chore(deps): update all dependencies (patch only)

[stackable-bot]

This PR contains the following updates:

Package	Type	Update	Change
EmbarkStudios/cargo-deny-action	action	patch	v1.6.2 -> v1.6.3
MarkupSafe (changelog)		patch	==2.1.3 -> ==2.1.5
Swatinem/rust-cache	action	patch	v2.7.1 -> v2.7.3
actions/checkout	action	patch	v4.1.1 -> v4.1.4
anchore/sbom-action	action	patch	v0.15.5 -> v0.15.11

---

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

v1.6.3: Release 1.6.3 - cargo-deny 0.14.21

Compare Source

Fixed

• PR#643 resolved #​629 by making the hosted git (github, gitlab, bitbucket) org/user name comparison case-insensitive. Thanks @​pmnlla!
• PR#649 fixed an issue where depending on the same crate multiple times by using different cfg()/triple targets could cause features to be resolved incorrectly and thus crates to be not pulled into the graph used for checking.

[0.14.20] - 2024-03-23

Fixed

• PR#642 resolved #​641 by pinning gix-transport (and its unique dependencies) to 0.41.2 as a workaround for cargo install not using the lockfile. See this issue for more information.

Swatinem/rust-cache (Swatinem/rust-cache)

v2.7.3

Compare Source

• Work around upstream problem that causes cache saving to hang for minutes.

Full Changelog: Swatinem/rust-cache@v2.7.2...v2.7.3

v2.7.2

Compare Source

What's Changed

• Update action runtime to node20 by @​rhysd in https://github.com/Swatinem/rust-cache/pull/175
• Only key by Cargo.toml and Cargo.lock files of workspace members by @​max-heller in https://github.com/Swatinem/rust-cache/pull/180

New Contributors

• @​rhysd made their first contribution in https://github.com/Swatinem/rust-cache/pull/175
• @​max-heller made their first contribution in https://github.com/Swatinem/rust-cache/pull/180

Full Changelog: Swatinem/rust-cache@v2.7.1...v2.7.2

actions/checkout (actions/checkout)

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

anchore/sbom-action (anchore/sbom-action)

v0.15.11

Compare Source

Changes in v0.15.11

• chore(deps): update Syft to v1.3.0 (#​456) [anchore-actions-token-generator]
• chore: remove outdated snapshot workflow (#​457) [spiffcs]
• fix: don't pass in a separate env. This makes it impossible to pass env vars via the action context to syft. (#​455) [iNoahNothing]

v0.15.10

Compare Source

Changes in v0.15.10

• Update Syft to v1.1.0 (#​454)
• Bump Node to v20 on download-syft/publish-sbom actions (#​448) [ViacheslavKudinov]

v0.15.9

Compare Source

Changes in v0.15.9

• reduce syft debug level (#​446) [kzantow]
• update Syft to v0.105.0 (#​442) [anchore-actions-token-generator]

v0.15.8

Compare Source

Changes in v0.15.8

• Update Syft to v0.103.1 (#​441) [anchore-actions-token-generator]

v0.15.7

Compare Source

Changes in v0.15.7

• chore: migrate action to use node v20.11.0 (Iron) FROM node v16.x.x (#​440) [spiffcs]

v0.15.6

Compare Source

Changes in v0.15.6

• chore(deps): update Syft to v0.102.0 (#​438) [anchore-actions-token-generator]

---

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.