deps: update module github.com/anchore/syft to v1.43.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/anchore/syft	v1.42.4 → v1.43.0

---

Release Notes

anchore/syft (github.com/anchore/syft)

v1.43.0

Compare Source

Added Features

• added deno bin classifiers [#​4677 @​rezmoss]
• Support haskell old versions [#​3237 #​4793 @​witchcraze]
• Add support for OpenLDAP binary detection [#​4768 #​4755 @​nadimz]
• Support erlang ols versions [#​3235 #​4766 @​witchcraze]

Bug Fixes

• improve redhat-release parsing fallback for RHEL clones [#​4808 @​westonsteimel]
• fix format string in search results struct [#​4775 @​willmurphyscode]
• prevent infinite recursion in Document.UnmarshalJSON with encoding/json/v2 [#​4748 @​benja-M-1]
• Syft can not complete scanning golang image [#​4686]
• javascript-package-cataloger drops entire package.json when authors/contributors/maintainers is a single string [#​4778 #​4779 @​yoav-orca]
• pnpm lock file cataloger produces unstable output [#​4648 #​4765 @​lawrence3699]
• Linux Kernel bzImage and zImage not cataloged by linux-kernel-cataloger [#​4769 #​4751 @​nadimz]
• Support istio binary (pilot-discovery, pilot-agent) alpha,beta,rc,dev version [#​4546 #​4645 @​witchcraze]
• Scanning mounted ISO: duplicate entries [#​4759]

Additional Changes

• update CPE dictionary index [#​4767 @​anchore-oss-update-bot]

(Full Changelog)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 6 additional dependencies were updated

Details:

Package	Change
github.com/anchore/clio	v0.0.0-20260302164412-3ffbbe8c23a9 -> v0.1.0
github.com/anchore/fangs	v0.0.0-20260302165001-7b3d34e1cfff -> v0.1.0
github.com/anchore/go-macholibre	v0.0.0-20260304203047-c7f47cdd7bca -> v0.1.0
github.com/anchore/go-rpmdb	v0.0.0-20260303175756-c791f00b2705 -> v0.1.0
github.com/anchore/go-sync	v0.0.0-20260305212413-e8f05f968235 -> v0.1.0
github.com/anchore/packageurl-go	v0.1.1-0.20250220190351-d62adb6e1115 -> v0.2.0