From d2ee8e08d9e85efe2f1e55e6b980d16c15dbceb0 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 24 May 2024 10:41:35 -0700
Subject: [PATCH 001/176] Upgrade trunk (#106)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- buf-lint 1.32.0 → 1.32.1
- checkov 3.2.95 → 3.2.106
- markdown-link-check 3.11.2 → 3.12.2
- pylint 3.2.0 → 3.2.2
- renovate 37.368.4 → 37.374.3
- ruff 0.4.4 → 0.4.5
- trivy 0.51.1 → 0.51.2

1 tool was upgraded:

- gt 1.3.4 → 1.3.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 90a1035..ec0d573 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -15,10 +15,10 @@ lint:
     - actionlint@1.7.0
     - bandit@1.7.8
     - black@24.4.2
-    - buf-lint@1.32.0
+    - buf-lint@1.32.1
     - buildifier@7.1.1
     - cfnlint@0.87.3
-    - checkov@3.2.95
+    - checkov@3.2.106
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -29,7 +29,7 @@ lint:
     - hadolint@2.12.0
     - isort@5.13.2
     - markdownlint@0.40.0
-    - markdown-link-check@3.11.2
+    - markdown-link-check@3.12.2
     - mypy@1.10.0
     - nancy@1.0.46
     - osv-scanner@1.7.3
@@ -37,10 +37,10 @@ lint:
     - pragma-once
     - prettier@3.2.5
     - prisma@5.14.0
-    - pylint@3.2.0
-    - renovate@37.368.4
+    - pylint@3.2.2
+    - renovate@37.374.3
     - rubocop@1.39.0
-    - ruff@0.4.4
+    - ruff@0.4.5
     - rustfmt@1.68.2
     - semgrep@1.73.0
     - shellcheck@0.10.0
@@ -54,7 +54,7 @@ lint:
     - svgo@3.3.2
     - taplo@0.8.1
     - terrascan@1.19.1
-    - trivy@0.51.1
+    - trivy@0.51.2
     - trufflehog@3.76.3
     - trunk-toolbox@0.3.1
     - yamllint@1.35.1
@@ -89,4 +89,4 @@ actions:
 tools:
   enabled:
     - gh@2.49.2
-    - gt@1.3.4
+    - gt@1.3.5

From 73922ae0c7c2c894f145d1a468576f64da6d3a6a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 May 2024 10:27:27 -0700
Subject: [PATCH 002/176] Bump the dependencies group with 2 updates (#107)

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.25.5 to 3.25.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<h2>3.25.1 - 17 Apr 2024</h2>
<ul>
<li>We are rolling out a feature in April/May 2024 that improves the
reliability and performance of analyzing code when analyzing a compiled
language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2235">#2235</a></li>
<li>Fix a bug where the <code>init</code> Action would fail if
<code>--overwrite</code> was specified in
<code>CODEQL_ACTION_EXTRA_OPTIONS</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/2245">#2245</a></li>
</ul>
<h2>3.25.0 - 15 Apr 2024</h2>
<ul>
<li>
<p>The deprecated feature for extracting dependencies for a Python
analysis has been removed. <a
href="https://redirect.github.com/github/codeql-action/pull/2224">#2224</a></p>
<p>As a result, the following inputs and environment variables are now
ignored:</p>
<ul>
<li>The <code>setup-python-dependencies</code> input to the
<code>init</code> Action</li>
<li>The
<code>CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION</code>
environment variable</li>
</ul>
<p>We recommend removing any references to these from your workflows.
For more information, see the release notes for CodeQL Action v3.23.0
and v2.23.0.</p>
</li>
<li>
<p>Automatically overwrite an existing database if found on the
filesystem. <a
href="https://redirect.github.com/github/codeql-action/pull/2229">#2229</a></p>
</li>
<li>
<p>Bump the minimum CodeQL bundle version to 2.12.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2232">#2232</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9fdb3e49720b44c48891d036bb502feb25684276"><code>9fdb3e4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2300">#2300</a>
from github/update-v3.25.6-63d519c0a</li>
<li><a
href="https://github.com/github/codeql-action/commit/00792ab1e0a5e45d2ff0c2426424bf7044bb27d0"><code>00792ab</code></a>
Update changelog for v3.25.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d519c0ae6a4b739e3377a517400c352a7d829b"><code>63d519c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2295">#2295</a>
from github/update-bundle/codeql-bundle-v2.17.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d9161ca1ca47cada43d1520c3ee53b96d4c31b3"><code>0d9161c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2293">#2293</a>
from github/henrymercer/update-build-mode-autobuild-...</li>
<li><a
href="https://github.com/github/codeql-action/commit/e9e27290e9f6fb2125c88320c1c8cfde73daa118"><code>e9e2729</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/de1ac31508c6bbe87b7dda97b8eeb62817061fc4"><code>de1ac31</code></a>
Update default bundle to codeql-bundle-v2.17.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/a57c67b89589d2d13d5ac85a9fc4679c7539f94c"><code>a57c67b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2286">#2286</a>
from github/koesie10/ghec-dr-db-upload</li>
<li><a
href="https://github.com/github/codeql-action/commit/b7ef64ecb1a32c28cb40d1d748bafd2141ad3f7a"><code>b7ef64e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2294">#2294</a>
from github/dependabot/npm_and_yarn/npm-d3285d5234</li>
<li><a
href="https://github.com/github/codeql-action/commit/e54dea297aa0b91cffca529f0b38a8d62d27e867"><code>e54dea2</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/3b42294f03049609faa22c47773030fff8acc188"><code>3b42294</code></a>
Bump the npm group across 1 directory with 4 updates</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/b7cec7526559c32f1616476ff32d17ba4c59b2d6...9fdb3e49720b44c48891d036bb502feb25684276">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.14 to 1.1.15
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.15</h2>
<h2>What's Changed</h2>
<ul>
<li>Adds inputs/outputs to the upgrade action (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/241">#241</a>)</li>
<li>Attempts to install the correct pnpm version in setup-ci action(<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/243">#243</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.1.14...v1.1.15">https://github.com/trunk-io/trunk-action/compare/v1.1.14...v1.1.15</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/f6c5f1b90503c30e02059667dbc247f2257b63c5"><code>f6c5f1b</code></a>
fix: attempt to install specified pnpm version (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/243">#243</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/d5b1b61d0beee562512f530a278b6a2931fba857"><code>d5b1b61</code></a>
Add inputs/outputs to upgrade action (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/241">#241</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/4a499158a03219a26d8fd4655b2a254dd57d2970"><code>4a49915</code></a>
Upgrade trunk to 1.22.1 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/242">#242</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/bd686325615e9cf5a4ef98372ba94a472f9b5238...f6c5f1b90503c30e02059667dbc247f2257b63c5">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml        | 6 +++---
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/upgrade_trunk.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index cc46594..7ede198 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+        uses: github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+        uses: github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+        uses: github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 9d46014..b865c77 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+        uses: github/codeql-action/upload-sarif@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index 16e7278..d2e7991 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@bd686325615e9cf5a4ef98372ba94a472f9b5238
+        uses: trunk-io/trunk-action/upgrade@f6c5f1b90503c30e02059667dbc247f2257b63c5
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From 9aae6bc09a6ad6078a86f64426c1c369d05a6e18 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Tue, 28 May 2024 10:28:23 -0700
Subject: [PATCH 003/176] Upgrade trunk (#108)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- buildifier 7.1.1 → 7.1.2
- renovate 37.374.3 → 37.376.0
- semgrep 1.73.0 → 1.74.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index ec0d573..66bf9e4 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -16,7 +16,7 @@ lint:
     - bandit@1.7.8
     - black@24.4.2
     - buf-lint@1.32.1
-    - buildifier@7.1.1
+    - buildifier@7.1.2
     - cfnlint@0.87.3
     - checkov@3.2.106
     - clang-format@17.0.1
@@ -38,11 +38,11 @@ lint:
     - prettier@3.2.5
     - prisma@5.14.0
     - pylint@3.2.2
-    - renovate@37.374.3
+    - renovate@37.376.0
     - rubocop@1.39.0
     - ruff@0.4.5
     - rustfmt@1.68.2
-    - semgrep@1.73.0
+    - semgrep@1.74.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0

From f05632d8593db9de42e0e0421d8fe6db1b97c193 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 31 May 2024 11:12:27 -0700
Subject: [PATCH 004/176] Upgrade trunk (#109)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

11 linters were upgraded:

- actionlint 1.7.0 → 1.7.1
- buf-lint 1.32.1 → 1.32.2
- cfnlint 0.87.3 → 0.87.4
- checkov 3.2.106 → 3.2.114
- markdownlint 0.40.0 → 0.41.0
- osv-scanner 1.7.3 → 1.7.4
- renovate 37.376.0 → 37.381.7
- ruff 0.4.5 → 0.4.6
- stylelint 16.5.0 → 16.6.1
- trivy 0.51.2 → 0.51.4
- trufflehog 3.76.3 → 3.77.0

2 tools were upgraded:

- gh 2.49.2 → 2.50.0
- gt 1.3.5 → 1.3.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 66bf9e4..3963dd5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.0
+    - actionlint@1.7.1
     - bandit@1.7.8
     - black@24.4.2
-    - buf-lint@1.32.1
+    - buf-lint@1.32.2
     - buildifier@7.1.2
-    - cfnlint@0.87.3
-    - checkov@3.2.106
+    - cfnlint@0.87.4
+    - checkov@3.2.114
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -28,34 +28,34 @@ lint:
     - golangci-lint@1.57.2
     - hadolint@2.12.0
     - isort@5.13.2
-    - markdownlint@0.40.0
+    - markdownlint@0.41.0
     - markdown-link-check@3.12.2
     - mypy@1.10.0
     - nancy@1.0.46
-    - osv-scanner@1.7.3
+    - osv-scanner@1.7.4
     - oxipng@9.1.1
     - pragma-once
     - prettier@3.2.5
     - prisma@5.14.0
     - pylint@3.2.2
-    - renovate@37.376.0
+    - renovate@37.381.7
     - rubocop@1.39.0
-    - ruff@0.4.5
+    - ruff@0.4.6
     - rustfmt@1.68.2
     - semgrep@1.74.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
     - sql-formatter@15.3.1
-    - stylelint@16.5.0:
+    - stylelint@16.6.1:
         packages:
           - stylelint-config-standard-scss@13.1.0
           - stylelint-config-clean-order@5.4.2
     - svgo@3.3.2
     - taplo@0.8.1
     - terrascan@1.19.1
-    - trivy@0.51.2
-    - trufflehog@3.76.3
+    - trivy@0.51.4
+    - trufflehog@3.77.0
     - trunk-toolbox@0.3.1
     - yamllint@1.35.1
 
@@ -88,5 +88,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.49.2
-    - gt@1.3.5
+    - gh@2.50.0
+    - gt@1.3.6

From 94f1f90b5eccc6ef50a981f0034ef38f9d55b049 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 3 Jun 2024 10:23:55 -0700
Subject: [PATCH 005/176] Upgrade trunk (#111)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- checkov 3.2.114 → 3.2.120
- renovate 37.381.7 → 37.382.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 3963dd5..b1a0f31 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.32.2
     - buildifier@7.1.2
     - cfnlint@0.87.4
-    - checkov@3.2.114
+    - checkov@3.2.120
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.2.5
     - prisma@5.14.0
     - pylint@3.2.2
-    - renovate@37.381.7
+    - renovate@37.382.4
     - rubocop@1.39.0
     - ruff@0.4.6
     - rustfmt@1.68.2

From ecfa72f0821befaf94443a3d3907e920287ef78d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Jun 2024 10:33:06 -0700
Subject: [PATCH 006/176] Bump github/codeql-action from 3.25.6 to 3.25.7 in
 the dependencies group (#110)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.6 to 3.25.7
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<h2>3.25.1 - 17 Apr 2024</h2>
<ul>
<li>We are rolling out a feature in April/May 2024 that improves the
reliability and performance of analyzing code when analyzing a compiled
language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2235">#2235</a></li>
<li>Fix a bug where the <code>init</code> Action would fail if
<code>--overwrite</code> was specified in
<code>CODEQL_ACTION_EXTRA_OPTIONS</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/2245">#2245</a></li>
</ul>
<h2>3.25.0 - 15 Apr 2024</h2>
<ul>
<li>
<p>The deprecated feature for extracting dependencies for a Python
analysis has been removed. <a
href="https://redirect.github.com/github/codeql-action/pull/2224">#2224</a></p>
<p>As a result, the following inputs and environment variables are now
ignored:</p>
<ul>
<li>The <code>setup-python-dependencies</code> input to the
<code>init</code> Action</li>
<li>The
<code>CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION</code>
environment variable</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f079b8493333aace61c81488f8bd40919487bd9f"><code>f079b84</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2317">#2317</a>
from github/update-v3.25.7-a095bf2a1</li>
<li><a
href="https://github.com/github/codeql-action/commit/e1a42688dbe6ce54cc33e2b6b65fc02abdb09762"><code>e1a4268</code></a>
Update changelog for v3.25.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/a095bf2a16b83cb3b52e6adba696c70f41e82864"><code>a095bf2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2313">#2313</a>
from github/revert-2312-update-bundle/codeql-bundle-...</li>
<li><a
href="https://github.com/github/codeql-action/commit/bbd4e19f51d83bb98b025b83b255e44eaa1a1e7f"><code>bbd4e19</code></a>
Revert &quot;Update default bundle to 2.17.4&quot;</li>
<li><a
href="https://github.com/github/codeql-action/commit/9ab5d16a3df4885b74bb18ab349bcc6c253ee3e0"><code>9ab5d16</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2312">#2312</a>
from github/update-bundle/codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/028346e1ff2c03a735c6527b84f0a3179f2092b0"><code>028346e</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/5fe08473f8b98c47563f401bed5134a59ce06dee"><code>5fe0847</code></a>
Update default bundle to codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/9550da953dd3b29aedf76cd635101e48eae5eebd"><code>9550da9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2311">#2311</a>
from github/henrymercer/pack-missing-auth-config-error</li>
<li><a
href="https://github.com/github/codeql-action/commit/6548a4d65ce2414afca98f8368cabfff0541ba18"><code>6548a4d</code></a>
Add configuration error for missing auth to package registry</li>
<li><a
href="https://github.com/github/codeql-action/commit/7927df07e268eafe499c344cd19f8bf82f4f19f7"><code>7927df0</code></a>
Bump micromatch from 4.0.5 to 4.0.7 in the npm group (<a
href="https://redirect.github.com/github/codeql-action/issues/2310">#2310</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/9fdb3e49720b44c48891d036bb502feb25684276...f079b8493333aace61c81488f8bd40919487bd9f">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.6&new-version=3.25.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 7ede198..1d13d74 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
+        uses: github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
+        uses: github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
+        uses: github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b865c77..cb7ec48 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
+        uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
         with:
           sarif_file: results.sarif

From aad37dbefefc1f76658b426e3b26b0a3eaaee09c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 7 Jun 2024 10:36:21 -0400
Subject: [PATCH 007/176] Upgrade trunk (#112)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- checkov 3.2.120 → 3.2.125
- prettier 3.2.5 → 3.3.1
- prisma 5.14.0 → 5.15.0
- renovate 37.382.4 → 37.393.0
- ruff 0.4.6 → 0.4.8
- semgrep 1.74.0 → 1.75.0
- stylelint 16.6.1 → 16.6.1
  - stylelint-config-clean-order 5.4.2 → 6.0.0
- trivy 0.51.4 → 0.52.0
- trufflehog 3.77.0 → 3.78.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b1a0f31..b1715eb 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.32.2
     - buildifier@7.1.2
     - cfnlint@0.87.4
-    - checkov@3.2.120
+    - checkov@3.2.125
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -35,14 +35,14 @@ lint:
     - osv-scanner@1.7.4
     - oxipng@9.1.1
     - pragma-once
-    - prettier@3.2.5
-    - prisma@5.14.0
+    - prettier@3.3.1
+    - prisma@5.15.0
     - pylint@3.2.2
-    - renovate@37.382.4
+    - renovate@37.393.0
     - rubocop@1.39.0
-    - ruff@0.4.6
+    - ruff@0.4.8
     - rustfmt@1.68.2
-    - semgrep@1.74.0
+    - semgrep@1.75.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
@@ -50,12 +50,12 @@ lint:
     - stylelint@16.6.1:
         packages:
           - stylelint-config-standard-scss@13.1.0
-          - stylelint-config-clean-order@5.4.2
+          - stylelint-config-clean-order@6.0.0
     - svgo@3.3.2
     - taplo@0.8.1
     - terrascan@1.19.1
-    - trivy@0.51.4
-    - trufflehog@3.77.0
+    - trivy@0.52.0
+    - trufflehog@3.78.0
     - trunk-toolbox@0.3.1
     - yamllint@1.35.1
 

