chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	patch	v3.3.1 -> v3.3.2
actions/checkout	action	minor	v4.0.0 -> v4.1.1
anchore/sbom-action	action	minor	v0.14.3 -> v0.15.2
docker/dockerfile	syntax	minor	1.4 -> 1.6
github.com/golangci/golangci-lint	require	patch	v1.55.1 -> v1.55.2
github.com/spf13/cobra	require	minor	v1.7.0 -> v1.8.0
golang	stage	patch	1.21.3 -> 1.21.5
sigstore/cosign-installer	action	minor	v3.1.1 -> v3.3.0

---

Release Notes

actions/cache (actions/cache)

v3.3.2

Compare Source

What's Changed

• Fixed readme with new segment timeout values by @​kotewar in https://github.com/actions/cache/pull/1133
• Readme fixes by @​kotewar in https://github.com/actions/cache/pull/1134
• Updated description of the lookup-only input for main action by @​kotewar in https://github.com/actions/cache/pull/1130
• Change two new actions mention as quoted text by @​bishal-pdMSFT in https://github.com/actions/cache/pull/1131
• Update Cross-OS Caching tips by @​pdotl in https://github.com/actions/cache/pull/1122
• Bazel example (Take #​2️⃣) by @​vorburger in https://github.com/actions/cache/pull/1132
• Remove actions to add new PRs and issues to a project board by @​jorendorff in https://github.com/actions/cache/pull/1187
• Consume latest toolkit and fix dangling promise bug by @​chkimes in https://github.com/actions/cache/pull/1217
• Bump action version to 3.3.2 by @​bethanyj28 in https://github.com/actions/cache/pull/1236

New Contributors

• @​vorburger made their first contribution in https://github.com/actions/cache/pull/1132
• @​jorendorff made their first contribution in https://github.com/actions/cache/pull/1187
• @​chkimes made their first contribution in https://github.com/actions/cache/pull/1217
• @​bethanyj28 made their first contribution in https://github.com/actions/cache/pull/1236

Full Changelog: actions/cache@v3...v3.3.2

actions/checkout (actions/checkout)

v4.1.1

Compare Source

What's Changed

• Update CODEOWNERS to Launch team by @​joshmgross in https://github.com/actions/checkout/pull/1510
• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

• @​joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
• @​peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

v4.1.0

Compare Source

• Add support for partial checkout filters

anchore/sbom-action (anchore/sbom-action)

v0.15.2

Compare Source

Changes in v0.15.2

• chore(deps): update Syft to v0.99.0 (#​432) [anchore-actions-token-generator]
• chore: fix github-script invocation in update-snapshots workflow (#​433) [willmurphyscode]

v0.15.1

Compare Source

Changes in v0.15.1

• chore(deps): update Syft to v0.98.0 (#​431) [anchore-actions-token-generator]
• Add config input (#​430) [eyakubovich]
• chore: pin and upgrade gh actions (#​429) [willmurphyscode]

v0.15.0

Compare Source

Changes in v0.14.4

Breaking Changes

• Previously, running on Windows required WSL. Now, running on Windows expects to be run on native windows (#​426) [willmurphyscode].

Other Changes

• pin and upgrade actions/checkout (#​428) [willmurphyscode]
• chore(deps): update Syft to v0.97.1 (#​427) [anchore-actions-token-generator]
• add oss community board auto-add workflow (#​421) [wagoodman]

golangci/golangci-lint (github.com/golangci/golangci-lint)

v1.55.2

Compare Source

1. updated linters
   • ireturn: from 0.2.1 to 0.2.2
   • ginkgolinter: from 0.14.0 to 0.14.1

spf13/cobra (github.com/spf13/cobra)

v1.8.0

Compare Source

✨ Features

• Support usage as plugin for tools like kubectl by @​nirs in https://github.com/spf13/cobra/pull/2018 - this means that programs that utilize a "plugin-like" structure have much better support and usage (like for completions, command paths, etc.)
• Move documentation sources to site/content by @​umarcor in https://github.com/spf13/cobra/pull/1428
• Add 'one required flag' group by @​marevers in https://github.com/spf13/cobra/pull/1952 - this includes a new MarkFlagsOneRequired API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked.
• Customizable error message prefix by @​5ouma in https://github.com/spf13/cobra/pull/2023 - This adds the SetErrPrefix and ErrPrefix APIs on the Command struct to allow for setting a custom prefix for errors
• feat: add getters for flag completions by @​avirtopeanu-ionos in https://github.com/spf13/cobra/pull/1943
• Feature: allow running persistent run hooks of all parents by @​vkhoroz in https://github.com/spf13/cobra/pull/2044
• Improve API to get flag completion function by @​marckhouzam in https://github.com/spf13/cobra/pull/2063

