chore(deps): update ⬆️ aqua-packages

[mend-for-github-com]

This PR contains the following updates:

Package	Update	Change
anchore/grype	patch	v0.73.4 -> v0.73.5
anchore/syft	minor	v0.98.0 -> v0.99.0
aquaproj/aqua-registry	minor	v4.108.0 -> v4.109.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anchore/grype (anchore/grype)

v0.73.5

Compare Source

Additional Changes

• Update Syft to v0.99.0 [#​1633 @​dependabot]

(Full Changelog)

anchore/syft (anchore/syft)

v0.99.0

Compare Source

Added Features

• Look for a maven version in a pom from a parent dependency management… [#​2423 @​coheigea]
• Adding the ability to retrieve remote licenses for yarn.lock [#​2338 @​coheigea]
• Retrieve remote licenses using pom.properties when there is no pom.xml [#​2315 @​coheigea]
• Add the option to retrieve remote licenses for projects defined in a … [#​2409 @​coheigea]
• Parse Python licenses from LicenseFile entry in the Wheel Metadata [#​2331 @​coheigea]
• Add binary classifier for the ERLang interpreter [#​2417 @​LaurentGoderre]
• Parse Python licenses from LicenseExpression entry in the Wheel Metadata [#​2431 @​coheigea]
• Add binary classifier for Julia lang [#​2427 @​LaurentGoderre]
• Add binary detection for PHP composer [#​2432 @​LaurentGoderre]

Bug Fixes

• bump fangs for ptr summarize fix [#​2387 @​willmurphyscode]
• improve identification for org.codehaus.groovy artifacts [#​2404 @​westonsteimel]
• improve identification for commons-jelly artifacts [#​2399 @​westonsteimel]
• improve identification for io.minio artifacts [#​2398 @​westonsteimel]
• improve identification for com.graphql-java artifacts [#​2397 @​westonsteimel]
• improve identification for org.apache.tapestry artifacts [#​2384 @​westonsteimel]
• improve identification for io.ratpack artifacts [#​2379 @​westonsteimel]
• improve identification for org.apache.cassandra artifacts [#​2386 @​westonsteimel]
• improve identification for org.neo4j.procedure artifacts [#​2388 @​westonsteimel]
• improve identification for org.elasticsearch artifacts [#​2383 @​westonsteimel]
• improve identification for org.apache.geode artifacts [#​2382 @​westonsteimel]
• improve identification for org.apache.tomcat artifacts [#​2381 @​westonsteimel]
• improve identification for io.projectreactor.netty artifacts [#​2378 @​westonsteimel]
• stop panic when parsing Haskell stack.yaml.lock with missing hackage field [#​2421 #​2419 @​houdini91]
• fix detecting the name of the eclipse OSGi artifact [#​2314 #​2349 @​westonsteimel]
• File Sources incorrectly exclude files on Windows [#​2410 #​2411 @​Racer159]
• Parser for dotnet_portable_executable using wrong attribute name [#​2029 #​2133 @​kzantow]

Breaking Changes

• Generalize UI events for cataloging tasks [#​2369 @​wagoodman]

Additional Changes

• refactor pkg.Collection to remove "catalog" references [#​2439 @​wagoodman]
• Expose javascript fields in cataloger configuration [#​2438 @​wagoodman]
• Use common archive catalog configuration [#​2437 @​wagoodman]
• Fix file digest cataloger when passed explicit coordinates [#​2436 @​wagoodman]

(Full Changelog)

aquaproj/aqua-registry (aquaproj/aqua-registry)

v4.109.0

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.108.0...v4.109.0

🎉 New Packages

#​18407 rajatjindal/kubectl-whoami: This plugin gets the subject name using the effective kubeconfig @​ponkio-o
#​18451 takaishi/awscost: Print AWS costs to text or graph image

---

Configuration

📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box