Skip to content

[pull] main from trunk-io:main#3

Open
pull[bot] wants to merge 176 commits into
dragonfish:mainfrom
trunk-io:main
Open

[pull] main from trunk-io:main#3
pull[bot] wants to merge 176 commits into
dragonfish:mainfrom
trunk-io:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 25, 2024 •
edited
Loading

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#106)
d2ee8e0 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- buf-lint 1.32.0 → 1.32.1
- checkov 3.2.95 → 3.2.106
- markdown-link-check 3.11.2 → 3.12.2
- pylint 3.2.0 → 3.2.2
- renovate 37.368.4 → 37.374.3
- ruff 0.4.4 → 0.4.5
- trivy 0.51.1 → 0.51.2

1 tool was upgraded:

- gt 1.3.4 → 1.3.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@pull pull Bot added ⤵️ pull merge-conflict Resolve conflicts manually labels May 25, 2024
dependabot Bot and others added 27 commits May 28, 2024 10:27
@dependabot
Bump the dependencies group with 2 updates (#107)
73922ae 
Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.25.5 to 3.25.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<h2>3.25.1 - 17 Apr 2024</h2>
<ul>
<li>We are rolling out a feature in April/May 2024 that improves the
reliability and performance of analyzing code when analyzing a compiled
language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2235">#2235</a></li>
<li>Fix a bug where the <code>init</code> Action would fail if
<code>--overwrite</code> was specified in
<code>CODEQL_ACTION_EXTRA_OPTIONS</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/2245">#2245</a></li>
</ul>
<h2>3.25.0 - 15 Apr 2024</h2>
<ul>
<li>
<p>The deprecated feature for extracting dependencies for a Python
analysis has been removed. <a
href="https://redirect.github.com/github/codeql-action/pull/2224">#2224</a></p>
<p>As a result, the following inputs and environment variables are now
ignored:</p>
<ul>
<li>The <code>setup-python-dependencies</code> input to the
<code>init</code> Action</li>
<li>The
<code>CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION</code>
environment variable</li>
</ul>
<p>We recommend removing any references to these from your workflows.
For more information, see the release notes for CodeQL Action v3.23.0
and v2.23.0.</p>
</li>
<li>
<p>Automatically overwrite an existing database if found on the
filesystem. <a
href="https://redirect.github.com/github/codeql-action/pull/2229">#2229</a></p>
</li>
<li>
<p>Bump the minimum CodeQL bundle version to 2.12.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2232">#2232</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9fdb3e49720b44c48891d036bb502feb25684276"><code>9fdb3e4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2300">#2300</a>
from github/update-v3.25.6-63d519c0a</li>
<li><a
href="https://github.com/github/codeql-action/commit/00792ab1e0a5e45d2ff0c2426424bf7044bb27d0"><code>00792ab</code></a>
Update changelog for v3.25.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d519c0ae6a4b739e3377a517400c352a7d829b"><code>63d519c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2295">#2295</a>
from github/update-bundle/codeql-bundle-v2.17.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d9161ca1ca47cada43d1520c3ee53b96d4c31b3"><code>0d9161c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2293">#2293</a>
from github/henrymercer/update-build-mode-autobuild-...</li>
<li><a
href="https://github.com/github/codeql-action/commit/e9e27290e9f6fb2125c88320c1c8cfde73daa118"><code>e9e2729</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/de1ac31508c6bbe87b7dda97b8eeb62817061fc4"><code>de1ac31</code></a>
Update default bundle to codeql-bundle-v2.17.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/a57c67b89589d2d13d5ac85a9fc4679c7539f94c"><code>a57c67b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2286">#2286</a>
from github/koesie10/ghec-dr-db-upload</li>
<li><a
href="https://github.com/github/codeql-action/commit/b7ef64ecb1a32c28cb40d1d748bafd2141ad3f7a"><code>b7ef64e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2294">#2294</a>
from github/dependabot/npm_and_yarn/npm-d3285d5234</li>
<li><a
href="https://github.com/github/codeql-action/commit/e54dea297aa0b91cffca529f0b38a8d62d27e867"><code>e54dea2</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/3b42294f03049609faa22c47773030fff8acc188"><code>3b42294</code></a>
Bump the npm group across 1 directory with 4 updates</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/b7cec7526559c32f1616476ff32d17ba4c59b2d6...9fdb3e49720b44c48891d036bb502feb25684276">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.14 to 1.1.15
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.15</h2>
<h2>What's Changed</h2>
<ul>
<li>Adds inputs/outputs to the upgrade action (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/241">#241</a>)</li>
<li>Attempts to install the correct pnpm version in setup-ci action(<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/243">#243</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.1.14...v1.1.15">https://github.com/trunk-io/trunk-action/compare/v1.1.14...v1.1.15</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/f6c5f1b90503c30e02059667dbc247f2257b63c5"><code>f6c5f1b</code></a>
fix: attempt to install specified pnpm version (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/243">#243</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/d5b1b61d0beee562512f530a278b6a2931fba857"><code>d5b1b61</code></a>
Add inputs/outputs to upgrade action (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/241">#241</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/4a499158a03219a26d8fd4655b2a254dd57d2970"><code>4a49915</code></a>
Upgrade trunk to 1.22.1 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/242">#242</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/bd686325615e9cf5a4ef98372ba94a472f9b5238...f6c5f1b90503c30e02059667dbc247f2257b63c5">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#108)
9aae6bc 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- buildifier 7.1.1 → 7.1.2
- renovate 37.374.3 → 37.376.0
- semgrep 1.73.0 → 1.74.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#109)
f05632d 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

11 linters were upgraded:

- actionlint 1.7.0 → 1.7.1
- buf-lint 1.32.1 → 1.32.2
- cfnlint 0.87.3 → 0.87.4
- checkov 3.2.106 → 3.2.114
- markdownlint 0.40.0 → 0.41.0
- osv-scanner 1.7.3 → 1.7.4
- renovate 37.376.0 → 37.381.7
- ruff 0.4.5 → 0.4.6
- stylelint 16.5.0 → 16.6.1
- trivy 0.51.2 → 0.51.4
- trufflehog 3.76.3 → 3.77.0

2 tools were upgraded:

- gh 2.49.2 → 2.50.0
- gt 1.3.5 → 1.3.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#111)
94f1f90 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- checkov 3.2.114 → 3.2.120
- renovate 37.381.7 → 37.382.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.25.6 to 3.25.7 in the dependencies g…
ecfa72f 
…roup (#110)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.6 to 3.25.7
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<h2>3.25.1 - 17 Apr 2024</h2>
<ul>
<li>We are rolling out a feature in April/May 2024 that improves the
reliability and performance of analyzing code when analyzing a compiled
language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2235">#2235</a></li>
<li>Fix a bug where the <code>init</code> Action would fail if
<code>--overwrite</code> was specified in
<code>CODEQL_ACTION_EXTRA_OPTIONS</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/2245">#2245</a></li>
</ul>
<h2>3.25.0 - 15 Apr 2024</h2>
<ul>
<li>
<p>The deprecated feature for extracting dependencies for a Python
analysis has been removed. <a
href="https://redirect.github.com/github/codeql-action/pull/2224">#2224</a></p>
<p>As a result, the following inputs and environment variables are now
ignored:</p>
<ul>
<li>The <code>setup-python-dependencies</code> input to the
<code>init</code> Action</li>
<li>The
<code>CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION</code>
environment variable</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f079b8493333aace61c81488f8bd40919487bd9f"><code>f079b84</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2317">#2317</a>
from github/update-v3.25.7-a095bf2a1</li>
<li><a
href="https://github.com/github/codeql-action/commit/e1a42688dbe6ce54cc33e2b6b65fc02abdb09762"><code>e1a4268</code></a>
Update changelog for v3.25.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/a095bf2a16b83cb3b52e6adba696c70f41e82864"><code>a095bf2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2313">#2313</a>
from github/revert-2312-update-bundle/codeql-bundle-...</li>
<li><a
href="https://github.com/github/codeql-action/commit/bbd4e19f51d83bb98b025b83b255e44eaa1a1e7f"><code>bbd4e19</code></a>
Revert &quot;Update default bundle to 2.17.4&quot;</li>
<li><a
href="https://github.com/github/codeql-action/commit/9ab5d16a3df4885b74bb18ab349bcc6c253ee3e0"><code>9ab5d16</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2312">#2312</a>
from github/update-bundle/codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/028346e1ff2c03a735c6527b84f0a3179f2092b0"><code>028346e</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/5fe08473f8b98c47563f401bed5134a59ce06dee"><code>5fe0847</code></a>
Update default bundle to codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/9550da953dd3b29aedf76cd635101e48eae5eebd"><code>9550da9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2311">#2311</a>
from github/henrymercer/pack-missing-auth-config-error</li>
<li><a
href="https://github.com/github/codeql-action/commit/6548a4d65ce2414afca98f8368cabfff0541ba18"><code>6548a4d</code></a>
Add configuration error for missing auth to package registry</li>
<li><a
href="https://github.com/github/codeql-action/commit/7927df07e268eafe499c344cd19f8bf82f4f19f7"><code>7927df0</code></a>
Bump micromatch from 4.0.5 to 4.0.7 in the npm group (<a
href="https://redirect.github.com/github/codeql-action/issues/2310">#2310</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/9fdb3e49720b44c48891d036bb502feb25684276...f079b8493333aace61c81488f8bd40919487bd9f">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.6&new-version=3.25.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#112)
aad37db 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- checkov 3.2.120 → 3.2.125
- prettier 3.2.5 → 3.3.1
- prisma 5.14.0 → 5.15.0
- renovate 37.382.4 → 37.393.0
- ruff 0.4.6 → 0.4.8
- semgrep 1.74.0 → 1.75.0
- stylelint 16.6.1 → 16.6.1
  - stylelint-config-clean-order 5.4.2 → 6.0.0
- trivy 0.51.4 → 0.52.0
- trufflehog 3.77.0 → 3.78.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.25.7 to 3.25.8 in the dependencies g…
0d510b8 
…roup (#113)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.7 to 3.25.8
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<h2>3.25.1 - 17 Apr 2024</h2>
<ul>
<li>We are rolling out a feature in April/May 2024 that improves the
reliability and performance of analyzing code when analyzing a compiled
language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2235">#2235</a></li>
<li>Fix a bug where the <code>init</code> Action would fail if
<code>--overwrite</code> was specified in
<code>CODEQL_ACTION_EXTRA_OPTIONS</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/2245">#2245</a></li>
</ul>
<h2>3.25.0 - 15 Apr 2024</h2>
<ul>
<li>The deprecated feature for extracting dependencies for a Python
analysis has been removed. <a
href="https://redirect.github.com/github/codeql-action/pull/2224">#2224</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/2e230e8fe0ad3a14a340ad0815ddb96d599d2aff"><code>2e230e8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2323">#2323</a>
from github/update-v3.25.8-18b06dd1d</li>
<li><a
href="https://github.com/github/codeql-action/commit/66ad891bd4763033c1a60dc12dc230de94ac2c26"><code>66ad891</code></a>
Update changelog for v3.25.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/18b06dd1df819dc4edec5b409a19f0fd423b4c28"><code>18b06dd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2322">#2322</a>
from github/dependabot/npm_and_yarn/npm-10d82c2911</li>
<li><a
href="https://github.com/github/codeql-action/commit/200dd0cf5bc2c6048a01d1ebe3c1f66d3daf6887"><code>200dd0c</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/2bb35eab2ff95ab7a7aa35eef58886a26d72b922"><code>2bb35ea</code></a>
bump the npm group with 4 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/9c15e42f1946cfbe111f73c5ef018c6edc22f693"><code>9c15e42</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2321">#2321</a>
from github/update-bundle/codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/98e79227df809c000dcf3edc0758c8b389dd10e7"><code>98e7922</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/440350bade078775c9706f73128be1d19c22f3c2"><code>440350b</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/d4fcc8b7bd5fb75e4560757fd1e3491eff3148e7"><code>d4fcc8b</code></a>
Update default bundle to codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/add199be7753abbeb58eee647967afe140edaba1"><code>add199b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2320">#2320</a>
from github/angelapwen/use-linked-in-tests</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/f079b8493333aace61c81488f8bd40919487bd9f...2e230e8fe0ad3a14a340ad0815ddb96d599d2aff">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.7&new-version=3.25.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#114)
7484f00 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.125 → 3.2.128
- pylint 3.2.2 → 3.2.3
- renovate 37.393.0 → 37.396.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#115)
7014636 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- bandit 1.7.8 → 1.7.9
- buf-lint 1.32.2 → 1.33.0
- cfnlint 0.87.4 → 0.87.7
- checkov 3.2.128 → 3.2.136
- golangci-lint 1.57.2 → 1.59.1
- prettier 3.3.1 → 3.3.2
- renovate 37.396.1 → 37.408.0
- trivy 0.52.0 → 0.52.1
- trufflehog 3.78.0 → 3.78.1

2 tools were upgraded:

