Update module osv-scanner to v2.3.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
osv-scanner	v2.3.5 → v2.3.7

---

Release Notes

google/osv-scanner (osv-scanner)

v2.3.7

Compare Source

Fixes:

• Fix installation issues with go install due to dependency conflicts (downgrade containerd/cgroups/v3, moby/buildkit and opencontainers/runtime-spec).

Misc:

• Update osv-scalibr to v0.4.6-0.20260504042738-9293bfa4f86f.

v2.3.6

Compare Source

Features:

• Feature #​2658 Support regex matching for package name overrides.
• Feature #​2510 Scan Homebrew inventory using git repository metadata.

Fixes:

• Bug #​2750 Sanitize \r/\n in default/table/vertical output to prevent GitHub Actions workflow command injection.
• Bug #​2641 Correctly output packages from osv-scanner.json source in spdx format.
• Bug #​2729 Increase color contrast of vulnerability stats.
• Bug #​2664 Remove second newline at end of vertical output.
• Bug #​2669 Sanitize \r in gh-annotations to prevent GitHub Actions workflow command injection.

Misc:

• Update osv-scalibr to v0.4.6-0.20260428235529-7791e288d6c1.
• Update Go version to 1.26.2 (#​2706).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.