Merge branch 'main' into dependabot/go_modules/github.com/containerd/…

…errdefs-1.0.0

.github/workflows/mend_scan.yaml

@@ -198,7 +198,7 @@ jobs:
 
     - name: Comment Mend Status on PR
       if: ${{ github.event_name != 'schedule' && steps.pr_exists.outputs.pr_found == 'true' }}
-      uses: thollander/[email protected].0
+      uses: thollander/[email protected].1
       with:
         message: |
           ## Mend Scan Summary: :${{ steps.report.outputs.status }}:

.github/workflows/release.yaml

@@ -169,7 +169,7 @@ jobs:
         cache_name: release-go-cache
 
     - name: Setup Syft
-      uses: anchore/sbom-action/download-syft@1ca97d9028b51809cf6d3c934c3e160716e1b605 # v0.17.5
+      uses: anchore/sbom-action/download-syft@251a468eed47e5082b105c3ba6ee500c0e65a764 # v0.17.6
 
     - name: Setup Cosign
       uses: sigstore/[email protected]

flake.nix

@@ -35,7 +35,7 @@
             state = if (self ? rev) then "clean" else "dirty";
 
             # This vendorHash represents a derivative of all go.mod dependencies and needs to be adjusted with every change
-            vendorHash = "sha256-MvQl2/jaIIjrz9e9L8NbzDW+Ozgx8XI9XI1jFFulRWs=";
+            vendorHash = "sha256-dYEotkFKbJuUdlPee9tZTZttpcy/YAXX3VQSnkewy2I=";
 
             src = ./.;