chore(deps): update module github.com/quay/claircore/toolkit to v1.4.0

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/quay/claircore/toolkit	v1.3.0 -> v1.4.0

---

Release Notes

quay/claircore (github.com/quay/claircore/toolkit)

v1.4.0

Compare Source

Alpine

• ece632e: ingest alpine vulnerabilities as type SOURCE (#​615)
  • #​615
• c52b6e3: use tarfs in scanners
• 79a61e2: move test fixtures to files

Build(Deps)

• dd3b32c: bump docker/build-push-action from 2 to 3
• 3af44fd: bump docker/setup-buildx-action from 1 to 2
• 3b83f2e: bump docker/login-action from 1 to 2
• 3a4c69b: bump peter-evans/create-pull-request from 4.0.2 to 4.0.3
• 8901d07: bump actions/cache from 3.0.1 to 3.0.2
• efa8e87: bump peter-evans/create-pull-request from 4.0.1 to 4.0.2
• 93d74a6: bump peter-evans/create-pull-request from 3.14.0 to 4.0.1
• 2df3f9f: bump actions/cache from 2 to 3.0.1

Chore

• 1d16410: v1.4.0 changelog bump

Claircore

• 635aab5: use tarfs and expand Reader return

Contrib

• 8072112: Add Release Alpine 3.16 Alpine 3.16 is not supported yet

Defaults

• 5f92e96: update defaults
• 44117e6: update defaults

Dockerfile

• 6d3940b: add quay dockerfile tests

Dpkg

• 604fd61: use tarfs in scanner

Go.Mod

• c28a174: update minimum go version

Indexer

• 5994349: fix indexer deduplication

Java

• 00e2239: use tarfs in scanners

Libindex

• 44aeb93: fix pool DSN parameter handling
• d12ada0: update defaults

Libvuln

• 6243056: fix pool DSN parameter handling

Matcher

• 4590fd6: fail vuln report on matcher error
  • Fixes #​593

Osrelease

• 559487d: use tarfs in scanner
• d51f97d: export Parse function

Osv

• 6a1787e: removed trailing dot in file path
  • #​619
• 3e15a4a: osv updater

Periodic

• 2f7d621: add package for periodic tests

Pkgconfig

• cf2a86a: use tarfs in scanner

Postgres

• 4655883: update metrics on GetEnrichment

Python

• 865069f: use tarfs in scanners

Rhcc

• 839adc6: add machinery for the Red Hat Container Catalog
  • #​513

Rhctag

• aaa4de6: add package for Red Hat Container versions

Rhel

• c38558a: normalize serverity to all-lower strings
• 8f021ab: use tarfs in scanner

Rpm

• b2d722e: tarfs todo

Tarfs

• 361a2ca: package for implementing fs.FS over a tar

Ubuntu

• ec67a8f: update releaseToDist to correct cosmic error (#​600)
  • #​600

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[app-sre-bot]

Can one of the admins verify this patch?