Merge pull request 'chore(deps): update dependency anchore/syft to v1.49.0' (#255 ) from renovate/anchore-syft-1.x into master

chore(deps): update dependency anchore/syft to v1.49.0
Merge pull request 'chore(deps): update actions/checkout action to v6.1.0' (#254 ) from renovate/actions-checkout-6.x into master
2026-07-21 15:08:05 +00:00 · 2026-07-21 15:05:41 +00:00 · 2026-07-20 18:46:01 +00:00 · 2026-07-20 18:06:55 +00:00 · 2026-07-19 10:48:55 +00:00 · 2026-07-17 21:04:31 +00:00
6 changed files with 8 additions and 8 deletions
@@ -10,7 +10,7 @@ jobs:
    name: "Upload artifacthub-repo.yml to OCI registry"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
    - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
      with:
        registry: ${{ github.server_url }}
@@ -20,7 +20,7 @@ jobs:
        go: [ stable ]
        os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
    steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
      with:
        go-version: ${{ matrix.go }}
@@ -33,7 +33,7 @@ jobs:
        go: [ stable ]
        os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
    steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
      with:
        go-version: ${{ matrix.go }}
@@ -13,7 +13,7 @@ jobs:
    name: "Run markdown linter"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
      with:
        globs: '**/*.md'
@@ -12,14 +12,14 @@ jobs:
    name: "Release application"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
      with:
        fetch-depth: 0
    - name: Install curl
      run: apt-get update && apt-get install --yes curl
    - name: Install syft
      env:
-        SYFT_VERSION: "1.48.0" # renovate: datasource=github-releases depName=anchore/syft
+        SYFT_VERSION: "1.49.0" # renovate: datasource=github-releases depName=anchore/syft
      run: |
        OS="$(uname | tr '[:upper:]' '[:lower:]')"
        ARCH="$(dpkg --print-architecture)"
@@ -33,7 +33,7 @@ jobs:
        rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
    - uses: volker-raschek/cosign-installer@7643eed6736a199595ed2a31e9979ec353a88adb # v4.1.3-rc3
      with:
-        cosign-release: "v3.1.1" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v3.1.2" # renovate: datasource=github-tags depName=sigstore/cosign
    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
      with:
        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
@@ -10,7 +10,7 @@ jobs:
  update-description-on-hub-docker-io:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
    - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
      with:
        username: ${{ secrets.DOCKER_IO_USERNAME }}
Author	SHA1	Message	Date
CSRBot	de8678434a	Merge pull request 'chore(deps): update dependency anchore/syft to v1.49.0' (#255 ) from renovate/anchore-syft-1.x into master Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 32s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 14s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 19s Details Lint Markdown files / Run markdown linter (push) Successful in 7s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 26s Details	2026-07-21 15:08:05 +00:00
CSRBot	f44cf631a1	chore(deps): update dependency anchore/syft to v1.49.0 Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 20s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 32s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 17s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 36s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 35s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 15s Details Lint Markdown files / Run markdown linter (pull_request) Successful in 8s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 38s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 27s Details	2026-07-21 15:05:41 +00:00
CSRBot	3dbe73e820	Merge pull request 'chore(deps): update actions/checkout action to v6.1.0' (#254 ) from renovate/actions-checkout-6.x into master Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 13s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 11s Details Lint Markdown files / Run markdown linter (push) Successful in 7s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 26s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 26s Details	2026-07-20 18:46:01 +00:00
CSRBot	eaf1c7dfe5	chore(deps): update actions/checkout action to v6.1.0 Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 14s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 11s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 18s Details Lint Markdown files / Run markdown linter (pull_request) Successful in 6s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 10s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 30s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 26s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 25s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 27s Details	2026-07-20 18:06:55 +00:00
CSRBot	1c4c63b484	Merge pull request 'chore(deps): pin dependencies' (#252 ) from renovate/pin-dependencies into master Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 17s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 27s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 12s Details Lint Markdown files / Run markdown linter (push) Successful in 7s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 26s Details	2026-07-19 10:48:55 +00:00
CSRBot	6e713d7c64	chore(deps): pin dependencies Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 14s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 28s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 11s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 14s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 27s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 10s Details Lint Markdown files / Run markdown linter (pull_request) Successful in 5s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 29s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 25s Details	2026-07-17 21:04:31 +00:00
CSRBot	1b469c4bd4	Merge pull request 'chore(deps): update dependency sigstore/cosign to v3.1.2' (#253 ) from renovate/sigstore-cosign-3.x into master Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 20s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 11s Details Lint Markdown files / Run markdown linter (push) Successful in 6s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 30s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 25s Details	2026-07-17 18:07:42 +00:00
CSRBot	f72567c14c	chore(deps): update dependency sigstore/cosign to v3.1.2 Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 18s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 11s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 20s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 12s Details Lint Markdown files / Run markdown linter (pull_request) Successful in 8s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 34s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 28s Details Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 25s Details Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 32s Details	2026-07-17 18:03:30 +00:00