[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github.com/anchore/syft	require	minor	v1.56.0 → v1.57.0

---

Release Notes

anchore/syft (github.com/anchore/syft)

v1.57.0

Compare Source

Added Features

• capture GNU ELF build IDs [PR #​5426 @​adityasaky]
• build lower layer squashes only when a scan reads them [PR #​5492 @​wagoodman]

Bug Fixes

• do not generate CPEs for msrc-kb packages [PR #​5510 @​juanjsebgarcia]
• Fix truncated pre-release versions in Go binaries' ldflags [PR #​5422 @​LemonCondor]
• generate NVD-style terraform_provider CPEs for terraform lock packages [PR #​5261 @​timols]
• OpenSSL-only SHA-256 fallback aborts installation [Issue #​5520] [PR #​5521 @​pujitha24]

Dependencies

1 dependency change (1 updated).

Updated (1 package)

• github.com/anchore/stereoscope v0.4.0 → v0.4.1

(Full Changelog)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=2 days

Details:

Package	Change
github.com/anchore/stereoscope	v0.4.0 -> v0.4.1