chore(deps): update dependency anchore/syft to v1.20.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Update	Change
anchore/syft	minor	1.19.0 -> 1.20.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anchore/syft (anchore/syft)

v1.20.0

Compare Source

Added Features

• Add file catalogers to selection configuration [#​3505 @​wagoodman]
• Configuration for including license contents in SBOM [#​3626 #​3631 @​spiffcs]
• Support Bitnami embedded SBOMs [#​3065 #​3341 @​juan131] [#​3676 @​willmurphyscode]

Bug Fixes

• Version parse caused by line breaks on different platforms [#​3672 @​idhyt]
• License files which do not match an SPDX expression are erroneously handled as 'unlicensed' [#​3412 #​3366 @​HeyeOpenSource]
• Incorrect URL encoding of package url (purl) [#​3533 #​3678 @​kzantow]
• syft should not warn on known bad package.json [#​3470 #​3645 @​kzantow]
• Scanning a project with many DLLs is slow [#​3455 #​3677 @​rogueai]
• cyclone-dx presenter drops files, includes only packages [#​3435 #​3539 @​spiffcs]
• "syft config" output swaps comments for search-indexed-archives / search-unindexed-archives [#​3624 #​3630 @​spiffcs]
• dpkg license improvement for non SPDX licenses [#​3090 #​3366 @​HeyeOpenSource]
• RPM-based PURLs sometimes have incorrect namespace (specifically OpenSUSE) [#​3534 #​3615 @​mprpic]

Additional Changes

• update to go 1.24.x [#​3660 @​westonsteimel]
• replace all shorthand tags of mapstruct -> mapstructure [#​3633 @​spiffcs]

(Full Changelog)

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ API	spectral	1		0	0	1.79s
⚠️ BASH	bash-exec	6		1	0	0.01s
✅ BASH	shellcheck	6		0	0	0.16s
✅ BASH	shfmt	6	0	0	0	0.48s
✅ COPYPASTE	jscpd	yes		no	no	2.85s
✅ DOCKERFILE	hadolint	129		0	0	29.47s
✅ JSON	jsonlint	20		0	0	0.18s
✅ JSON	v8r	22		0	0	16.47s
⚠️ MARKDOWN	markdownlint	267	0	302	0	22.27s
✅ MARKDOWN	markdown-table-formatter	267	0	0	0	167.82s
⚠️ PYTHON	bandit	215		66	0	3.87s
✅ PYTHON	black	215	0	0	0	4.71s
✅ PYTHON	flake8	215		0	0	2.15s
✅ PYTHON	isort	215	0	0	0	1.26s
✅ PYTHON	mypy	215		0	0	12.16s
✅ PYTHON	pylint	215		0	0	20.61s
✅ PYTHON	ruff	215	0	0	0	0.44s
✅ REPOSITORY	checkov	yes		no	no	34.56s
✅ REPOSITORY	git_diff	yes		no	no	0.69s
⚠️ REPOSITORY	grype	yes		31	no	14.52s
✅ REPOSITORY	secretlint	yes		no	no	12.09s
✅ REPOSITORY	trivy	yes		no	no	17.71s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.65s
⚠️ REPOSITORY	trufflehog	yes		1	no	57.5s
✅ SPELL	cspell	718		0	0	12.78s
⚠️ SPELL	lychee	349		28	0	69.86s
✅ XML	xmllint	3	0	0	0	0.79s
✅ YAML	prettier	160	0	0	0	3.56s
✅ YAML	v8r	102		0	0	23.91s
✅ YAML	yamllint	161		0	0	2.93s

See detailed report in MegaLinter reports