deps: update module github.com/anchore/syft to v0.98.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/anchore/syft	require	minor	v0.97.1 -> v0.98.0

---

Release Notes

anchore/syft (github.com/anchore/syft)

v0.98.0

Compare Source

Added Features

• Add binary classifiers for MySQL and MariaDB [#​2316 @​duanemay]
• Enhance redis binary classifier to support additional versions [#​2329 @​whalelines]
• Expose compact JSON and XML format configuration [#​561 #​2275 @​wagoodman]

Bug Fixes

• Fix file metadata cataloger when passed explicit coordinates [#​2370 @​wagoodman]
• hardcode xalan group ID [#​2368 @​willmurphyscode]
• logging level for parsing potential PE files [#​2367 @​kzantow]
• Use read lock in pkg.Collection [#​2341 @​wagoodman]
• add manual namespace mapping for org.springframework jars [#​2345 @​westonsteimel]
• add manual namespace mapping for org.springframework.security jars [#​2343 @​westonsteimel]
• errors are printed into the stdout in syft 0.97.1 [#​2356 #​2364 @​kzantow]
• syft some-jar.jar fails to find packages if PWD is a symlink [#​2355 #​2359 @​willmurphyscode]
• Default for recently added base path, "", disables detection of symlinked *.jar files [#​1962 #​2359 @​willmurphyscode]
• syft attest broken since 0.85.0 [#​2333 #​2337 @​wagoodman]
• Incorrect Java PURL for org.bouncycastle jars [#​2339 #​2342 @​westonsteimel]

Breaking Changes

• Remove power-user command and related catalogers [#​1419 #​2306 @​wagoodman]

Additional Changes

• Normalize cataloger configuration patterns [#​2365 @​wagoodman]
• Normalize enums to lowercase with hyphens [#​2363 @​wagoodman]

(Full Changelog)

Special Thanks

Thanks @​duanemay and @​whalelines for the enhanced binary classifier support 👍

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.