- gh 2.50.0 → 2.51.0
- gt 1.3.6 → 1.3.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.25.8 to 3.25.10 in the dependencies …
548cce3 
…group (#116)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.8 to 3.25.10
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/23acc5c183826b7a8a97bce3cecc52db901f8251"><code>23acc5c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2337">#2337</a>
from github/update-v3.25.10-5bf6dad35</li>
<li><a
href="https://github.com/github/codeql-action/commit/9b72dbdc68c8ff81c1067a930bd2864ea707129b"><code>9b72dbd</code></a>
Update changelog for v3.25.10</li>
<li><a
href="https://github.com/github/codeql-action/commit/5bf6dad35b41961d8779984f426d6a539bbe5d10"><code>5bf6dad</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2329">#2329</a>
from github/henrymercer/csharp-buildless-rollback-me...</li>
<li><a
href="https://github.com/github/codeql-action/commit/feec81c66bfd25a8de4024a727431eb5a4b31317"><code>feec81c</code></a>
Merge branch 'main' into
henrymercer/csharp-buildless-rollback-mechanism</li>
<li><a
href="https://github.com/github/codeql-action/commit/789b5f86ef49249530b3d018f3ab10640eff231c"><code>789b5f8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2328">#2328</a>
from github/henrymercer/direct-tracing-fix</li>
<li><a
href="https://github.com/github/codeql-action/commit/c36b5fc54fb5e6fdd2c4942bcfa424f685b214a8"><code>c36b5fc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2327">#2327</a>
from github/update-bundle/codeql-bundle-v2.17.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/b3642aa04dc0ec830af386ae4c9a130a2f322aab"><code>b3642aa</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/1fc6e20182346ec584a1a9968489d2d4daa96c3f"><code>1fc6e20</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2335">#2335</a>
from github/mergeback/v3.25.9-to-main-530d4fea</li>
<li><a
href="https://github.com/github/codeql-action/commit/356bee4b4a909000f4530db85f1ea75c65cd550b"><code>356bee4</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/385808c715d3dc5b901e9fb07672dc363c43436b"><code>385808c</code></a>
Update changelog and version after v3.25.9</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2e230e8fe0ad3a14a340ad0815ddb96d599d2aff...23acc5c183826b7a8a97bce3cecc52db901f8251">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.8&new-version=3.25.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#117)
dc2ce33 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- checkov 3.2.136 → 3.2.141
- prisma 5.15.0 → 5.15.1
- renovate 37.408.0 → 37.413.2
- ruff 0.4.8 → 0.4.9
- semgrep 1.75.0 → 1.76.0
- sql-formatter 15.3.1 → 15.3.2
- trivy 0.52.1 → 0.52.2

1 tool was upgraded:

- gt 1.3.7 → 1.3.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#118)
85e221a 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- osv-scanner 1.7.4 → 1.8.1
- renovate 37.413.2 → 37.413.4
- ruff 0.4.9 → 0.4.10
- trufflehog 3.78.1 → 3.78.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#119)
a4dbd37 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- buf-lint 1.33.0 → 1.34.0
- cfnlint 0.87.7 → 1.3.7
- checkov 3.2.141 → 3.2.148
- mypy 1.10.0 → 1.10.1
- prisma 5.15.1 → 5.16.0
- pylint 3.2.3 → 3.2.4
- renovate 37.413.4 → 37.420.1
- semgrep 1.76.0 → 1.77.0
- trufflehog 3.78.2 → 3.79.0
- trunk-toolbox 0.3.1 → 0.3.2

1 tool was upgraded:

- gh 2.51.0 → 2.52.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump the dependencies group with 2 updates (#120)
12e702a 
Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.25.10 to 3.25.11
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/b611370bb5703a7efb587f9d136a52ea24c5c38c"><code>b611370</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2357">#2357</a>
from github/update-v3.25.11-de945755c</li>
<li><a
href="https://github.com/github/codeql-action/commit/3e6431f3accd84bb42779fc3c9d9f447caa3a6d3"><code>3e6431f</code></a>
Update changelog for v3.25.11</li>
<li><a
href="https://github.com/github/codeql-action/commit/de945755c9edd3a4e5d160a71f1482ece6a3c271"><code>de94575</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2352">#2352</a>
from github/update-bundle/codeql-bundle-v2.17.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/a32d3058b827f5d2ba08dc2570887f14b164a794"><code>a32d305</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/9ccc99508a819cb9c340028d7711b129f96c8a2e"><code>9ccc995</code></a>
Update default bundle to codeql-bundle-v2.17.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/9b7c22c3b39078582fa6d0d8f3841e944ec54582"><code>9b7c22c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2351">#2351</a>
from github/dependabot/npm_and_yarn/npm-6791eaa26c</li>
<li><a
href="https://github.com/github/codeql-action/commit/9cf3243b0be3a9e0efff20a7fabd5a11246168e9"><code>9cf3243</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/1895b29ac8e2046ddb708ac1eca53e6d5e143337"><code>1895b29</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/9dcfde966d641c9a59ee02a83f18329a2b2caace"><code>9dcfde9</code></a>
Bump the npm group with 2 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/8723b5be41df185b62efd22191bb83fc24539ca0"><code>8723b5b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2350">#2350</a>
from github/angelapwen/add-exclude-pr-check-param</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/23acc5c183826b7a8a97bce3cecc52db901f8251...b611370bb5703a7efb587f9d136a52ea24c5c38c">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.15 to 1.1.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.16</h2>
<h2>What's Changed</h2>
<ul>
<li>[feat] add timeout and ability to cat debug logs by <a
href="https://github.com/Ryang20718"><code>@​Ryang20718</code></a> in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/245">trunk-io/trunk-action#245</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Ryang20718"><code>@​Ryang20718</code></a> made
their first contribution in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/245">trunk-io/trunk-action#245</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1...v1.1.16">https://github.com/trunk-io/trunk-action/compare/v1...v1.1.16</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/86b68ffae610a05105e90b1f52ad8c549ef482c2"><code>86b68ff</code></a>
[feat] add timeout and ability to cat debug logs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/245">#245</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/6eac1bb24506bc4fc043f7df134454bbd702bb9d"><code>6eac1bb</code></a>
Upgrade trunk to 1.22.2 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/246">#246</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/f64973be10d5b78204e22688b949b34665e5df17"><code>f64973b</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/244">#244</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/f6c5f1b90503c30e02059667dbc247f2257b63c5...86b68ffae610a05105e90b1f52ad8c549ef482c2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#121)
7a24477 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- cfnlint 1.3.7 → 1.4.2
- checkov 3.2.148 → 3.2.156
- prisma 5.16.0 → 5.16.1
- ruff 0.4.10 → 0.5.0
- semgrep 1.77.0 → 1.78.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump actions/upload-artifact from 4.3.3 to 4.3.4 in the dependencies …
326e542 
…group (#123)