From 0d510b88b7724f1401395e10bef5cb7df0b19418 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Jun 2024 00:36:52 -0400
Subject: [PATCH 008/176] Bump github/codeql-action from 3.25.7 to 3.25.8 in
 the dependencies group (#113)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.7 to 3.25.8
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<h2>3.25.1 - 17 Apr 2024</h2>
<ul>
<li>We are rolling out a feature in April/May 2024 that improves the
reliability and performance of analyzing code when analyzing a compiled
language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2235">#2235</a></li>
<li>Fix a bug where the <code>init</code> Action would fail if
<code>--overwrite</code> was specified in
<code>CODEQL_ACTION_EXTRA_OPTIONS</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/2245">#2245</a></li>
</ul>
<h2>3.25.0 - 15 Apr 2024</h2>
<ul>
<li>The deprecated feature for extracting dependencies for a Python
analysis has been removed. <a
href="https://redirect.github.com/github/codeql-action/pull/2224">#2224</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/2e230e8fe0ad3a14a340ad0815ddb96d599d2aff"><code>2e230e8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2323">#2323</a>
from github/update-v3.25.8-18b06dd1d</li>
<li><a
href="https://github.com/github/codeql-action/commit/66ad891bd4763033c1a60dc12dc230de94ac2c26"><code>66ad891</code></a>
Update changelog for v3.25.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/18b06dd1df819dc4edec5b409a19f0fd423b4c28"><code>18b06dd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2322">#2322</a>
from github/dependabot/npm_and_yarn/npm-10d82c2911</li>
<li><a
href="https://github.com/github/codeql-action/commit/200dd0cf5bc2c6048a01d1ebe3c1f66d3daf6887"><code>200dd0c</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/2bb35eab2ff95ab7a7aa35eef58886a26d72b922"><code>2bb35ea</code></a>
bump the npm group with 4 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/9c15e42f1946cfbe111f73c5ef018c6edc22f693"><code>9c15e42</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2321">#2321</a>
from github/update-bundle/codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/98e79227df809c000dcf3edc0758c8b389dd10e7"><code>98e7922</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/440350bade078775c9706f73128be1d19c22f3c2"><code>440350b</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/d4fcc8b7bd5fb75e4560757fd1e3491eff3148e7"><code>d4fcc8b</code></a>
Update default bundle to codeql-bundle-v2.17.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/add199be7753abbeb58eee647967afe140edaba1"><code>add199b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2320">#2320</a>
from github/angelapwen/use-linked-in-tests</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/f079b8493333aace61c81488f8bd40919487bd9f...2e230e8fe0ad3a14a340ad0815ddb96d599d2aff">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.7&new-version=3.25.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 1d13d74..42a24c9 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
+        uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
+        uses: github/codeql-action/autobuild@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
+        uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cb7ec48..d7fb300 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
+        uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
         with:
           sarif_file: results.sarif

From 7484f00606dab25758c1bdb73f35647974d57ed7 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 10 Jun 2024 11:39:24 -0400
Subject: [PATCH 009/176] Upgrade trunk (#114)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.125 → 3.2.128
- pylint 3.2.2 → 3.2.3
- renovate 37.393.0 → 37.396.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b1715eb..48e76b7 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.32.2
     - buildifier@7.1.2
     - cfnlint@0.87.4
-    - checkov@3.2.125
+    - checkov@3.2.128
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -37,8 +37,8 @@ lint:
     - pragma-once
     - prettier@3.3.1
     - prisma@5.15.0
-    - pylint@3.2.2
-    - renovate@37.393.0
+    - pylint@3.2.3
+    - renovate@37.396.1
     - rubocop@1.39.0
     - ruff@0.4.8
     - rustfmt@1.68.2

From 7014636bca95636bb77455bea1d1f3bdd595c8c8 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Wed, 19 Jun 2024 10:05:18 -0700
Subject: [PATCH 010/176] Upgrade trunk (#115)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- bandit 1.7.8 → 1.7.9
- buf-lint 1.32.2 → 1.33.0
- cfnlint 0.87.4 → 0.87.7
- checkov 3.2.128 → 3.2.136
- golangci-lint 1.57.2 → 1.59.1
- prettier 3.3.1 → 3.3.2
- renovate 37.396.1 → 37.408.0
- trivy 0.52.0 → 0.52.1
- trufflehog 3.78.0 → 3.78.1

2 tools were upgraded:

- gh 2.50.0 → 2.51.0
- gt 1.3.6 → 1.3.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 48e76b7..0b79e74 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -13,19 +13,19 @@ lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
     - actionlint@1.7.1
-    - bandit@1.7.8
+    - bandit@1.7.9
     - black@24.4.2
-    - buf-lint@1.32.2
+    - buf-lint@1.33.0
     - buildifier@7.1.2
-    - cfnlint@0.87.4
-    - checkov@3.2.128
+    - cfnlint@0.87.7
+    - checkov@3.2.136
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.57.2
+    - golangci-lint@1.59.1
     - hadolint@2.12.0
     - isort@5.13.2
     - markdownlint@0.41.0
@@ -35,10 +35,10 @@ lint:
     - osv-scanner@1.7.4
     - oxipng@9.1.1
     - pragma-once
-    - prettier@3.3.1
+    - prettier@3.3.2
     - prisma@5.15.0
     - pylint@3.2.3
-    - renovate@37.396.1
+    - renovate@37.408.0
     - rubocop@1.39.0
     - ruff@0.4.8
     - rustfmt@1.68.2
@@ -54,8 +54,8 @@ lint:
     - svgo@3.3.2
     - taplo@0.8.1
     - terrascan@1.19.1
-    - trivy@0.52.0
-    - trufflehog@3.78.0
+    - trivy@0.52.1
+    - trufflehog@3.78.1
     - trunk-toolbox@0.3.1
     - yamllint@1.35.1
 
@@ -88,5 +88,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.50.0
-    - gt@1.3.6
+    - gh@2.51.0
+    - gt@1.3.7

From 548cce3c3fad0d3e41083dfbbb51bf330498a0e8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Jun 2024 10:06:54 -0700
Subject: [PATCH 011/176] Bump github/codeql-action from 3.25.8 to 3.25.10 in
 the dependencies group (#116)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.8 to 3.25.10
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<h2>3.25.2 - 22 Apr 2024</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/23acc5c183826b7a8a97bce3cecc52db901f8251"><code>23acc5c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2337">#2337</a>
from github/update-v3.25.10-5bf6dad35</li>
<li><a
href="https://github.com/github/codeql-action/commit/9b72dbdc68c8ff81c1067a930bd2864ea707129b"><code>9b72dbd</code></a>
Update changelog for v3.25.10</li>
<li><a
href="https://github.com/github/codeql-action/commit/5bf6dad35b41961d8779984f426d6a539bbe5d10"><code>5bf6dad</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2329">#2329</a>
from github/henrymercer/csharp-buildless-rollback-me...</li>
<li><a
href="https://github.com/github/codeql-action/commit/feec81c66bfd25a8de4024a727431eb5a4b31317"><code>feec81c</code></a>
Merge branch 'main' into
henrymercer/csharp-buildless-rollback-mechanism</li>
<li><a
href="https://github.com/github/codeql-action/commit/789b5f86ef49249530b3d018f3ab10640eff231c"><code>789b5f8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2328">#2328</a>
from github/henrymercer/direct-tracing-fix</li>
<li><a
href="https://github.com/github/codeql-action/commit/c36b5fc54fb5e6fdd2c4942bcfa424f685b214a8"><code>c36b5fc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2327">#2327</a>
from github/update-bundle/codeql-bundle-v2.17.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/b3642aa04dc0ec830af386ae4c9a130a2f322aab"><code>b3642aa</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/1fc6e20182346ec584a1a9968489d2d4daa96c3f"><code>1fc6e20</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2335">#2335</a>
from github/mergeback/v3.25.9-to-main-530d4fea</li>
<li><a
href="https://github.com/github/codeql-action/commit/356bee4b4a909000f4530db85f1ea75c65cd550b"><code>356bee4</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/385808c715d3dc5b901e9fb07672dc363c43436b"><code>385808c</code></a>
Update changelog and version after v3.25.9</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2e230e8fe0ad3a14a340ad0815ddb96d599d2aff...23acc5c183826b7a8a97bce3cecc52db901f8251">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.8&new-version=3.25.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 42a24c9..94fa05b 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/autobuild@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d7fb300..238965c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/upload-sarif@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
         with:
           sarif_file: results.sarif

From dc2ce33aa4beaf11de58041c78fd77981688e8e0 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 21 Jun 2024 10:29:54 -0700
Subject: [PATCH 012/176] Upgrade trunk (#117)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- checkov 3.2.136 → 3.2.141
- prisma 5.15.0 → 5.15.1
- renovate 37.408.0 → 37.413.2
- ruff 0.4.8 → 0.4.9
- semgrep 1.75.0 → 1.76.0
- sql-formatter 15.3.1 → 15.3.2
- trivy 0.52.1 → 0.52.2

1 tool was upgraded:

- gt 1.3.7 → 1.3.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 0b79e74..180f04d 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.33.0
     - buildifier@7.1.2
     - cfnlint@0.87.7
-    - checkov@3.2.136
+    - checkov@3.2.141
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,17 +36,17 @@ lint:
     - oxipng@9.1.1
     - pragma-once
     - prettier@3.3.2
-    - prisma@5.15.0
+    - prisma@5.15.1
     - pylint@3.2.3
-    - renovate@37.408.0
+    - renovate@37.413.2
     - rubocop@1.39.0
-    - ruff@0.4.8
+    - ruff@0.4.9
     - rustfmt@1.68.2
-    - semgrep@1.75.0
+    - semgrep@1.76.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
-    - sql-formatter@15.3.1
+    - sql-formatter@15.3.2
     - stylelint@16.6.1:
         packages:
           - stylelint-config-standard-scss@13.1.0
@@ -54,7 +54,7 @@ lint:
     - svgo@3.3.2
     - taplo@0.8.1
     - terrascan@1.19.1
-    - trivy@0.52.1
+    - trivy@0.52.2
     - trufflehog@3.78.1
     - trunk-toolbox@0.3.1
     - yamllint@1.35.1
@@ -89,4 +89,4 @@ actions:
 tools:
   enabled:
     - gh@2.51.0
-    - gt@1.3.7
+    - gt@1.3.9

From 85e221a77fddd3bf24e7ec32a259a9fe964ceb8c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 24 Jun 2024 10:48:47 -0700
Subject: [PATCH 013/176] Upgrade trunk (#118)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- osv-scanner 1.7.4 → 1.8.1
- renovate 37.413.2 → 37.413.4
- ruff 0.4.9 → 0.4.10
- trufflehog 3.78.1 → 3.78.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 180f04d..3275e0b 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -32,15 +32,15 @@ lint:
     - markdown-link-check@3.12.2
     - mypy@1.10.0
     - nancy@1.0.46
-    - osv-scanner@1.7.4
+    - osv-scanner@1.8.1
     - oxipng@9.1.1
     - pragma-once
     - prettier@3.3.2
     - prisma@5.15.1
     - pylint@3.2.3
-    - renovate@37.413.2
+    - renovate@37.413.4
     - rubocop@1.39.0
-    - ruff@0.4.9
+    - ruff@0.4.10
     - rustfmt@1.68.2
     - semgrep@1.76.0
     - shellcheck@0.10.0
@@ -55,7 +55,7 @@ lint:
     - taplo@0.8.1
     - terrascan@1.19.1
     - trivy@0.52.2
-    - trufflehog@3.78.1
+    - trufflehog@3.78.2
     - trunk-toolbox@0.3.1
     - yamllint@1.35.1
 

From a4dbd371236c962c0fdb91eb77530f863979c3b3 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 28 Jun 2024 10:19:29 -0700
Subject: [PATCH 014/176] Upgrade trunk (#119)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- buf-lint 1.33.0 → 1.34.0
- cfnlint 0.87.7 → 1.3.7
- checkov 3.2.141 → 3.2.148
- mypy 1.10.0 → 1.10.1
- prisma 5.15.1 → 5.16.0
- pylint 3.2.3 → 3.2.4
- renovate 37.413.4 → 37.420.1
- semgrep 1.76.0 → 1.77.0
- trufflehog 3.78.2 → 3.79.0
- trunk-toolbox 0.3.1 → 0.3.2

1 tool was upgraded:

- gh 2.51.0 → 2.52.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 3275e0b..6886cb0 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -15,10 +15,10 @@ lint:
     - actionlint@1.7.1
     - bandit@1.7.9
     - black@24.4.2
-    - buf-lint@1.33.0
+    - buf-lint@1.34.0
     - buildifier@7.1.2
-    - cfnlint@0.87.7
-    - checkov@3.2.141
+    - cfnlint@1.3.7
+    - checkov@3.2.148
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,19 +30,19 @@ lint:
     - isort@5.13.2
     - markdownlint@0.41.0
     - markdown-link-check@3.12.2
-    - mypy@1.10.0
+    - mypy@1.10.1
     - nancy@1.0.46
     - osv-scanner@1.8.1
     - oxipng@9.1.1
     - pragma-once
     - prettier@3.3.2
-    - prisma@5.15.1
-    - pylint@3.2.3
-    - renovate@37.413.4
+    - prisma@5.16.0
+    - pylint@3.2.4
+    - renovate@37.420.1
     - rubocop@1.39.0
     - ruff@0.4.10
     - rustfmt@1.68.2
-    - semgrep@1.76.0
+    - semgrep@1.77.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
@@ -55,8 +55,8 @@ lint:
     - taplo@0.8.1
     - terrascan@1.19.1
     - trivy@0.52.2
-    - trufflehog@3.78.2
-    - trunk-toolbox@0.3.1
+    - trufflehog@3.79.0
+    - trunk-toolbox@0.3.2
     - yamllint@1.35.1
 
   # Sourcing repos will have these configs available to applicable linters
@@ -88,5 +88,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.51.0
+    - gh@2.52.0
     - gt@1.3.9

From 12e702ae086dcaed664d951547e37e094e5de966 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 1 Jul 2024 09:54:10 -0700
Subject: [PATCH 015/176] Bump the dependencies group with 2 updates (#120)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.25.10 to 3.25.11
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<h2>3.25.3 - 25 Apr 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2247">#2247</a></li>
<li>Workflows running on <code>macos-latest</code> using CodeQL CLI
versions before v2.15.1 will need to either upgrade their CLI version to
v2.15.1 or newer, or change the platform to an Intel MacOS runner, such
as <code>macos-12</code>. ARM machines with SIP disabled, including the
newest <code>macos-latest</code> image, are unsupported for CLI versions
before 2.15.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2261">#2261</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/b611370bb5703a7efb587f9d136a52ea24c5c38c"><code>b611370</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2357">#2357</a>
from github/update-v3.25.11-de945755c</li>
<li><a
href="https://github.com/github/codeql-action/commit/3e6431f3accd84bb42779fc3c9d9f447caa3a6d3"><code>3e6431f</code></a>
Update changelog for v3.25.11</li>
<li><a
href="https://github.com/github/codeql-action/commit/de945755c9edd3a4e5d160a71f1482ece6a3c271"><code>de94575</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2352">#2352</a>
from github/update-bundle/codeql-bundle-v2.17.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/a32d3058b827f5d2ba08dc2570887f14b164a794"><code>a32d305</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/9ccc99508a819cb9c340028d7711b129f96c8a2e"><code>9ccc995</code></a>
Update default bundle to codeql-bundle-v2.17.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/9b7c22c3b39078582fa6d0d8f3841e944ec54582"><code>9b7c22c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2351">#2351</a>
from github/dependabot/npm_and_yarn/npm-6791eaa26c</li>
<li><a
href="https://github.com/github/codeql-action/commit/9cf3243b0be3a9e0efff20a7fabd5a11246168e9"><code>9cf3243</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/1895b29ac8e2046ddb708ac1eca53e6d5e143337"><code>1895b29</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/9dcfde966d641c9a59ee02a83f18329a2b2caace"><code>9dcfde9</code></a>
Bump the npm group with 2 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/8723b5be41df185b62efd22191bb83fc24539ca0"><code>8723b5b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2350">#2350</a>
from github/angelapwen/add-exclude-pr-check-param</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/23acc5c183826b7a8a97bce3cecc52db901f8251...b611370bb5703a7efb587f9d136a52ea24c5c38c">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.15 to 1.1.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.16</h2>
<h2>What's Changed</h2>
<ul>
<li>[feat] add timeout and ability to cat debug logs by <a
href="https://github.com/Ryang20718"><code>@​Ryang20718</code></a> in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/245">trunk-io/trunk-action#245</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Ryang20718"><code>@​Ryang20718</code></a> made
their first contribution in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/245">trunk-io/trunk-action#245</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1...v1.1.16">https://github.com/trunk-io/trunk-action/compare/v1...v1.1.16</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/86b68ffae610a05105e90b1f52ad8c549ef482c2"><code>86b68ff</code></a>
[feat] add timeout and ability to cat debug logs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/245">#245</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/6eac1bb24506bc4fc043f7df134454bbd702bb9d"><code>6eac1bb</code></a>
Upgrade trunk to 1.22.2 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/246">#246</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/f64973be10d5b78204e22688b949b34665e5df17"><code>f64973b</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/244">#244</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/f6c5f1b90503c30e02059667dbc247f2257b63c5...86b68ffae610a05105e90b1f52ad8c549ef482c2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml        | 6 +++---
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/upgrade_trunk.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 94fa05b..f045c13 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/autobuild@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 238965c..934c7df 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index d2e7991..1eef06b 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@f6c5f1b90503c30e02059667dbc247f2257b63c5
+        uses: trunk-io/trunk-action/upgrade@86b68ffae610a05105e90b1f52ad8c549ef482c2
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From 7a24477479168df11c0d39bbae7c1e55673b7933 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 1 Jul 2024 09:57:04 -0700
Subject: [PATCH 016/176] Upgrade trunk (#121)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- cfnlint 1.3.7 → 1.4.2
- checkov 3.2.148 → 3.2.156
- prisma 5.16.0 → 5.16.1
- ruff 0.4.10 → 0.5.0
- semgrep 1.77.0 → 1.78.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 6886cb0..0b45c9a 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.4.2
     - buf-lint@1.34.0
     - buildifier@7.1.2
-    - cfnlint@1.3.7
-    - checkov@3.2.148
+    - cfnlint@1.4.2
+    - checkov@3.2.156
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,13 +36,13 @@ lint:
     - oxipng@9.1.1
     - pragma-once
     - prettier@3.3.2
-    - prisma@5.16.0
+    - prisma@5.16.1
     - pylint@3.2.4
     - renovate@37.420.1
     - rubocop@1.39.0
-    - ruff@0.4.10
+    - ruff@0.5.0
     - rustfmt@1.68.2
-    - semgrep@1.77.0
+    - semgrep@1.78.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0

