all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe7d:227d
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: b3e9e4b2-40aa-424f-8b07-72452aac527b
        host_id: df70f2a3f3d0c26428f22685cfc722ebc48099d99e7332c39e017195
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe7d:227d
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.43
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.184
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe7d:227d
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/release/.zuul.yaml@main#2>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 6c70e24338124d60afb04f938288d4af
      build_refs:
      - branch: main
        change: '2552'
        change_message: "chore(deps): update anchore/syft docker tag to v1.46.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.45.1`
          \u2192 `v1.46.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
          (anchore/syft)</summary>\n\n### [`v1.46.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.46.0)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)\n\n#####
          Added Features\n\n- Add purl types to cataloger info cmd \\[PR [#&#8203;4984](https://redirect.github.com/anchore/syft/pull/4984)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Python cataloger
          misses uv PEP 723 script lockfiles (`*.py.lock`) \\[Issue [#&#8203;4949](https://redirect.github.com/anchore/syft/issues/4949)]
          \\[PR [#&#8203;4950](https://redirect.github.com/anchore/syft/pull/4950)
          [@&#8203;ktopcuoglu](https://redirect.github.com/ktopcuoglu)]\n- Add bin
          classifier for Elastic agen \\[Issue [#&#8203;4973](https://redirect.github.com/anchore/syft/issues/4973)]
          \\[PR [#&#8203;4968](https://redirect.github.com/anchore/syft/pull/4968)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- SPDX 3 Support
          \\[Issue [#&#8203;4250](https://redirect.github.com/anchore/syft/issues/4250)]
          \\[PR [#&#8203;4269](https://redirect.github.com/anchore/syft/pull/4269)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- Add Deno support
          \\[Issue [#&#8203;4417](https://redirect.github.com/anchore/syft/issues/4417)]
          \\[PR [#&#8203;4523](https://redirect.github.com/anchore/syft/pull/4523)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Catalog Elastic
          Beats binary \\[Issue [#&#8203;4961](https://redirect.github.com/anchore/syft/issues/4961)]
          \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Add binary classifiers
          for Elastic Beats \\[Issue [#&#8203;4972](https://redirect.github.com/anchore/syft/issues/4972)]
          \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Catalog elastic-agent
          binary \\[Issue [#&#8203;4962](https://redirect.github.com/anchore/syft/issues/4962)]\n-
          Add support for Bun lockfile (bun.lock) \\[Issue [#&#8203;4617](https://redirect.github.com/anchore/syft/issues/4617)]
          \\[PR [#&#8203;4625](https://redirect.github.com/anchore/syft/pull/4625)
          [@&#8203;hnnynh](https://redirect.github.com/hnnynh)]\n- Add .bpl file support
          to the PE / DLL cataloger \\[Issue [#&#8203;4664](https://redirect.github.com/anchore/syft/issues/4664)]
          \\[PR [#&#8203;4954](https://redirect.github.com/anchore/syft/pull/4954)
          [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n\n##### Bug
          Fixes\n\n- respect arch qualifier \\[PR [#&#8203;4987](https://redirect.github.com/anchore/syft/pull/4987)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
          Preserve dependency edges when a compliance stub changes a package ID \\[PR
          [#&#8203;4993](https://redirect.github.com/anchore/syft/pull/4993) [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n-
          Support envoy binary various versions \\[Issue [#&#8203;4590](https://redirect.github.com/anchore/syft/issues/4590)]
          \\[PR [#&#8203;4605](https://redirect.github.com/anchore/syft/pull/4605)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- .net deps.json
          cataloger shows phantom pkgs for reference assembly library entries \\[Issue
          [#&#8203;4970](https://redirect.github.com/anchore/syft/issues/4970)] \\[PR
          [#&#8203;4971](https://redirect.github.com/anchore/syft/pull/4971) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