Bumps the dependencies group with 1 update:
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `actions/upload-artifact` from 4.3.3 to 4.3.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/artifact</code> version, bump dependencies by
<a href="https://github.com/robherley"><code>@​robherley</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/584">actions/upload-artifact#584</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4">https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/0b2256b8c012f0828dc542b3febcab082c67f72b"><code>0b2256b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/584">#584</a>
from actions/robherley/bump-pkgs</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/488dcefb9bf01619ac19bad29c5c5409a1e4dd4c"><code>488dcef</code></a>
licensed cache</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/04c51f57662651dd3333286989e2db1111c0fd07"><code>04c51f5</code></a>
ncc</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/32a9e276a8f8ac18b4b2dce8213ed340ed4e5ed8"><code>32a9e27</code></a>
bump <code>@​actions/artifact</code> and npm audit</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/552bf3722c16e81001aea7db72d8cedf64eb5f68"><code>552bf37</code></a>
new version</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/79616d2ded92999fceefea2ca2e4bdf6101fa919"><code>79616d2</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/565">#565</a>
from actions/eggyhead/use-artifact-v2.1.6</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4.3.3&new-version=4.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#122)
9c47590 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- cfnlint 1.4.2 → 1.5.0
- checkov 3.2.156 → 3.2.174
- pylint 3.2.4 → 3.2.5
- renovate 37.420.1 → 37.424.1
- stylelint 16.6.1 → 16.6.1
  - stylelint-config-clean-order 6.0.0 → 6.1.0

1 tool was upgraded:

- gt 1.3.9 → 1.3.10

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#124)
42d48b9 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.5.0 → 1.5.3
- checkov 3.2.174 → 3.2.184
- osv-scanner 1.8.1 → 1.8.2
- prisma 5.16.1 → 5.16.2
- renovate 37.424.1 → 37.428.2
- ruff 0.5.0 → 0.5.1
- semgrep 1.78.0 → 1.79.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#126)
752c161 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- cfnlint 1.5.3 → 1.6.0
- checkov 3.2.184 → 3.2.186
- renovate 37.428.2 → 37.429.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.25.11 to 3.25.12 in the dependencies…
f799a3e 
… group (#125)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.11 to 3.25.12
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/4fa2a7953630fd2f3fb380f21be14ede0169dd4f"><code>4fa2a79</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2369">#2369</a>
from github/update-v3.25.12-947b18fb7</li>
<li><a
href="https://github.com/github/codeql-action/commit/dec6fb713c18d10611178d0d693c19aea88c8e8d"><code>dec6fb7</code></a>
Update changelog for v3.25.12</li>
<li><a
href="https://github.com/github/codeql-action/commit/947b18fb721ec7b717188ea2d1b77547494b5d71"><code>947b18f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2365">#2365</a>
from github/dependabot/npm_and_yarn/npm-88aac57241</li>
<li><a
href="https://github.com/github/codeql-action/commit/9ab727712f519b1609826257798e28ecf183223c"><code>9ab7277</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2364">#2364</a>
from github/update-bundle/codeql-bundle-v2.18.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/1c60bf167bf7381660d6beef09ff28ef424ddebf"><code>1c60bf1</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.18.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/be825d5eefdb0c498fa30c4b57ec0690b4d0cecb"><code>be825d5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2353">#2353</a>
from github/henrymercer/enable-direct-tracing</li>
<li><a
href="https://github.com/github/codeql-action/commit/243e392ed031ba4a260a4f4dcfb2ea12c4f59c23"><code>243e392</code></a>
Fix PR number in changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/026682fb73007dbff555c8b972d7fe41df8f9d3b"><code>026682f</code></a>
Fix bad auto merge in changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/264cbe20c6f634b661bed76ea0993bb895d7e9c7"><code>264cbe2</code></a>
Merge branch 'main' into henrymercer/enable-direct-tracing</li>
<li><a
href="https://github.com/github/codeql-action/commit/0b65015a1d8925dd6936217bc72af1d7175d9e56"><code>0b65015</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/b611370bb5703a7efb587f9d136a52ea24c5c38c...4fa2a7953630fd2f3fb380f21be14ede0169dd4f">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.11&new-version=3.25.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#127)
ecebac0 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- cfnlint 1.6.0 → 1.8.0
- checkov 3.2.186 → 3.2.193
- oxipng 9.1.1 → 9.1.2
- prettier 3.3.2 → 3.3.3
- prisma 5.16.2 → 5.17.0
- renovate 37.429.1 → 37.432.0
- ruff 0.5.1 → 0.5.2
- stylelint 16.6.1 → 16.7.0
- taplo 0.8.1 → 0.9.2
- trivy 0.52.2 → 0.53.0

1 tool was upgraded:

- gh 2.52.0 → 2.53.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#129)
6ba6d9f 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- buf-lint 1.34.0 → 1.35.1
- cfnlint 1.8.0 → 1.8.2
- checkov 3.2.193 → 3.2.205
- mypy 1.10.1 → 1.11.0
- pylint 3.2.5 → 3.2.6
- renovate 37.432.0 → 37.440.7
- ruff 0.5.2 → 0.5.4
- semgrep 1.79.0 → 1.81.0
- trufflehog 3.79.0 → 3.80.1

1 tool was upgraded:

- gt 1.3.10 → 1.4.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump the dependencies group across 1 directory with 2 updates (#130)
1f6e6d0 
Bumps the dependencies group with 2 updates in the / directory:
[github/codeql-action](https://github.com/github/codeql-action) and
[ossf/scorecard-action](https://github.com/ossf/scorecard-action).

Updates `github/codeql-action` from 3.25.12 to 3.25.15
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time.</li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@V3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a"><code>afb54ba</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2391">#2391</a>
from github/update-v3.25.15-4b1d7da10</li>
<li><a
href="https://github.com/github/codeql-action/commit/57a4b22c7d841087f9554367a1df5d1654ad7f58"><code>57a4b22</code></a>
Update changelog for v3.25.15</li>
<li><a
href="https://github.com/github/codeql-action/commit/4b1d7da102ff94aca014c0245062b1a463356d72"><code>4b1d7da</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2385">#2385</a>
from github/update-bundle/codeql-bundle-v2.18.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/97e8f6936878e35d1ab1aea8d48fd2eb80fd0ffc"><code>97e8f69</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.18.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/f8e94f97750f67eb20315a4c8d9e085db128b221"><code>f8e94f9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2389">#2389</a>
from github/mergeback/v3.25.14-to-main-5cf07d8b</li>
<li><a
href="https://github.com/github/codeql-action/commit/9e375a8f4f6c35a436d30c08d90e034f7ee6c9ee"><code>9e375a8</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/02d73d05447c3f282c80a9ce71dc56ba6cc59e38"><code>02d73d0</code></a>
Update changelog and version after v3.25.14</li>
<li><a
href="https://github.com/github/codeql-action/commit/5cf07d8b700b67e235fbb65cbc84f69c0cf10464"><code>5cf07d8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2388">#2388</a>
from github/update-v3.25.14-1b214db07</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecab108bfbff33cc4c0c91c5ae22d2cfbd04073b"><code>ecab108</code></a>
Update changelog for v3.25.14</li>
<li><a
href="https://github.com/github/codeql-action/commit/1b214db077827f5ba810f244daaecfd95c3bd111"><code>1b214db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2387">#2387</a>
from github/aibaars/remove-set-secret</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/4fa2a7953630fd2f3fb380f21be14ede0169dd4f...afb54ba388a7dca6ecae48f608c4ff05ff4cc77a">compare
view</a></li>
</ul>
</details>
<br />

