Renovate's PR #1408 bumped TRIVY_VERSION in dev/scripts/backends/gitea.py but couldn't regenerate the workflows built from it, so lint's gen_config.py --check failed. This is its change plus the regenerated deploy/harden/rebuild-all workflows. The 0.76.1 release tarball is published.