chore(deps): update stable

[renovate]

This PR contains the following updates:

Package	Update	Change
anchore/grype	minor	0.84.0 -> 0.85.0
anchore/syft	minor	1.16.0 -> 1.17.0
https://github.com/bridgecrewio/checkov.git	patch	3.2.310 -> 3.2.311

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anchore/grype (anchore/grype)

v0.85.0

Compare Source

Added Features

• Add support for gradle in Java [#​2236]
• Prefer direct match information over indirect matches [#​1931 #​2241 @​wagoodman]

Bug Fixes

• Restore log on UI teardown [#​2248 @​wagoodman]

Additional Changes

• Display warnings even when -v is not passed and no tty is present [#​2180 #​2268 @​willmurphyscode]
• core dependencies: latest syft v1.17.0 and latest stereoscope v0.0.9 [#​2275 @​willmurphyscode]

(Full Changelog)

anchore/syft (anchore/syft)

v1.17.0

Compare Source

Added Features

• Surface Rust dependency relationships [#​2353 #​3443 @​willmurphyscode]
• Support node 6.x versions [#​3404 #​3419 @​witchcraze]

Bug Fixes

• Restore log on UI teardown [#​3427 @​wagoodman]
• Syft should log warnings even when no TTY is present [#​3081 #​3466 @​willmurphyscode]
• Special characters (tab, newline) in license URL [#​3122 #​3449 @​spiffcs]
• LicenseDeclared not as per SPDX License List [#​3030 #​3461 @​spiffcs]

Additional Changes

• doc: Add official Syft logo license information [#​3421 @​popey]

(Full Changelog)

bridgecrewio/checkov (https://github.com/bridgecrewio/checkov.git)

v3.2.311

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.