fix(deps): update module github.com/quay/claircore to v1.5.49

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/quay/claircore	v1.5.48 -> v1.5.49

---

Release Notes

quay/claircore (github.com/quay/claircore)

v1.5.49

Compare Source

• sbom: add SPDX decoding support

  Details

  Claircore can now make use of SPDX documents it generates. The SPDX support is currently limited to claircore-generated documents.

• logging: claircore now uses log/slog

  Details

  If users were integrating with `zlog`, they should now instead configure the `log/slog` package's `Default.`

  For additional integration, see the toolkit/log package.

• sbom: add purls to SPDX documents

  Details

  When creating SPDX documents, claircore now generates purls.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux-kflux-prd-rh02]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/quay/claircore/toolkit	v1.3.0 -> v1.4.0
golang.org/x/mod	v0.31.0 -> v0.32.0
golang.org/x/tools	v0.40.0 -> v0.41.0
modernc.org/sqlite	v1.39.1 -> v1.42.2

[app-sre-bot]

Can one of the admins verify this patch?