deps: update module github.com/anchore/syft to v1.4.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/anchore/syft	v1.3.0 -> v1.4.1

---

Release Notes

anchore/syft (github.com/anchore/syft)

v1.4.1

Compare Source

Bug Fixes

• Fix redundant package deletions when considering ELF packages [#​2862 @​wagoodman]

(Full Changelog)

v1.4.0

Compare Source

Added Features

• Add detection for newer version of ErLang/OTP [#​2829 @​LaurentGoderre]
• Add missing CPE for traefik, memcached, and postgres binaries [#​2845 @​LaurentGoderre]
• Add binary classifier for ArangoDB [#​2830 @​LaurentGoderre]
• Add relationships to ELF packages [#​2715 @​brian-ebarb]
• Add relationships for ALPM packages (arch linux) [#​2851 @​wagoodman]

Bug Fixes

• close temp rpmdb file [#​2792 @​testwill]
• fix Windows file paths in local go mod cache [#​2654 @​willmurphyscode]
• Package Count doesn't match list of packages [#​2304 #​2839 @​wagoodman]
• New version 1.3.0 leads to "too many open files" while scanning bigger images [#​2819 #​2823 @​willmurphyscode]
• license_info_in_file is mandatory in SPDX-2.2 [#​2163 #​2168 @​kzantow]
• Wrong CPE for dnsmasq [#​2636 #​2659 @​kzantow]
• SPDX originator is not always populated [#​2632 #​2822 @​wagoodman]

Additional Changes

• Improve linting for defer Close type issues [#​2826]
• use ruleguard to test for missing defer statements [#​2837 @​willmurphyscode]
• Publish security policy [#​2835 @​wagoodman]
• fix function name in comment [#​2771 @​camcui]
• enable go-critic deferInLoop lint [#​2825 @​willmurphyscode]

(Full Changelog)

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.