Updates `ossf/scorecard-action` from 2.3.3 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.0</h2>
<h2>What's Changed</h2>
<p>This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the <a
href="https://github.com/ossf/scorecard/releases/tag/v5.0.0">v5.0.0
release notes</a>. Of special note to Scorecard Action is the Maintainer
Annotation feature, which can be used to suppress some Code Scanning
false positives. Alerts will not be generated for any Scorecard Check
with an annotation.</p>
<ul>
<li>:seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to
v5.0.0 by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1410">ossf/scorecard-action#1410</a></li>
<li>:bug: lower license sarif alert threshold to 9 by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1411">ossf/scorecard-action#1411</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>docs: dogfooding badge by <a
href="https://github.com/jkowalleck"><code>@​jkowalleck</code></a> in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1399">ossf/scorecard-action#1399</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/jkowalleck"><code>@​jkowalleck</code></a> made
their first contribution in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1399">ossf/scorecard-action#1399</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0">https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ossf/scorecard-action/commit/62b2cac7ed8198b15735ed49ab1e5cf35480ba46"><code>62b2cac</code></a>
bump docker tag to v2.4.0 for release (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1414">#1414</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/c09630c42e97d04c7cd8f69735ddf0ec53f0e189"><code>c09630c</code></a>
lower license score alert threshold to 9 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1411">#1411</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/cf8594c5485256008de4ec57c936bd4a1a381a0b"><code>cf8594c</code></a>
:seedling: Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1413">#1413</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/de5fcb95b9d8f899bc5dc11b4e202eb6a2fd67e9"><code>de5fcb9</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1412">#1412</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/a46b90b4caca61e2298cc4a9bd4c90d3dfe7f09d"><code>a46b90b</code></a>
bump scorecard to v5.0.0 release (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1410">#1410</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/9fc518d5249b2564cbeb11d029b87d7d1ba55396"><code>9fc518d</code></a>
:seedling: Bump golang in the docker-images group (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1407">#1407</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/a8eaa1b46e3fd7e003f79fd39dff99ca53bbe732"><code>a8eaa1b</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1408">#1408</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/873d5fdf63bc863d140f57ed481e6a297324030b"><code>873d5fd</code></a>
:seedling: Bump the github-actions group across 1 directory with 2
updates (#...</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/54cc1fe4e2c7bc69051a267c8e183497ca7d8da7"><code>54cc1fe</code></a>
:seedling: Bump the docker-images group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1401">#1401</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/82bcb91c5d3f72aaf692a0d3e399c425a29ac512"><code>82bcb91</code></a>
:seedling: Bump golang.org/x/net from 0.26.0 to 0.27.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1400">#1400</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ossf/scorecard-action/compare/dc50aa9510b46c811795eb24b2f1ba02a914e534...62b2cac7ed8198b15735ed49ab1e5cf35480ba46">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#131)
292416b 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.205 → 3.2.208
- renovate 37.440.7 → 38.6.0
- ruff 0.5.4 → 0.5.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#132)
25a5f99 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.8.2 → 1.9.2
- checkov 3.2.208 → 3.2.217
- mypy 1.11.0 → 1.11.1
- renovate 38.6.0 → 38.17.1
- semgrep 1.81.0 → 1.82.0
- stylelint 16.7.0 → 16.8.1
- taplo 0.9.2 → 0.9.3
- trivy 0.53.0 → 0.54.1
- trufflehog 3.80.1 → 3.80.5

1 tool was upgraded:

- gh 2.53.0 → 2.54.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump actions/upload-artifact from 4.3.4 to 4.3.5 in the dependencies …
3309525 
…group (#133)

