chore(deps): update dependency anchore/syft to v1.51.0

[renovate]

This PR contains the following updates:

Package	Update	Change
anchore/syft	minor	v1.50.0 → v1.51.0

---

Release Notes

anchore/syft (anchore/syft)

v1.51.0

Compare Source

Added Features

• detect native Go FIPS 140 mode in binaries [PR #​5155 @​gunnypatel]
• add extended-stdlib scope and module patterns for symbol capture [PR #​5154 @​wagoodman]

Bug Fixes

• Cleanup snap temporary directories [PR #​5117 @​spiffcs]
• add correct CPE vendor/product candidates for Git for Windows PE binary [PR #​5156 @​westonsteimel]
• javascript-package-cataloger creates phantom <name>@unknown packages for subpath or export-map stub package.json files [Issue #​5118]
• Syft generates incorrect PURLs for legacy JARs missing Maven metadata, causing Grype false negatives [Issue #​4598] [PR #​5146 @​ankit090701]
• When scanning an image, syft only reports one file per set of hardlinks, leading to wrong SPDX packageVerificationCode [Issue #​5019] [PR #​5029 @​wagoodman]
• Support deno binary latest and some old versions [Issue #​5057] [PR #​5084 @​ychampion]
• Update install methods in README.md [Issue #​3198]

Dependencies

9 dependency changes (9 updated). 2 vulnerabilities remediated.

🟢 Remediated (2)

• GHSA-hc8v-wwc9-vgxm (High) — github.com/go-git/go-git/v5
• GHSA-qgq7-7hm3-q39j (Medium) — github.com/go-git/go-git/v5

Updated (9 packages)

• github.com/diskfs/go-diskfs v1.9.3 → v1.9.4
• github.com/go-git/go-billy/v5 v5.9.0 → v5.9.1
• github.com/go-git/go-git/v5 v5.19.1 → v5.19.2 (🟢 remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j)
• github.com/jedib0t/go-pretty/v6 v6.8.1 → v6.8.3
• github.com/klauspost/compress v1.19.0 → v1.19.1
• github.com/magiconair/properties v1.8.10 → v1.18.11
• github.com/ulikunitz/xz v0.5.15 → v0.5.16
• go.yaml.in/yaml/v3 v3.0.4 → v3.0.5
• modernc.org/sqlite v1.54.0 → v1.55.0

(Full Changelog)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.