From 326e542ee016319f82ce72f1847843077e8b0dc3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jul 2024 10:29:13 -0700
Subject: [PATCH 017/176] Bump actions/upload-artifact from 4.3.3 to 4.3.4 in
 the dependencies group (#123)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 1 update:
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `actions/upload-artifact` from 4.3.3 to 4.3.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/artifact</code> version, bump dependencies by
<a href="https://github.com/robherley"><code>@​robherley</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/584">actions/upload-artifact#584</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4">https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/0b2256b8c012f0828dc542b3febcab082c67f72b"><code>0b2256b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/584">#584</a>
from actions/robherley/bump-pkgs</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/488dcefb9bf01619ac19bad29c5c5409a1e4dd4c"><code>488dcef</code></a>
licensed cache</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/04c51f57662651dd3333286989e2db1111c0fd07"><code>04c51f5</code></a>
ncc</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/32a9e276a8f8ac18b4b2dce8213ed340ed4e5ed8"><code>32a9e27</code></a>
bump <code>@​actions/artifact</code> and npm audit</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/552bf3722c16e81001aea7db72d8cedf64eb5f68"><code>552bf37</code></a>
new version</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/79616d2ded92999fceefea2ca2e4bdf6101fa919"><code>79616d2</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/565">#565</a>
from actions/eggyhead/use-artifact-v2.1.6</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4.3.3&new-version=4.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/scorecard.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 934c7df..b6224fa 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
         with:
           name: SARIF file
           path: results.sarif

From 9c4759042344be20c76cc617f0a2cb16dece1249 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 8 Jul 2024 10:29:36 -0700
Subject: [PATCH 018/176] Upgrade trunk (#122)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- cfnlint 1.4.2 → 1.5.0
- checkov 3.2.156 → 3.2.174
- pylint 3.2.4 → 3.2.5
- renovate 37.420.1 → 37.424.1
- stylelint 16.6.1 → 16.6.1
  - stylelint-config-clean-order 6.0.0 → 6.1.0

1 tool was upgraded:

- gt 1.3.9 → 1.3.10

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 0b45c9a..cf53c32 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.4.2
     - buf-lint@1.34.0
     - buildifier@7.1.2
-    - cfnlint@1.4.2
-    - checkov@3.2.156
+    - cfnlint@1.5.0
+    - checkov@3.2.174
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -37,8 +37,8 @@ lint:
     - pragma-once
     - prettier@3.3.2
     - prisma@5.16.1
-    - pylint@3.2.4
-    - renovate@37.420.1
+    - pylint@3.2.5
+    - renovate@37.424.1
     - rubocop@1.39.0
     - ruff@0.5.0
     - rustfmt@1.68.2
@@ -50,7 +50,7 @@ lint:
     - stylelint@16.6.1:
         packages:
           - stylelint-config-standard-scss@13.1.0
-          - stylelint-config-clean-order@6.0.0
+          - stylelint-config-clean-order@6.1.0
     - svgo@3.3.2
     - taplo@0.8.1
     - terrascan@1.19.1
@@ -89,4 +89,4 @@ actions:
 tools:
   enabled:
     - gh@2.52.0
-    - gt@1.3.9
+    - gt@1.3.10

From 42d48b9849b8e303c905ccafe1d8be95d971ad71 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 12 Jul 2024 10:52:58 -0700
Subject: [PATCH 019/176] Upgrade trunk (#124)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.5.0 → 1.5.3
- checkov 3.2.174 → 3.2.184
- osv-scanner 1.8.1 → 1.8.2
- prisma 5.16.1 → 5.16.2
- renovate 37.424.1 → 37.428.2
- ruff 0.5.0 → 0.5.1
- semgrep 1.78.0 → 1.79.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index cf53c32..6531304 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.4.2
     - buf-lint@1.34.0
     - buildifier@7.1.2
-    - cfnlint@1.5.0
-    - checkov@3.2.174
+    - cfnlint@1.5.3
+    - checkov@3.2.184
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,17 +32,17 @@ lint:
     - markdown-link-check@3.12.2
     - mypy@1.10.1
     - nancy@1.0.46
-    - osv-scanner@1.8.1
+    - osv-scanner@1.8.2
     - oxipng@9.1.1
     - pragma-once
     - prettier@3.3.2
-    - prisma@5.16.1
+    - prisma@5.16.2
     - pylint@3.2.5
-    - renovate@37.424.1
+    - renovate@37.428.2
     - rubocop@1.39.0
-    - ruff@0.5.0
+    - ruff@0.5.1
     - rustfmt@1.68.2
-    - semgrep@1.78.0
+    - semgrep@1.79.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0

From 752c161a3a028ba82113703f3d3530d21da008fd Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 15 Jul 2024 10:01:18 -0700
Subject: [PATCH 020/176] Upgrade trunk (#126)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- cfnlint 1.5.3 → 1.6.0
- checkov 3.2.184 → 3.2.186
- renovate 37.428.2 → 37.429.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 6531304..6922488 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.4.2
     - buf-lint@1.34.0
     - buildifier@7.1.2
-    - cfnlint@1.5.3
-    - checkov@3.2.184
+    - cfnlint@1.6.0
+    - checkov@3.2.186
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.3.2
     - prisma@5.16.2
     - pylint@3.2.5
-    - renovate@37.428.2
+    - renovate@37.429.1
     - rubocop@1.39.0
     - ruff@0.5.1
     - rustfmt@1.68.2

From f799a3e04f5a9643867f73e98734db527580b786 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Jul 2024 08:01:53 -0700
Subject: [PATCH 021/176] Bump github/codeql-action from 3.25.11 to 3.25.12 in
 the dependencies group (#125)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.25.11 to 3.25.12
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<ul>
<li>We are rolling out a feature in May/June 2024 that will reduce the
Actions cache usage of the Action by keeping only the newest TRAP cache
for each language. <a
href="https://redirect.github.com/github/codeql-action/pull/2306">#2306</a></li>
</ul>
<h2>3.25.6 - 20 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2295">#2295</a></li>
</ul>
<h2>3.25.5 - 13 May 2024</h2>
<ul>
<li>Add a compatibility matrix of supported CodeQL Action, CodeQL CLI,
and GitHub Enterprise Server versions to the <a
href="https://github.com/github/codeql-action/blob/main/README.md">https://github.com/github/codeql-action/blob/main/README.md</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/2273">#2273</a></li>
<li>Avoid printing out a warning for a missing <code>on.push</code>
trigger when the CodeQL Action is triggered via a
<code>workflow_call</code> event. <a
href="https://redirect.github.com/github/codeql-action/pull/2274">#2274</a></li>
<li>The <code>tools: latest</code> input to the <code>init</code> Action
has been renamed to <code>tools: linked</code>. This option specifies
that the Action should use the tools shipped at the same time as the
Action. The old name will continue to work for backwards compatibility,
but we recommend that new workflows use the new name. <a
href="https://redirect.github.com/github/codeql-action/pull/2281">#2281</a></li>
</ul>
<h2>3.25.4 - 08 May 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2270">#2270</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/4fa2a7953630fd2f3fb380f21be14ede0169dd4f"><code>4fa2a79</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2369">#2369</a>
from github/update-v3.25.12-947b18fb7</li>
<li><a
href="https://github.com/github/codeql-action/commit/dec6fb713c18d10611178d0d693c19aea88c8e8d"><code>dec6fb7</code></a>
Update changelog for v3.25.12</li>
<li><a
href="https://github.com/github/codeql-action/commit/947b18fb721ec7b717188ea2d1b77547494b5d71"><code>947b18f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2365">#2365</a>
from github/dependabot/npm_and_yarn/npm-88aac57241</li>
<li><a
href="https://github.com/github/codeql-action/commit/9ab727712f519b1609826257798e28ecf183223c"><code>9ab7277</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2364">#2364</a>
from github/update-bundle/codeql-bundle-v2.18.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/1c60bf167bf7381660d6beef09ff28ef424ddebf"><code>1c60bf1</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.18.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/be825d5eefdb0c498fa30c4b57ec0690b4d0cecb"><code>be825d5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2353">#2353</a>
from github/henrymercer/enable-direct-tracing</li>
<li><a
href="https://github.com/github/codeql-action/commit/243e392ed031ba4a260a4f4dcfb2ea12c4f59c23"><code>243e392</code></a>
Fix PR number in changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/026682fb73007dbff555c8b972d7fe41df8f9d3b"><code>026682f</code></a>
Fix bad auto merge in changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/264cbe20c6f634b661bed76ea0993bb895d7e9c7"><code>264cbe2</code></a>
Merge branch 'main' into henrymercer/enable-direct-tracing</li>
<li><a
href="https://github.com/github/codeql-action/commit/0b65015a1d8925dd6936217bc72af1d7175d9e56"><code>0b65015</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/b611370bb5703a7efb587f9d136a52ea24c5c38c...4fa2a7953630fd2f3fb380f21be14ede0169dd4f">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.11&new-version=3.25.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index f045c13..2b7458f 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
+        uses: github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
+        uses: github/codeql-action/autobuild@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
+        uses: github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b6224fa..32a9f3b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
+        uses: github/codeql-action/upload-sarif@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
         with:
           sarif_file: results.sarif

From ecebac00cd2e8980dca632fe93a2f81ab3b5bd6c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 19 Jul 2024 10:53:07 -0700
Subject: [PATCH 022/176] Upgrade trunk (#127)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- cfnlint 1.6.0 → 1.8.0
- checkov 3.2.186 → 3.2.193
- oxipng 9.1.1 → 9.1.2
- prettier 3.3.2 → 3.3.3
- prisma 5.16.2 → 5.17.0
- renovate 37.429.1 → 37.432.0
- ruff 0.5.1 → 0.5.2
- stylelint 16.6.1 → 16.7.0
- taplo 0.8.1 → 0.9.2
- trivy 0.52.2 → 0.53.0

1 tool was upgraded:

- gh 2.52.0 → 2.53.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 6922488..f1e2bb7 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.4.2
     - buf-lint@1.34.0
     - buildifier@7.1.2
-    - cfnlint@1.6.0
-    - checkov@3.2.186
+    - cfnlint@1.8.0
+    - checkov@3.2.193
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -33,28 +33,28 @@ lint:
     - mypy@1.10.1
     - nancy@1.0.46
     - osv-scanner@1.8.2
-    - oxipng@9.1.1
+    - oxipng@9.1.2
     - pragma-once
-    - prettier@3.3.2
-    - prisma@5.16.2
+    - prettier@3.3.3
+    - prisma@5.17.0
     - pylint@3.2.5
-    - renovate@37.429.1
+    - renovate@37.432.0
     - rubocop@1.39.0
-    - ruff@0.5.1
+    - ruff@0.5.2
     - rustfmt@1.68.2
     - semgrep@1.79.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
     - sql-formatter@15.3.2
-    - stylelint@16.6.1:
+    - stylelint@16.7.0:
         packages:
           - stylelint-config-standard-scss@13.1.0
           - stylelint-config-clean-order@6.1.0
     - svgo@3.3.2
-    - taplo@0.8.1
+    - taplo@0.9.2
     - terrascan@1.19.1
-    - trivy@0.52.2
+    - trivy@0.53.0
     - trufflehog@3.79.0
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1
@@ -88,5 +88,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.52.0
+    - gh@2.53.0
     - gt@1.3.10

From 6ba6d9f0d738ff07ad313f1e2f645c76fa52680b Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 26 Jul 2024 10:07:08 -0700
Subject: [PATCH 023/176] Upgrade trunk (#129)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- buf-lint 1.34.0 → 1.35.1
- cfnlint 1.8.0 → 1.8.2
- checkov 3.2.193 → 3.2.205
- mypy 1.10.1 → 1.11.0
- pylint 3.2.5 → 3.2.6
- renovate 37.432.0 → 37.440.7
- ruff 0.5.2 → 0.5.4
- semgrep 1.79.0 → 1.81.0
- trufflehog 3.79.0 → 3.80.1

1 tool was upgraded:

- gt 1.3.10 → 1.4.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index f1e2bb7..381f42e 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -15,10 +15,10 @@ lint:
     - actionlint@1.7.1
     - bandit@1.7.9
     - black@24.4.2
-    - buf-lint@1.34.0
+    - buf-lint@1.35.1
     - buildifier@7.1.2
-    - cfnlint@1.8.0
-    - checkov@3.2.193
+    - cfnlint@1.8.2
+    - checkov@3.2.205
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,19 +30,19 @@ lint:
     - isort@5.13.2
     - markdownlint@0.41.0
     - markdown-link-check@3.12.2
-    - mypy@1.10.1
+    - mypy@1.11.0
     - nancy@1.0.46
     - osv-scanner@1.8.2
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
     - prisma@5.17.0
-    - pylint@3.2.5
-    - renovate@37.432.0
+    - pylint@3.2.6
+    - renovate@37.440.7
     - rubocop@1.39.0
-    - ruff@0.5.2
+    - ruff@0.5.4
     - rustfmt@1.68.2
-    - semgrep@1.79.0
+    - semgrep@1.81.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
@@ -55,7 +55,7 @@ lint:
     - taplo@0.9.2
     - terrascan@1.19.1
     - trivy@0.53.0
-    - trufflehog@3.79.0
+    - trufflehog@3.80.1
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1
 
@@ -89,4 +89,4 @@ actions:
 tools:
   enabled:
     - gh@2.53.0
-    - gt@1.3.10
+    - gt@1.4.1

From 1f6e6d0f11f0f542410faaaa7d651037c5d4d514 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 28 Jul 2024 16:37:49 -0700
Subject: [PATCH 024/176] Bump the dependencies group across 1 directory with 2
 updates (#130)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates in the / directory:
[github/codeql-action](https://github.com/github/codeql-action) and
[ossf/scorecard-action](https://github.com/ossf/scorecard-action).

Updates `github/codeql-action` from 3.25.12 to 3.25.15
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time.</li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2321">#2321</a></li>
</ul>
<h2>3.25.7 - 31 May 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a"><code>afb54ba</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2391">#2391</a>
from github/update-v3.25.15-4b1d7da10</li>
<li><a
href="https://github.com/github/codeql-action/commit/57a4b22c7d841087f9554367a1df5d1654ad7f58"><code>57a4b22</code></a>
Update changelog for v3.25.15</li>
<li><a
href="https://github.com/github/codeql-action/commit/4b1d7da102ff94aca014c0245062b1a463356d72"><code>4b1d7da</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2385">#2385</a>
from github/update-bundle/codeql-bundle-v2.18.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/97e8f6936878e35d1ab1aea8d48fd2eb80fd0ffc"><code>97e8f69</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.18.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/f8e94f97750f67eb20315a4c8d9e085db128b221"><code>f8e94f9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2389">#2389</a>
from github/mergeback/v3.25.14-to-main-5cf07d8b</li>
<li><a
href="https://github.com/github/codeql-action/commit/9e375a8f4f6c35a436d30c08d90e034f7ee6c9ee"><code>9e375a8</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/02d73d05447c3f282c80a9ce71dc56ba6cc59e38"><code>02d73d0</code></a>
Update changelog and version after v3.25.14</li>
<li><a
href="https://github.com/github/codeql-action/commit/5cf07d8b700b67e235fbb65cbc84f69c0cf10464"><code>5cf07d8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2388">#2388</a>
from github/update-v3.25.14-1b214db07</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecab108bfbff33cc4c0c91c5ae22d2cfbd04073b"><code>ecab108</code></a>
Update changelog for v3.25.14</li>
<li><a
href="https://github.com/github/codeql-action/commit/1b214db077827f5ba810f244daaecfd95c3bd111"><code>1b214db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2387">#2387</a>
from github/aibaars/remove-set-secret</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/4fa2a7953630fd2f3fb380f21be14ede0169dd4f...afb54ba388a7dca6ecae48f608c4ff05ff4cc77a">compare
view</a></li>
</ul>
</details>
<br />

