chore: update vulnerability expectations for new CVE discoveries (#29)

Update provider-level vulnerability counts in spec.yaml files to match
current OSV database state. New CVEs were added affecting npm/pnpm/yarn
(+1 low severity transitive), gradle-groovy (+1 high severity transitive),
and python-pip (+1 medium severity direct).

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: ruromero

scenarios/gradle-groovy/simple/spec.yaml

@@ -10,15 +10,15 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 8
-      transitive: 26
-      total: 34
+      transitive: 27
+      total: 35
       dependencies: 21
       critical: 5
-      high: 9
+      high: 10
       medium: 19
       low: 1
-      remediations: 14
-      recommendations: 115
+      remediations: 2
+      recommendations: 52
       unscanned: 0
     redhat-csaf:
       direct: 4

scenarios/npm/simple/spec.yaml

@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0

scenarios/pnpm/simple/spec.yaml

@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0

scenarios/python-pip/simple/spec.yaml

@@ -9,31 +9,31 @@ stack_analysis:
     transitive: 9
   rhtpa:
     osv-github:
-      direct: 2
+      direct: 3
       transitive: 0
-      total: 2
+      total: 3
       dependencies: 1
       critical: 0
       high: 0
-      medium: 2
+      medium: 3
       low: 0
       remediations: 0
       recommendations: 0
-      unscanned: 0 
+      unscanned: 0
 component_analysis:
   scanned:
     total: 3
     direct: 3
     transitive: 0
   rhtpa:
     osv-github:
-      direct: 2
+      direct: 3
       transitive: 0
-      total: 2
+      total: 3
       dependencies: 1
       critical: 0
       high: 0
-      medium: 2
+      medium: 3
       low: 0
       remediations: 0
       recommendations: 0

scenarios/yarn-berry/simple/spec.yaml

@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0

scenarios/yarn-classic/simple/spec.yaml

@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0