chore(deps): bump the go-modules group with 2 updates

[dependabot]

Bumps the go-modules group with 2 updates: github.com/anchore/syft and github.com/diskfs/go-diskfs.

Updates github.com/anchore/syft from 1.50.0 to 1.51.0

Release notes

Sourced from github.com/anchore/syft's releases.

v1.51.0

Added Features

• detect native Go FIPS 140 mode in binaries [PR #5155 @​gunnypatel]
• add extended-stdlib scope and module patterns for symbol capture [PR #5154 @​wagoodman]

Bug Fixes

• Cleanup snap temporary directories [PR #5117 @​spiffcs]
• add correct CPE vendor/product candidates for Git for Windows PE binary [PR #5156 @​westonsteimel]
• javascript-package-cataloger creates phantom <name>@unknown packages for subpath or export-map stub package.json files [Issue #5118]
• Syft generates incorrect PURLs for legacy JARs missing Maven metadata, causing Grype false negatives [Issue #4598] [PR #5146 @​ankit090701]
• When scanning an image, syft only reports one file per set of hardlinks, leading to wrong SPDX packageVerificationCode [Issue #5019] [PR #5029 @​wagoodman]
• Support deno binary latest and some old versions [Issue #5057] [PR #5084 @​ychampion]
• Update install methods in README.md [Issue #3198]

Dependencies

9 dependency changes (9 updated). 2 vulnerabilities remediated.

🟢 Remediated (2)

• GHSA-hc8v-wwc9-vgxm (High) — github.com/go-git/go-git/v5
• GHSA-qgq7-7hm3-q39j (Medium) — github.com/go-git/go-git/v5

• github.com/diskfs/go-diskfs v1.9.3 → v1.9.4
• github.com/go-git/go-billy/v5 v5.9.0 → v5.9.1
• github.com/go-git/go-git/v5 v5.19.1 → v5.19.2 (🟢 remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j)
• github.com/jedib0t/go-pretty/v6 v6.8.1 → v6.8.3
• github.com/klauspost/compress v1.19.0 → v1.19.1
• github.com/magiconair/properties v1.8.10 → v1.18.11
• github.com/ulikunitz/xz v0.5.15 → v0.5.16
• go.yaml.in/yaml/v3 v3.0.4 → v3.0.5
• modernc.org/sqlite v1.54.0 → v1.55.0

(Full Changelog)

Commits

• 2293641 fix: add correct CPE vendor/product candidates for Git for Windows PE binary ...
• 9dd9ce0 chore(deps): update CPE dictionary index (#5166)
• 949ac70 fix(java): map legacy Jackson 1.x (-asl) artifacts to org.codehaus.jackson (#...
• 07fb234 feat(golang): detect native Go FIPS 140 mode in binaries (#5155)
• f45586b Remove Go Report Card badge from README (#5130)
• 0fe98ed chore(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#5159)
• 5f67883 chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 (#5158)
• d288dd6 chore(deps): bump docker/login-action from 4.5.1 to 4.6.0 (#5157)
• da745b1 feat(golang): add extended-stdlib scope and module patterns for symbol captur...
• 68da404 fix(make): don't let ambient RACE leak into raceEnabled test (#5152)
• Additional commits viewable in compare view

Updates github.com/diskfs/go-diskfs from 1.9.3 to 1.9.4

Commits

• c5b3b50 ext4: fix extent tree splits for large fragmented files (#412)
• 6793ed7 squashfs: handle images with no fragment or xattr table (#413)
• 91b8141 gpt: test round-trip of two partitions with the same name (#414)
• 2bdff12 backend,disk: make partition ops work on busy block devices (#411)
• 0e4e146 sync: skip excluded paths in CompareFS (#410)
• 7cdc08d fat32: make corruption test deterministic (#408)
• a05fd7f ext4: scale default block size by filesystem size (#407)
• 30eb166 gpt: write backup-first and fall back on Read (#401)
• 681e6f2 squashfs: honor partition offset in Read and Finalize (#404)
• 17393bf sync: allow target partition larger than source (#406)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
github.com/diskfs/go-diskfs	[>= 1.9.a, < 1.10]
github.com/diskfs/go-diskfs	[>= 1.8.a, < 1.9]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions