Update all dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
anchore/grype	minor	0.64.2 -> 0.65.0
anchore/syft	minor	0.85.0 -> 0.86.1
awscli	patch	2.13.4 -> 2.13.5
defenseunicorns/build-harness	minor	1.8.2 -> 1.9.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

anchore/grype (anchore/grype)

v0.65.0

Compare Source

Changelog

v0.65.0 (2023-07-31)

Full Changelog

Added Features

• feat: implement secondary sorting for default json output [PR #​1403] [spiffcs]
• Consistent sort order for grype output [Issue #​709] [PR #​1400] [spiffcs]

Bug Fixes

• Grype reading SPDX file with json output gets UnknownScheme error [Issue #​948]
• grype 0.64.0 doesn't list vulnerabilties if --fail-on fails [Issue #​1392] [PR #​1395] [willmurphyscode]

Additional Changes

• chore: bump quality gate label dataset [PR #​1404] [westonsteimel]

anchore/syft (anchore/syft)

v0.86.1

Compare Source

Changelog

v0.86.1 (2023-07-31)

Full Changelog

Bug Fixes

• Source requires default image name as user input for unparsable reference [PR #​1979] [kzantow]

v0.86.0

Compare Source

Changelog

v0.86.0 (2023-07-31)

Full Changelog

Added Features

• Introduce indexed embedded CPE dictionary [PR #​1897] [luhring]
• Add cataloger for Swift Package Manager. [PR #​1919] [trilleplay]
• Guess unpinned versions in python requirements.txt [PR #​1597] [PR #​1966] [manifestori] [wagoodman]
• Create a package record for the artifact an SBOM described when creating a SPDX SBOM [Issue #​1661] [Issue #​1241] [PR #​1934] [kzantow]

Bug Fixes

• Fix panic condition on docker pull failure [PR #​1968] [wagoodman]
• Syft reports the "minimum required version" of .NET assemblies rather than the "assembly version" [Issue #​1799] [PR #​1943] [luhring]
• Grype cannot read SPDX documents generated by SPDX-maven-plugin [PR #​1969] [spiffcs]

Breaking Changes

• Remove jotframe UI [PR #​1932] [wagoodman]
• Simplify python env markers [PR #​1967] [wagoodman]

aws/aws-cli (awscli)

v2.13.5

Compare Source

defenseunicorns/build-harness (defenseunicorns/build-harness)

v1.9.0

Compare Source

What's Changed

• Add Docker by @​RothAndrew in https://github.com/defenseunicorns/build-harness/pull/71
• Add k3d by @​RothAndrew in https://github.com/defenseunicorns/build-harness/pull/73
• Update all dependencies by @​renovate in https://github.com/defenseunicorns/build-harness/pull/70

Full Changelog: 1.8.2...1.9.0

---

Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.