🐛 Bug fixes

• Fix typo in fish completions by @​twpayne in https://github.com/spf13/cobra/pull/1945
• Fix grammar: 'allows to' by @​supertassu in https://github.com/spf13/cobra/pull/1978
• powershell: escape variable with curly brackets by @​Luap99 in https://github.com/spf13/cobra/pull/1960
• Don't complete --help flag when flag parsing disabled by @​marckhouzam in https://github.com/spf13/cobra/pull/2061
• Replace all non-alphanumerics in active help env var program prefix by @​scop in https://github.com/spf13/cobra/pull/1940

🔧 Maintenance

• build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/spf13/cobra/pull/1971
• build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by @​dependabot in https://github.com/spf13/cobra/pull/1976
• build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/spf13/cobra/pull/2021
• build(deps): bump actions/setup-go from 3 to 4 by @​dependabot in https://github.com/spf13/cobra/pull/1934
• build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by @​dependabot in https://github.com/spf13/cobra/pull/2047
• build(deps): bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/spf13/cobra/pull/2028
• command: temporarily disable G602 due to securego/gosec#1005 by @​umarcor in https://github.com/spf13/cobra/pull/2022

🧪 Testing & CI/CD

• test: make fish_completions_test more robust by @​branchvincent in https://github.com/spf13/cobra/pull/1980
• golangci: enable 'unused' and disable deprecated replaced by it by @​umarcor in https://github.com/spf13/cobra/pull/1983
• cleanup: minor corrections to unit tests by @​JunNishimura in https://github.com/spf13/cobra/pull/2003
• ci: test golang 1.21 by @​nunoadrego in https://github.com/spf13/cobra/pull/2024
• Fix linter errors by @​marckhouzam in https://github.com/spf13/cobra/pull/2052
• Add tests for flag completion registration by @​marckhouzam in https://github.com/spf13/cobra/pull/2053

✏️ Documentation

• doc: fix typo, Deperecated -> Deprecated by @​callthingsoff in https://github.com/spf13/cobra/pull/2000
• Add notes to doc about the execution condition of *PreRun and *PostRun functions by @​haoming29 in https://github.com/spf13/cobra/pull/2041

---

Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: spf13/cobra@v1.7.0...v1.8.0

sigstore/cosign-installer (sigstore/cosign-installer)

v3.3.0

Compare Source

What's Changed

• Bump actions/setup-go from 4.1.0 to 5.0.0 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/152
• update action to use latest cosign v2.2.2 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/153

Full Changelog: sigstore/cosign-installer@v3.2.0...v3.3.0

v3.2.0

Compare Source

Note: This release comes with a fix for CVE-2023-46737 described in this Github Security Advisory. Please upgrade to this release ASAP

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

What's Changed

• Support the runner context of gitea act by @​josedev-union in https://github.com/sigstore/cosign-installer/pull/147
• bump cosign to v2.2.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/148
• test with latest go version by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/150

New Contributors

• @​josedev-union made their first contribution in https://github.com/sigstore/cosign-installer/pull/147

Full Changelog: sigstore/cosign-installer@v3...v3.2.0

v3.1.2

Compare Source

What's Changed

• Fix build and push step Readme missing id by @​hbenali in https://github.com/sigstore/cosign-installer/pull/138
• bump cosign to v2.2.0 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/142

New Contributors

• @​hbenali made their first contribution in https://github.com/sigstore/cosign-installer/pull/138

Full Changelog: sigstore/cosign-installer@v3...v3.1.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[MarvinJWendt]

Closing as we stopped using renovate