chore(deps-dev): update anchore/sbom-action action to v0.23.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/sbom-action	action	minor	v0.20.5 → v0.23.0

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.23.0

Compare Source

v0.23.0

• switch to single-file dist build with sub-action flags and update dependencies (#​595) [@​kzantow]
• switch to esbuild (#​590) [@​willmurphyscode]
• update Syft to v1.42.1 (#​599) [@​anchore-actions-token-generator[bot]]

v0.22.2

Compare Source

v0.22.2

⬆️ Dependencies

• chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (#​581) [@​dependabot[bot]]
• chore(deps): update Syft to v1.41.2 (#​582) [@​anchore-actions-token-generator[bot]]
• chore(deps-dev): bump the dev-dependencies group with 2 updates (#​580) [@​dependabot[bot]]
• chore(deps): update Syft to v1.41.1 (#​579) [@​anchore-actions-token-generator[bot]]

v0.22.1

Compare Source

v0.22.1

⬆️ Dependencies

• chore(deps): update Syft to v1.41.0 (#​576) [@​anchore-actions-token-generator[bot]]
• chore(deps): bump lodash from 4.17.21 to 4.17.23 (#​573) [@​dependabot[bot]]

v0.22.0

Compare Source

Changes in v0.22.0

⬆️ Dependencies

• chore(deps-dev): bump the dev-dependencies group with 19 updates (#​566) [@​dependabot]
• chore(deps): bump npm-check-updates from 17.1.3 to 19.3.1 (#​567) [@​dependabot]
• chore(deps): update Syft to v1.40.1 (#​563) [@​anchore-actions-token-generator[bot]]

v0.21.1

Compare Source

Changes in v0.21.1

• chore(deps): update Syft to v1.40.0 (#​562) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.21.0

Compare Source

• chore(deps): update Syft to v1.39.0 (#​561)
• chore(deps): bump @​octokit/request-error, @​octokit/core and @​octokit/webhooks (#​560)
• chore(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#​558)

v0.20.11

Compare Source

Changes in v0.20.11

• update Syft to v1.38.2 (#​557)
• bump @​octokit/plugin-paginate-rest, @​actions/artifact and @​actions/github (#​550) [[dependabot[bot]](https://github.com/dependabot[bot])]
• bump js-yaml (#​552) [[dependabot[bot]](https://github.com/dependabot[bot])]

v0.20.10

Compare Source

Changes in v0.20.10

• chore(deps): update Syft to v1.38.0 (#​548) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.20.9

Compare Source

Changes in v0.20.9

• chore(deps): update Syft to v1.36.0 (#​546) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.20.8

Compare Source

Changes in v0.20.8

• chore(deps): update Syft to v1.34.2 (#​545) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]

v0.20.7

Compare Source

Changes in v0.20.7

• chore(deps): update Syft to v1.34.1 (#​544)

v0.20.6

Compare Source

Changes in v0.20.6

• chore(deps): update Syft to v1.33.0 (#​537) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]
• chore: update actions library to resolve critical vulnerability (#​536) [spiffcs]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.