Updates `ossf/scorecard-action` from 2.3.3 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.0</h2>
<h2>What's Changed</h2>
<p>This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the <a
href="https://github.com/ossf/scorecard/releases/tag/v5.0.0">v5.0.0
release notes</a>. Of special note to Scorecard Action is the Maintainer
Annotation feature, which can be used to suppress some Code Scanning
false positives. Alerts will not be generated for any Scorecard Check
with an annotation.</p>
<ul>
<li>:seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to
v5.0.0 by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1410">ossf/scorecard-action#1410</a></li>
<li>:bug: lower license sarif alert threshold to 9 by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1411">ossf/scorecard-action#1411</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>docs: dogfooding badge by <a
href="https://github.com/jkowalleck"><code>@​jkowalleck</code></a> in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1399">ossf/scorecard-action#1399</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/jkowalleck"><code>@​jkowalleck</code></a> made
their first contribution in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1399">ossf/scorecard-action#1399</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0">https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ossf/scorecard-action/commit/62b2cac7ed8198b15735ed49ab1e5cf35480ba46"><code>62b2cac</code></a>
bump docker tag to v2.4.0 for release (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1414">#1414</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/c09630c42e97d04c7cd8f69735ddf0ec53f0e189"><code>c09630c</code></a>
lower license score alert threshold to 9 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1411">#1411</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/cf8594c5485256008de4ec57c936bd4a1a381a0b"><code>cf8594c</code></a>
:seedling: Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1413">#1413</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/de5fcb95b9d8f899bc5dc11b4e202eb6a2fd67e9"><code>de5fcb9</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1412">#1412</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/a46b90b4caca61e2298cc4a9bd4c90d3dfe7f09d"><code>a46b90b</code></a>
bump scorecard to v5.0.0 release (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1410">#1410</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/9fc518d5249b2564cbeb11d029b87d7d1ba55396"><code>9fc518d</code></a>
:seedling: Bump golang in the docker-images group (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1407">#1407</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/a8eaa1b46e3fd7e003f79fd39dff99ca53bbe732"><code>a8eaa1b</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1408">#1408</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/873d5fdf63bc863d140f57ed481e6a297324030b"><code>873d5fd</code></a>
:seedling: Bump the github-actions group across 1 directory with 2
updates (#...</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/54cc1fe4e2c7bc69051a267c8e183497ca7d8da7"><code>54cc1fe</code></a>
:seedling: Bump the docker-images group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1401">#1401</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/82bcb91c5d3f72aaf692a0d3e399c425a29ac512"><code>82bcb91</code></a>
:seedling: Bump golang.org/x/net from 0.26.0 to 0.27.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1400">#1400</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ossf/scorecard-action/compare/dc50aa9510b46c811795eb24b2f1ba02a914e534...62b2cac7ed8198b15735ed49ab1e5cf35480ba46">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 2b7458f..50c570f 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
+        uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
+        uses: github/codeql-action/autobuild@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
+        uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 32a9f3b..f10d52f 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
+        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
+        uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
         with:
           sarif_file: results.sarif

From 292416b2cdbacad77065dbe661e231d95d93007e Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 29 Jul 2024 09:56:05 -0700
Subject: [PATCH 025/176] Upgrade trunk (#131)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.205 → 3.2.208
- renovate 37.440.7 → 38.6.0
- ruff 0.5.4 → 0.5.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 381f42e..86d5195 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.35.1
     - buildifier@7.1.2
     - cfnlint@1.8.2
-    - checkov@3.2.205
+    - checkov@3.2.208
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.3.3
     - prisma@5.17.0
     - pylint@3.2.6
-    - renovate@37.440.7
+    - renovate@38.6.0
     - rubocop@1.39.0
-    - ruff@0.5.4
+    - ruff@0.5.5
     - rustfmt@1.68.2
     - semgrep@1.81.0
     - shellcheck@0.10.0

From 25a5f9910fbb6f438aa6fd10d7b05043461d3811 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 2 Aug 2024 14:16:32 -0700
Subject: [PATCH 026/176] Upgrade trunk (#132)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.8.2 → 1.9.2
- checkov 3.2.208 → 3.2.217
- mypy 1.11.0 → 1.11.1
- renovate 38.6.0 → 38.17.1
- semgrep 1.81.0 → 1.82.0
- stylelint 16.7.0 → 16.8.1
- taplo 0.9.2 → 0.9.3
- trivy 0.53.0 → 0.54.1
- trufflehog 3.80.1 → 3.80.5

1 tool was upgraded:

- gh 2.53.0 → 2.54.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 86d5195..0a416c3 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.4.2
     - buf-lint@1.35.1
     - buildifier@7.1.2
-    - cfnlint@1.8.2
-    - checkov@3.2.208
+    - cfnlint@1.9.2
+    - checkov@3.2.217
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,7 +30,7 @@ lint:
     - isort@5.13.2
     - markdownlint@0.41.0
     - markdown-link-check@3.12.2
-    - mypy@1.11.0
+    - mypy@1.11.1
     - nancy@1.0.46
     - osv-scanner@1.8.2
     - oxipng@9.1.2
@@ -38,24 +38,24 @@ lint:
     - prettier@3.3.3
     - prisma@5.17.0
     - pylint@3.2.6
-    - renovate@38.6.0
+    - renovate@38.17.1
     - rubocop@1.39.0
     - ruff@0.5.5
     - rustfmt@1.68.2
-    - semgrep@1.81.0
+    - semgrep@1.82.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
     - sql-formatter@15.3.2
-    - stylelint@16.7.0:
+    - stylelint@16.8.1:
         packages:
           - stylelint-config-standard-scss@13.1.0
           - stylelint-config-clean-order@6.1.0
     - svgo@3.3.2
-    - taplo@0.9.2
+    - taplo@0.9.3
     - terrascan@1.19.1
-    - trivy@0.53.0
-    - trufflehog@3.80.1
+    - trivy@0.54.1
+    - trufflehog@3.80.5
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1
 
@@ -88,5 +88,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.53.0
+    - gh@2.54.0
     - gt@1.4.1

From 3309525c1d188d045f4395b56a7e9d0611c4cde5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Aug 2024 10:00:15 -0700
Subject: [PATCH 027/176] Bump actions/upload-artifact from 4.3.4 to 4.3.5 in
 the dependencies group (#133)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 1 update:
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `actions/upload-artifact` from 4.3.4 to 4.3.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/artifact</code> to v2.1.9 by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/588">actions/upload-artifact#588</a>
<ul>
<li>Fixed artifact upload chunk timeout logic <a
href="https://redirect.github.com/actions/toolkit/pull/1774">#1774</a></li>
<li>Use lazy stream to prevent issues with open file limits <a
href="https://redirect.github.com/actions/toolkit/pull/1771">#1771</a></li>
</ul>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5">https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/89ef406dd8d7e03cfd12d9e0a4a378f454709029"><code>89ef406</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/588">#588</a>
from actions/robherley/4.3.5</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/23d796df36a979af3abdb7f632f5391e4f15fa07"><code>23d796d</code></a>
license updates</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/e445c64bc2a4ebc990affbc00aa66b845f05600a"><code>e445c64</code></a>
bump <code>@​actions/artifact</code> to v2.1.9</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/0b2256b8c012f0828dc542b3febcab082c67f72b...89ef406dd8d7e03cfd12d9e0a4a378f454709029">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4.3.4&new-version=4.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/scorecard.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index f10d52f..13e9470 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+        uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: SARIF file
           path: results.sarif

From 7a8aef33246f68300e0b845c0da9aecd2bad9c6b Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 5 Aug 2024 10:03:35 -0700
Subject: [PATCH 028/176] Upgrade trunk (#134)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- cfnlint 1.9.2 → 1.9.3
- renovate 38.17.1 → 38.18.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 0a416c3..97c1424 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.4.2
     - buf-lint@1.35.1
     - buildifier@7.1.2
-    - cfnlint@1.9.2
+    - cfnlint@1.9.3
     - checkov@3.2.217
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.3.3
     - prisma@5.17.0
     - pylint@3.2.6
-    - renovate@38.17.1
+    - renovate@38.18.7
     - rubocop@1.39.0
     - ruff@0.5.5
     - rustfmt@1.68.2

From aa567ba79a01be7953dc8cdb040508eccdf37738 Mon Sep 17 00:00:00 2001
From: Chris Clearwater <chris@clearwater.dev>
Date: Wed, 7 Aug 2024 11:48:58 -0700
Subject: [PATCH 029/176] Pin buf to an older version to avoid timeout (#135)

See https://github.com/bufbuild/buf/issues/3219
---
 .trunk/trunk.yaml | 4 ++--
 plugin.yaml       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 4704bd1..fc9f08f 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -1,11 +1,11 @@
 version: 0.1
 cli:
-  version: 1.20.1
+  version: 1.22.2
 plugins:
   sources:
     - id: trunk
       uri: https://github.com/trunk-io/plugins
-      ref: v1.4.5
+      ref: v1.6.1
 
     - id: configs
       local: .
diff --git a/plugin.yaml b/plugin.yaml
index 97c1424..e1d2de2 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -15,7 +15,7 @@ lint:
     - actionlint@1.7.1
     - bandit@1.7.9
     - black@24.4.2
-    - buf-lint@1.35.1
+    - buf-lint@1.31.0!
     - buildifier@7.1.2
     - cfnlint@1.9.3
     - checkov@3.2.217

From 38c580c7c586ae330fa6728092352579b4ab9b65 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 9 Aug 2024 10:01:01 -0700
Subject: [PATCH 030/176] Upgrade trunk (#136)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- black 24.4.2 → 24.8.0
- cfnlint 1.9.3 → 1.9.5
- checkov 3.2.217 → 3.2.219
- osv-scanner 1.8.2 → 1.8.3
- prisma 5.17.0 → 5.18.0
- renovate 38.18.7 → 38.21.4
- ruff 0.5.5 → 0.5.6
- semgrep 1.82.0 → 1.84.1
- trufflehog 3.80.5 → 3.81.7

1 tool was upgraded:

- gt 1.4.1 → 1.4.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index e1d2de2..46ab48f 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -14,11 +14,11 @@ lint:
   enabled:
     - actionlint@1.7.1
     - bandit@1.7.9
-    - black@24.4.2
+    - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.9.3
-    - checkov@3.2.217
+    - cfnlint@1.9.5
+    - checkov@3.2.219
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,17 +32,17 @@ lint:
     - markdown-link-check@3.12.2
     - mypy@1.11.1
     - nancy@1.0.46
-    - osv-scanner@1.8.2
+    - osv-scanner@1.8.3
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.17.0
+    - prisma@5.18.0
     - pylint@3.2.6
-    - renovate@38.18.7
+    - renovate@38.21.4
     - rubocop@1.39.0
-    - ruff@0.5.5
+    - ruff@0.5.6
     - rustfmt@1.68.2
-    - semgrep@1.82.0
+    - semgrep@1.84.1
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
@@ -55,7 +55,7 @@ lint:
     - taplo@0.9.3
     - terrascan@1.19.1
     - trivy@0.54.1
-    - trufflehog@3.80.5
+    - trufflehog@3.81.7
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1
 
@@ -89,4 +89,4 @@ actions:
 tools:
   enabled:
     - gh@2.54.0
-    - gt@1.4.1
+    - gt@1.4.2

From bc23b2397c4c7ae80822f515ca6785f37362641b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 11 Aug 2024 18:51:03 -0700
Subject: [PATCH 031/176] Bump the dependencies group with 2 updates (#137)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.25.15 to 3.26.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/eb055d739abdc2e8de2e5f4ba1a8b246daa779aa"><code>eb055d7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2410">#2410</a>
from github/update-v3.26.0-c24926b73</li>
<li><a
href="https://github.com/github/codeql-action/commit/3884d04c1155b714391ad663c28d71f332778d0c"><code>3884d04</code></a>
Update changelog for v3.26.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/c24926b73412ecf51b27bc8e3cacb43a6b3f02ae"><code>c24926b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2407">#2407</a>
from github/dependabot/npm_and_yarn/npm-7954a73ad2</li>
<li><a
href="https://github.com/github/codeql-action/commit/68ba39bacf27d8362ac9c671e45a970d776578f9"><code>68ba39b</code></a>
Merge branch 'main' into dependabot/npm_and_yarn/npm-7954a73ad2</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dd17734677bad12f20a39b470d1bd45acbadc48"><code>8dd1773</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2408">#2408</a>
from github/henrymercer/deprecate-codeql-2.13.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/441c9d90e44d79449d7f555d97a5f04f0970b927"><code>441c9d9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2409">#2409</a>
from github/henrymercer/fix-required-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/f03da1345462bf7292a562681f136608588272c5"><code>f03da13</code></a>
Exclude push-only unit tests job from required PR checks script</li>
<li><a
href="https://github.com/github/codeql-action/commit/29a5cfc75d38b3893eb5b8f72652c57a9b5231be"><code>29a5cfc</code></a>
Bump version to 3.26.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/9e440ad4c728db26c19f33cb713b9404dcc4d0ca"><code>9e440ad</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/136f5a589b6f389231c51cb03d17bb60f22ccda6"><code>136f5a5</code></a>
Add CodeQL v2.17.6 to default test versions</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a...eb055d739abdc2e8de2e5f4ba1a8b246daa779aa">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.3.5 to 4.3.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert to <code>@​actions/artifact</code> 2.1.8 by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/594">actions/upload-artifact#594</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4...v4.3.6">https://github.com/actions/upload-artifact/compare/v4...v4.3.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/834a144ee995460fba8ed112a2fc961b36a5ec5a"><code>834a144</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/594">#594</a>
from actions/robherley/4.3.6</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/134dcf33c0b9454c4b17a936843d7e21dccdc335"><code>134dcf3</code></a>
v4.3.6</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/73a0b9c9543c5bbf0637ed4d2c7798a21949ac8a"><code>73a0b9c</code></a>
revert back to <code>@​actions/artifact</code> 2.1.8</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/89ef406dd8d7e03cfd12d9e0a4a378f454709029...834a144ee995460fba8ed112a2fc961b36a5ec5a">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 50c570f..332f8a1 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
+        uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
+        uses: github/codeql-action/autobuild@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
+        uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 13e9470..35e730c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
+        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
+        uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
         with:
           sarif_file: results.sarif

From fc68fc6c8060c21e631aa9c88f566e5113ef35f9 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 12 Aug 2024 10:03:11 -0700
Subject: [PATCH 032/176] Upgrade trunk (#138)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- cfnlint 1.9.5 → 1.9.6
- renovate 38.21.4 → 38.23.2
- ruff 0.5.6 → 0.5.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 46ab48f..e80fbb6 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.9.5
+    - cfnlint@1.9.6
     - checkov@3.2.219
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.3.3
     - prisma@5.18.0
     - pylint@3.2.6
-    - renovate@38.21.4
+    - renovate@38.23.2
     - rubocop@1.39.0
-    - ruff@0.5.6
+    - ruff@0.5.7
     - rustfmt@1.68.2
     - semgrep@1.84.1
     - shellcheck@0.10.0

From c9588a355202f90d71bf5fcc9b0ed3eb6d578367 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 16 Aug 2024 10:00:07 -0700
Subject: [PATCH 033/176] Upgrade trunk (#139)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.9.6 → 1.10.1
- checkov 3.2.219 → 3.2.225
- golangci-lint 1.59.1 → 1.60.1
- renovate 38.23.2 → 38.33.0
- sql-formatter 15.3.2 → 15.4.0
- trufflehog 3.81.7 → 3.81.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index e80fbb6..6532fc2 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,15 +17,15 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.9.6
-    - checkov@3.2.219
+    - cfnlint@1.10.1
+    - checkov@3.2.225
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.59.1
+    - golangci-lint@1.60.1
     - hadolint@2.12.0
     - isort@5.13.2
     - markdownlint@0.41.0
@@ -38,7 +38,7 @@ lint:
     - prettier@3.3.3
     - prisma@5.18.0
     - pylint@3.2.6
-    - renovate@38.23.2
+    - renovate@38.33.0
     - rubocop@1.39.0
     - ruff@0.5.7
     - rustfmt@1.68.2
@@ -46,7 +46,7 @@ lint:
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
-    - sql-formatter@15.3.2
+    - sql-formatter@15.4.0
     - stylelint@16.8.1:
         packages:
           - stylelint-config-standard-scss@13.1.0
@@ -55,7 +55,7 @@ lint:
     - taplo@0.9.3
     - terrascan@1.19.1
     - trivy@0.54.1
-    - trufflehog@3.81.7
+    - trufflehog@3.81.8
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1
 

From 4c225a870c96732acba0777ced4dcff423d5a753 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 19 Aug 2024 10:46:45 -0700
Subject: [PATCH 034/176] Upgrade trunk (#141)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.10.1 → 1.10.2
- checkov 3.2.225 → 3.2.228
- renovate 38.33.0 → 38.37.1
- ruff 0.5.7 → 0.6.0
- semgrep 1.84.1 → 1.85.0
- stylelint 16.8.1 → 16.8.2
- trufflehog 3.81.8 → 3.81.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 6532fc2..73049ea 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.10.1
-    - checkov@3.2.225
+    - cfnlint@1.10.2
+    - checkov@3.2.228
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,16 +38,16 @@ lint:
     - prettier@3.3.3
     - prisma@5.18.0
     - pylint@3.2.6
-    - renovate@38.33.0
+    - renovate@38.37.1
     - rubocop@1.39.0
-    - ruff@0.5.7
+    - ruff@0.6.0
     - rustfmt@1.68.2
-    - semgrep@1.84.1
+    - semgrep@1.85.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.0
     - sql-formatter@15.4.0
-    - stylelint@16.8.1:
+    - stylelint@16.8.2:
         packages:
           - stylelint-config-standard-scss@13.1.0
           - stylelint-config-clean-order@6.1.0
@@ -55,7 +55,7 @@ lint:
     - taplo@0.9.3
     - terrascan@1.19.1
     - trivy@0.54.1
-    - trufflehog@3.81.8
+    - trufflehog@3.81.9
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1
 