          Syft does not extract package licenses from opkg manager \\[Issue [#&#8203;4940](https://redirect.github.com/anchore/syft/issues/4940)]
          \\[PR [#&#8203;4963](https://redirect.github.com/anchore/syft/pull/4963)
          [@&#8203;Dashtid](https://redirect.github.com/Dashtid)]\n- squashfs breaks
          with godisk-fs 1.8.0 \\[Issue [#&#8203;4718](https://redirect.github.com/anchore/syft/issues/4718)]\n-
          requirements.txt cataloger silently drops PEP 440 local version identifiers,
          producing incorrect PURL \\[Issue [#&#8203;4958](https://redirect.github.com/anchore/syft/issues/4958)]
          \\[PR [#&#8203;4959](https://redirect.github.com/anchore/syft/pull/4959)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n##### Dependencies\n\n34
          dependency changes (31 updated, 3 added). 5 vulnerabilities remediated.\n\n**\U0001F7E2
          Remediated (5)**\n\n- [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc)
          (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574)
          (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq)
          (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388)
          (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp)
          (High) \u2014 github.com/containerd/containerd/v2\n\n<details>\n<summary>Updated
          (31 packages)</summary>\n\n- github.com/ProtonMail/go-crypto `v1.4.0` \u2192
          `v1.4.1`\n- github.com/anchore/bubbly `v0.2.0` \u2192 `v0.2.1`\n- github.com/anchore/clio
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/fangs `v0.1.0` \u2192 `v0.1.1`\n-
          github.com/anchore/go-collections `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-homedir
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-logger `v0.1.0` \u2192
          `v0.1.1`\n- github.com/anchore/go-lzo `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-macholibre
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-make `v0.5.0` \u2192 `v0.8.0`\n-
          github.com/anchore/go-struct-converter `v0.1.0` \u2192 `v0.2.0-rc2`\n- github.com/anchore/go-sync
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/stereoscope `v0.2.1` \u2192
          `v0.2.2`\n- github.com/charmbracelet/colorprofile `v0.4.1` \u2192 `v0.4.3`\n-
          github.com/clipperhouse/displaywidth `v0.10.0` \u2192 `v0.11.0`\n- github.com/clipperhouse/uax29/v2
          `v2.6.0` \u2192 `v2.7.0`\n- github.com/containerd/containerd/v2 `v2.3.1`
          \u2192 `v2.3.2` **(\U0001F7E2 remediated [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc),
          [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574),
          [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq),
          [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388),
          [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp))**\n-
          github.com/docker/cli `v29.4.3+incompatible` \u2192 `v29.5.3+incompatible`\n-
          github.com/google/go-containerregistry `v0.21.6` \u2192 `v0.21.7`\n- github.com/jedib0t/go-pretty/v6
          `v6.7.10` \u2192 `v6.8.1`\n- github.com/mattn/go-runewidth `v0.0.19` \u2192
          `v0.0.21`\n- github.com/spdx/tools-golang `v0.5.7` \u2192 `v0.6.0-rc4`\n-
          github.com/sylabs/sif/v2 `v2.24.0` \u2192 `v2.24.1`\n- golang.org/x/crypto
          `v0.52.0` \u2192 `v0.53.0`\n- golang.org/x/mod `v0.36.0` \u2192 `v0.37.0`\n-
          golang.org/x/net `v0.55.0` \u2192 `v0.56.0`\n- golang.org/x/sync `v0.20.0`
          \u2192 `v0.21.0`\n- golang.org/x/sys `v0.45.0` \u2192 `v0.46.0`\n- golang.org/x/term
          `v0.43.0` \u2192 `v0.44.0`\n- golang.org/x/text `v0.37.0` \u2192 `v0.38.0`\n-
          golang.org/x/tools `v0.45.0` \u2192 `v0.46.0`\n\n</details>\n\n<details>\n<summary>Added
          (3 packages)</summary>\n\n- github.com/piprate/json-gold `v0.7.0`\n- github.com/pquerna/cachecontrol
          `v0.0.0-1555304`\n- github.com/tailscale/hujson `v0.0.0-ecc657c`\n\n</details>\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2552
        commit_id: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
        patchset: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      buildset: 121b58e7aead4c598b5706857886cf09
      buildset_refs:
      - branch: main
        change: '2552'
        change_message: "chore(deps): update anchore/syft docker tag to v1.46.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.45.1`
          \u2192 `v1.46.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
