fix(deps): update dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ginkgo	v2.30.0 → v2.31.0
github.com/onsi/ginkgo/v2	v2.30.0 → v2.31.0
github.com/onsi/gomega	v1.41.0 → v1.42.0
osv-scanner	v2.3.8 → v2.4.0

---

Release Notes

onsi/ginkgo (ginkgo)

v2.31.0

Compare Source

2.31.0

Add a bunch of Claude Skills via the marketplace:

/plugin marketplace add onsi/ginkgo
/plugin install ginkgo@ginkgo

onsi/gomega (github.com/onsi/gomega)

v1.42.0

Compare Source

1.42.0

Add a set of Claude skill as a marketplace plugin

google/osv-scanner (osv-scanner)

v2.4.0

Compare Source

Features:

• Feature #​2815 Add support for the CycloneDX 1.7 specification (bumps cyclonedx-go to v0.11.0).
• Feature #​2799 Enable .csproj and Central Package Management (nugetcpm) source scanning plugins by default.
• Feature #​2871 Extract and parse Alpine OS distro version (e.g. Alpine:v3.17, Alpine:edge) from PURL distro qualifiers to scan packages under their respective Alpine ecosystems.
• Feature #​2801 Enable the swift/packageresolved plugin by default to support SwiftURL vulnerability scans.
• Feature #​2666 Add a Docker-based variant of the pre-commit hook in .pre-commit-hooks.yaml to avoid local compilation.
• Feature #​2637 Add a new configuration setting ScanGoModVersion (disabled by default) to avoid parsing toolchain version directives directly from go.mod, preventing misleading warnings.
• Feature #​2772 Scan container images built with Canonical Chisel by enabling the os/chisel extractor plugin.

Fixes:

• Bug #​2807 Sanitize package name, source, and version fields in the vertical output format to prevent GitHub Actions workflow command injection vulnerabilities from crafted lock files.
• Bug #​2876 Improve HTML scan report usability by supporting standard click modifiers (Ctrl/Cmd/middle click) to open vulnerabilities in new tabs, and preserving scroll position when switching tabs.
• Bug #​2783 Keep transitive dependency scanning enabled when specifying the --offline-vulnerabilities flag.
• Bug #​2808 Deduplicate equivalent OSV matcher requests before executing bulk queries to reduce API overhead.
• Bug #​2837 Prevent panics during offline matcher scans (e.g. on unsupported GitHub Actions ecosystem) by avoiding parsing errors when checking version ranges.
• Bug #​2836 Ensure the scanner returns an exit code of 0 when --help or -h is explicitly requested.

Misc:

• Update Go version to 1.26.4.
• Update osv-scalibr to v0.4.6-0.20260612031204-164402d9140e.
• Tag built Docker and GitHub Action images with the major version (e.g. :v2) to allow users to pin to a major version (#​2857).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 5am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

Coverage Report for CI Build 28084153505

Warning

Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes.
Quick fix: rebase this PR. Learn more →

Coverage remained the same at 27.101%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	476
Covered Lines:	129
Line Coverage:	27.1%
Coverage Strength:	0.72 hits per line

---

💛 - Coveralls

[trevex]

lgtm