build(deps): bump anchore/scan-action from 4 to 5

[dependabot[bot]]

Bumps anchore/scan-action from 4 to 5.

Release notes

Sourced from anchore/scan-action's releases.

v5.0.0

New in scan-action v5.0.0

• chore(deps): update Grype to v0.82.0 (#383) [anchore-actions-token-generator]

🚀 Features

• feat: short-lived grype-db cache (#348) [kzantow] Note: with this release grype is no longer installed on $PATH. We suspect the changes here could break a number of users of the action who have learned to expect Grype be installed on $PATH.

v4.1.2

New in scan-action v4.1.2

• Update Grype to v0.80.0 (#358) [anchore-actions-token-generator]

v4.1.1

New in scan-action v4.1.1

• chore(deps): update Grype to v0.79.6 (#352) [anchore-actions-token-generator]
• Document grype-version parameter (#319) [vprivat-ads]

v4.1.0

New in scan-action v4.1.0

• chore(deps): update Grype to v0.79.3 (#341) [anchore-actions-token-generator]

Commits

• 4e08a16 chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (#386)
• a18ff2d add release docs (#388)
• c6c022e chore: add changelog ignore (#387)
• 6595369 chore: remove blocking workflow (#385)
• 1123747 chore(deps-dev): bump eslint from 9.11.1 to 9.12.0 (#381)
• 99311be chore: update sha to correct pin for workflow actions (#384)
• 2491ad6 chore(deps): update Grype to v0.82.0 (#383)
• 2a3918e chore: optionally cache grype-db in actions cache (#348)
• a957c8d feat: update versions for actions (#380)
• 54efbc6 chore(deps-dev): bump tslib from 2.6.3 to 2.7.0 (#359)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nyuware]

@dependabot rebase

[dependabot[bot]]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[nyuware]

@dependabot recreate