chore(deps): update stable

[renovate[bot]]

This PR contains the following updates:

Package	Update	Change
anchore/grype	minor	0.76.0 -> 0.77.0
awscli	patch	2.15.38 -> 2.15.40
checkov	patch	3.2.70 -> 3.2.74
https://github.com/bridgecrewio/checkov.git	patch	3.2.70 -> 3.2.74
kubectl	minor	1.29.4 -> 1.30.0

---

Release Notes

anchore/grype (anchore/grype)

### [`v0.77.0`](https://togithub.com/anchore/grype/releases/tag/v0.77.0) [Compare Source](https://togithub.com/anchore/grype/compare/v0.76.0...v0.77.0) ##### Added Features - add linux and libc-dev headers ignore rules for debian packages \[[#​1809](https://togithub.com/anchore/grype/pull/1809) [@​zhill](https://togithub.com/zhill)] - use Go main module version when possible \[[#​1797](https://togithub.com/anchore/grype/pull/1797) [@​luhring](https://togithub.com/luhring)] ##### Additional Changes - Add providers' pull date to DB metadata structure \[[#​1795](https://togithub.com/anchore/grype/pull/1795) [@​asomya](https://togithub.com/asomya)] - config: add config opt in golang pseudo version main module comparison \[[#​1816](https://togithub.com/anchore/grype/pull/1816) [@​spiffcs](https://togithub.com/spiffcs)] **[(Full Changelog)](https://togithub.com/anchore/grype/compare/v0.76.0...v0.77.0)**

aws/aws-cli (awscli)

### [`v2.15.40`](https://togithub.com/aws/aws-cli/compare/2.15.39...2.15.40) [Compare Source](https://togithub.com/aws/aws-cli/compare/2.15.39...2.15.40) ### [`v2.15.39`](https://togithub.com/aws/aws-cli/compare/2.15.38...2.15.39) [Compare Source](https://togithub.com/aws/aws-cli/compare/2.15.38...2.15.39)

bridgecrewio/checkov (checkov)

### [`v3.2.74`](https://togithub.com/bridgecrewio/checkov/blob/HEAD/CHANGELOG.md#3274---2024-04-22) [Compare Source](https://togithub.com/bridgecrewio/checkov/compare/3.2.73...3.2.74) ##### Feature - **general:** Update range includes to handle lists of ranges and lists of values - [#​6192](https://togithub.com/bridgecrewio/checkov/pull/6192) ### [`v3.2.73`](https://togithub.com/bridgecrewio/checkov/blob/HEAD/CHANGELOG.md#3273---2024-04-21) [Compare Source](https://togithub.com/bridgecrewio/checkov/compare/3.2.72...3.2.73) ##### Feature - **sast:** TypeScript cdk policies p7 - [#​6186](https://togithub.com/bridgecrewio/checkov/pull/6186) ### [`v3.2.72`](https://togithub.com/bridgecrewio/checkov/blob/HEAD/CHANGELOG.md#3272---2024-04-19) [Compare Source](https://togithub.com/bridgecrewio/checkov/compare/3.2.71...3.2.72) ##### Feature - **bicep:** Add bicep version of policy - [#​6191](https://togithub.com/bridgecrewio/checkov/pull/6191) ### [`v3.2.71`](https://togithub.com/bridgecrewio/checkov/blob/HEAD/CHANGELOG.md#3271---2024-04-18) [Compare Source](https://togithub.com/bridgecrewio/checkov/compare/3.2.70...3.2.71) ##### Feature - **sca:** support licenses custom policies enforcement rules - [#​6173](https://togithub.com/bridgecrewio/checkov/pull/6173)

kubernetes/kubernetes (kubectl)

### [`v1.30.0`](https://togithub.com/kubernetes/kubernetes/releases/tag/v1.30.0): Kubernetes v1.30.0 [Compare Source](https://togithub.com/kubernetes/kubernetes/compare/v1.29.4...v1.30.0) See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce). Additional binary downloads are linked in the [CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md). See [the CHANGELOG](https://togithub.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md) for more details.

---

Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.