          (anchore/syft)</summary>\n\n### [`v1.46.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.46.0)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)\n\n#####
          Added Features\n\n- Add purl types to cataloger info cmd \\[PR [#&#8203;4984](https://redirect.github.com/anchore/syft/pull/4984)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Python cataloger
          misses uv PEP 723 script lockfiles (`*.py.lock`) \\[Issue [#&#8203;4949](https://redirect.github.com/anchore/syft/issues/4949)]
          \\[PR [#&#8203;4950](https://redirect.github.com/anchore/syft/pull/4950)
          [@&#8203;ktopcuoglu](https://redirect.github.com/ktopcuoglu)]\n- Add bin
          classifier for Elastic agen \\[Issue [#&#8203;4973](https://redirect.github.com/anchore/syft/issues/4973)]
          \\[PR [#&#8203;4968](https://redirect.github.com/anchore/syft/pull/4968)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- SPDX 3 Support
          \\[Issue [#&#8203;4250](https://redirect.github.com/anchore/syft/issues/4250)]
          \\[PR [#&#8203;4269](https://redirect.github.com/anchore/syft/pull/4269)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- Add Deno support
          \\[Issue [#&#8203;4417](https://redirect.github.com/anchore/syft/issues/4417)]
          \\[PR [#&#8203;4523](https://redirect.github.com/anchore/syft/pull/4523)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Catalog Elastic
          Beats binary \\[Issue [#&#8203;4961](https://redirect.github.com/anchore/syft/issues/4961)]
          \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Add binary classifiers
          for Elastic Beats \\[Issue [#&#8203;4972](https://redirect.github.com/anchore/syft/issues/4972)]
          \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Catalog elastic-agent
          binary \\[Issue [#&#8203;4962](https://redirect.github.com/anchore/syft/issues/4962)]\n-
          Add support for Bun lockfile (bun.lock) \\[Issue [#&#8203;4617](https://redirect.github.com/anchore/syft/issues/4617)]
          \\[PR [#&#8203;4625](https://redirect.github.com/anchore/syft/pull/4625)
          [@&#8203;hnnynh](https://redirect.github.com/hnnynh)]\n- Add .bpl file support
          to the PE / DLL cataloger \\[Issue [#&#8203;4664](https://redirect.github.com/anchore/syft/issues/4664)]
          \\[PR [#&#8203;4954](https://redirect.github.com/anchore/syft/pull/4954)
          [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n\n##### Bug
          Fixes\n\n- respect arch qualifier \\[PR [#&#8203;4987](https://redirect.github.com/anchore/syft/pull/4987)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
          Preserve dependency edges when a compliance stub changes a package ID \\[PR
          [#&#8203;4993](https://redirect.github.com/anchore/syft/pull/4993) [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n-
          Support envoy binary various versions \\[Issue [#&#8203;4590](https://redirect.github.com/anchore/syft/issues/4590)]
          \\[PR [#&#8203;4605](https://redirect.github.com/anchore/syft/pull/4605)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- .net deps.json
          cataloger shows phantom pkgs for reference assembly library entries \\[Issue
          [#&#8203;4970](https://redirect.github.com/anchore/syft/issues/4970)] \\[PR
          [#&#8203;4971](https://redirect.github.com/anchore/syft/pull/4971) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
          Syft does not extract package licenses from opkg manager \\[Issue [#&#8203;4940](https://redirect.github.com/anchore/syft/issues/4940)]
          \\[PR [#&#8203;4963](https://redirect.github.com/anchore/syft/pull/4963)
          [@&#8203;Dashtid](https://redirect.github.com/Dashtid)]\n- squashfs breaks
          with godisk-fs 1.8.0 \\[Issue [#&#8203;4718](https://redirect.github.com/anchore/syft/issues/4718)]\n-
          requirements.txt cataloger silently drops PEP 440 local version identifiers,
          producing incorrect PURL \\[Issue [#&#8203;4958](https://redirect.github.com/anchore/syft/issues/4958)]
          \\[PR [#&#8203;4959](https://redirect.github.com/anchore/syft/pull/4959)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n##### Dependencies\n\n34
          dependency changes (31 updated, 3 added). 5 vulnerabilities remediated.\n\n**\U0001F7E2
          Remediated (5)**\n\n- [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc)
