gha: bump anchore/sbom-action from 0.21.0 to 0.21.1

[dependabot]

Bumps anchore/sbom-action from 0.21.0 to 0.21.1.

Release notes

Sourced from anchore/sbom-action's releases.

v0.21.1

Changes in v0.21.1

• chore(deps): update Syft to v1.40.0 (#562) [[anchore-actions-token-generator[bot]](https://github.com/[anchore-actions-token-generator[bot]](https://github.com/apps/anchore-actions-token-generator))]

Commits

• 0b82b0b chore(deps): update Syft to v1.40.0 (#562)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Important

Bumps anchore/sbom-action from 0.21.0 to 0.21.1 in release.yml, updating Syft to v1.40.0.

• Workflow Update:
  • Bumps anchore/sbom-action from 0.21.0 to 0.21.1 in release.yml.
  • Updates Syft to v1.40.0 as part of the anchore/sbom-action update.
• Files Affected:
  • .github/workflows/release.yml: Updates the Generate SBOM step to use the new version of anchore/sbom-action.

^{This description was created by for 28c49aa. You can customize this summary. It will automatically update as commits are pushed.}

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
.github/workflows/release.yml	0% smaller

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to 28c49aa in 1 minute and 2 seconds. Click for details.

• Reviewed 13 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 1 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. .github/workflows/release.yml:93

• Draft comment:
  The inline comment still says '# v0.6.0', which is inconsistent with the bumped anchore/sbom-action version (v0.21.1). Consider updating or removing the comment to avoid confusion. Also, if a release tag (like v0.21.1) is available, use it instead of a commit SHA for clarity.
• Reason this comment was not posted:
  Comment was on unchanged code.

Workflow ID: wflow_o3HLHNJT1cyEs38y

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}