chore(deps): update Go version (#4798)

Signed-off-by: anchore-oss-update-bot <anchore-oss-update-bot@users.noreply.github.com>
Co-authored-by: anchore-oss-update-bot <anchore-oss-update-bot@users.noreply.github.com>

syft/pkg/cataloger/golang/upx.go

@@ -499,10 +499,7 @@ func decompressLZMA(compressedData []byte, uncompressedSize uint32) ([]byte, err
 	// it may be that the dictionary size was not considered properly in this code.
 	const minDictSize = 64 * 1024         // 64KB minimum
 	const maxDictSize = 128 * 1024 * 1024 // 128MB maximum
-	dictSize := max(nextPowerOf2(uncompressedSize), minDictSize)
-	if dictSize > maxDictSize {
-		dictSize = maxDictSize
-	}
+	dictSize := min(max(nextPowerOf2(uncompressedSize), minDictSize), maxDictSize)
 
 	// construct standard 13-byte LZMA header
 	header := make([]byte, 13)

syft/pkg/cataloger/javascript/parse_pnpm_lock_test.go

@@ -548,7 +548,7 @@ snapshots:
 `)
 
 	// run multiple times to catch nondeterminism
-	for i := 0; i < 10; i++ {
+	for range 10 {
 		parser := &pnpmV9LockYaml{}
 		pkgs, err := parser.Parse(9.0, lockfileV9)
 		require.NoError(t, err)
@@ -570,7 +570,7 @@ packages:
     resolution: {integrity: sha512-AAA}
 `)
 
-	for i := 0; i < 10; i++ {
+	for range 10 {
 		parser := &pnpmV6LockYaml{}
 		pkgs, err := parser.Parse(6.0, lockfileV6)
 		require.NoError(t, err)

syft/pkg/package.go

@@ -112,7 +112,7 @@ func Less(i, j Package) bool {
 			jLocations := j.Locations.ToSlice()
 			if i.Type == j.Type {
 				maxLen := max(len(jLocations), len(iLocations))
-				for l := 0; l < maxLen; l++ {
+				for l := range maxLen {
 					if len(iLocations) < l+1 || len(jLocations) < l+1 {
 						if len(iLocations) == len(jLocations) {
 							break