chore(deps): bump the dependencies group with 2 updates (#655)

Bumps the dependencies group with 2 updates: [anchore/sbom-action](https://github.com/anchore/sbom-action) and [ytanikin/pr-conventional-commits](https://github.com/ytanikin/pr-conventional-commits).


Updates `anchore/sbom-action` from 0.23.1 to 0.24.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@57aae52...e22c389)

Updates `ytanikin/pr-conventional-commits` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/ytanikin/pr-conventional-commits/releases)
- [Commits](ytanikin/pr-conventional-commits@fda730c...639145d)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ytanikin/pr-conventional-commits
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jakub <98830296+curfew-marathon@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/main.yaml

@@ -109,7 +109,7 @@ jobs:
         cache-dependency-path: './go.sum'
         check-latest: true
 
-    - uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
+    - uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
 
     - name: Run GoReleaser
       uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
@@ -158,7 +158,7 @@ jobs:
         with:
           cosign-release: "v2.6.1"
 
-      - uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
+      - uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
 
       - name: Run GoReleaser
         id: goreleaser

.github/workflows/pr-title-conventional-commit.yml

@@ -14,7 +14,7 @@ jobs:
       pull-requests: read
     steps:
       - name: PR Conventional Commit Validation
-        uses: ytanikin/pr-conventional-commits@fda730cb152c05a849d6d84325e50c6182d9d1e9 # v1.5.1
+        uses: ytanikin/pr-conventional-commits@639145d78959c53c43112365837e3abd21ed67c1 # v1.5.2
         with:
           task_types: '["feat","fix","docs","test","refactor","ci","perf","chore","revert"]'
           add_label: 'false'