From 193587d32073010b7c59b44f05db0371d4c6d9ef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 Aug 2024 16:28:51 -0700
Subject: [PATCH 035/176] Bump github/codeql-action from 3.26.0 to 3.26.2 in
 the dependencies group (#140)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.26.0 to 3.26.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/429e1977040da7a23b6822b13c129cd1ba93dbb2"><code>429e197</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2425">#2425</a>
from github/update-v3.26.2-a93f8c2fd</li>
<li><a
href="https://github.com/github/codeql-action/commit/9eec338902c44e128dd82a137fb9d91ad49f770a"><code>9eec338</code></a>
Update changelog for v3.26.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/a93f8c2fd17cc7b13e2ea952c2b97dad14ab42ff"><code>a93f8c2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2423">#2423</a>
from github/mergeback/v3.26.1-to-main-29d86d22</li>
<li><a
href="https://github.com/github/codeql-action/commit/af1f2e89e3fe28c6795170b69f9f55c0f1f87910"><code>af1f2e8</code></a>
Address incorrect CHANGELOG.md</li>
<li><a
href="https://github.com/github/codeql-action/commit/2bc3b8381e2706644af8c1361bf7d4341c0ccc55"><code>2bc3b83</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/dd9700c1669f4ea140e836695866a3f518904983"><code>dd9700c</code></a>
Reapply &quot;Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2417">#2417</a>
from github/update-bundle/codeql-bundle-v2....</li>
<li><a
href="https://github.com/github/codeql-action/commit/ece28a826ba523c14d061d28f1c00789007ff9cd"><code>ece28a8</code></a>
Update changelog and version after v3.26.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/29d86d22a34ea372b1bbf3b2dced2e25ca6b3384"><code>29d86d2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2422">#2422</a>
from github/update-v3.26.1-0d5982aa3</li>
<li><a
href="https://github.com/github/codeql-action/commit/5b15b9edebe00db5747d988e9a8ffe6835a3ba1c"><code>5b15b9e</code></a>
Revert &quot;Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2417">#2417</a>
from github/update-bundle/codeql-bundle-v2.1...</li>
<li><a
href="https://github.com/github/codeql-action/commit/18ac79e766760e675ee0af0bf3ae0e92e6262899"><code>18ac79e</code></a>
Update changelog for v3.26.1</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/eb055d739abdc2e8de2e5f4ba1a8b246daa779aa...429e1977040da7a23b6822b13c129cd1ba93dbb2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.0&new-version=3.26.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 332f8a1..59e7be7 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+        uses: github/codeql-action/init@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+        uses: github/codeql-action/autobuild@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+        uses: github/codeql-action/analyze@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 35e730c..9a06467 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+        uses: github/codeql-action/upload-sarif@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
         with:
           sarif_file: results.sarif

From b548635cc464b20c3b219065e276e1cb711be682 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Thu, 29 Aug 2024 10:00:38 -0700
Subject: [PATCH 036/176] Upgrade trunk (#142)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.10.2 → 1.10.3
- checkov 3.2.228 → 3.2.235
- golangci-lint 1.60.1 → 1.60.3
- osv-scanner 1.8.3 → 1.8.4
- renovate 38.37.1 → 38.51.1
- ruff 0.6.0 → 0.6.2
- sort-package-json 2.10.0 → 2.10.1

2 tools were upgraded:

- gh 2.54.0 → 2.55.0
- gt 1.4.2 → 1.4.3

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 73049ea..0582bbd 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,35 +17,35 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.10.2
-    - checkov@3.2.228
+    - cfnlint@1.10.3
+    - checkov@3.2.235
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.60.1
+    - golangci-lint@1.60.3
     - hadolint@2.12.0
     - isort@5.13.2
     - markdownlint@0.41.0
     - markdown-link-check@3.12.2
     - mypy@1.11.1
     - nancy@1.0.46
-    - osv-scanner@1.8.3
+    - osv-scanner@1.8.4
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
     - prisma@5.18.0
     - pylint@3.2.6
-    - renovate@38.37.1
+    - renovate@38.51.1
     - rubocop@1.39.0
-    - ruff@0.6.0
+    - ruff@0.6.2
     - rustfmt@1.68.2
     - semgrep@1.85.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@2.10.0
+    - sort-package-json@2.10.1
     - sql-formatter@15.4.0
     - stylelint@16.8.2:
         packages:
@@ -88,5 +88,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.54.0
-    - gt@1.4.2
+    - gh@2.55.0
+    - gt@1.4.3

From bfd3cab8695608b151ce05e96413f4e2d209006a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 29 Aug 2024 11:29:49 -0700
Subject: [PATCH 037/176] Bump github/codeql-action from 3.26.2 to 3.26.5 in
 the dependencies group (#143)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.26.2 to 3.26.5
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/2c779ab0d087cd7fe7b826087247c2c81f27bfa6"><code>2c779ab</code></a>
Merge main into releases/v3 (<a
href="https://redirect.github.com/github/codeql-action/issues/2444">#2444</a>)</li>
<li><a
href="https://github.com/github/codeql-action/commit/68cd1f9de38ff4e35783f9048745ce4b37ec0c39"><code>68cd1f9</code></a>
Update changelog for v3.26.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/7e27807413d1c22e8a745f73376d16e782d861da"><code>7e27807</code></a>
Only run check SIP enablement once in <code>init</code> step (<a
href="https://redirect.github.com/github/codeql-action/issues/2441">#2441</a>)</li>
<li><a
href="https://github.com/github/codeql-action/commit/fd5fa130e2c632f29b237077157766ea2ef07a13"><code>fd5fa13</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2438">#2438</a>
from github/mergeback/v3.26.4-to-main-f0f3afee</li>
<li><a
href="https://github.com/github/codeql-action/commit/6f10eb0e3661ecb831d8e08b7bcd16e6906defe7"><code>6f10eb0</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/b15a247a6c32d431df076de50ee09b67dbef9644"><code>b15a247</code></a>
Update changelog and version after v3.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/f0f3afee809481da311ca3a6ff1ff51d81dbeb24"><code>f0f3afe</code></a>
Merge main into releases/v3 (<a
href="https://redirect.github.com/github/codeql-action/issues/2437">#2437</a>)</li>
<li><a
href="https://github.com/github/codeql-action/commit/e3543591a523b40efe5604333b75986a211c9d50"><code>e354359</code></a>
Update changelog for v3.26.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/ae01f807ca7dae87a61d9c5e36c06676ade69b1b"><code>ae01f80</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2436">#2436</a>
from rvermeulen/rvermeulen/deprecate-add-snippets</li>
<li><a
href="https://github.com/github/codeql-action/commit/72bc3f7f619fdbada5d8d589b47c52c32f9ad097"><code>72bc3f7</code></a>
Address incorrect changelog location</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/429e1977040da7a23b6822b13c129cd1ba93dbb2...2c779ab0d087cd7fe7b826087247c2c81f27bfa6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.2&new-version=3.26.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 59e7be7..99a04c0 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+        uses: github/codeql-action/init@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+        uses: github/codeql-action/autobuild@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+        uses: github/codeql-action/analyze@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 9a06467..baf986d 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+        uses: github/codeql-action/upload-sarif@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
         with:
           sarif_file: results.sarif

From 25e3e781bf239a3b0bfe5372b90916280e672ae7 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 30 Aug 2024 11:34:27 -0700
Subject: [PATCH 038/176] Upgrade trunk (#144)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.10.3 → 1.11.0
- checkov 3.2.235 → 3.2.239
- mypy 1.11.1 → 1.11.2
- prisma 5.18.0 → 5.19.0
- renovate 38.51.1 → 38.57.0
- sql-formatter 15.4.0 → 15.4.1
- stylelint 16.8.2 → 16.9.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

---------

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
Co-authored-by: Tyler Jang <tyler@trunk.io>
---
 .trunk/trunk.yaml |  2 +-
 plugin.yaml       | 17 +++++++++--------
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index fc9f08f..765b52d 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -5,7 +5,7 @@ plugins:
   sources:
     - id: trunk
       uri: https://github.com/trunk-io/plugins
-      ref: v1.6.1
+      ref: v1.6.2
 
     - id: configs
       local: .
diff --git a/plugin.yaml b/plugin.yaml
index 0582bbd..a417735 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.10.3
-    - checkov@3.2.235
+    - cfnlint@1.11.0
+    - checkov@3.2.239
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,15 +30,15 @@ lint:
     - isort@5.13.2
     - markdownlint@0.41.0
     - markdown-link-check@3.12.2
-    - mypy@1.11.1
+    - mypy@1.11.2
     - nancy@1.0.46
     - osv-scanner@1.8.4
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.18.0
+    - prisma@5.19.0
     - pylint@3.2.6
-    - renovate@38.51.1
+    - renovate@38.57.0
     - rubocop@1.39.0
     - ruff@0.6.2
     - rustfmt@1.68.2
@@ -46,15 +46,16 @@ lint:
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
-    - sql-formatter@15.4.0
-    - stylelint@16.8.2:
+    - sql-formatter@15.4.1
+    - stylelint@16.9.0:
         packages:
           - stylelint-config-standard-scss@13.1.0
           - stylelint-config-clean-order@6.1.0
     - svgo@3.3.2
     - taplo@0.9.3
     - terrascan@1.19.1
-    - trivy@0.54.1
+    # Disabled until filesystem scanner initialize error resolved.
+    # - trivy@0.54.1
     - trufflehog@3.81.9
     - trunk-toolbox@0.3.2
     - yamllint@1.35.1

From 011c32a9ca08e301a6f4086afc4073b93a42b390 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Sep 2024 20:38:30 -0700
Subject: [PATCH 039/176] Bump the dependencies group with 2 updates (#145)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.26.5 to 3.26.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/4dd16135b69a43b6c8efb853346f8437d92d3c93"><code>4dd1613</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2452">#2452</a>
from github/update-v3.26.6-7233ec5e6</li>
<li><a
href="https://github.com/github/codeql-action/commit/dd9dd2d5389e8ca48a8201513c3fd18d7fda567d"><code>dd9dd2d</code></a>
Update changelog for v3.26.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/7233ec5e6b313c47141f047dd5be5f957560dd27"><code>7233ec5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2449">#2449</a>
from github/update-bundle/codeql-bundle-v2.18.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/a32c44dba17a9c6628320a29508e84e052128a3a"><code>a32c44d</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/2966897c6759237a41ccd8fd392565a4e86a5121"><code>2966897</code></a>
Update default bundle to codeql-bundle-v2.18.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/b8efe4dc6ab6d31abe3ec159420d2a4916880800"><code>b8efe4d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2435">#2435</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/ab408a875b0616b0e5eaa4d0d86ac836a29cfb4e"><code>ab408a8</code></a>
Merge branch 'main' into
update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/864b979bc3eb6b10501334cb368b2b398a60ff1b"><code>864b979</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2443">#2443</a>
from github/dbartol/config-file-telemetry</li>
<li><a
href="https://github.com/github/codeql-action/commit/d36c7aaf6a9744943ec1ee06e31a6dd1eb8e1357"><code>d36c7aa</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2448">#2448</a>
from github/dependabot/npm_and_yarn/npm-09b7c43f6b</li>
<li><a
href="https://github.com/github/codeql-action/commit/b3bf514df4c04374e8f0db7938b20f8425387f33"><code>b3bf514</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2c779ab0d087cd7fe7b826087247c2c81f27bfa6...4dd16135b69a43b6c8efb853346f8437d92d3c93">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.3.6 to 4.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.4.0</h2>
<h2>Notice: Breaking Changes :warning:</h2>
<p>We will no longer include hidden files and folders by default in the
<code>upload-artifact</code> action of this version. This reduces the
risk that credentials are accidentally uploaded into artifacts.
Customers who need to continue to upload these files can use a new
option, <code>include-hidden-files</code>, to continue to do so.</p>
<p>See <a
href="https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/">&quot;Notice
of upcoming deprecations and breaking changes in GitHub Actions
runners&quot;</a> changelog and <a
href="https://redirect.github.com/actions/upload-artifact/issues/602">this
issue</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Exclude hidden files by default by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/598">actions/upload-artifact#598</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0">https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/50769540e7f4bd5e21e526ee35c689e35e0d6874"><code>5076954</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/598">#598</a>
from actions/joshmgross/exclude-hidden-files</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/d52396ac5d312b1bda1b9fe2ae55d862c65abd68"><code>d52396a</code></a>
Add a warning about enabling <code>include-hidden-files</code></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/710f36207581d49e465ccbed3e007c317290fe11"><code>710f362</code></a>
Remove &quot;merged&quot; from <code>include-hidden-files</code> input
description</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/3b315f26f6f828f74089e1863e67e60e48e37563"><code>3b315f2</code></a>
<code>npm run release</code> again 🙂</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/3be2180eb79b56341b1b127ca06a5adba2a5a3e4"><code>3be2180</code></a>
Remove another trailing comma</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/453e8d0a40444939146df5febed0b1221b9dd073"><code>453e8d0</code></a>
Update glob license</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/0a398c14804ead69f18a166f0a99f91239261ee5"><code>0a398c1</code></a>
<code>npm run release</code></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/a0c40cf60283f329afac2bc0fa77f1a59fa11e6e"><code>a0c40cf</code></a>
Update to latest <code>@actions/glob</code> and fix tests</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/acb59e47763b6e601a344d04cf3c082ee336b709"><code>acb59e4</code></a>
<code>lint</code></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/cb6558bb10fe4afe4054d0be4b3136e673eb5e7f"><code>cb6558b</code></a>
Exclude hidden files by default</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 99a04c0..e7c9646 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
+        uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
+        uses: github/codeql-action/autobuild@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
+        uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index baf986d..64c7d84 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
+        uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
         with:
           sarif_file: results.sarif

From e35625f6f3a98a11c55a7ce9c2dd0a4de4cab8ec Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 2 Sep 2024 20:40:48 -0700
Subject: [PATCH 040/176] Upgrade trunk (#146)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- cfnlint 1.11.0 → 1.11.1
- renovate 38.57.0 → 38.58.0
- ruff 0.6.2 → 0.6.3
- trufflehog 3.81.9 → 3.81.10
- trunk-toolbox 0.3.2 → 0.4.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index a417735..1115fa8 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.1.2
-    - cfnlint@1.11.0
+    - cfnlint@1.11.1
     - checkov@3.2.239
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.3.3
     - prisma@5.19.0
     - pylint@3.2.6
-    - renovate@38.57.0
+    - renovate@38.58.0
     - rubocop@1.39.0
-    - ruff@0.6.2
+    - ruff@0.6.3
     - rustfmt@1.68.2
     - semgrep@1.85.0
     - shellcheck@0.10.0
@@ -56,8 +56,8 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.81.9
-    - trunk-toolbox@0.3.2
+    - trufflehog@3.81.10
+    - trunk-toolbox@0.4.0
     - yamllint@1.35.1
 
   # Sourcing repos will have these configs available to applicable linters

From f5900dd04aeb279c6755bb97e64f0eb237f95713 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 6 Sep 2024 10:02:17 -0700
Subject: [PATCH 041/176] Upgrade trunk (#147)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- buildifier 7.1.2 → 7.3.1
- cfnlint 1.11.1 → 1.12.3
- checkov 3.2.239 → 3.2.245
- prisma 5.19.0 → 5.19.1
- pylint 3.2.6 → 3.2.7
- renovate 38.58.0 → 38.67.5
- semgrep 1.85.0 → 1.86.0
- trunk-toolbox 0.4.0 → 0.4.1

1 tool was upgraded:

- gt 1.4.3 → 1.4.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 1115fa8..07bb0d5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -16,9 +16,9 @@ lint:
     - bandit@1.7.9
     - black@24.8.0
     - buf-lint@1.31.0!
-    - buildifier@7.1.2
-    - cfnlint@1.11.1
-    - checkov@3.2.239
+    - buildifier@7.3.1
+    - cfnlint@1.12.3
+    - checkov@3.2.245
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,13 +36,13 @@ lint:
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.19.0
-    - pylint@3.2.6
-    - renovate@38.58.0
+    - prisma@5.19.1
+    - pylint@3.2.7
+    - renovate@38.67.5
     - rubocop@1.39.0
     - ruff@0.6.3
     - rustfmt@1.68.2
-    - semgrep@1.85.0
+    - semgrep@1.86.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -57,7 +57,7 @@ lint:
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
     - trufflehog@3.81.10
-    - trunk-toolbox@0.4.0
+    - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 
   # Sourcing repos will have these configs available to applicable linters
@@ -90,4 +90,4 @@ actions:
 tools:
   enabled:
     - gh@2.55.0
-    - gt@1.4.3
+    - gt@1.4.4

From 014b9d839f4702f306da788be2e5ae78147d95e2 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 9 Sep 2024 09:47:33 -0700
Subject: [PATCH 042/176] Upgrade trunk (#148)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- cfnlint 1.12.3 → 1.12.4
- checkov 3.2.245 → 3.2.246
- renovate 38.67.5 → 38.70.0
- ruff 0.6.3 → 0.6.4
- sql-formatter 15.4.1 → 15.4.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 07bb0d5..5d2ff41 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.12.3
-    - checkov@3.2.245
+    - cfnlint@1.12.4
+    - checkov@3.2.246
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,15 +38,15 @@ lint:
     - prettier@3.3.3
     - prisma@5.19.1
     - pylint@3.2.7
-    - renovate@38.67.5
+    - renovate@38.70.0
     - rubocop@1.39.0
-    - ruff@0.6.3
+    - ruff@0.6.4
     - rustfmt@1.68.2
     - semgrep@1.86.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
-    - sql-formatter@15.4.1
+    - sql-formatter@15.4.2
     - stylelint@16.9.0:
         packages:
           - stylelint-config-standard-scss@13.1.0

From e230c7c002573486e4e1f7d88e6674b774dea47c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 13 Sep 2024 09:09:40 -0700
Subject: [PATCH 043/176] Upgrade trunk (#149)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- checkov 3.2.246 → 3.2.252
- golangci-lint 1.60.3 → 1.61.0
- osv-scanner 1.8.4 → 1.8.5
- renovate 38.70.0 → 38.77.0
- trufflehog 3.81.10 → 3.82.1

1 tool was upgraded:

- gh 2.55.0 → 2.56.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 5d2ff41..1880173 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,27 +18,27 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.12.4
-    - checkov@3.2.246
+    - checkov@3.2.252
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.60.3
+    - golangci-lint@1.61.0
     - hadolint@2.12.0
     - isort@5.13.2
     - markdownlint@0.41.0
     - markdown-link-check@3.12.2
     - mypy@1.11.2
     - nancy@1.0.46
-    - osv-scanner@1.8.4
+    - osv-scanner@1.8.5
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
     - prisma@5.19.1
     - pylint@3.2.7
-    - renovate@38.70.0
+    - renovate@38.77.0
     - rubocop@1.39.0
     - ruff@0.6.4
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.81.10
+    - trufflehog@3.82.1
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 
@@ -89,5 +89,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.55.0
+    - gh@2.56.0
     - gt@1.4.4

From bc21378269b05fddb2b8bd5718e7a59b56ba580e Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 16 Sep 2024 09:56:13 -0700
Subject: [PATCH 044/176] Upgrade trunk (#151)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- checkov 3.2.252 → 3.2.253
- renovate 38.77.0 → 38.77.3

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 1880173..43edaa8 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.12.4
-    - checkov@3.2.252
+    - checkov@3.2.253
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.3.3
     - prisma@5.19.1
     - pylint@3.2.7
-    - renovate@38.77.0
+    - renovate@38.77.3
     - rubocop@1.39.0
     - ruff@0.6.4
     - rustfmt@1.68.2

From 523d81ad0027fe4deb36be1e5c04893d59e385ee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Sep 2024 09:57:04 -0700
Subject: [PATCH 045/176] Bump github/codeql-action from 3.26.6 to 3.26.7 in
 the dependencies group (#150)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.26.6 to 3.26.7
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/8214744c546c1e5c8f03dde8fab3a7353211988d"><code>8214744</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2478">#2478</a>
from github/update-v3.26.7-4a01ec798</li>
<li><a
href="https://github.com/github/codeql-action/commit/a3b3e07cecabba6fce92183951fcd7152dc3795d"><code>a3b3e07</code></a>
Update changelog for v3.26.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/4a01ec798636a8442fbe054c7795e139a5960d29"><code>4a01ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2474">#2474</a>
from github/aeisenberg/always-upload-eslint-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/762dbaeeb79f3e01fe9f52f151cb17042dab7c84"><code>762dbae</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2471">#2471</a>
from github/update-bundle/codeql-bundle-v2.18.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d0f998f2891417c3609fda383e08753d605c77e"><code>0d0f998</code></a>
Always upload eslint.sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/e817992b3db357f199b6e99216d3bf853dafd0fc"><code>e817992</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2469">#2469</a>
from github/aeisenberg/upload-eslint-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/49021ad7f5a68089739ccf2e66e25b7e531c6bcf"><code>49021ad</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2472">#2472</a>
from rvermeulen/rvermeulen/update-release-branch-authz</li>
<li><a
href="https://github.com/github/codeql-action/commit/56b841888472b4f479ef3b9c0643f73434756177"><code>56b8418</code></a>
Ignore suppressed alerts</li>
<li><a
href="https://github.com/github/codeql-action/commit/f824adbf9bf63ebfa2c4278e0637d65d20b4ddbb"><code>f824adb</code></a>
Merge branch 'main' into rvermeulen/update-release-branch-authz</li>
<li><a
href="https://github.com/github/codeql-action/commit/8d9ed0b40e24a3209eda0edca170ba215148ed22"><code>8d9ed0b</code></a>
Add changelog note</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/4dd16135b69a43b6c8efb853346f8437d92d3c93...8214744c546c1e5c8f03dde8fab3a7353211988d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.6&new-version=3.26.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index e7c9646..01d10d8 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
+        uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
+        uses: github/codeql-action/autobuild@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
+        uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 64c7d84..1e0cf72 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
+        uses: github/codeql-action/upload-sarif@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
         with:
           sarif_file: results.sarif

From 5b1f9fb16138423a5bf55e35dd48b832e92ab56f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 22 Sep 2024 21:53:45 -0700
Subject: [PATCH 046/176] Bump github/codeql-action from 3.26.7 to 3.26.8 in
 the dependencies group (#153)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.26.7 to 3.26.8
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/294a9d92911152fe08befb9ec03e240add280cb3"><code>294a9d9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2490">#2490</a>
from github/update-v3.26.8-64431c66d</li>
<li><a
href="https://github.com/github/codeql-action/commit/00b3604ce7da856a7d36784715970f8d24a0904b"><code>00b3604</code></a>
Update changelog for v3.26.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/64431c66d0e98a26d34f9485e5f8e317e14956fc"><code>64431c6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2483">#2483</a>
from github/update-bundle/codeql-bundle-v2.19.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0e2d7557dd5c205c43dbdc03c2870c5f7a871a7"><code>e0e2d75</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/cb28816228ffd4c85f55e62cf398ab8802ffbce8"><code>cb28816</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2487">#2487</a>
from rvermeulen/rvermeulen/uri-errors-as-warnings</li>
<li><a
href="https://github.com/github/codeql-action/commit/498c508900c1cdbb9de7aa7be9c6dd8a3b27fd1f"><code>498c508</code></a>
Rebuild JavaScript files</li>
<li><a
href="https://github.com/github/codeql-action/commit/a1a585f2ab7dd04c9287080a82625f7d8c1fb05c"><code>a1a585f</code></a>
Merge branch 'main' into rvermeulen/uri-errors-as-warnings</li>
<li><a
href="https://github.com/github/codeql-action/commit/34666c10b6a7be9d71b1a0ce70d3c0d2a1726d6e"><code>34666c1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2488">#2488</a>
from github/henrymercer/debug-artifacts-better-logging</li>
<li><a
href="https://github.com/github/codeql-action/commit/6e24973d7adf77c81ba32565e7a32243c5f1864f"><code>6e24973</code></a>
Improve logging for combined SARIF debug artifact</li>
<li><a
href="https://github.com/github/codeql-action/commit/d0a3cf2152cf8cb5726f920a7a258a326526702f"><code>d0a3cf2</code></a>
Improve logging for debug artifacts</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/8214744c546c1e5c8f03dde8fab3a7353211988d...294a9d92911152fe08befb9ec03e240add280cb3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.7&new-version=3.26.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 01d10d8..f984aa8 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
+        uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
+        uses: github/codeql-action/autobuild@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
+        uses: github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 1e0cf72..300fc6c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
+        uses: github/codeql-action/upload-sarif@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
         with:
           sarif_file: results.sarif

From 139958af7482bce906f136373ab35d11310af4ca Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 23 Sep 2024 02:43:19 -0700
Subject: [PATCH 047/176] Upgrade trunk (#152)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.12.4 → 1.14.2
- checkov 3.2.253 → 3.2.255
- renovate 38.77.3 → 38.91.0
- ruff 0.6.4 → 0.6.6
- semgrep 1.86.0 → 1.89.0
- trufflehog 3.82.1 → 3.82.2

2 tools were upgraded:

- gh 2.56.0 → 2.57.0
- gt 1.4.4 → 1.4.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 43edaa8..0539a5c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.12.4
-    - checkov@3.2.253
+    - cfnlint@1.14.2
+    - checkov@3.2.255
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,11 +38,11 @@ lint:
     - prettier@3.3.3
     - prisma@5.19.1
     - pylint@3.2.7
-    - renovate@38.77.3
+    - renovate@38.91.0
     - rubocop@1.39.0
-    - ruff@0.6.4
+    - ruff@0.6.6
     - rustfmt@1.68.2
-    - semgrep@1.86.0
+    - semgrep@1.89.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.1
+    - trufflehog@3.82.2
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 
@@ -89,5 +89,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.56.0
-    - gt@1.4.4
+    - gh@2.57.0
+    - gt@1.4.5

From 5b8b9cea0326f77d882babbc266447368f346181 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 27 Sep 2024 09:46:57 -0700
Subject: [PATCH 048/176] Upgrade trunk (#154)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- actionlint 1.7.1 → 1.7.2
- bandit 1.7.9 → 1.7.10
- cfnlint 1.14.2 → 1.15.1
- markdownlint 0.41.0 → 0.42.0
- prisma 5.19.1 → 5.20.0
- pylint 3.2.7 → 3.3.1
- renovate 38.91.0 → 38.96.0
- ruff 0.6.6 → 0.6.7
- semgrep 1.89.0 → 1.90.0
- trufflehog 3.82.2 → 3.82.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 0539a5c..7ac7417 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,12 +12,12 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.1
-    - bandit@1.7.9
+    - actionlint@1.7.2
+    - bandit@1.7.10
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.14.2
+    - cfnlint@1.15.1
     - checkov@3.2.255
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -28,7 +28,7 @@ lint:
     - golangci-lint@1.61.0
     - hadolint@2.12.0
     - isort@5.13.2
-    - markdownlint@0.41.0
+    - markdownlint@0.42.0
     - markdown-link-check@3.12.2
     - mypy@1.11.2
     - nancy@1.0.46
@@ -36,13 +36,13 @@ lint:
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.19.1
-    - pylint@3.2.7
-    - renovate@38.91.0
+    - prisma@5.20.0
+    - pylint@3.3.1
+    - renovate@38.96.0
     - rubocop@1.39.0
-    - ruff@0.6.6
+    - ruff@0.6.7
     - rustfmt@1.68.2
-    - semgrep@1.89.0
+    - semgrep@1.90.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.2
+    - trufflehog@3.82.5
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 

From af94c722352b719fba6a12ee8a927c0e0686fa55 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 29 Sep 2024 17:54:55 -0700
Subject: [PATCH 049/176] Bump github/codeql-action from 3.26.8 to 3.26.9 in
 the dependencies group (#155)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.26.8 to 3.26.9
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/461ef6c76dfe95d5c364de2f431ddbd31a417628"><code>461ef6c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2503">#2503</a>
from github/update-v3.26.9-f861efb2b</li>
<li><a
href="https://github.com/github/codeql-action/commit/00b1146c45021691af6c1c3c45e04d65d3c3f1e8"><code>00b1146</code></a>
Update changelog for v3.26.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/f861efb2b37e018668a6943ba7b408a7083627cc"><code>f861efb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2498">#2498</a>
from github/dependabot/npm_and_yarn/npm-9874b37b58</li>
<li><a
href="https://github.com/github/codeql-action/commit/426821d8037e3b86d3806660c6b0c3926f8e95a3"><code>426821d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2485">#2485</a>
from github/dependabot/github_actions/actions-a88a8c...</li>
<li><a
href="https://github.com/github/codeql-action/commit/07e813397109ab65b7a34b35817b7d6e7c744249"><code>07e8133</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2501">#2501</a>
from github/henrymercer/missing-autobuild-config-error</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0a151e64e041db2626a774166ee4f18cfaa921e"><code>e0a151e</code></a>
Fix inconsistency in autobuild error tracking</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b0ce4e2741238edebdaf9eda41eff6a31d1442f"><code>6b0ce4e</code></a>
revert eslint-plugin-import to 2.29.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/07fd497921a761793bd5e42363cdf4a271604343"><code>07fd497</code></a>
Merge branch 'main' into
dependabot/github_actions/actions-a88a8c5a24</li>
<li><a
href="https://github.com/github/codeql-action/commit/2cddcb1990ab3bcd0bc078d26775b026e5100f43"><code>2cddcb1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2499">#2499</a>
from github/aeisenberg/no-upload-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/6225a95822b60309e4b8d0ef4c2be093e584d203"><code>6225a95</code></a>
Don't upload during cancelled jobs</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/294a9d92911152fe08befb9ec03e240add280cb3...461ef6c76dfe95d5c364de2f431ddbd31a417628">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.8&new-version=3.26.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index f984aa8..1d0b316 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 300fc6c..cc48708 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/upload-sarif@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
         with:
           sarif_file: results.sarif

From 279b222b73500f2016a66fd0847d65125b546c4a Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 30 Sep 2024 02:03:21 -0700
Subject: [PATCH 050/176] Upgrade trunk (#156)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 38.96.0 → 38.98.0
- ruff 0.6.7 → 0.6.8
- trufflehog 3.82.5 → 3.82.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 7ac7417..0b3a0bc 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,9 +38,9 @@ lint:
     - prettier@3.3.3
     - prisma@5.20.0
     - pylint@3.3.1
-    - renovate@38.96.0
+    - renovate@38.98.0
     - rubocop@1.39.0
-    - ruff@0.6.7
+    - ruff@0.6.8
     - rustfmt@1.68.2
     - semgrep@1.90.0
     - shellcheck@0.10.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.5
+    - trufflehog@3.82.6
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 

From 8f0a2e041e453b2fbe7f3bb41f0a13cfb5ad0b58 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 4 Oct 2024 01:17:52 -0700
Subject: [PATCH 051/176] Upgrade trunk (#157)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- actionlint 1.7.2 → 1.7.3
- cfnlint 1.15.1 → 1.15.2
- checkov 3.2.255 → 3.2.256
- osv-scanner 1.8.5 → 1.9.0
- renovate 38.98.0 → 38.106.4

2 tools were upgraded:

- gh 2.57.0 → 2.58.0
- gt 1.4.5 → 1.4.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 0b3a0bc..7e0f700 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.2
+    - actionlint@1.7.3
     - bandit@1.7.10
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.15.1
-    - checkov@3.2.255
+    - cfnlint@1.15.2
+    - checkov@3.2.256
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,13 +32,13 @@ lint:
     - markdown-link-check@3.12.2
     - mypy@1.11.2
     - nancy@1.0.46
-    - osv-scanner@1.8.5
+    - osv-scanner@1.9.0
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
     - prisma@5.20.0
     - pylint@3.3.1
-    - renovate@38.98.0
+    - renovate@38.106.4
     - rubocop@1.39.0
     - ruff@0.6.8
     - rustfmt@1.68.2
@@ -89,5 +89,5 @@ actions:
 
 tools:
   enabled:
-    - gh@2.57.0
-    - gt@1.4.5
+    - gh@2.58.0
+    - gt@1.4.6

From 95d3837beea324dc31ba5d6f72ff0feba9641fb4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 6 Oct 2024 17:31:57 -0700
Subject: [PATCH 052/176] Bump the dependencies group with 2 updates (#158)

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.26.9 to 3.26.11
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea"><code>6db8d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2522">#2522</a>
from github/update-v3.26.11-8aba5f2c4</li>
<li><a
href="https://github.com/github/codeql-action/commit/389647f39867028dcbcca5506b676e29424c612d"><code>389647f</code></a>
Update changelog for v3.26.11</li>
<li><a
href="https://github.com/github/codeql-action/commit/8aba5f2c426ba0d5c3bb6b4b8fae38035772b3d3"><code>8aba5f2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2516">#2516</a>
from github/aeisenberg/dependabot-exclude</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecac2c6d538a5c4520f636d89c01720ddc5c9d1b"><code>ecac2c6</code></a>
Exclupde <code>eslint-plugin-import</code> updates from dependabot</li>
<li><a
href="https://github.com/github/codeql-action/commit/e85017e6745c22a328ab20475f48582ec2e1becd"><code>e85017e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2514">#2514</a>
from github/henrymercer/zstd-better-failure-logging</li>
<li><a
href="https://github.com/github/codeql-action/commit/a60db1d7fffaf34bc97db28f4d16936306e52a7c"><code>a60db1d</code></a>
Add notice for dependency upgrade timeline (<a
href="https://redirect.github.com/github/codeql-action/issues/2513">#2513</a>)</li>
<li><a
href="https://github.com/github/codeql-action/commit/28db28fc03e5652558cfae2ebfcf112a524358e1"><code>28db28f</code></a>
Improve clean up if extraction fails</li>
<li><a
href="https://github.com/github/codeql-action/commit/3da852e107a8b010f01b468b4be62250eca45340"><code>3da852e</code></a>
Capture stderr from extracting <code>.tar.zst</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/c4d433c56218db63e3030b7eb311b4820c0aa24b"><code>c4d433c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2510">#2510</a>
from github/dependabot/npm_and_yarn/npm-13baf58ce8</li>
<li><a
href="https://github.com/github/codeql-action/commit/2f6cf481fd80327a14c2fccb1f6d2babc76cddc3"><code>2f6cf48</code></a>
Undo <code>eslint-plugin-import</code> bump</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/461ef6c76dfe95d5c364de2f431ddbd31a417628...6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.16 to 1.1.17
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.17</h2>
<h2>What's Changed</h2>
<ul>
<li>Add option to disable LFS checkout (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/260">#260</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.1.16...v1.1.17">https://github.com/trunk-io/trunk-action/compare/v1.1.16...v1.1.17</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/12da16fcdd5cad1903d0082e591e09df7b67c7f0"><code>12da16f</code></a>
feat: make LFS checkout optional (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/260">#260</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/5008e79ff9408c89239e62f4fee2003a8c4af1bb"><code>5008e79</code></a>
Update readme.md (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/259">#259</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/7ea7e894042e14666d3d3907b32c2eec567c326c"><code>7ea7e89</code></a>
Update Trunk Github Action readme (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/258">#258</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/a19f8a0d6676d8ef1e60bda132f3fbab23cc2aa5"><code>a19f8a0</code></a>
Upgrade trunk to 1.22.5 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/256">#256</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/7d0be5096dca1766e42a0bea751640372860b7a2"><code>7d0be50</code></a>
Upgrade trunk to 1.22.4 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/255">#255</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/64a86906b00f9e4541195ffbf20521b2fa2ffd33"><code>64a8690</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/253">#253</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/9c65f4d9ff0ac4dc040cde49225dee8805c59e2f"><code>9c65f4d</code></a>
Upgrade trunk to 1.22.3 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/252">#252</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/650e3bd9d06dcec1b8df984999e34fbd88fa3522"><code>650e3bd</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/251">#251</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/03cb46f406176a84f390fb565960606c2bd0b8b3"><code>03cb46f</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/248">#248</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/66291360da699c6f353f301c7e751732a42280c7"><code>6629136</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/247">#247</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/86b68ffae610a05105e90b1f52ad8c549ef482c2...12da16fcdd5cad1903d0082e591e09df7b67c7f0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml        | 6 +++---
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/upgrade_trunk.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 1d0b316..89c4425 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cc48708..ec5ff7c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/upload-sarif@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index 1eef06b..a338bb6 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@86b68ffae610a05105e90b1f52ad8c549ef482c2
+        uses: trunk-io/trunk-action/upgrade@12da16fcdd5cad1903d0082e591e09df7b67c7f0
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From b5ae003a5c7222c328a3f380a03657cd5e8d387c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 7 Oct 2024 01:20:49 -0700
Subject: [PATCH 053/176] Upgrade trunk (#159)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- cfnlint 1.15.2 → 1.16.0
- renovate 38.106.4 → 38.109.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 7e0f700..566dc9d 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.8.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.15.2
+    - cfnlint@1.16.0
     - checkov@3.2.256
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.3.3
     - prisma@5.20.0
     - pylint@3.3.1
-    - renovate@38.106.4
+    - renovate@38.109.0
     - rubocop@1.39.0
     - ruff@0.6.8
     - rustfmt@1.68.2