          (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574)
          (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq)
          (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388)
          (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp)
          (High) \u2014 github.com/containerd/containerd/v2\n\n<details>\n<summary>Updated
          (31 packages)</summary>\n\n- github.com/ProtonMail/go-crypto `v1.4.0` \u2192
          `v1.4.1`\n- github.com/anchore/bubbly `v0.2.0` \u2192 `v0.2.1`\n- github.com/anchore/clio
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/fangs `v0.1.0` \u2192 `v0.1.1`\n-
          github.com/anchore/go-collections `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-homedir
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-logger `v0.1.0` \u2192
          `v0.1.1`\n- github.com/anchore/go-lzo `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-macholibre
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-make `v0.5.0` \u2192 `v0.8.0`\n-
          github.com/anchore/go-struct-converter `v0.1.0` \u2192 `v0.2.0-rc2`\n- github.com/anchore/go-sync
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/stereoscope `v0.2.1` \u2192
          `v0.2.2`\n- github.com/charmbracelet/colorprofile `v0.4.1` \u2192 `v0.4.3`\n-
          github.com/clipperhouse/displaywidth `v0.10.0` \u2192 `v0.11.0`\n- github.com/clipperhouse/uax29/v2
          `v2.6.0` \u2192 `v2.7.0`\n- github.com/containerd/containerd/v2 `v2.3.1`
          \u2192 `v2.3.2` **(\U0001F7E2 remediated [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc),
          [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574),
          [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq),
          [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388),
          [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp))**\n-
          github.com/docker/cli `v29.4.3+incompatible` \u2192 `v29.5.3+incompatible`\n-
          github.com/google/go-containerregistry `v0.21.6` \u2192 `v0.21.7`\n- github.com/jedib0t/go-pretty/v6
          `v6.7.10` \u2192 `v6.8.1`\n- github.com/mattn/go-runewidth `v0.0.19` \u2192
          `v0.0.21`\n- github.com/spdx/tools-golang `v0.5.7` \u2192 `v0.6.0-rc4`\n-
          github.com/sylabs/sif/v2 `v2.24.0` \u2192 `v2.24.1`\n- golang.org/x/crypto
          `v0.52.0` \u2192 `v0.53.0`\n- golang.org/x/mod `v0.36.0` \u2192 `v0.37.0`\n-
          golang.org/x/net `v0.55.0` \u2192 `v0.56.0`\n- golang.org/x/sync `v0.20.0`
          \u2192 `v0.21.0`\n- golang.org/x/sys `v0.45.0` \u2192 `v0.46.0`\n- golang.org/x/term
          `v0.43.0` \u2192 `v0.44.0`\n- golang.org/x/text `v0.37.0` \u2192 `v0.38.0`\n-
          golang.org/x/tools `v0.45.0` \u2192 `v0.46.0`\n\n</details>\n\n<details>\n<summary>Added
          (3 packages)</summary>\n\n- github.com/piprate/json-gold `v0.7.0`\n- github.com/pquerna/cachecontrol
          `v0.0.0-1555304`\n- github.com/tailscale/hujson `v0.0.0-ecc657c`\n\n</details>\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2552
        commit_id: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
        patchset: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      change: '2552'
      change_message: "chore(deps): update anchore/syft docker tag to v1.46.0\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.45.1`
        \u2192 `v1.46.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
        (anchore/syft)</summary>\n\n### [`v1.46.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.46.0)\n\n[Compare
        Source](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)\n\n#####
        Added Features\n\n- Add purl types to cataloger info cmd \\[PR [#&#8203;4984](https://redirect.github.com/anchore/syft/pull/4984)
        [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Python cataloger
        misses uv PEP 723 script lockfiles (`*.py.lock`) \\[Issue [#&#8203;4949](https://redirect.github.com/anchore/syft/issues/4949)]
        \\[PR [#&#8203;4950](https://redirect.github.com/anchore/syft/pull/4950) [@&#8203;ktopcuoglu](https://redirect.github.com/ktopcuoglu)]\n-
        Add bin classifier for Elastic agen \\[Issue [#&#8203;4973](https://redirect.github.com/anchore/syft/issues/4973)]
        \\[PR [#&#8203;4968](https://redirect.github.com/anchore/syft/pull/4968) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        SPDX 3 Support \\[Issue [#&#8203;4250](https://redirect.github.com/anchore/syft/issues/4250)]
