Update deps (minor/patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
Microsoft.AspNetCore.Mvc.Testing (source)	10.0.5 → 10.0.7			nuget	patch
Microsoft.NET.Test.Sdk	18.3.0 → 18.4.0			nuget	minor	18.5.1
aquasecurity/trivy-action	0.35.0 → v0.36.0			action	minor
docker	29.3.1-dind → 29.4.1-dind			final	minor	29.4.3-dind
docker	29.3.1-dind → 29.4.1-dind				minor	29.4.3-dind
mcr.microsoft.com/dotnet/aspnet	c433886 → 55e37c7			final	digest
mcr.microsoft.com/dotnet/sdk	127d7d4 → 8a90a47			stage	digest
ubuntu	84e77de → c4a8d55			final	digest
xunit	2.9.2 → 2.9.3			nuget	patch

---

Release Notes

dotnet/dotnet (Microsoft.AspNetCore.Mvc.Testing)

v10.0.7

v10.0.6

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in #​15359

• Refactor Condition evaluation by @​Youssef1313 in #​15357

• Adding info on extensions points part 1 by @​nohwnd in #​15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in #​15373

• Update runtime versions by @​nohwnd in #​15372

• Fix .NET 10 regression for traits by @​Youssef1313 in #​15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in #​15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in #​15365

• Update SECURITY.md by @​Youssef1313 in #​15342

New Contributors

• @​stdmnpkg made their first contribution in #​15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.36.0

Compare Source

What's Changed

• chore(ci): update bump-trivy workflow by @​DmitriyLewen in #​546
• ci: use action.yaml as single source of truth for Trivy version by @​nikpivkin in #​552
• ci: replace peter-evans/create-pull-request with gh CLI by @​nikpivkin in #​550
• test: use pinned digests for trivy-db, trivy-java-db and trivy-checks by @​nikpivkin in #​555
• ci: add dependabot config by @​nikpivkin in #​556
• chore: add zizmor config by @​nikpivkin in #​557
• chore(deps): bump the actions group with 5 updates by @​dependabot[bot] in #​558
• fix: use portable shebang in entrypoint.sh by @​Hayao0819 in #​545
• Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name by @​patrik-csak in #​547
• Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes #​549 by @​Aditya09-cse in #​548
• chore: use GitHub Actions as git commit author in bump-trivy workflow by @​nikpivkin in #​561
• chore(deps): Update trivy to v0.70.0 by @​Argon-DevOps-Mgt in #​559
• chore: update action version to v0.36.0 in examples by @​nikpivkin in #​563

New Contributors

• @​dependabot[bot] made their first contribution in #​558
• @​Hayao0819 made their first contribution in #​545
• @​patrik-csak made their first contribution in #​547
• @​Aditya09-cse made their first contribution in #​548
• @​Argon-DevOps-Mgt made their first contribution in #​559

Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 9am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.