) (@afdesk)
• 1717439: chore: bump up Trivy version to 0.71.1 (#2998) (@afdesk)

👷 Other work 👷

• 0dc9aee: build(deps): bump alpine from 3.23.4 to 3.24.0 in /build/trivy-operator (#2996) (@dependabot[bot])
• 347ad2c: build(deps): bump alpine from 3.24.0 to 3.24.1 in /build/trivy-operator (#3000) (@dependabot[bot])
• 1583506: build(deps): bump the common group across 1 directory with 2 updates (#2982) (@dependabot[bot])
• 5c5d062: build(deps): bump the common group across 1 directory with 2 updates (#2994) (@dependabot[bot])
• a8fff0a: build(deps): bump the k8s group across 1 directory with 4 updates (#2993) (@dependabot[bot])
• c8b610b: build(deps): bump ubi9/ubi-minimal in /build/trivy-operator (#2986) (@dependabot[bot])
• 4910168: build(deps): bump ubi9/ubi-minimal in /build/trivy-operator (#2997) (@dependabot[bot])

Changelog

👷 Other work 👷

• e6229cf: ci: increase goreleaser timeouts and fix snapshot workflow (#2983) (@afdesk)

What's Changed

🐛 Notable Fixes 🐛

• fix: vulnerability metric export fails because of duplicate entries by @sbreitf1 in #2884

📝 Documentation && Miscellaneous 🔧

• chore: bump up KinD and K8s versions by @afdesk in #2802
• chore(deps): bump up cloudflare/circl to version 1.6.3 by @afdesk in #2900
• chore: bump up Trivy to version v0.69.2 by @afdesk in #2905
• chore: bump up Trivy to version v0.69.3 by @afdesk in #2918

👒 Dependencies 👒

• build(deps): bump ubi9/ubi-minimal from 759f5f4 to c7d4414 in /build/trivy-operator by @dependabot[bot] in #2892
• build(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 in the common group by @dependabot[bot] in #2876
• build(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 in the golang group by @dependabot[bot] in #2877
• build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.0 in the common group by @dependabot[bot] in #2894
• build(deps): bump github.com/aquasecurity/trivy from 0.69.1 to 0.69.2 in the aqua group by @dependabot[bot] in #2909

New Contributors

• @sbreitf1 made their first contribution in #2884

Full Changelog: v0.30.0...v0.30.1

What's Changed

✨ Notable Changes ✨

• feat: add support for custom Trivy ignore file by @afdesk in #2750
• feat: automatically roll deployment in helm chart on configmap change by @jensloe-nhn in #2760

🐛 Notable Fixes 🐛

• fix(ci): clean up space for e2e tests by @afdesk in #2776
• fix: print logs if any error appears by @afdesk in #2725
• fix: Add config file volume to client server mode by @bh-tt in #2751
• fix: prefer vendor score if both nvd and vendor cvss v3 scores exist by @afdesk in #2774
• fix: error "creating secret used by scan job failed: /sbom-k8s-cluste… by @dcoppa in #2759
• fix: validation SBOM reports by @afdesk in #2792
• fix: always generate the compliance report by @afdesk in #2804
• fix: delete completed scan jobs in any case by @afdesk in #2788
• fix: avoid re-mounting GCR volume with credentials by @afdesk in #2801
• fix: use login to private registry by @afdesk in #2595
• fix: alternateReportStorage PVC no longer ignores namespace from values.yaml by @ml-qc in #2864

📝 Documentation && Miscellaneous 🔧

• chore: bump up Trivy to version v0.67.0 by @afdesk in #2764
• chore: bump up inderect deps to fix vulns by @afdesk in #2805
• chore: enable non-interactively mode for UBI9 image by @afdesk in #2814
• chore: bump up x/crypto to v0.45.0 by @afdesk in #2821
• chore: image apk upgrade optimization by @daanschipper in #2826
• chore(ubi9): update metadata for UBI9 image by @afdesk in #2846
• chore: bump up Trivy to version v0.69.0 by @afdesk in #2870
• chore: bump up Trivy to version v0.69.1 by @afdesk in #2875
• ci: added extra_file LICENSE for Dockerfile.ubi9 by @afdesk in #2879
• chore: bump up go-git deps to fix CVE-2026-25934 by @afdesk in #2882

