Update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/sbom-action	action	patch	v0.24.0 → v0.24.2
baptiste0928/cargo-install	action	minor	v3.4.0 → v3.5.0
cargo-outdated	uses-with	minor	0.17.0 → 0.19.0
dtolnay/rust-toolchain (changelog)	action	digest	4360b52 → 6bed076

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.24.2

Compare Source

Added Features

• bump eslint from 10.8.1 to 10.9.0 [#​724 @​dependabot]

Additional Changes

• add makefile target to bump syft [#​620 @​willmurphyscode]
• update zizmor workflow triggers [#​624 @​wagoodman]
• require zizmor security events [#​621 @​wagoodman]

(Full Changelog)

v0.24.1

Compare Source

baptiste0928/cargo-install (baptiste0928/cargo-install)

v3.5.0

Compare Source

Added

• Multiple crates can now be installed in a single action run by using the crate@version
  syntax in the crate input. (issue #​36)

Changed

• Updated dependencies.

kbknapp/cargo-outdated (cargo-outdated)

v0.19.0

Compare Source

Changes

• MSRV is now 1.88.0

Maintenance

• Publish ARM & x64 binaries on all platforms by @​graelo in #​426
• chore(deps): bump rand from 0.9.0 to 0.9.4 by @​dependabot[bot] in #​435
• chore(deps): bump bytes from 1.9.0 to 1.11.1 by @​dependabot[bot] in #​428
• chore(deps): bump tar from 0.4.43 to 0.4.45 by @​dependabot[bot] in #​432
• fix(registry): handle Poll::Pending from sparse registry source queries by @​rconnol in #​431
• bump to cargo 0.91, MSRV 1.88, edition 2024 by @​davidhewitt in #​437

v0.18.0

Compare Source

Changes

• MSRV is now 1.84.0

Maintenance

• fix: deal more gracefully with private registries by @​jrudolph in #​391
• feat: bump to use libgit2 1.9 by @​chenrui333 in #​417
• chore(deps): bump crossbeam-channel from 0.5.13 to 0.5.15 by @​dependabot[bot] in #​418
• chore(deps): bump tracing-subscriber from 0.3.19 to 0.3.20 by @​dependabot[bot] in #​421
• fix: support sparse registries by @​robjtede in #​422

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between day 19 and 20 of the month (* * 19-20 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.