chore(deps): update module github.com/anchore/syft/cmd/syft to v1.38.0

[bakito-renovate]

This PR contains the following updates:

Package	Update	Change
github.com/anchore/syft/cmd/syft	minor	v1.37.0 -> v1.38.0

---

Release Notes

anchore/syft (github.com/anchore/syft/cmd/syft)

v1.38.0

Compare Source

Added Features

• add support for cataloging GGUF models [#​4184 #​4279 @​spiffcs]
• Support scanning a list of CPEs [#​3890 #​4207 @​chovanecadam]
• Syft does not detect Elixir binary on system [#​4333 #​4334 @​rezmoss]

Bug Fixes

• Support extras statements in Python PDM cataloger [#​4352 @​wagoodman]
• Preserve --from argument order [#​4350 @​wagoodman]
• SBOM generated by Syft 1.28 contains license elements missing id or name (causing CycloneDX parser error) [#​4363]
• empty PURL output in dependency snapshot format breaks sbom-action [#​4311]
• Interface includes constraint elements, can only be used in type parameters [#​4346]
• Upgrade github.com/nwaples/rardecode@​v1.1.3 to 2.2.1 [#​4338]
• Upgrade to Golang 1.25.4 [#​4341]

Additional Changes

• migrate syft to use mholt/archives instead of anchore fork [#​4029 @​Rupikz]
• Add license enrichment from pypi to python packages [#​4295 @​timols]
• license file search [#​4327 @​kzantow]

(Full Changelog)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[coveralls]

Pull Request Test Coverage Report for Build 19622898620

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 58.051%

---

Totals
Change from base Build 19527014019:	0.0%
Covered Lines:	1424
Relevant Lines:	2453

---

💛 - Coveralls