👒 Dependencies 👒

• build(deps): bump ubi9/ubi-minimal from 7c5495d to 34880b6 in /build/trivy-operator by @dependabot[bot] in #2784
• build(deps): bump alpine from 3.22.1 to 3.22.2 in /build/trivy-operator by @dependabot[bot] in #2778
• build(deps): bump ubi9/ubi-minimal from 34880b6 to 61d5ad4 in /build/trivy-operator by @dependabot[bot] in #2816
• build(deps): bump ubi9/ubi-minimal from 61d5ad4 to 6fc28bc in /build/trivy-operator by @dependabot[bot] in #2832
• build(deps): bump alpine from 3.22.2 to 3.23.0 in /build/trivy-operator by @dependabot[bot] in #2833
• build(deps): bump alpine from 3.23.0 to 3.23.3 in /build/trivy-operator by @dependabot[bot] in #2866
• build(deps): bump ubi9/ubi-minimal from 6fc28bc to bb08f23 in /build/trivy-operator by @dependabot[bot] in #2862
• build(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 in the golang group by @dependabot[bot] in #2844
• build(deps): bump ubi9/ubi-minimal from bb08f23 to ecd4751 in /build/trivy-operator by @dependabot[bot] in #2873
• build(deps): bump ubi9/ubi-minimal from ecd4751 to 759f5f4 in /build/trivy-operator by @dependabot[bot] in #2874
• build(deps): bump the common group across 1 directory with 4 updates by @dependabot[bot] in #2872

New Contributors

• @bh-tt made their first contribution in #2751
• @jensloe-nhn made their first contribution in #2760
• @ml-qc made their first contribution in #2864

Full Changelog: v0.29.0...v0.30.0

What's Changed

✨ Notable Changes ✨

• feat(dev): add support for pprof by @simar7 in #2666
• feat(clientServer): add support for extraVolumes in trivy-server by @hichem-belhocine in #2738
• feat: add labels to operator resources by @cHiv0rz in #2667

🐛 Notable Fixes 🐛

• fix: Ensure configFile volume is mounted for initContainer by @bananasplit393 in #2713
• fix(helm): always attempt to create ServiceMonitor when it is enabled by @mdusher in #2745
• fix: add missing permission to get namespaces by @dcoppa in #2728

📝 Documentation && Miscellaneous 🔧

• chore: improve release notes by @simar7 in #2692
• chore: migrate to aws-go v2 by @afdesk in #2694
• chore: bump up Go to version 1.24.6 by @afdesk in #2700
• chore: bump up Trivy to version v0.66.0 by @afdesk in #2742
• chore: bump up common k8s deps by @afdesk in #2746

👒 Dependencies 👒

• build(deps): bump ubi9/ubi-minimal from 295f920 to e6b39b0 in /build/trivy-operator by @dependabot[bot] in #2696
• build(deps): bump ubi9/ubi-minimal from e6b39b0 to 8d905a9 in /build/trivy-operator by @dependabot[bot] in #2701
• build(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 by @dependabot[bot] in #2709
• build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 by @dependabot[bot] in #2714
• build(deps): bump ubi9/ubi-minimal from 8d905a9 to 2f06ae0 in /build/trivy-operator by @dependabot[bot] in #2719
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #2721
• build(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.15 by @dependabot[bot] in #2729
• build(deps): bump ubi9/ubi-minimal from 2f06ae0 to 7c5495d in /build/trivy-operator by @dependabot[bot] in #2753

New Contributors

• @bananasplit393 made their first contribution in #2713
• @hichem-belhocine made their first contribution in #2738
• @mdusher made their first contribution in #2745
• @cHiv0rz made their first contribution in #2667

Full Changelog: v0.28.0...v0.29.0

What's Changed

✨ Notable Changes ✨

• feat: support storageClassName for alternatReportStorage by @cyrinux in #2633

🐛 Notable Fixes 🐛

• fix: bump ubi9 image to latest release by @simar7 in #2651
• fix: correct output for uncompressed logs by @afdesk in #2652
• fix: Do not error out on invalid rego policies if any by @simar7 in #2670

📝 Documentation && Miscellaneous 🔧

• chore: bump up Trivy to version 0.64.1 by @afdesk in #2654
• chore: bump up UBI 9 version to 9.6-1752587672 by @afdesk in #2660
• chore: update for CVE-2025-6965 by @simar7 in #2678
• chore: bump up docker for CVE-2025-54388 by @simar7 in #2679
• chore: update ubi image by @simar7 in #2681
• chore: bump up Trivy to version 0.65.0 by @afdesk in #2686

👒 Dependencies 👒

• build(deps): bump ubi9/ubi-minimal from 0d7cfb0 to 295f920 in /build/trivy-operator by @dependabot[bot] in #2688
• build(deps): bump alpine from 3.20.6 to 3.22.1 in /build/trivy-operator by @dependabot[bot] in #2687

New Contributors

• @cyrinux made their first contribution in #2633

Full Changelog: v0.27.3...v0.28.0