What and why?

This PR bumps ajv-formats to get latest version of ajv. Closes https://github.com/DataDog/datadog-ci/security/dependabot/88

How?

Run yarn up ajv-formats.

This major version is due to a breaking change related to time formats:

• strictTime is no longer an option in addFormats()
• time and date-time formats now require a timezone, so they became strict by default
• iso-time and iso-date-time formats were added, with optional timezone

I added missing unit tests to ensure we don't break the current behavior.

• In sbom we have validateFormats: false, so date-time values without timezone (Z or +XXX) are ignored.
• In sarif we don't have it, so this PR adds validateFormats: false to avoid a breaking change when bumping ajv-formats so we keep ignoring date-time values without timezone.

While we could change "format": "date-time" to "format": "iso-date-time" in the schema files, this would diverge from official schemas.

Review checklist

• Feature or bugfix MUST have appropriate tests (unit, integration)