deps: update anchore/syft docker tag to v1.21.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/syft	stage	minor	v1.20.0 -> v1.21.0

---

Release Notes

anchore/syft (anchore/syft)

v1.21.0

Compare Source

Added Features

• Support extracting symbols in .dynsym section for GraalVM Native Images [#​3647 @​rudsberg]
• Support fluent-bit 1.7.0 dev, rc [#​3133 #​3701 @​popey]

Bug Fixes

• Suppress "file already closed" errors [#​3695 @​wagoodman]
• Add set ID to dotnet (lock) packages [#​3719 @​houdini91]
• Location order on packages should consider evidence annotations when sorting [#​3720 @​wagoodman]
• Fix /etc/redhat-release file parsing when resolving distro details [#​3688 @​wagoodman]
• Syft fileresolver.containsPath allocates unnecessarily [#​3729 #​3730 @​yoav-orca]
• Dart: Syft incorrectly generates SBOM with version 0.0.0 for SDK dependencies [#​3158 #​3572 @​sgreg]
• Download location is not a valid URI [#​3696 #​3697 @​stgrace]

Additional Changes

• Update rustaudit module name [#​3689 @​tofay]
• bump golang.org/x/net from 0.35.0 to 0.36.0 [#​3709 @​dependabot]

(Full Changelog)

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.