        \\[PR [#&#8203;4269](https://redirect.github.com/anchore/syft/pull/4269) [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n-
        Add Deno support \\[Issue [#&#8203;4417](https://redirect.github.com/anchore/syft/issues/4417)]
        \\[PR [#&#8203;4523](https://redirect.github.com/anchore/syft/pull/4523) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Catalog Elastic Beats binary \\[Issue [#&#8203;4961](https://redirect.github.com/anchore/syft/issues/4961)]
        \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Add binary classifiers for Elastic Beats \\[Issue [#&#8203;4972](https://redirect.github.com/anchore/syft/issues/4972)]
        \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Catalog elastic-agent binary \\[Issue [#&#8203;4962](https://redirect.github.com/anchore/syft/issues/4962)]\n-
        Add support for Bun lockfile (bun.lock) \\[Issue [#&#8203;4617](https://redirect.github.com/anchore/syft/issues/4617)]
        \\[PR [#&#8203;4625](https://redirect.github.com/anchore/syft/pull/4625) [@&#8203;hnnynh](https://redirect.github.com/hnnynh)]\n-
        Add .bpl file support to the PE / DLL cataloger \\[Issue [#&#8203;4664](https://redirect.github.com/anchore/syft/issues/4664)]
        \\[PR [#&#8203;4954](https://redirect.github.com/anchore/syft/pull/4954) [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n\n#####
        Bug Fixes\n\n- respect arch qualifier \\[PR [#&#8203;4987](https://redirect.github.com/anchore/syft/pull/4987)
        [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
        Preserve dependency edges when a compliance stub changes a package ID \\[PR
        [#&#8203;4993](https://redirect.github.com/anchore/syft/pull/4993) [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n-
        Support envoy binary various versions \\[Issue [#&#8203;4590](https://redirect.github.com/anchore/syft/issues/4590)]
        \\[PR [#&#8203;4605](https://redirect.github.com/anchore/syft/pull/4605) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        .net deps.json cataloger shows phantom pkgs for reference assembly library
        entries \\[Issue [#&#8203;4970](https://redirect.github.com/anchore/syft/issues/4970)]
        \\[PR [#&#8203;4971](https://redirect.github.com/anchore/syft/pull/4971) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
        Syft does not extract package licenses from opkg manager \\[Issue [#&#8203;4940](https://redirect.github.com/anchore/syft/issues/4940)]
        \\[PR [#&#8203;4963](https://redirect.github.com/anchore/syft/pull/4963) [@&#8203;Dashtid](https://redirect.github.com/Dashtid)]\n-
        squashfs breaks with godisk-fs 1.8.0 \\[Issue [#&#8203;4718](https://redirect.github.com/anchore/syft/issues/4718)]\n-
        requirements.txt cataloger silently drops PEP 440 local version identifiers,
        producing incorrect PURL \\[Issue [#&#8203;4958](https://redirect.github.com/anchore/syft/issues/4958)]
        \\[PR [#&#8203;4959](https://redirect.github.com/anchore/syft/pull/4959) [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n#####
        Dependencies\n\n34 dependency changes (31 updated, 3 added). 5 vulnerabilities
        remediated.\n\n**\U0001F7E2 Remediated (5)**\n\n- [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc)
        (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574)
        (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq)
        (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388)
        (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp)
        (High) \u2014 github.com/containerd/containerd/v2\n\n<details>\n<summary>Updated
        (31 packages)</summary>\n\n- github.com/ProtonMail/go-crypto `v1.4.0` \u2192
        `v1.4.1`\n- github.com/anchore/bubbly `v0.2.0` \u2192 `v0.2.1`\n- github.com/anchore/clio
        `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/fangs `v0.1.0` \u2192 `v0.1.1`\n-
        github.com/anchore/go-collections `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-homedir
        `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-logger `v0.1.0` \u2192 `v0.1.1`\n-
        github.com/anchore/go-lzo `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-macholibre
        `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-make `v0.5.0` \u2192 `v0.8.0`\n-