Bumps the dependencies group with 1 update:
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `actions/upload-artifact` from 4.3.4 to 4.3.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/artifact</code> to v2.1.9 by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/588">actions/upload-artifact#588</a>
<ul>
<li>Fixed artifact upload chunk timeout logic <a
href="https://redirect.github.com/actions/toolkit/pull/1774">#1774</a></li>
<li>Use lazy stream to prevent issues with open file limits <a
href="https://redirect.github.com/actions/toolkit/pull/1771">#1771</a></li>
</ul>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5">https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/89ef406dd8d7e03cfd12d9e0a4a378f454709029"><code>89ef406</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/588">#588</a>
from actions/robherley/4.3.5</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/23d796df36a979af3abdb7f632f5391e4f15fa07"><code>23d796d</code></a>
license updates</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/e445c64bc2a4ebc990affbc00aa66b845f05600a"><code>e445c64</code></a>
bump <code>@​actions/artifact</code> to v2.1.9</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/0b2256b8c012f0828dc542b3febcab082c67f72b...89ef406dd8d7e03cfd12d9e0a4a378f454709029">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4.3.4&new-version=4.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#134)
7a8aef3 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- cfnlint 1.9.2 → 1.9.3
- renovate 38.17.1 → 38.18.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
trunk-open-pr-bot Bot and others added 30 commits August 11, 2025 10:44
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#255)
c6ca5b3 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- renovate 41.56.0 → 41.59.0
- stylelint 16.23.0 → 16.23.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#256)
9f8ab8d 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.38.2 → 1.38.3
- checkov 3.2.458 → 3.2.461
- prisma 6.13.0 → 6.14.0
- pylint 3.3.7 → 3.3.8
- renovate 41.59.0 → 41.71.1
- trufflehog 3.90.3 → 3.90.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#258)
bd321be 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 41.71.1 → 41.74.0
- semgrep 1.131.0 → 1.132.1
- trufflehog 3.90.4 → 3.90.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump the dependencies group with 2 updates (#257)
8b62643 
Bumps the dependencies group with 2 updates:
[actions/checkout](https://github.com/actions/checkout) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 4 to 5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
</ul>
<h2>⚠️ Minimum Compatible Runner Version</h2>
<p><strong>v2.327.1</strong><br />
<a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></p>
<p>Make sure your runner is updated to this version or newer to use this
release.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
<li>Prepare release v4.3.0 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2237">actions/checkout#2237</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/motss"><code>@​motss</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li><a href="https://github.com/mouismail"><code>@​mouismail</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li><a href="https://github.com/benwells"><code>@​benwells</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v4.3.0">https://github.com/actions/checkout/compare/v4...v4.3.0</a></p>
<h2>v4.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
<h2>v4.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a>
Prepare v5.0.0 release (<a
href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/9f265659d3bb64ab1440b03b12f4d47a24320917"><code>9f26565</code></a>
Update actions checkout to use node 24 (<a
href="https://redirect.github.com/actions/checkout/issues/2226">#2226</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 3.29.8 to 3.29.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.9</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.9/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<ul>
<li>Fix bug in PR analysis where user-provided <code>include</code>
query filter fails to exclude non-included queries. <a
href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li>
<li>Update default CodeQL bundle version to 2.22.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li>
</ul>
<h2>3.29.0 - 11 Jun 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2925">#2925</a></li>
<li>Bump minimum CodeQL bundle version to 2.16.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2912">#2912</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/df559355d593797519d70b90fc8edd5db049e7a2"><code>df55935</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3026">#3026</a>
from github/update-v3.29.9-cc722e476</li>
<li><a
href="https://github.com/github/codeql-action/commit/53f255b421827a59779971bf544a2002a3d1871f"><code>53f255b</code></a>
Update changelog for v3.29.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/cc722e476f9cba97a940df29dd8b75eac4dd5292"><code>cc722e4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3023">#3023</a>
from github/redsun82/rust-test</li>
<li><a
href="https://github.com/github/codeql-action/commit/a4cd8fd0364554c5cbfe9b85747cd6ef9aee1d38"><code>a4cd8fd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3024">#3024</a>
from github/dependabot/npm_and_yarn/npm-3a4f9bf414</li>
<li><a
href="https://github.com/github/codeql-action/commit/542b274f93eb63e741025a278cea45e3d45ae6ae"><code>542b274</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/1a376ca348f7009ef1d5708e2c7dfd1cdaa5ac8c"><code>1a376ca</code></a>
Bump the npm group with 6 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/9f966bbbf5900c1bddc63d6ca07dc19f2c2e0599"><code>9f966bb</code></a>
Merge branch 'main' into redsun82/rust-test</li>
<li><a
href="https://github.com/github/codeql-action/commit/c6dcdfa33a7454bb54083cae422eb0d285ad74bc"><code>c6dcdfa</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2993">#2993</a>
from github/cklin/overlay-pack-check</li>
<li><a
href="https://github.com/github/codeql-action/commit/821d3bd162d1c1ed42f14b445cc5fe7deb20689a"><code>821d3bd</code></a>
Merge branch 'main' into cklin/overlay-pack-check</li>
<li><a
href="https://github.com/github/codeql-action/commit/bf1dd6901d5ef57875343b8fcc347a8a1c39be60"><code>bf1dd69</code></a>
Move comments up in <code>rust.yml</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/76621b61decf072c1cee8dd1ce2d2a82d33c17ed...df559355d593797519d70b90fc8edd5db049e7a2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#259)
5f941e2 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- cfnlint 1.38.3 → 1.39.0
- checkov 3.2.461 → 3.2.464
- nancy 1.0.48 → 1.0.51
- osv-scanner 2.0.3 → 2.2.1
- renovate 41.74.0 → 41.82.1
- ruff 0.12.7 → 0.12.9
- shellcheck 0.10.0 → 0.11.0
- taplo 0.9.3 → 0.10.0

2 tools were upgraded:

- gh 2.76.2 → 2.78.0
- gt 1.6.7 → 1.6.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.29.9 to 3.29.11 in the dependencies …
03e25c2 
…group (#260)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.9 to 3.29.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.11</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.29.10</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.10/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/3c3833e0f8c1c83d449a7478aa59c036a9165498"><code>3c3833e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3052">#3052</a>
from github/update-v3.29.11-14148a433</li>
<li><a
href="https://github.com/github/codeql-action/commit/8c4bfbd99ba6ef652eca12461ad7618142e00679"><code>8c4bfbd</code></a>
Update changelog for v3.29.11</li>
<li><a
href="https://github.com/github/codeql-action/commit/14148a433d789d9b6c7dadb56d8e3f8ad1e59605"><code>14148a4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3044">#3044</a>
from github/update-bundle/codeql-bundle-v2.22.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/71b2cb38a1e682cb9b2453a5f1400eef870a37df"><code>71b2cb3</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/2bf78254cceec27aab20b1623ba68c63c6eb85c6"><code>2bf7825</code></a>
Update default bundle to codeql-bundle-v2.22.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/db69a5182d331d562e511302ae3c9aafd5fada6c"><code>db69a51</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3049">#3049</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/a68d47bfa574c69f3de7d6484cf28a9c55ff7287"><code>a68d47b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3050">#3050</a>
from github/henrymercer/init-not-called-config-error</li>
<li><a
href="https://github.com/github/codeql-action/commit/e496ff959372e828f30b1518fd22cb76170cf5db"><code>e496ff9</code></a>
Make &quot;init not called&quot; a configuration error</li>
<li><a
href="https://github.com/github/codeql-action/commit/fd2ea72d34cdf8157d85d93decf87671705166a3"><code>fd2ea72</code></a>
Update supported GitHub Enterprise Server versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/6dee5bc9c165ca206a70f4e3d18271971cf6ff26"><code>6dee5bc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3045">#3045</a>
from github/dependabot/npm_and_yarn/npm-5b4171dd16</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/df559355d593797519d70b90fc8edd5db049e7a2...3c3833e0f8c1c83d449a7478aa59c036a9165498">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.9&new-version=3.29.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#261)
5dea4db 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- renovate 41.82.1 → 41.82.4
- ruff 0.12.9 → 0.12.10

1 tool was upgraded:

- trunk-analytics-cli 0.10.6 → 0.10.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#262)
1d9dcd9 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.39.0 → 1.39.1
- checkov 3.2.464 → 3.2.469
- hadolint 2.12.1-beta → 2.13.1
- osv-scanner 2.2.1 → 2.2.2
- prisma 6.14.0 → 6.15.0
- renovate 41.82.4 → 41.96.1
- ruff 0.12.10 → 0.12.11
- semgrep 1.132.1 → 1.135.0
- sql-formatter 15.6.6 → 15.6.7

1 tool was upgraded:

- trunk-analytics-cli 0.10.7 → 0.10.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#264)
f8e0c69 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- renovate 41.96.1 → 41.97.5
- ruff 0.12.11 → 0.12.12
- sql-formatter 15.6.7 → 15.6.8
- trufflehog 3.90.5 → 3.90.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#265)
5f11c25 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- checkov 3.2.469 → 3.2.470
- prisma 6.15.0 → 6.16.0
- renovate 41.97.5 → 41.99.11
- ruff 0.12.12 → 0.13.0
- semgrep 1.135.0 → 1.136.0
- sql-formatter 15.6.8 → 15.6.9
- stylelint 16.23.1 → 16.24.0
  - stylelint-config-standard-scss 15.0.1 → 16.0.0

2 tools were upgraded:

