chore: bump snyk-docker-plugin to 9.18.0

[bdemeo12]

• Tests written and linted ℹ︎ — N/A (dependency + lockfile bump only, no source changes)
• Documentation written ℹ︎ — N/A
• Commit history is tidy ℹ︎

What this does

Bumps snyk-docker-plugin from ^9.6.5 to 9.18.0. 9.18.0 adds container-image provenance-attestation extraction.

Notes for the reviewer

• Dependency + lockfile bump only — no source/behavior changes in this repo.

Screenshots

N/A — dependency bump only.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Major Version Risk 🟡 [minor] The transitive dependency @snyk/docker-registry-v2-client was upgraded from version 2.24.4 to 4.0.5. While this is managed by the snyk-docker-plugin bump, major version jumps in registry clients often involve breaking changes to authentication handling or manifest parsing which can impact image pull secrets in Kubernetes environments. "version": "4.0.5",

📚 Repository Context Analyzed This review considered 6 relevant code sections from 2 files (average relevance: 0.55) package-lock.json (5 segments, lines 9209-9399) package.json (lines 1-117)

[kateeselius]

🚢