[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aquasecurity/trivy	uses-with	patch	v0.76.0 → v0.76.1
github/codeql-action	action	patch	v4.39.0 → v4.39.1

---

Release Notes

aquasecurity/trivy

v0.76.1

Compare Source

🔐 Security update: eMudhra CA incident 🛡️

Trivy v0.76.1 includes mitigations for the eMudhra intermediate CA key compromise.

• Official binaries are built with Go 1.27.3, which includes the certificate distrust mitigation tracked as CVE-2026-111943.
• Official container images include an updated Alpine CA trust store that rejects the affected certificate chains.

We recommend upgrading to v0.76.1 and redeploying container images to apply these updates. If you build Trivy from source, use Go 1.27.3 or later and keep your runtime CA trust store up to date.

Changelog

• e713f67 release: v0.76.1 [release/v0.76] (#​11445)
• 6647bd6 fix(deps): bump the aws group across 1 directory with 6 updates [backport: release/v0.76] (#​11446)
• e0964c9 fix(deps): bump the docker group with 3 updates [backport: release/v0.76] (#​11443)
• 992c360 fix(deps): bump the common group with 3 updates [backport: release/v0.76] (#​11442)

github/codeql-action

v4.39.1

Compare Source

• Update default CodeQL bundle version to 2.27.3. #​4256

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: chodeus/ffmpeg-static
• Branch: main
• File: .coderabbit.yaml
• Commit: 4bc6718
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 5ff77d41-3811-4bd9-9d24-77cb93cd4899

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}