        github.com/anchore/go-struct-converter `v0.1.0` \u2192 `v0.2.0-rc2`\n- github.com/anchore/go-sync
        `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/stereoscope `v0.2.1` \u2192
        `v0.2.2`\n- github.com/charmbracelet/colorprofile `v0.4.1` \u2192 `v0.4.3`\n-
        github.com/clipperhouse/displaywidth `v0.10.0` \u2192 `v0.11.0`\n- github.com/clipperhouse/uax29/v2
        `v2.6.0` \u2192 `v2.7.0`\n- github.com/containerd/containerd/v2 `v2.3.1` \u2192
        `v2.3.2` **(\U0001F7E2 remediated [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc),
        [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574),
        [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq),
        [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388),
        [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp))**\n-
        github.com/docker/cli `v29.4.3+incompatible` \u2192 `v29.5.3+incompatible`\n-
        github.com/google/go-containerregistry `v0.21.6` \u2192 `v0.21.7`\n- github.com/jedib0t/go-pretty/v6
        `v6.7.10` \u2192 `v6.8.1`\n- github.com/mattn/go-runewidth `v0.0.19` \u2192
        `v0.0.21`\n- github.com/spdx/tools-golang `v0.5.7` \u2192 `v0.6.0-rc4`\n-
        github.com/sylabs/sif/v2 `v2.24.0` \u2192 `v2.24.1`\n- golang.org/x/crypto
        `v0.52.0` \u2192 `v0.53.0`\n- golang.org/x/mod `v0.36.0` \u2192 `v0.37.0`\n-
        golang.org/x/net `v0.55.0` \u2192 `v0.56.0`\n- golang.org/x/sync `v0.20.0`
        \u2192 `v0.21.0`\n- golang.org/x/sys `v0.45.0` \u2192 `v0.46.0`\n- golang.org/x/term
        `v0.43.0` \u2192 `v0.44.0`\n- golang.org/x/text `v0.37.0` \u2192 `v0.38.0`\n-
        golang.org/x/tools `v0.45.0` \u2192 `v0.46.0`\n\n</details>\n\n<details>\n<summary>Added
        (3 packages)</summary>\n\n- github.com/piprate/json-gold `v0.7.0`\n- github.com/pquerna/cachecontrol
        `v0.0.0-1555304`\n- github.com/tailscale/hujson `v0.0.0-ecc657c`\n\n</details>\n\n**[(Full
        Changelog)](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)**\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
        At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
        defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
        manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
        conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
        Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
      change_url: https://github.com/osism/release/pull/2552
      child_jobs: []
      commit_id: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
      event_id: 78183ed0-73d1-11f1-8522-e1f3902221c2
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/6c70e24338124d60afb04f938288d4af/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/6c70e24338124d60afb04f938288d4af/work/logs
        result_data_file: /var/lib/zuul/builds/6c70e24338124d60afb04f938288d4af/work/results.json
        src_root: /var/lib/zuul/builds/6c70e24338124d60afb04f938288d4af/work/src
        work_root: /var/lib/zuul/builds/6c70e24338124d60afb04f938288d4af/work
      include_vars: []
      items:
      - branch: main
        change: '2552'
        change_message: "chore(deps): update anchore/syft docker tag to v1.46.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [anchore/syft](https://redirect.github.com/anchore/syft) | minor | `v1.45.1`
          \u2192 `v1.46.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>anchore/syft
          (anchore/syft)</summary>\n\n### [`v1.46.0`](https://redirect.github.com/anchore/syft/releases/tag/v1.46.0)\n\n[Compare
          Source](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)\n\n#####
          Added Features\n\n- Add purl types to cataloger info cmd \\[PR [#&#8203;4984](https://redirect.github.com/anchore/syft/pull/4984)
          [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n- Python cataloger
          misses uv PEP 723 script lockfiles (`*.py.lock`) \\[Issue [#&#8203;4949](https://redirect.github.com/anchore/syft/issues/4949)]
          \\[PR [#&#8203;4950](https://redirect.github.com/anchore/syft/pull/4950)
          [@&#8203;ktopcuoglu](https://redirect.github.com/ktopcuoglu)]\n- Add bin
          classifier for Elastic agen \\[Issue [#&#8203;4973](https://redirect.github.com/anchore/syft/issues/4973)]
          \\[PR [#&#8203;4968](https://redirect.github.com/anchore/syft/pull/4968)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- SPDX 3 Support
          \\[Issue [#&#8203;4250](https://redirect.github.com/anchore/syft/issues/4250)]
