chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#…

…129)

Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](go-jose/go-jose@v4.0.4...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#128)

Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump github.com/aquasecurity/trivy from 0.58.2 to 0.59.1 (…

…#126)

* chore(deps): bump github.com/aquasecurity/trivy from 0.58.2 to 0.59.1

Bumps [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) from 0.58.2 to 0.59.1.
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/v0.59.1/CHANGELOG.md)
- [Commits](aquasecurity/trivy@v0.58.2...v0.59.1)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* bump: Golang alpine base docker image

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: André Meira <[email protected]>

chore(deps): bump golang.org/x/mod from 0.22.0 to 0.23.0 (#125)

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.22.0 to 0.23.0.
- [Commits](golang/mod@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: André Meira <[email protected]>

tests: Add new expected vulnerabilities to test results

chore(deps): bump github.com/samber/lo from 1.49.0 to 1.49.1 (#123)

Bumps [github.com/samber/lo](https://github.com/samber/lo) from 1.49.0 to 1.49.1.
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.49.0...v1.49.1)

---
updated-dependencies:
- dependency-name: github.com/samber/lo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

tests: Add new expected vulnerabilities to test results (#122)

chore(deps): bump github.com/samber/lo from 1.47.0 to 1.49.0 (#121)

Bumps [github.com/samber/lo](https://github.com/samber/lo) from 1.47.0 to 1.49.0.
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.47.0...v1.49.0)

---
updated-dependencies:
- dependency-name: github.com/samber/lo
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump github.com/aquasecurity/trivy from 0.58.1 to 0.58.2 (…

…#120)

Bumps [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) from 0.58.1 to 0.58.2.
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/v0.58.2/CHANGELOG.md)
- [Commits](aquasecurity/trivy@v0.58.1...v0.58.2)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

clean: Unencode BOM ref and PURL for components in SBOM files [TAROT-…

…3083]

* clean: Unencode BOM ref and PURL for components in SBOM files [TAROT-3083]

* test: Ensure correct order and values before comparison [TAROT-3083]
Without this the test was flaky.