chore(deps): bump anchore/scan-action from 4 to 5 (#5198)

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from
4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/scan-action/releases">anchore/scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>New in scan-action v5.0.0</h2>
<ul>
<li>chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li>feat: short-lived grype-db cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)
[<a href="https://github.com/kzantow">kzantow</a>]
Note: with this release grype is no longer installed on
<code>$PATH</code>. We suspect the changes here could break a number of
users of the action who have learned to expect Grype be installed on
<code>$PATH</code>.</li>
</ul>
<h2>v4.1.2</h2>
<h2>New in scan-action v4.1.2</h2>
<ul>
<li>Update Grype to v0.80.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/358">#358</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v4.1.1</h2>
<h2>New in scan-action v4.1.1</h2>
<ul>
<li>chore(deps): update Grype to v0.79.6 (<a
href="https://redirect.github.com/anchore/scan-action/issues/352">#352</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>Document grype-version parameter (<a
href="https://redirect.github.com/anchore/scan-action/issues/319">#319</a>)
[<a href="https://github.com/vprivat-ads">vprivat-ads</a>]</li>
</ul>
<h2>v4.1.0</h2>
<h2>New in scan-action v4.1.0</h2>
<ul>
<li>chore(deps): update Grype to v0.79.3 (<a
href="https://redirect.github.com/anchore/scan-action/issues/341">#341</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e08a16a68"><code>4e08a16</code></a>
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/anchore/scan-action/issues/386">#386</a>)</li>
<li><a
href="a18ff2d1f2"><code>a18ff2d</code></a>
add release docs (<a
href="https://redirect.github.com/anchore/scan-action/issues/388">#388</a>)</li>
<li><a
href="c6c022e588"><code>c6c022e</code></a>
chore: add changelog ignore (<a
href="https://redirect.github.com/anchore/scan-action/issues/387">#387</a>)</li>
<li><a
href="65953694f6"><code>6595369</code></a>
chore: remove blocking workflow (<a
href="https://redirect.github.com/anchore/scan-action/issues/385">#385</a>)</li>
<li><a
href="11237475cc"><code>1123747</code></a>
chore(deps-dev): bump eslint from 9.11.1 to 9.12.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/381">#381</a>)</li>
<li><a
href="99311beeba"><code>99311be</code></a>
chore: update sha to correct pin for workflow actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/384">#384</a>)</li>
<li><a
href="2491ad68a9"><code>2491ad6</code></a>
chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)</li>
<li><a
href="2a3918e906"><code>2a3918e</code></a>
chore: optionally cache grype-db in actions cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)</li>
<li><a
href="a957c8db22"><code>a957c8d</code></a>
feat: update versions for actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/380">#380</a>)</li>
<li><a
href="54efbc6a14"><code>54efbc6</code></a>
chore(deps-dev): bump tslib from 2.6.3 to 2.7.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/359">#359</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/scan-action/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/scan-action&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/grype.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
-    - uses: anchore/scan-action@v4
+    - uses: anchore/scan-action@v5
       with:
         path: "."
         fail-build: true