release: v0.67.0 [main]

[aqua-bot]

🤖 I have created a release beep boop

0.67.0 (2025-09-30)

Features

• add documentation URL for database lock errors (#9531) (eba48af)
• cli: change --list-all-pkgs default to true (#9510) (7b663d8)
• cloudformation: support default values and list results in Fn::FindInMap (#9515) (42b3bf3)
• cyclonedx: preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439) (aff03eb)
• redhat: add os-release detection for RHEL-based images (#9458) (cb25a07)
• sbom: added support for CoreOS (#9448) (6d562a3)
• seal: add seal support (#9370) (e4af279)

Bug Fixes

• aws: use BuildableClient insead of xhttp.Client (#9436) (fa6f1bf)
• close file descriptors and pipes on error paths (#9536) (a4cbd6a)
• db: Dowload database when missing but metadata still exists (#9393) (92ebc7e)
• k8s: disable parallel traversal with fs cache for k8s images (#9534) (c0c7a6b)
• misconf: handle tofu files in module detection (#9486) (bfd2f6b)
• misconf: strip build metadata suffixes from image history (#9498) (c938806)
• misconf: unmark cty values before access (#9495) (8e40d27)
• misconf: wrap legacy ENV values in quotes to preserve spaces (#9497) (267a970)
• nodejs: parse workspaces as objects for package-lock.json files (#9518) (404abb3)
• nodejs: use snapshot string as Package.ID for pnpm packages (#9330) (4517e8c)
• vex: don't suppress vulns for packages with infinity loop (#9465) (78f0d4a)
• vuln: compare nuget package names in lower case (#9456) (1ff9ac7)

---

This PR was generated with Release Please. See documentation.

[tomkerkhove]

@DmitriyLewen What is the ETA usually for these releases?

[DmitriyLewen]

Hello @tomkerkhove,
You can find the release dates here - https://github.com/aquasecurity/trivy/milestones

[tomkerkhove]

@DmitriyLewen Thank you! So next release is dec and 0.66.1 will not happen if I understand it correctly?

[DmitriyLewen]

The next release (v0.67.0) will be at the end of September

[knqyf263]

Milestone: https://github.com/aquasecurity/trivy/milestone/53
Release Notes Draft: #9540

[afdesk]

I'd like to add this PR into the release #9534

[nikpivkin]

I want to add this fix to this release.

[simar7]

@knqyf263 I'm taking a look at the above mentioned PRs today for review. Once finished I'll approve the review PR as well.

[DmitriyLewen]

[knqyf263]

The numbers never display correctly...