- gh 2.78.0 → 2.79.0
- trunk-analytics-cli 0.10.9 → 0.10.10

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.29.11 to 3.30.1 in the dependencies …
5ac8e5c 
…group (#263)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.11 to 3.30.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.30.1</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.1/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.30.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.0/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f1f6e5f6af878fb37288ce1c627459e94dbf7d01"><code>f1f6e5f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3081">#3081</a>
from github/update-v3.30.1-2d2f57ed3</li>
<li><a
href="https://github.com/github/codeql-action/commit/5dd2164a3d69fc450bc99ff83e46354092852955"><code>5dd2164</code></a>
Update changelog for v3.30.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/2d2f57ed3a96a5c55ea34a02d2787de24943ebea"><code>2d2f57e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3079">#3079</a>
from github/mbg/proxy/accept-git-source</li>
<li><a
href="https://github.com/github/codeql-action/commit/b364f99409ed3cd283e99b317d8e29cd062f4c06"><code>b364f99</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3077">#3077</a>
from github/update-bundle/codeql-bundle-v2.23.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/5b8860ac11161b727664576c3f8b9924d6f2038e"><code>5b8860a</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.23.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/8fe8b2420215df90da3cc29b24f7809dfc7d5373"><code>8fe8b24</code></a>
Add <code>git_source</code> as supported registry type for Go</li>
<li><a
href="https://github.com/github/codeql-action/commit/6242bcbf1b24d310505ba9bd8be374eb1433557a"><code>6242bcb</code></a>
Allow multiple registry types in
<code>LANGUAGE_TO_REGISTRY_TYPE</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/dfb741d27f8d018f727c8caf9033781133fdf550"><code>dfb741d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3075">#3075</a>
from github/mbg/remove-augmentation-properties</li>
<li><a
href="https://github.com/github/codeql-action/commit/920bba1769f279c4373d93131c769e74bc258100"><code>920bba1</code></a>
Add unit tests for <code>createInitWithConfigStatusReport</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/37ddb03e0d7f9f4f374a33bd14142694e5c89b0b"><code>37ddb03</code></a>
Add <code>createInitWithConfigStatusReport</code> function</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/3c3833e0f8c1c83d449a7478aa59c036a9165498...f1f6e5f6af878fb37288ce1c627459e94dbf7d01">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.11&new-version=3.30.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#266)
b9cbe8e 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- mypy 1.17.1 → 1.18.1
- prisma 6.16.0 → 6.16.1
- renovate 41.99.11 → 41.107.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#267)
7d84bfc 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.470 → 3.2.471
- prisma 6.16.1 → 6.16.2
- renovate 41.107.0 → 41.116.7

2 tools were upgraded:

- gt 1.6.8 → 1.7.0
- trunk-analytics-cli 0.10.10 → 0.10.11

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#268)
5353d2e 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- black 25.1.0 → 25.9.0
- mypy 1.18.1 → 1.18.2
- renovate 41.116.7 → 41.118.1
- ruff 0.13.0 → 0.13.1
- semgrep 1.136.0 → 1.137.0
- trufflehog 3.90.6 → 3.90.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#269)
c20828f 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- hadolint 2.13.1 → 2.14.0
- nancy 1.0.51 → 1.0.52
- renovate 41.118.1 → 41.130.1
- semgrep 1.137.0 → 1.137.1

1 tool was upgraded:

- gh 2.79.0 → 2.80.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.30.3 to 3.30.5 in the dependencies g…
78dc07f 
…roup (#270)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.30.3 to 3.30.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.30.5</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="https://redirect.github.com/github/codeql-action/pull/3160">#3160</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.5/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.30.4</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="https://redirect.github.com/github/codeql-action/pull/3099">#3099</a>
and <a
href="https://redirect.github.com/github/codeql-action/pull/3100">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="https://redirect.github.com/github/codeql-action/pull/3107">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="https://redirect.github.com/github/codeql-action/pull/3130">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="https://redirect.github.com/github/codeql-action/pull/3118">#3118</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.4/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="https://redirect.github.com/github/codeql-action/pull/3160">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="https://redirect.github.com/github/codeql-action/pull/3099">#3099</a>
and <a
href="https://redirect.github.com/github/codeql-action/pull/3100">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="https://redirect.github.com/github/codeql-action/pull/3107">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="https://redirect.github.com/github/codeql-action/pull/3130">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="https://redirect.github.com/github/codeql-action/pull/3118">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="https://redirect.github.com/github/codeql-action/pull/3084">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3064">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/3599b3baa15b485a2e49ef411a7a4bb2452e7f93"><code>3599b3b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3161">#3161</a>
from github/update-v3.30.5-0a67bd46a</li>
<li><a
href="https://github.com/github/codeql-action/commit/2ca0085e584affd600efbd3930bc90e48dbacb46"><code>2ca0085</code></a>
Update changelog for v3.30.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/0a67bd46a0f456ddad9e4b732137f519280275db"><code>0a67bd4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3160">#3160</a>
from github/mbg/fix/upload-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/8e34f2f3bf0f3f0b192913b0e0f234372329699b"><code>8e34f2f</code></a>
Add changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/0b7fc5664842c1a6bb23c4ef64b85438afcb76c5"><code>0b7fc56</code></a>
Fix <code>upload-sarif</code> not uploading non-<code>.sarif</code>
files</li>
<li><a
href="https://github.com/github/codeql-action/commit/94a9b7a1101a1320dcadcbda5e7fd9a1e6abaaca"><code>94a9b7a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3155">#3155</a>
from github/mbg/node/no-install-in-actions</li>
<li><a
href="https://github.com/github/codeql-action/commit/a0ae9ba2026911d58db9df06e6b074d8ef6c24c9"><code>a0ae9ba</code></a>
Log what the script is doing</li>
<li><a
href="https://github.com/github/codeql-action/commit/b27a8ef21f72b5c541232d50400874a3f0a374b9"><code>b27a8ef</code></a>
Exit if running in an Actions workflow</li>
<li><a
href="https://github.com/github/codeql-action/commit/65925679a36e83b45b5f1673869dabf891669742"><code>6592567</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3139">#3139</a>
from github/henrymercer/fix-log-message</li>
<li><a
href="https://github.com/github/codeql-action/commit/fa64a7dee67e389b18445aa15d26426512d9ab97"><code>fa64a7d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3154">#3154</a>
from github/mbg/node/check-up-to-date-deps</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/192325c86100d080feab897ff886c34abd4c83a3...3599b3baa15b485a2e49ef411a7a4bb2452e7f93">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.30.3&new-version=3.30.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#271)
fabc6c3 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 41.130.1 → 41.131.4
- ruff 0.13.1 → 0.13.2
- semgrep 1.137.1 → 1.138.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#272)
f99f946 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.39.1 → 1.40.0
- checkov 3.2.471 → 3.2.473
- isort 6.0.1 → 6.1.0
- osv-scanner 2.2.2 → 2.2.3
- prisma 6.16.2 → 6.16.3
- renovate 41.131.4 → 41.132.5
- ruff 0.13.2 → 0.13.3
- semgrep 1.138.0 → 1.139.0
- sql-formatter 15.6.9 → 15.6.10

