chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/sbom-action	action	minor	v0.7.0 -> v0.8.0
github.com/spf13/cobra	require	minor	v1.3.0 -> v1.4.0
github.com/stretchr/testify	require	patch	v1.7.0 -> v1.7.1
golang	image	minor	1.17 -> 1.18

---

Release Notes

anchore/sbom-action

v0.8.0

Compare Source

Changes in v0.8.0

• Specify the Syft version to use (#​126)
• Add support for GitHub dependency snapshot API (#​201)

spf13/cobra

v1.4.0

Compare Source

Winter 2022 Release ❄️

Another season, another release!

Goodbye viper! 🐍 🚀

The core Cobra library no longer requires Viper and all of its indirect dependencies. This means that Cobra's dependency tree has been drastically thinned! The Viper dependency was included because of the cobra CLI generation tool. This tool has migrated to spf13/cobra-cli.

It's pretty unlikely you were importing and using the bootstrapping CLI tool as part of your application (after all, it's just a tool to get going with core cobra).

But if you were, replace occurrences of

"github.com/spf13/cobra/cobra"

with

"github.com/spf13/cobra-cli"

And in your go.mod, you'll want to also include this dependency:

github.com/spf13/cobra-cli v1.3.0

Again, the maintainers do not anticipate this being a breaking change to users of the core cobra library, so minimal work should be required for users to integrate with this new release. Moreover, this means the dependency tree for your application using Cobra should no longer require dependencies that were inherited from Viper. Huzzah! 🥳

If you'd like to read more

• issue: https://github.com/spf13/cobra/issues/1597
• PR: https://github.com/spf13/cobra/pull/1604

Documentation 📝

• Update Go Doc link and badge in README: https://github.com/spf13/cobra/pull/1593
• Fix to install command, now targets @latest: https://github.com/spf13/cobra/pull/1576
• Added MAINTAINERS file: https://github.com/spf13/cobra/pull/1545

Other 💭

• Bumped license year to 2022 in golden files: https://github.com/spf13/cobra/pull/1575
• Added Pixie to projects: https://github.com/spf13/cobra/pull/1581
• Updated labeler for new labeling scheme: https://github.com/spf13/cobra/pull/1613 & syntax fix: https://github.com/spf13/cobra/pull/1624

Shoutout to our awesome contributors helping to make this cobra release possible!!
@​spf13 @​marckhouzam @​johnSchnake @​jpmcb @​liggitt @​umarcor @​hiljusti @​marians @​shyim @​htroisi

stretchr/testify

v1.7.1

Compare Source

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.