chore(deps): update dependency anchore/syft to v1.42.1

.gitea/workflows/golang-linters.yaml

@@ -21,9 +21,9 @@ jobs:
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: actions/setup-go@v6.3.0
+    - uses: actions/setup-go@v6.2.0
       with:
         go-version: ${{ matrix.go }}
     - uses: golangci/golangci-lint-action@v9.2.0
       with:
-        version: v2.10.1 # renovate: datasource=github-releases depName=golangci/golangci-lint
+        version: v2.9.0 # renovate: datasource=github-releases depName=golangci/golangci-lint

.gitea/workflows/golang-tests.yaml

@@ -34,7 +34,7 @@ jobs:
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: actions/setup-go@v6.3.0
+    - uses: actions/setup-go@v6.2.0
       with:
         go-version: ${{ matrix.go }}
     - env:

.gitea/workflows/release.yaml

@@ -19,7 +19,7 @@ jobs:
       run: apt-get update && apt-get install --yes curl
     - name: Install syft
       env:
-        SYFT_VERSION: "1.41.1" # renovate: datasource=github-releases depName=anchore/syft
+        SYFT_VERSION: "1.42.1" # renovate: datasource=github-releases depName=anchore/syft
       run: |
         OS="$(uname | tr '[:upper:]' '[:lower:]')"
         ARCH="$(dpkg --print-architecture)"
@@ -36,7 +36,7 @@ jobs:
         cosign-release: "v2.6.2" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@v3.7.0
     - uses: docker/setup-buildx-action@v3.12.0
-    - uses: actions/setup-go@v6.3.0
+    - uses: actions/setup-go@v6.2.0
       with:
         go-version: stable
     - uses: docker/login-action@v3.7.0
@@ -50,9 +50,9 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@v7.0.0
+      uses: goreleaser/goreleaser-action@v6.4.0
       with:
-        version: v2.14.1 # renovate: datasource=github-releases depName=goreleaser/goreleaser
+        version: v2.13.3 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean
 
   sync-to-hub-docker-io: