chore(deps): bump the common group across 1 directory with 2 updates

Bumps the common group with 2 updates in the / directory: [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) and [mvdan.cc/sh/v3](https://github.com/mvdan/sh).


Updates `github.com/aquasecurity/trivy` from 0.55.1-0.20240920045012-1f9fc13da4a1 to 0.56.2
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/v0.56.2/CHANGELOG.md)
- [Commits](https://github.com/aquasecurity/trivy/commits/v0.56.2)

Updates `mvdan.cc/sh/v3` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.8.0...v3.9.0)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: mvdan.cc/sh/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
...

Signed-off-by: dependabot[bot] <[email protected]>

go.mod

@@ -5,15 +5,15 @@ go 1.22.0
 toolchain go1.22.2
 
 require (
- github.com/aquasecurity/trivy v0.55.1-0.20240920045012-1f9fc13da4a1
+ github.com/aquasecurity/trivy v0.56.2
  github.com/liamg/iamgo v0.0.9
  github.com/liamg/memoryfs v1.6.0
- github.com/open-policy-agent/opa v0.67.1
+ github.com/open-policy-agent/opa v0.68.1-0.20240903211041-76f7038ea2d1
  github.com/owenrumney/squealer v1.2.4
  github.com/samber/lo v1.47.0
  github.com/stretchr/testify v1.9.0
  gopkg.in/yaml.v3 v3.0.1
- mvdan.cc/sh/v3 v3.8.0
+ mvdan.cc/sh/v3 v3.9.0
 )
 
 require (
@@ -31,13 +31,13 @@ require (
  github.com/cenkalti/backoff/v4 v4.3.0 // indirect
  github.com/cespare/xxhash v1.1.0 // indirect
  github.com/cespare/xxhash/v2 v2.3.0 // indirect
- github.com/cloudflare/circl v1.3.7 // indirect
- github.com/containerd/containerd v1.7.21 // indirect
+ github.com/cloudflare/circl v1.3.8 // indirect
+ github.com/containerd/containerd v1.7.22 // indirect
  github.com/containerd/errdefs v0.1.0 // indirect
  github.com/containerd/log v0.1.0 // indirect
  github.com/containerd/platforms v0.2.1 // indirect
- github.com/containerd/typeurl/v2 v2.1.1 // indirect
- github.com/cyphar/filepath-securejoin v0.2.4 // indirect
+ github.com/containerd/typeurl/v2 v2.2.0 // indirect
+ github.com/cyphar/filepath-securejoin v0.3.1 // indirect
  github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
  github.com/dgraph-io/badger/v3 v3.2103.5 // indirect
  github.com/dgraph-io/ristretto v0.1.1 // indirect
@@ -77,7 +77,7 @@ require (
  github.com/mattn/go-runewidth v0.0.15 // indirect
  github.com/mitchellh/go-wordwrap v1.0.1 // indirect
  github.com/mitchellh/mapstructure v1.5.0 // indirect
- github.com/moby/buildkit v0.15.2 // indirect
+ github.com/moby/buildkit v0.16.0 // indirect
  github.com/moby/docker-image-spec v1.3.1 // indirect
  github.com/moby/locker v1.0.1 // indirect
  github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
@@ -89,7 +89,7 @@ require (
  github.com/pjbgf/sha1cd v0.3.0 // indirect
  github.com/pkg/errors v0.9.1 // indirect
  github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
- github.com/prometheus/client_golang v1.20.1 // indirect
+ github.com/prometheus/client_golang v1.20.2 // indirect
  github.com/prometheus/client_model v0.6.1 // indirect
  github.com/prometheus/common v0.55.0 // indirect
  github.com/prometheus/procfs v0.15.1 // indirect
@@ -125,19 +125,19 @@ require (
  go.opentelemetry.io/proto/otlp v1.3.1 // indirect
  go.uber.org/automaxprocs v1.5.3 // indirect
  go.uber.org/multierr v1.11.0 // indirect
- golang.org/x/crypto v0.26.0 // indirect
+ golang.org/x/crypto v0.27.0 // indirect
  golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa // indirect
- golang.org/x/mod v0.20.0 // indirect
- golang.org/x/net v0.28.0 // indirect
+ golang.org/x/mod v0.21.0 // indirect
+ golang.org/x/net v0.29.0 // indirect
  golang.org/x/sync v0.8.0 // indirect
- golang.org/x/sys v0.23.0 // indirect
- golang.org/x/text v0.17.0 // indirect
+ golang.org/x/sys v0.25.0 // indirect
+ golang.org/x/text v0.18.0 // indirect
  golang.org/x/time v0.6.0 // indirect
  golang.org/x/tools v0.24.0 // indirect
  golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
  google.golang.org/genproto/googleapis/api v0.0.0-20240701130421-f6361c86f094 // indirect
  google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094 // indirect
- google.golang.org/grpc v1.65.0 // indirect
+ google.golang.org/grpc v1.66.0 // indirect
  google.golang.org/protobuf v1.34.2 // indirect
  gopkg.in/ini.v1 v1.67.0 // indirect
  gopkg.in/warnings.v0 v0.1.2 // indirect