From f9407794893f8f73f0d714ebd23bfc3b0a94a49a Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 11 Oct 2024 01:35:40 -0700
Subject: [PATCH 054/176] Upgrade trunk (#160)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- black 24.8.0 → 24.10.0
- checkov 3.2.256 → 3.2.257
- renovate 38.109.0 → 38.115.1
- ruff 0.6.8 → 0.6.9
- sql-formatter 15.4.2 → 15.4.3
- trufflehog 3.82.6 → 3.82.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 566dc9d..eae41da 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -14,11 +14,11 @@ lint:
   enabled:
     - actionlint@1.7.3
     - bandit@1.7.10
-    - black@24.8.0
+    - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.16.0
-    - checkov@3.2.256
+    - checkov@3.2.257
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,15 +38,15 @@ lint:
     - prettier@3.3.3
     - prisma@5.20.0
     - pylint@3.3.1
-    - renovate@38.109.0
+    - renovate@38.115.1
     - rubocop@1.39.0
-    - ruff@0.6.8
+    - ruff@0.6.9
     - rustfmt@1.68.2
     - semgrep@1.90.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
-    - sql-formatter@15.4.2
+    - sql-formatter@15.4.3
     - stylelint@16.9.0:
         packages:
           - stylelint-config-standard-scss@13.1.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.6
+    - trufflehog@3.82.7
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 

From 9861fb24f50bd0e7a4bfa63942194f0668c9db1d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 13 Oct 2024 16:00:26 -0700
Subject: [PATCH 055/176] Bump the dependencies group with 2 updates (#161)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.26.11 to 3.26.12
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/c36620d31ac7c881962c3d9dd939c40ec9434f2b"><code>c36620d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2529">#2529</a>
from github/update-v3.26.12-c9a70ff45</li>
<li><a
href="https://github.com/github/codeql-action/commit/570aecb95f2b62832269f4d9ed8d228c9a1342fb"><code>570aecb</code></a>
Update changelog for v3.26.12</li>
<li><a
href="https://github.com/github/codeql-action/commit/c9a70ff45f6a0ebf67a02cf3a09094b72f56e5cb"><code>c9a70ff</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2526">#2526</a>
from github/henrymercer/check-zstd-on-path</li>
<li><a
href="https://github.com/github/codeql-action/commit/d65a17605a400f2b42f1e4785239bc63a91419b9"><code>d65a176</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/bf2e624d0b3b15a9fe5c6ae1294f207a8f2ee3f1"><code>bf2e624</code></a>
Update src/tar.ts</li>
<li><a
href="https://github.com/github/codeql-action/commit/56d197570aa047eae7fe04401603196e2f68521d"><code>56d1975</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2489">#2489</a>
from github/redsun82/rust</li>
<li><a
href="https://github.com/github/codeql-action/commit/7cf65a5b2e089b7207c678633bc4a42884847231"><code>7cf65a5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2518">#2518</a>
from github/dependabot/npm_and_yarn/npm-88156698cd</li>
<li><a
href="https://github.com/github/codeql-action/commit/8a56dd2e53735063047ec88acbea334aecdd702e"><code>8a56dd2</code></a>
Update to <code>@​actions/core</code> 1.11.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/153267135194d736d42c011f5c4288fd7318a484"><code>1532671</code></a>
Update default bundle to 2.19.1 (<a
href="https://redirect.github.com/github/codeql-action/issues/2519">#2519</a>)</li>
<li><a
href="https://github.com/github/codeql-action/commit/64871a860c2923a5ec7cf6cefc983b535e8fe0e7"><code>64871a8</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.1</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea...c36620d31ac7c881962c3d9dd939c40ec9434f2b">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.4.0 to 4.4.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.4.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Undo indirect dependency updates from <a
href="https://redirect.github.com/actions/upload-artifact/issues/627">#627</a>
by <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a>
in <a
href="https://redirect.github.com/actions/upload-artifact/pull/632">actions/upload-artifact#632</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3">https://github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3</a></p>
<h2>v4.4.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@actions/artifact</code> to 2.1.11 by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/627">actions/upload-artifact#627</a>
<ul>
<li>Includes fix for relative symlinks not resolving properly</li>
</ul>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2">https://github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2</a></p>
<h2>v4.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add a section about hidden files by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/607">actions/upload-artifact#607</a></li>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/621">actions/upload-artifact#621</a></li>
<li>Update <code>@​actions/artifact</code> to latest version, includes
symlink and timeout fixes by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/625">actions/upload-artifact#625</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/621">actions/upload-artifact#621</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1">https://github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882"><code>b4b15b8</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/632">#632</a>
from actions/joshmgross/undo-dependency-changes</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/92b01ebffaf2e2520c64ab2845d3f9bd5c06941a"><code>92b01eb</code></a>
Undo indirect dependency updates from <a
href="https://redirect.github.com/actions/upload-artifact/issues/627">#627</a></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/84480863f228bb9747b473957fcc9e309aa96097"><code>8448086</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/627">#627</a>
from actions/robherley/v4.4.2</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/b1d4642b699cfe7e338a864cc36849b29ad04a75"><code>b1d4642</code></a>
add explicit relative and absolute symlinks to workflow</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/d50e66084c4d29dc5d3326b7a0e67bed9ef4bb1e"><code>d50e660</code></a>
bump version</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/aabe6f8050b860cae7a9065282dde2b3227836aa"><code>aabe6f8</code></a>
build with <code>@​actions/artifact</code> v2.1.11</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/604373da6381bf24206979c74d06a550515601b9"><code>604373d</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/625">#625</a>
from actions/robherley/artifact-2.1.10</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/0150148bdf458be2451ee90b000ecdcca8216ed8"><code>0150148</code></a>
paste right core version</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/a009b25faa61b2b26de294984570f1371b13a895"><code>a009b25</code></a>
update licenses</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/9f6f6f402e14cb0fe462513c8fa31e6ec061e8b5"><code>9f6f6f4</code></a>
update <code>@​actions/core</code> and <code>@​actions/artifact</code>
to latest versions</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/upload-artifact/compare/50769540e7f4bd5e21e526ee35c689e35e0d6874...b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 89c4425..607f2ea 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/autobuild@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ec5ff7c..cb80474 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/upload-sarif@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
         with:
           sarif_file: results.sarif

From ceb0c8e38804a293d33c6e8f7aae3a9227ddae7a Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 14 Oct 2024 16:33:21 -0700
Subject: [PATCH 056/176] Upgrade trunk (#162)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- cfnlint 1.16.0 → 1.16.1
- renovate 38.115.1 → 38.117.1
- semgrep 1.90.0 → 1.91.0
- trufflehog 3.82.7 → 3.82.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index eae41da..a9157d0 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.16.0
+    - cfnlint@1.16.1
     - checkov@3.2.257
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,11 +38,11 @@ lint:
     - prettier@3.3.3
     - prisma@5.20.0
     - pylint@3.3.1
-    - renovate@38.115.1
+    - renovate@38.117.1
     - rubocop@1.39.0
     - ruff@0.6.9
     - rustfmt@1.68.2
-    - semgrep@1.90.0
+    - semgrep@1.91.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.7
+    - trufflehog@3.82.8
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 

From 88727471feaa45612c45360d99201796cede751e Mon Sep 17 00:00:00 2001
From: Tyler Jang <tyler@trunk.io>
Date: Thu, 17 Oct 2024 09:57:48 -0700
Subject: [PATCH 057/176] (Feat): Add tool trunk-analytics-cli (#164)

Keeping this in this repo rather than plugins since it should be
specific to us for debugging.

After this releases, upgrading in the monorepo will let everyone have
`trunk-analytics-cli` in their PATH
---
 plugin.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/plugin.yaml b/plugin.yaml
index a9157d0..1f0ed73 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -87,7 +87,26 @@ actions:
     - trunk-check-pre-push
     - trunk-fmt-pre-commit
 
+downloads:
+  - name: trunk-analytics-cli
+    downloads:
+      - os:
+          linux: unknown-linux
+          macos: apple-darwin
+        cpu:
+          x86_64: x86_64
+          arm_64: aarch64
+        url: https://github.com/trunk-io/analytics-cli/releases/download/${version}/trunk-analytics-cli-${cpu}-${os}.tar.gz
 tools:
+  definitions:
+    - name: trunk-analytics-cli
+      download: trunk-analytics-cli
+      known_good_version: 0.5.32
+      shims: [trunk-analytics-cli]
+      health_checks:
+        - command: trunk-analytics-cli --version
+          parse_regex: trunk-analytics-cli ${semver}
   enabled:
     - gh@2.58.0
     - gt@1.4.6
+    - trunk-analytics-cli@0.5.32

From e692315f403aa019edf285d808faed93f75d90f4 Mon Sep 17 00:00:00 2001
From: Tyler Jang <tyler@trunk.io>
Date: Thu, 17 Oct 2024 10:31:28 -0700
Subject: [PATCH 058/176] (Chore): Enable grpcui tool (#163)

Enabled by default for easy use. When this is released and monorepo is
upgraded, it will auto-have this enabled
---
 .trunk/trunk.yaml | 4 ++--
 plugin.yaml       | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 765b52d..90ec77f 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -1,11 +1,11 @@
 version: 0.1
 cli:
-  version: 1.22.2
+  version: 1.22.6
 plugins:
   sources:
     - id: trunk
       uri: https://github.com/trunk-io/plugins
-      ref: v1.6.2
+      ref: v1.6.4
 
     - id: configs
       local: .
diff --git a/plugin.yaml b/plugin.yaml
index 1f0ed73..da96d39 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -108,5 +108,6 @@ tools:
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
     - gh@2.58.0
+    - grpcui@1.4.1
     - gt@1.4.6
     - trunk-analytics-cli@0.5.32

From 31d82c35ae2022a92f1d7b9c52c4dd27d305a4f8 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 18 Oct 2024 10:01:48 -0700
Subject: [PATCH 059/176] Upgrade trunk (#165)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- checkov 3.2.257 → 3.2.267
- mypy 1.11.2 → 1.12.0
- prisma 5.20.0 → 5.21.0
- renovate 38.117.1 → 38.124.3
- stylelint 16.9.0 → 16.10.0
- trufflehog 3.82.8 → 3.82.9

1 tool was upgraded:

- gh 2.58.0 → 2.59.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index da96d39..2be902f 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.16.1
-    - checkov@3.2.257
+    - checkov@3.2.267
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,15 +30,15 @@ lint:
     - isort@5.13.2
     - markdownlint@0.42.0
     - markdown-link-check@3.12.2
-    - mypy@1.11.2
+    - mypy@1.12.0
     - nancy@1.0.46
     - osv-scanner@1.9.0
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.20.0
+    - prisma@5.21.0
     - pylint@3.3.1
-    - renovate@38.117.1
+    - renovate@38.124.3
     - rubocop@1.39.0
     - ruff@0.6.9
     - rustfmt@1.68.2
@@ -47,7 +47,7 @@ lint:
     - shfmt@3.6.0
     - sort-package-json@2.10.1
     - sql-formatter@15.4.3
-    - stylelint@16.9.0:
+    - stylelint@16.10.0:
         packages:
           - stylelint-config-standard-scss@13.1.0
           - stylelint-config-clean-order@6.1.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.8
+    - trufflehog@3.82.9
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.58.0
+    - gh@2.59.0
     - grpcui@1.4.1
     - gt@1.4.6
     - trunk-analytics-cli@0.5.32

From 965801cfe54532fab28c0acf1f8df8f4702805b9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 24 Oct 2024 11:02:09 -0700
Subject: [PATCH 060/176] Bump github/codeql-action from 3.26.12 to 3.26.13 in
 the dependencies group (#166)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.26.12 to 3.26.13
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f779452ac5af1c261dce0346a8f964149f49322b"><code>f779452</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2539">#2539</a>
from github/update-v3.26.13-0c3e00641</li>
<li><a
href="https://github.com/github/codeql-action/commit/532932479b339a320b8f0f106cf17cb6f27625ab"><code>5329324</code></a>
Update CHANGELOG.md</li>
<li><a
href="https://github.com/github/codeql-action/commit/007ba256485136f6179e827b998b3c9125fcbcee"><code>007ba25</code></a>
Update changelog for v3.26.13</li>
<li><a
href="https://github.com/github/codeql-action/commit/0c3e0064168c8e68650d4d5d2eaa7f5b14c2e089"><code>0c3e006</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2536">#2536</a>
from yoff/python/ff-std-lib-extraction</li>
<li><a
href="https://github.com/github/codeql-action/commit/38469af22844c7bb1302fd0bde937f95fae05417"><code>38469af</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2537">#2537</a>
from github/henrymercer/no-zstd-windows</li>
<li><a
href="https://github.com/github/codeql-action/commit/5b6984ee4d8d4337aa84b946951459213dd36daf"><code>5b6984e</code></a>
Assert that Windows downloads gzip</li>
<li><a
href="https://github.com/github/codeql-action/commit/eefb943f7e5f85e6e26fff781c173475ecfe9f4f"><code>eefb943</code></a>
Don't use Zstandard bundles on Windows</li>
<li><a
href="https://github.com/github/codeql-action/commit/201e02efe22c245c1d4fc9b579583c1ef037dfe6"><code>201e02e</code></a>
rebuild the action</li>
<li><a
href="https://github.com/github/codeql-action/commit/ce5f900bfc4f4f7d32fd4106942380d167a1e43c"><code>ce5f900</code></a>
formatting</li>
<li><a
href="https://github.com/github/codeql-action/commit/65dd816de1c1c6fc94d0885d009da0db1545df07"><code>65dd816</code></a>
remove unused import</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/c36620d31ac7c881962c3d9dd939c40ec9434f2b...f779452ac5af1c261dce0346a8f964149f49322b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.12&new-version=3.26.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 607f2ea..b40a196 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/autobuild@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cb80474..f3fa2cb 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
         with:
           sarif_file: results.sarif

From 379bad1367a76ee91ba1e151f9a652451c16b652 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Thu, 24 Oct 2024 11:03:57 -0700
Subject: [PATCH 061/176] Upgrade trunk (#167)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.16.1 → 1.17.1
- prisma 5.21.0 → 5.21.1
- renovate 38.124.3 → 38.127.0
- ruff 0.6.9 → 0.7.0
- semgrep 1.91.0 → 1.92.0
- trufflehog 3.82.9 → 3.82.11

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 2be902f..69007f8 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.16.1
+    - cfnlint@1.17.1
     - checkov@3.2.267
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -36,13 +36,13 @@ lint:
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.21.0
+    - prisma@5.21.1
     - pylint@3.3.1
-    - renovate@38.124.3
+    - renovate@38.127.0
     - rubocop@1.39.0
-    - ruff@0.6.9
+    - ruff@0.7.0
     - rustfmt@1.68.2
-    - semgrep@1.91.0
+    - semgrep@1.92.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.9
+    - trufflehog@3.82.11
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 

From 57b3bac955d4c94319e5775b4c14aaa52607c7f8 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 25 Oct 2024 10:01:32 -0700
Subject: [PATCH 062/176] Upgrade trunk (#168)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.17.1 → 1.18.1
- checkov 3.2.267 → 3.2.269
- mypy 1.12.0 → 1.12.1
- renovate 38.127.0 → 38.130.2
- semgrep 1.92.0 → 1.93.0
- sql-formatter 15.4.3 → 15.4.5
- trufflehog 3.82.11 → 3.82.12

1 tool was upgraded:

- gh 2.59.0 → 2.60.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 69007f8..57124cc 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.17.1
-    - checkov@3.2.267
+    - cfnlint@1.18.1
+    - checkov@3.2.269
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,7 +30,7 @@ lint:
     - isort@5.13.2
     - markdownlint@0.42.0
     - markdown-link-check@3.12.2
-    - mypy@1.12.0
+    - mypy@1.12.1
     - nancy@1.0.46
     - osv-scanner@1.9.0
     - oxipng@9.1.2
@@ -38,15 +38,15 @@ lint:
     - prettier@3.3.3
     - prisma@5.21.1
     - pylint@3.3.1
-    - renovate@38.127.0
+    - renovate@38.130.2
     - rubocop@1.39.0
     - ruff@0.7.0
     - rustfmt@1.68.2
-    - semgrep@1.92.0
+    - semgrep@1.93.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
-    - sql-formatter@15.4.3
+    - sql-formatter@15.4.5
     - stylelint@16.10.0:
         packages:
           - stylelint-config-standard-scss@13.1.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.11
+    - trufflehog@3.82.12
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.59.0
+    - gh@2.60.0
     - grpcui@1.4.1
     - gt@1.4.6
     - trunk-analytics-cli@0.5.32

