fix(deps): update trivy (main)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/aquasecurity/trivy	require	minor	v0.69.3 -> v0.70.0
github.com/aquasecurity/trivy-db	require	digest	a833f47 -> 722777b

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[elastic-renovate-prod]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
github.com/samber/lo	v1.52.0 -> v1.53.0
github.com/GoogleCloudPlatform/docker-credential-gcr/v2	v2.1.30 -> v2.1.32
github.com/nikolalohinski/gonja/v2	v2.4.2 -> v2.7.0

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/main-trivy upstream/renovate/main-trivy
git merge upstream/main
git push upstream renovate/main-trivy

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/main-trivy upstream/renovate/main-trivy
git merge upstream/main
git push upstream renovate/main-trivy

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-28 22:06 UTC · Rule: default
• ✅ Checks started · on draft merge queue: embarking main (a3251b6) and #5340 together #5619
• 🚫 Left the queue — 2026-04-28 22:30 UTC · at cc53543fa34727685b26296ff39bcc270d21e9b4

This pull request spent 23 minutes 50 seconds in the queue, with no time running CI.

Waiting for:

• check-success=Lint
• check-success=Manifest Tests
• check-success=Package Cloudbeat (docker)
• check-success=Package Cloudbeat (tar.gz)
• check-success=Test Rego Policies
• check-success=Unit Test
• any of:
  • check-neutral = Package Cloudbeat (docker)
  • check-skipped = Package Cloudbeat (docker)
  • check-success = Package Cloudbeat (docker)
• any of:
  • check-neutral = Package Cloudbeat (tar.gz)
  • check-skipped = Package Cloudbeat (tar.gz)
  • check-success = Package Cloudbeat (tar.gz)
• any of:
  • check-neutral = Manifest Tests
  • check-skipped = Manifest Tests
  • check-success = Manifest Tests
• any of:
  • check-neutral = Test Rego Policies
  • check-skipped = Test Rego Policies
  • check-success = Test Rego Policies
• any of:
  • check-neutral = Lint
  • check-skipped = Lint
  • check-success = Lint
• any of:
  • check-neutral = Unit Test
  • check-skipped = Unit Test
  • check-success = Unit Test

All conditions

• check-success=Lint
• check-success=Manifest Tests
• check-success=Package Cloudbeat (docker)
• check-success=Package Cloudbeat (tar.gz)
• check-success=Test Rego Policies
• check-success=Unit Test
• any of [🛡 GitHub branch protection]:
  • check-neutral = Package Cloudbeat (docker)
  • check-skipped = Package Cloudbeat (docker)
  • check-success = Package Cloudbeat (docker)
• any of [🛡 GitHub branch protection]:
  • check-neutral = Package Cloudbeat (tar.gz)
  • check-skipped = Package Cloudbeat (tar.gz)
  • check-success = Package Cloudbeat (tar.gz)
• any of [🛡 GitHub branch protection]:
  • check-neutral = Manifest Tests
  • check-skipped = Manifest Tests
  • check-success = Manifest Tests
• any of [🛡 GitHub branch protection]:
  • check-neutral = Test Rego Policies
  • check-skipped = Test Rego Policies
  • check-success = Test Rego Policies
• any of [🛡 GitHub branch protection]:
  • check-neutral = Lint
  • check-skipped = Lint
  • check-success = Lint
• any of [🛡 GitHub branch protection]:
  • check-neutral = Unit Test
  • check-skipped = Unit Test
  • check-success = Unit Test
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • fix(deps): update trivy (main) #5340
• #approved-reviews-by >= 1 [🛡 GitHub repository ruleset rule [org] Require a PR for Renovate]
  • fix(deps): update trivy (main) #5340
• #approved-reviews-by >= 1 [🛡 GitHub repository ruleset rule [org] Require a PR]
  • fix(deps): update trivy (main) #5340
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • fix(deps): update trivy (main) #5340
• #changes-requested-reviews-by = 0 [🛡 GitHub repository ruleset rule [org] Require a PR for Renovate]
  • fix(deps): update trivy (main) #5340
• #changes-requested-reviews-by = 0 [🛡 GitHub repository ruleset rule [org] Require a PR]
  • fix(deps): update trivy (main) #5340
• any of [🛡 GitHub branch protection]:
  • check-success = CLA
  • check-neutral = CLA
  • check-skipped = CLA

Reason

Pull request #5340 has been merged manually at 3b2bce5

Hint

You were too fast!