fix(deps): update all patch dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
anchore/sbom-action	action	patch	v0.20.0 -> v0.20.4
github.com/mattn/go-sqlite3	require	patch	v1.14.28 -> v1.14.29
github.com/olekukonko/tablewriter	require	patch	v1.0.7 -> v1.0.8
github.com/stoewer/go-strcase	require	patch	v1.3.0 -> v1.3.1
sigstore/cosign-installer	action	patch	v3.9.0 -> v3.9.2
slsa-framework/slsa-verifier	action	patch	v2.7.0 -> v2.7.1

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.20.4

Compare Source

Changes in v0.20.4

• chore: update Syft to v1.29.0 (#​529)

v0.20.3

Compare Source

Changes in v0.20.3

• Fix: Strip emojis from correlator before using github APIs (#​527) [AndrewHendry]

v0.20.2

Compare Source

Changes in v0.20.2

• Update Syft to v1.28.0 (#​526)

v0.20.1

Compare Source

Changes in v0.20.1

• Update Syft to v1.27.1 (#​525)

mattn/go-sqlite3 (github.com/mattn/go-sqlite3)

v1.14.29

Compare Source

olekukonko/tablewriter (github.com/olekukonko/tablewriter)

v1.0.8

Compare Source

stoewer/go-strcase (github.com/stoewer/go-strcase)

v1.3.1: Release 1.3.1

Compare Source

What's Changed

• Add fix camelCase to preserve case after numbers by @​stoewer in https://github.com/stoewer/go-strcase/pull/14

sigstore/cosign-installer (sigstore/cosign-installer)

v3.9.2

Compare Source

What's Changed

• not fail fast and setup permissions in https://github.com/sigstore/cosign-installer/pull/195
• drop old unsupported versions <v2.0.0 inhttps://github.com/sigstore/cosign-installer/pull/1922
• Update default to v2.5.3 in https://github.com/sigstore/cosign-installer/pull/196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

v3.9.1

Compare Source

What's Changed

• default action install to use release v2.5.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/193
• default cosign to v2.5.2 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/194

Full Changelog: sigstore/cosign-installer@v3.9.0...v3.9.1

slsa-framework/slsa-verifier (slsa-framework/slsa-verifier)

v2.7.1

Compare Source

What's Changed

• chore: Update docs for v2.7.0 by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/829
• docs(npm): "exmaple" spelling fix by @​scop in https://github.com/slsa-framework/slsa-verifier/pull/832
• chore: update test files for v2.1.0 by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/836
• feat: verify provenance for bcr modules produced by trusted reusable workflows by @​loosebazooka in https://github.com/slsa-framework/slsa-verifier/pull/840
• chore(deps): update golang:1.23 docker digest to cc458d7 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/838
• fix: less parallelism in tests by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/851
• chore(deps): bump @​octokit/request-error from 5.0.1 to 5.1.1 in /actions/installer in the npm_and_yarn group across 1 directory by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/833
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/835
• chore(deps): bump the go_modules group across 1 directory with 2 updates by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/853
• fix(deps): update npm by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/843
• fix(deps): update golang.org/x/exp digest to dcc06ee by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/839
• fix: no parallel regression tests by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/855
• chore(deps): update golang:1.23 docker digest to dd5cc4b by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/847
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 0a0dc20 by @​renovate-bot in https://github.com/slsa-framework/slsa-verifier/pull/844
• chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates by @​dependabot in https://github.com/slsa-framework/slsa-verifier/pull/854
• feat: Bazel not experimental by @​ramonpetgrave64 in https://github.com/slsa-framework/slsa-verifier/pull/850
• docs: add section for verify-github-attestation by @​loosebazooka in https://github.com/slsa-framework/slsa-verifier/pull/858

New Contributors

• @​scop made their first contribution in https://github.com/slsa-framework/slsa-verifier/pull/832
• @​loosebazooka made their first contribution in https://github.com/slsa-framework/slsa-verifier/pull/840

Full Changelog: slsa-framework/slsa-verifier@v2.7.0...v2.7.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.