2 tools were upgraded:

- gh 2.80.0 → 2.81.0
- trunk-analytics-cli 0.10.11 → 0.11.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#274)
91a9d89 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.40.0 → 1.40.1
- checkov 3.2.473 → 3.2.477
- prisma 6.16.3 → 6.17.0
- pylint 3.3.8 → 3.3.9
- renovate 41.132.5 → 41.143.2
- ruff 0.13.3 → 0.14.0
- stylelint 16.24.0 → 16.25.0

1 tool was upgraded:

- trunk-analytics-cli 0.11.1 → 0.11.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#275)
2d8712e 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

1 linter was upgraded:

- renovate 41.143.2 → 41.144.1

1 tool was upgraded:

- gt 1.7.0 → 1.7.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#276)
02495bc 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- actionlint 1.7.7 → 1.7.8
- cfnlint 1.40.1 → 1.40.2
- checkov 3.2.477 → 3.2.484
- isort 6.1.0 → 7.0.0
- markdown-link-check 3.13.7 → 3.14.1
- prisma 6.17.0 → 6.17.1
- pylint 3.3.9 → 4.0.1
- renovate 41.144.1 → 41.149.2
- trufflehog 3.90.8 → 3.90.11

3 tools were upgraded:

- gh 2.81.0 → 2.82.0
- gt 1.7.1 → 1.7.2
- trunk-analytics-cli 0.11.2 → 0.11.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#277)
e2334ec 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 41.149.2 → 41.151.1
- ruff 0.14.0 → 0.14.1
- semgrep 1.139.0 → 1.140.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#278)
93c2fb9 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.40.2 → 1.40.3
- checkov 3.2.484 → 3.2.489
- osv-scanner 2.2.3 → 2.2.4
- prisma 6.17.1 → 6.18.0
- pylint 4.0.1 → 4.0.2
- renovate 41.151.1 → 41.167.2
- ruff 0.14.1 → 0.14.3
- semgrep 1.140.0 → 1.142.0
- trufflehog 3.90.11 → 3.90.12

3 tools were upgraded:

- gh 2.82.0 → 2.82.1
- gt 1.7.2 → 1.7.5
- trunk-analytics-cli 0.11.4 → 0.11.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#280)
fdca3ba 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

20 linters were upgraded:

- actionlint 1.7.8 → 1.7.9
- bandit 1.8.6 → 1.9.2
- black 25.9.0 → 25.11.0
- cfnlint 1.40.3 → 1.42.0
- checkov 3.2.489 → 3.2.495
- golangci-lint 1.64.8 → 2.7.1
- markdown-link-check 3.14.1 → 3.14.2
- markdownlint 0.45.0 → 0.46.0
- mypy 1.18.2 → 1.19.0
- osv-scanner 2.2.4 → 2.3.0
- prettier 3.6.2 → 3.7.4
- prisma 6.18.0 → 7.1.0
- pylint 4.0.2 → 4.0.4
- renovate 41.167.2 → 42.37.1
- ruff 0.14.3 → 0.14.8
- semgrep 1.142.0 → 1.144.1
- sort-package-json 3.4.0 → 3.5.0
- stylelint 16.25.0 → 16.26.1
  - stylelint-config-clean-order 7.0.0 → 8.0.0
- terrascan 1.19.1 → 1.19.9
- trufflehog 3.90.12 → 3.91.2

3 tools were upgraded:

- gh 2.82.1 → 2.83.1
- gt 1.7.5 → 1.7.10
- trunk-analytics-cli 0.11.6 → 0.11.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#282)
f8543b1 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

14 linters were upgraded:

- black 25.11.0 → 25.12.0
- cfnlint 1.42.0 → 1.43.1
- golangci-lint 2.7.1 → 2.7.2
- markdownlint 0.46.0 → 0.47.0
- mypy 1.19.0 → 1.19.1
- osv-scanner 2.3.0 → 2.3.1
- oxipng 9.1.5 → 10.0.0
- prisma 7.1.0 → 7.2.0
- renovate 42.37.1 → 42.64.1
- ruff 0.14.8 → 0.14.10
- semgrep 1.144.1 → 1.146.0
- sort-package-json 3.5.0 → 3.6.0
- sql-formatter 15.6.10 → 15.6.12
- trufflehog 3.91.2 → 3.92.3

3 tools were upgraded:

- gh 2.83.1 → 2.83.2
- gt 1.7.10 → 1.7.13
- trunk-analytics-cli 0.11.8 → 0.12.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#283)
637369f 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- actionlint 1.7.9 → 1.7.10
- checkov 3.2.495 → 3.2.497
- renovate 42.64.1 → 42.69.2
- trufflehog 3.92.3 → 3.92.4

2 tools were upgraded:

- gt 1.7.13 → 1.7.14
- trunk-analytics-cli 0.12.0 → 0.12.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
@EliSchleifer
Rev major versions of tools (#285)
52c55b2
@EliSchleifer
Update plugin.yaml
b1d1e46
@EliSchleifer
Fix broken trunk-analytics-cli (#286)
e9cf897 
- Fix broken trunk-analytics-cli definition
- upgrade to latest golangci-lint2
@trunk-open-pr-bot @TylerJang27
Upgrade trunk (#284)
bd631b9 
[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

19 linters were upgraded:

- actionlint 1.7.10 → 1.7.12
- black 26.3.0 → 26.3.1
- buildifier 8.2.1 → 8.5.1
- cfnlint 1.46.0 → 1.49.3
- checkov 3.2.507 → 3.2.525
- golangci-lint2 2.0.0 → 2.11.4
- mypy 1.19.1 → 1.20.2
- nancy 1.0.52 → 1.2.0
- osv-scanner 2.3.1 → 2.3.5
- oxipng 10.0.0 → 10.1.1
- prettier 3.8.1 → 3.8.3
- prisma 7.4.2 → 7.8.0
- renovate 43.59.2 → 43.142.0
- ruff 0.15.5 → 0.15.12
- semgrep 1.154.0 → 1.161.0
- sql-formatter 15.7.2 → 15.7.3
- stylelint 17.4.0 → 17.9.0
- trufflehog 3.92.4 → 3.95.2
- trunk-toolbox 0.5.4 → 0.7.0

3 tools were upgraded:

- gh 2.83.2 → 2.91.0
- gt 1.7.14 → 1.8.5
- trunk-analytics-cli 0.12.5 → 0.12.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

⤵️ pull merge-conflict Resolve conflicts manually

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@det @TylerJang27 @andreilgeorgescu @EliSchleifer