chore(deps): bump github.com/anchore/syft from 1.11.1 to 1.12.2

[dependabot[bot]]

Bumps github.com/anchore/syft from 1.11.1 to 1.12.2.

Release notes

Sourced from github.com/anchore/syft's releases.

v1.12.2

Added Features

• Detect curl binaries [#3146 @​krysgor]
• Add haskell binaries cataloger [#3078 @​LaurentGoderre]
• add the Ocaml ecosystem [#3112 @​LaurentGoderre]
• Support HAProxy dev [#3134 #3180 @​witchcraze]

Bug Fixes

• Fix improper decoding of SPDX license expressions in the CycloneDX format [#3175 @​NyanKiyoshi]
• improve generated cpes for binaries with existing classifiers [#3169 @​westonsteimel]
• improve known CPEs and set NVD as source for all current binary classifiers [#3167 @​westonsteimel]
• Respond to authoratative CPEs from catalogers [#3166 @​wagoodman]
• Set cataloger names within package cataloger task [#3165 @​wagoodman]
• use official CPE for curl binary cataloger [#3164 @​westonsteimel]
• Fix ELF package correlations [#3151 @​wagoodman]
• no space left and Could not retrieve mirrorlist in test [#3181 #3190 @​wagoodman]
• Multiple versions of libssl3 and libcrypto3 present in SBOM while only one version is installed [#3195]
• CycloneDX convertion into Syft improperly handles SPDX licenses [#3172]
• Syft Cause stack overflow [goroutine stack exceeds 1000000000-byte limit] [#3163 #3170 @​kzantow]
• Mysql binary detection version incorrect for 8.0.x [#3141 #3142 @​kzantow]

Additional Changes

• Less verbose java logging when non-fatal issues arise [#3208 @​wagoodman]

(Full Changelog)

Commits

• fcd5ec9 chore: make ci-check.sh an executable file (#3220)
• 61a9fde chore(deps): bump github.com/opencontainers/runc from 1.1.12 to 1.1.14 (#3219)
• c33a51d chore: restore ci-check.sh script (#3218)
• dbc4238 Add haskell binaries cataloger (#3078)
• fce14fd chore(deps): update CPE dictionary index (#3206)
• 98bd4e9 chore(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 (#3203)
• 9c2799e Add the Ocaml ecosystem (#3112)
• dafc6ad chore(deps): bump github.com/charmbracelet/bubbles from 0.19.0 to 0.20.0 (#3209)
• 16f8984 chore(deps): bump modernc.org/sqlite from 1.32.0 to 1.33.0 (#3210)
• 2475f7f chore(deps): bump github.com/docker/docker (#3211)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #129.