          \\[PR [#&#8203;4269](https://redirect.github.com/anchore/syft/pull/4269)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n- Add Deno support
          \\[Issue [#&#8203;4417](https://redirect.github.com/anchore/syft/issues/4417)]
          \\[PR [#&#8203;4523](https://redirect.github.com/anchore/syft/pull/4523)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Catalog Elastic
          Beats binary \\[Issue [#&#8203;4961](https://redirect.github.com/anchore/syft/issues/4961)]
          \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Add binary classifiers
          for Elastic Beats \\[Issue [#&#8203;4972](https://redirect.github.com/anchore/syft/issues/4972)]
          \\[PR [#&#8203;4969](https://redirect.github.com/anchore/syft/pull/4969)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- Catalog elastic-agent
          binary \\[Issue [#&#8203;4962](https://redirect.github.com/anchore/syft/issues/4962)]\n-
          Add support for Bun lockfile (bun.lock) \\[Issue [#&#8203;4617](https://redirect.github.com/anchore/syft/issues/4617)]
          \\[PR [#&#8203;4625](https://redirect.github.com/anchore/syft/pull/4625)
          [@&#8203;hnnynh](https://redirect.github.com/hnnynh)]\n- Add .bpl file support
          to the PE / DLL cataloger \\[Issue [#&#8203;4664](https://redirect.github.com/anchore/syft/issues/4664)]
          \\[PR [#&#8203;4954](https://redirect.github.com/anchore/syft/pull/4954)
          [@&#8203;jfjrh2014](https://redirect.github.com/jfjrh2014)]\n\n##### Bug
          Fixes\n\n- respect arch qualifier \\[PR [#&#8203;4987](https://redirect.github.com/anchore/syft/pull/4987)
          [@&#8203;willmurphyscode](https://redirect.github.com/willmurphyscode)]\n-
          Preserve dependency edges when a compliance stub changes a package ID \\[PR
          [#&#8203;4993](https://redirect.github.com/anchore/syft/pull/4993) [@&#8203;wagoodman](https://redirect.github.com/wagoodman)]\n-
          Support envoy binary various versions \\[Issue [#&#8203;4590](https://redirect.github.com/anchore/syft/issues/4590)]
          \\[PR [#&#8203;4605](https://redirect.github.com/anchore/syft/pull/4605)
          [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n- .net deps.json
          cataloger shows phantom pkgs for reference assembly library entries \\[Issue
          [#&#8203;4970](https://redirect.github.com/anchore/syft/issues/4970)] \\[PR
          [#&#8203;4971](https://redirect.github.com/anchore/syft/pull/4971) [@&#8203;rezmoss](https://redirect.github.com/rezmoss)]\n-
          Syft does not extract package licenses from opkg manager \\[Issue [#&#8203;4940](https://redirect.github.com/anchore/syft/issues/4940)]
          \\[PR [#&#8203;4963](https://redirect.github.com/anchore/syft/pull/4963)
          [@&#8203;Dashtid](https://redirect.github.com/Dashtid)]\n- squashfs breaks
          with godisk-fs 1.8.0 \\[Issue [#&#8203;4718](https://redirect.github.com/anchore/syft/issues/4718)]\n-
          requirements.txt cataloger silently drops PEP 440 local version identifiers,
          producing incorrect PURL \\[Issue [#&#8203;4958](https://redirect.github.com/anchore/syft/issues/4958)]
          \\[PR [#&#8203;4959](https://redirect.github.com/anchore/syft/pull/4959)
          [@&#8203;kzantow](https://redirect.github.com/kzantow)]\n\n##### Dependencies\n\n34
          dependency changes (31 updated, 3 added). 5 vulnerabilities remediated.\n\n**\U0001F7E2
          Remediated (5)**\n\n- [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc)
          (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574)
          (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq)
          (Medium) \u2014 github.com/containerd/containerd/v2\n- [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388)
          (High) \u2014 github.com/containerd/containerd/v2\n- [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp)
          (High) \u2014 github.com/containerd/containerd/v2\n\n<details>\n<summary>Updated
          (31 packages)</summary>\n\n- github.com/ProtonMail/go-crypto `v1.4.0` \u2192
          `v1.4.1`\n- github.com/anchore/bubbly `v0.2.0` \u2192 `v0.2.1`\n- github.com/anchore/clio
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/fangs `v0.1.0` \u2192 `v0.1.1`\n-
          github.com/anchore/go-collections `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-homedir
