osv-scanner 2.3.6

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

### Features:

Feature #2658 Support regex matching for package name overrides.
Feature #2510 Scan Homebrew inventory using git repository metadata.

Fixes:

Bug #2750 Sanitize \r/\n in default/table/vertical output to prevent GitHub Actions workflow command injection.
Bug #2641 Correctly output packages from osv-scanner.json source in spdx format.
Bug #2729 Increase color contrast of vulnerability stats.
Bug #2664 Remove second newline at end of vertical output.
Bug #2669 Sanitize \r in gh-annotations to prevent GitHub Actions workflow command injection.

Misc:

Update osv-scalibr to v0.4.6-0.20260428235529-7791e288d6c1.
Update Go version to 1.26.2 (#2706).

New Contributors

@djvirus9 made their first contribution in   output: sanitize \r in gh-annotations to prevent GitHub Actions workflow command injection google/osv-scanner#2669
@jonjensen made their first contribution in docs: Correct typos in --help and CONTRIBUTING.md google/osv-scanner#2695
@dosisod made their first contribution in fix: increase color contrast of vulnerability stats google/osv-scanner#2729
@ibondarenko1 made their first contribution in fix: correct misleading docstrings in scalibrextract extractors google/osv-scanner#2748
@sjhddh made their first contribution in docs: fix broken anchors and missing word in README google/osv-scanner#2744
@Mananshah237 made their first contribution in fix: correctly output packages from osv-scanner.json source in spdx format google/osv-scanner#2641
@majiayu000 made their first contribution in feat: support regex matching for package name overrides google/osv-scanner#2658
@hits313 made their first contribution in fix: sanitize \r/\n in default/table/vertical output to prevent GitHub Actions workflow command injection google/osv-scanner#2750

Full Changelog: google/osv-scanner@v2.3.5...v2.3.6

View the full release notes at https://github.com/google/osv-scanner/releases/tag/v2.3.6.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.