fix(deps): update module github.com/anchore/grype to v0.90.0

[netic-renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/anchore/grype	require	minor	v0.89.1 -> v0.90.0

---

Release Notes

anchore/grype (github.com/anchore/grype)

v0.90.0

Compare Source

Added Features

• Match vulnerabilities by distro name when no version specified [#​2521 #​2534 @​kzantow]
• Allow DB import from a URL [#​2134 #​2532 @​wagoodman]
• Add the DB url to the JSON descriptor block [#​356 #​2529 @​wagoodman]

(Full Changelog)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[netic-renovate-bot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.24.1
github.com/anchore/syft	v1.20.0 -> v1.21.0
github.com/anchore/stereoscope	v0.0.13 -> v0.1.0
github.com/containerd/containerd	v1.7.25 -> v1.7.26
github.com/docker/cli	v27.5.1+incompatible -> v28.0.1+incompatible
github.com/klauspost/compress	v1.17.11 -> v1.18.0
github.com/opencontainers/image-spec	v1.1.0 -> v1.1.1
github.com/spf13/afero	v1.12.0 -> v1.14.0
github.com/sylabs/squashfs	v1.0.4 -> v1.0.5
modernc.org/sqlite	v1.35.0 -> v1.36.1