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-logger `v0.1.0` \u2192
          `v0.1.1`\n- github.com/anchore/go-lzo `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-macholibre
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/go-make `v0.5.0` \u2192 `v0.8.0`\n-
          github.com/anchore/go-struct-converter `v0.1.0` \u2192 `v0.2.0-rc2`\n- github.com/anchore/go-sync
          `v0.1.0` \u2192 `v0.1.1`\n- github.com/anchore/stereoscope `v0.2.1` \u2192
          `v0.2.2`\n- github.com/charmbracelet/colorprofile `v0.4.1` \u2192 `v0.4.3`\n-
          github.com/clipperhouse/displaywidth `v0.10.0` \u2192 `v0.11.0`\n- github.com/clipperhouse/uax29/v2
          `v2.6.0` \u2192 `v2.7.0`\n- github.com/containerd/containerd/v2 `v2.3.1`
          \u2192 `v2.3.2` **(\U0001F7E2 remediated [GHSA-33vj-92qq-66hc](https://redirect.github.com/advisories/GHSA-33vj-92qq-66hc),
          [GHSA-cvxm-645q-p574](https://redirect.github.com/advisories/GHSA-cvxm-645q-p574),
          [GHSA-jpcc-p29g-p8mq](https://redirect.github.com/advisories/GHSA-jpcc-p29g-p8mq),
          [GHSA-rgh6-rfwx-v388](https://redirect.github.com/advisories/GHSA-rgh6-rfwx-v388),
          [GHSA-xhf5-7wjv-pqxp](https://redirect.github.com/advisories/GHSA-xhf5-7wjv-pqxp))**\n-
          github.com/docker/cli `v29.4.3+incompatible` \u2192 `v29.5.3+incompatible`\n-
          github.com/google/go-containerregistry `v0.21.6` \u2192 `v0.21.7`\n- github.com/jedib0t/go-pretty/v6
          `v6.7.10` \u2192 `v6.8.1`\n- github.com/mattn/go-runewidth `v0.0.19` \u2192
          `v0.0.21`\n- github.com/spdx/tools-golang `v0.5.7` \u2192 `v0.6.0-rc4`\n-
          github.com/sylabs/sif/v2 `v2.24.0` \u2192 `v2.24.1`\n- golang.org/x/crypto
          `v0.52.0` \u2192 `v0.53.0`\n- golang.org/x/mod `v0.36.0` \u2192 `v0.37.0`\n-
          golang.org/x/net `v0.55.0` \u2192 `v0.56.0`\n- golang.org/x/sync `v0.20.0`
          \u2192 `v0.21.0`\n- golang.org/x/sys `v0.45.0` \u2192 `v0.46.0`\n- golang.org/x/term
          `v0.43.0` \u2192 `v0.44.0`\n- golang.org/x/text `v0.37.0` \u2192 `v0.38.0`\n-
          golang.org/x/tools `v0.45.0` \u2192 `v0.46.0`\n\n</details>\n\n<details>\n<summary>Added
          (3 packages)</summary>\n\n- github.com/piprate/json-gold `v0.7.0`\n- github.com/pquerna/cachecontrol
          `v0.0.0-1555304`\n- github.com/tailscale/hujson `v0.0.0-ecc657c`\n\n</details>\n\n**[(Full
          Changelog)](https://redirect.github.com/anchore/syft/compare/v1.45.1...v1.46.0)**\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n  -
          At any time (no schedule defined)\n- Automerge\n  - At any time (no schedule
          defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this
          manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes
          conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**:
          Close this PR and you won't be reminded about this update again.\n\n---\n\n
          - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
          box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
          View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->\n"
        change_url: https://github.com/osism/release/pull/2552
        commit_id: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
        patchset: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
          src_dir: src/github.com/osism/release
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: a6fc4deeb9f66f35d0a5cd07be74503624ca29f1
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 1d71e58c93442038e695a5d883d57a603182c7ae
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 71b711c422c10c242a8f785dc6d41ed9d12e9cd3
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 242732586e2cba04d04867d3e302888c766bc231
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: 1800
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/release
        name: osism/release
        short_name: release
        src_dir: src/github.com/osism/release
      projects:
        github.com/osism/release:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          checkout: main
          checkout_description: zuul branch
          commit: 3fcd9894dde305ce758c64b248c68ca1c9cf78fe
          name: osism/release
          required: false
          short_name: release
          src_dir: src/github.com/osism/release
      ref: refs/pull/2552/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
