chore(deps): update module osv-scanner to v2.3.8

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
osv-scanner	v2.3.7 → v2.3.8

---

Release Notes

google/osv-scanner (osv-scanner)

v2.3.8

Compare Source

Fixes:

• Fix installation issues with go install due to dependency conflicts (downgrade containerd/cgroups/v3, moby/buildkit and opencontainers/runtime-spec).
• Bug #​2762 Skip packages with short commit hashes instead of aborting scan.
• Bug #​2781 Secure file path handling with os.OpenRoot.
• Bug #​2766 Correct typos across docs, configs, and Go source.

Misc:

• Update osv-scalibr to v0.4.6-0.20260504042738-9293bfa4f86f.
• Remove replace directive (#​2782).
• Update contributing.md (#​2779).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.