## aquasecurity/trivy — v0.73.0…v0.74.0

_26 commits._

### Features
- **feat: add RapidFort curated image scanner (#10452)** (2c3b86c)
- **feat(java): resolve JAR license URLs to SPDX IDs (Bundle-License, pom <url>) (#10948)** (171e391)

### Fixes
- **fix(misconf): unmark cty values outside the evaluation context (#11078)** (9e85b6b)
- **fix(misconf): parse Azure flexible server parameters under their own names (#11072)** (d59f0f8)
- **fix(server): preserve check aliases and query in uploaded blobs (#11080)** (0512d6d)
- **fix(java): read artifact properties only from the MANIFEST.MF main section (#11066)** (018bfbf)
- **fix(terraform): support OpenTofu language block (#10923)** (bacf17f)
- **fix(python): normalize dependency names in PEP 621 pyproject.toml (#11050)** (0012281)
- **fix(terraform): avoid panic when for_each local has unknown object values (#11019)** (199a126)

### Backend
- **release: v0.74.0 [main] (#11037)** (e1fd17a)

### Docs
- **docs: update release branch ruleset instructions (#11093)** (d6664d7)
- **docs: remove trivy-checks from AWS ECR locations (#11044)** (765fd18)

### Chore
- **chore(deps): update golang.org/x modules (#11094)** (ed3557f)
- **chore(deps): bump the docker group with 2 updates (#11090)** (63b3f3f)
- **chore(deps): bump the common group across 1 directory with 7 updates (#11086)** (3c15b84)
- **chore(deps): bump the aws group across 1 directory with 6 updates (#11053)** (b307b12)
- **chore(deps): bump the docker group with 2 updates (#11054)** (d1985da)
- **refactor(misconf): remove unused Azure expression-related code (#10637)** (333ec80)
- **chore(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#11063)** (a2edba9)
- **ci: trigger Auto Ready for Review after Test docs (#11045)** (780e90e)
- **refactor(ubuntu): move EOL version resolution out of loop (#11047)** (0ff2df3)
- **chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#11042)** (748a639)
- **chore(deps): bump github.com/nikolalohinski/gonja/v2 to v2.9.0 (#11038)** (4897d26)
- **chore(deps): bump the github-actions group across 2 directories with 15 updates (#11028)** (d4bffda)
- **ci(spdx): migrate to Slack notifications (#11032)** (a63431e)
- **ci(helm): bump Trivy version to 0.73.0 for Trivy Helm Chart 0.25.0 (#11034)** (06cf9fd)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/aquasecurity/trivy?utm_source=github-action)._