From 192404b8621aecfe16a2076ee4b9aa47f78366f5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 27 Oct 2024 21:48:33 -0700
Subject: [PATCH 063/176] Bump the dependencies group with 2 updates (#169)

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.26.13 to 3.27.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.0/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/662472033e021d55d94146f66f6058822b0b39fd"><code>6624720</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2561">#2561</a>
from github/update-v3.27.0-b35b023d9</li>
<li><a
href="https://github.com/github/codeql-action/commit/ce7c2b560da6747133b72eb2f33503a6c4da9c15"><code>ce7c2b5</code></a>
Update changelog for v3.27.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/b35b023d9b1296658ca1bcb95dcd0336f9d23f0b"><code>b35b023</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2552">#2552</a>
from github/update-bundle/codeql-bundle-v2.19.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/dafc762411c1755f00abee84283eaa85d438af2e"><code>dafc762</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2560">#2560</a>
from github/aeisenberg/fix-required-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d1eb88b60733b6720210d591c48ebc9e961d42c"><code>0d1eb88</code></a>
Remove ESLint from required checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/0a30541440699f21b772e5ef95c912f097514855"><code>0a30541</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2558">#2558</a>
from github/dependabot/npm_and_yarn/npm-6515e6e328</li>
<li><a
href="https://github.com/github/codeql-action/commit/2a6a6ad1c809216132b8a6a8c1f5873fff3f400a"><code>2a6a6ad</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/26c18c2c1f382ccd402aec5dd18d9ff6d0097891"><code>26c18c2</code></a>
Bump the npm group with 3 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/7080a68cbca9319f3cf869f12f34acea853ad72d"><code>7080a68</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/63eb7bbf1f65c025536b3e7d083d89c1c161043c"><code>63eb7bb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2551">#2551</a>
from github/cklin/diff-informed-queries-feature</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/f779452ac5af1c261dce0346a8f964149f49322b...662472033e021d55d94146f66f6058822b0b39fd">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.17 to 1.1.18
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.18</h2>
<h2>What's Changed</h2>
<ul>
<li>Updated several github action dependencies (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/183">#183</a>,
<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/209">#209</a>,
<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/231">#231</a>,
<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/261">#261</a>)</li>
<li>Stops suppressing trunk launcher output (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/249">#249</a>)</li>
<li>Added <code>labels</code> input for adding labels to the created PR
(<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/254">#254</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.1.17...v1.1.18">https://github.com/trunk-io/trunk-action/compare/v1.1.17...v1.1.18</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/2eaee169140ec559bd556208f9f99cdfdf468da8"><code>2eaee16</code></a>
Fixes bundle for action.yml (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/249">#249</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/b0ffb2e6f3a9784351c8adc3d38299af01c12ca5"><code>b0ffb2e</code></a>
feat(upgrade): add labels input parameter (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/254">#254</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/86c3f54b90126151a61f3f0e9e4eb86ce6bf8f91"><code>86c3f54</code></a>
Upgrade trunk to 1.22.6 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/262">#262</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/0c109cf103b1bf745bb0cd8ec19d00a4609527d8"><code>0c109cf</code></a>
chore: bump upload-artifact action dependency (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/261">#261</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/b258fde5dc45b643156b428bf36d912035c25087"><code>b258fde</code></a>
chore(deps): update actions/setup-node action to v4 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/209">#209</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/4fd292ef88f7ccc8cdf8962ec63dd3e0b1db45c6"><code>4fd292e</code></a>
chore(deps): update actions/checkout action to v4 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/183">#183</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/e56f6796c92c0f66b3433be5dd013594b1554af2"><code>e56f679</code></a>
Update actions/cache@v3 to actions/cache@v4 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/231">#231</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/12da16fcdd5cad1903d0082e591e09df7b67c7f0...2eaee169140ec559bd556208f9f99cdfdf468da8">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml        | 6 +++---
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/upgrade_trunk.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index b40a196..4a5cba6 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index f3fa2cb..149218c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index a338bb6..caa82f4 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@12da16fcdd5cad1903d0082e591e09df7b67c7f0
+        uses: trunk-io/trunk-action/upgrade@2eaee169140ec559bd556208f9f99cdfdf468da8
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From e0bbe5da2dd7475e6feb03ade355dd38d20a3105 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 28 Oct 2024 11:23:21 -0700
Subject: [PATCH 064/176] Upgrade trunk (#170)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- mypy 1.12.1 → 1.13.0
- renovate 38.130.2 → 38.130.4
- ruff 0.7.0 → 0.7.1
- trufflehog 3.82.12 → 3.82.13

2 tools were upgraded:

- gh 2.60.0 → 2.60.1
- trunk-analytics-cli 0.5.32 → 0.5.34

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 57124cc..4ee8d10 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -30,7 +30,7 @@ lint:
     - isort@5.13.2
     - markdownlint@0.42.0
     - markdown-link-check@3.12.2
-    - mypy@1.12.1
+    - mypy@1.13.0
     - nancy@1.0.46
     - osv-scanner@1.9.0
     - oxipng@9.1.2
@@ -38,9 +38,9 @@ lint:
     - prettier@3.3.3
     - prisma@5.21.1
     - pylint@3.3.1
-    - renovate@38.130.2
+    - renovate@38.130.4
     - rubocop@1.39.0
-    - ruff@0.7.0
+    - ruff@0.7.1
     - rustfmt@1.68.2
     - semgrep@1.93.0
     - shellcheck@0.10.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.12
+    - trufflehog@3.82.13
     - trunk-toolbox@0.4.1
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.60.0
+    - gh@2.60.1
     - grpcui@1.4.1
     - gt@1.4.6
-    - trunk-analytics-cli@0.5.32
+    - trunk-analytics-cli@0.5.34

From b72e48d7b454b926c8a612dd6be6fe24189fceec Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 1 Nov 2024 09:27:36 -0700
Subject: [PATCH 065/176] Upgrade trunk (#171)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.18.1 → 1.18.3
- checkov 3.2.269 → 3.2.276
- osv-scanner 1.9.0 → 1.9.1
- renovate 38.130.4 → 38.135.2
- semgrep 1.93.0 → 1.94.0
- trufflehog 3.82.13 → 3.83.1
- trunk-toolbox 0.4.1 → 0.5.0

1 tool was upgraded:

- trunk-analytics-cli 0.5.34 → 0.5.36

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 4ee8d10..6d47a81 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.18.1
-    - checkov@3.2.269
+    - cfnlint@1.18.3
+    - checkov@3.2.276
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,17 +32,17 @@ lint:
     - markdown-link-check@3.12.2
     - mypy@1.13.0
     - nancy@1.0.46
-    - osv-scanner@1.9.0
+    - osv-scanner@1.9.1
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
     - prisma@5.21.1
     - pylint@3.3.1
-    - renovate@38.130.4
+    - renovate@38.135.2
     - rubocop@1.39.0
     - ruff@0.7.1
     - rustfmt@1.68.2
-    - semgrep@1.93.0
+    - semgrep@1.94.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,8 +56,8 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.82.13
-    - trunk-toolbox@0.4.1
+    - trufflehog@3.83.1
+    - trunk-toolbox@0.5.0
     - yamllint@1.35.1
 
   # Sourcing repos will have these configs available to applicable linters
@@ -110,4 +110,4 @@ tools:
     - gh@2.60.1
     - grpcui@1.4.1
     - gt@1.4.6
-    - trunk-analytics-cli@0.5.34
+    - trunk-analytics-cli@0.5.36

From 4020db5af9f764a36641d6f513450e1c8f4d2004 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 4 Nov 2024 09:45:33 -0800
Subject: [PATCH 066/176] Upgrade trunk (#172)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 38.135.2 → 38.142.0
- semgrep 1.94.0 → 1.95.0
- trufflehog 3.83.1 → 3.83.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 6d47a81..62b3bbe 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,11 +38,11 @@ lint:
     - prettier@3.3.3
     - prisma@5.21.1
     - pylint@3.3.1
-    - renovate@38.135.2
+    - renovate@38.142.0
     - rubocop@1.39.0
     - ruff@0.7.1
     - rustfmt@1.68.2
-    - semgrep@1.94.0
+    - semgrep@1.95.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.83.1
+    - trufflehog@3.83.2
     - trunk-toolbox@0.5.0
     - yamllint@1.35.1
 

From c4ee59c08605beecab4d747014cf74be05818329 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 8 Nov 2024 10:52:07 -0800
Subject: [PATCH 067/176] Upgrade trunk (#173)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- actionlint 1.7.3 → 1.7.4
- cfnlint 1.18.3 → 1.18.4
- checkov 3.2.276 → 3.2.281
- markdown-link-check 3.12.2 → 3.13.6
- prisma 5.21.1 → 5.22.0
- renovate 38.142.0 → 39.7.1
- ruff 0.7.1 → 0.7.2
- trufflehog 3.83.2 → 3.83.4

3 tools were upgraded:

- gh 2.60.1 → 2.61.0
- gt 1.4.6 → 1.4.8
- trunk-analytics-cli 0.5.36 → 0.5.38

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 62b3bbe..29d13ea 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.3
+    - actionlint@1.7.4
     - bandit@1.7.10
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.18.3
-    - checkov@3.2.276
+    - cfnlint@1.18.4
+    - checkov@3.2.281
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -29,18 +29,18 @@ lint:
     - hadolint@2.12.0
     - isort@5.13.2
     - markdownlint@0.42.0
-    - markdown-link-check@3.12.2
+    - markdown-link-check@3.13.6
     - mypy@1.13.0
     - nancy@1.0.46
     - osv-scanner@1.9.1
     - oxipng@9.1.2
     - pragma-once
     - prettier@3.3.3
-    - prisma@5.21.1
+    - prisma@5.22.0
     - pylint@3.3.1
-    - renovate@38.142.0
+    - renovate@39.7.1
     - rubocop@1.39.0
-    - ruff@0.7.1
+    - ruff@0.7.2
     - rustfmt@1.68.2
     - semgrep@1.95.0
     - shellcheck@0.10.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.83.2
+    - trufflehog@3.83.4
     - trunk-toolbox@0.5.0
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.60.1
+    - gh@2.61.0
     - grpcui@1.4.1
-    - gt@1.4.6
-    - trunk-analytics-cli@0.5.36
+    - gt@1.4.8
+    - trunk-analytics-cli@0.5.38

From bcbf8868c452ee281b2d840c9f07417d8575c162 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Nov 2024 14:40:54 -0800
Subject: [PATCH 068/176] Bump the dependencies group with 2 updates (#174)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.27.0 to 3.27.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.1</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576">#2576</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.1/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576">#2576</a></li>
</ul>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/4f3212b61783c3c68e8309a0f18a699764811cda"><code>4f3212b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2585">#2585</a>
from github/update-v3.27.1-3ef4c0845</li>
<li><a
href="https://github.com/github/codeql-action/commit/63b548d59efbc36249fe81c530cd6abbb92dfb6b"><code>63b548d</code></a>
Update changelog for v3.27.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/3ef4c0845750690942ece9abe29a853edce0f43c"><code>3ef4c08</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2576">#2576</a>
from github/update-bundle/codeql-bundle-v2.19.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/4e033f0e2665ee6b02a64f636ae76c937e3c7293"><code>4e033f0</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/5ac2ddd6fc78e6c0d2af5b110b19381f38bd84df"><code>5ac2ddd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2580">#2580</a>
from jsoref/minor-cleanup</li>
<li><a
href="https://github.com/github/codeql-action/commit/3b7b85fbe86fa0c4cbfb2e855f588b595a95609e"><code>3b7b85f</code></a>
Conditionally clear runner cache</li>
<li><a
href="https://github.com/github/codeql-action/commit/688ea5370d3de84af47f851b307068890b8de8bf"><code>688ea53</code></a>
Fix publish-immutable-action version</li>
<li><a
href="https://github.com/github/codeql-action/commit/1e6d67b13813efa924b55655e325752fc41e4890"><code>1e6d67b</code></a>
Give expected-queries-runs permissions</li>
<li><a
href="https://github.com/github/codeql-action/commit/d5e73848c49f7764fd7b8bf826748e767b955fd3"><code>d5e7384</code></a>
Strip trailing whitespace generated by ruamel-yaml</li>
<li><a
href="https://github.com/github/codeql-action/commit/756aa649dfdf25203aa333caa3f5f9503f09400e"><code>756aa64</code></a>
spelling: macos</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/662472033e021d55d94146f66f6058822b0b39fd...4f3212b61783c3c68e8309a0f18a699764811cda">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.1.18 to 1.1.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.19</h2>
<h2>What's Changed</h2>
<ul>
<li>Upgrade trunk by <a
href="https://github.com/trunk-open-pr-bot"><code>@​trunk-open-pr-bot</code></a>
in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/264">trunk-io/trunk-action#264</a></li>
<li>Upgrade trunk to 1.22.7 by <a
href="https://github.com/trunk-open-pr-bot"><code>@​trunk-open-pr-bot</code></a>
in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/265">trunk-io/trunk-action#265</a></li>
<li>Overwrite annotations when running multiple trunk actions by <a
href="https://github.com/det"><code>@​det</code></a> in <a
href="https://redirect.github.com/trunk-io/trunk-action/pull/266">trunk-io/trunk-action#266</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1...v1.1.19">https://github.com/trunk-io/trunk-action/compare/v1...v1.1.19</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/4d5ecc89b2691705fd08c747c78652d2fc806a94"><code>4d5ecc8</code></a>
Overwrite annotations when running multiple trunk actions (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/266">#266</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/2cf1a3513f90204f693138044a5805b35e3c5b15"><code>2cf1a35</code></a>
Upgrade trunk to 1.22.7 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/265">#265</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/b63f6bd8d852aac4855f8b92949442465eb6c711"><code>b63f6bd</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/264">#264</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/2eaee169140ec559bd556208f9f99cdfdf468da8...4d5ecc89b2691705fd08c747c78652d2fc806a94">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml        | 6 +++---
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/upgrade_trunk.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 4a5cba6..25b0b17 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 149218c..214b67a 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index caa82f4..48a4219 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@2eaee169140ec559bd556208f9f99cdfdf468da8
+        uses: trunk-io/trunk-action/upgrade@4d5ecc89b2691705fd08c747c78652d2fc806a94
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From 1fd65a23a2255e8e19b56178f438e4f42292a601 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 11 Nov 2024 14:42:03 -0800
Subject: [PATCH 069/176] Upgrade trunk (#175)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- checkov 3.2.281 → 3.2.282
- renovate 39.7.1 → 39.7.5
- semgrep 1.95.0 → 1.96.0
- trufflehog 3.83.4 → 3.83.5

1 tool was upgraded:

- trunk-analytics-cli 0.5.38 → 0.5.39

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 29d13ea..59ab014 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.18.4
-    - checkov@3.2.281
+    - checkov@3.2.282
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,11 +38,11 @@ lint:
     - prettier@3.3.3
     - prisma@5.22.0
     - pylint@3.3.1
-    - renovate@39.7.1
+    - renovate@39.7.5
     - rubocop@1.39.0
     - ruff@0.7.2
     - rustfmt@1.68.2
-    - semgrep@1.95.0
+    - semgrep@1.96.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.83.4
+    - trufflehog@3.83.5
     - trunk-toolbox@0.5.0
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.61.0
     - grpcui@1.4.1
     - gt@1.4.8
-    - trunk-analytics-cli@0.5.38
+    - trunk-analytics-cli@0.5.39

From 1aed928619d3bc4327b05c8cec84f61f5290c1bf Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 15 Nov 2024 10:14:19 -0800
Subject: [PATCH 070/176] Upgrade trunk (#176)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.18.4 → 1.19.0
- checkov 3.2.282 → 3.2.293
- golangci-lint 1.61.0 → 1.62.0
- hadolint 2.12.0 → 2.12.1-beta
- renovate 39.7.5 → 39.15.0
- ruff 0.7.2 → 0.7.3
- sql-formatter 15.4.5 → 15.4.6
- trufflehog 3.83.5 → 3.83.6
- trunk-toolbox 0.5.0 → 0.5.3

2 tools were upgraded:

- gh 2.61.0 → 2.62.0
- trunk-analytics-cli 0.5.39 → 0.5.40

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 59ab014..eb9e16c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,16 +17,16 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.18.4
-    - checkov@3.2.282
+    - cfnlint@1.19.0
+    - checkov@3.2.293
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.61.0
-    - hadolint@2.12.0
+    - golangci-lint@1.62.0
+    - hadolint@2.12.1-beta
     - isort@5.13.2
     - markdownlint@0.42.0
     - markdown-link-check@3.13.6
@@ -38,15 +38,15 @@ lint:
     - prettier@3.3.3
     - prisma@5.22.0
     - pylint@3.3.1
-    - renovate@39.7.5
+    - renovate@39.15.0
     - rubocop@1.39.0
-    - ruff@0.7.2
+    - ruff@0.7.3
     - rustfmt@1.68.2
     - semgrep@1.96.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.10.1
-    - sql-formatter@15.4.5
+    - sql-formatter@15.4.6
     - stylelint@16.10.0:
         packages:
           - stylelint-config-standard-scss@13.1.0
@@ -56,8 +56,8 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.83.5
-    - trunk-toolbox@0.5.0
+    - trufflehog@3.83.6
+    - trunk-toolbox@0.5.3
     - yamllint@1.35.1
 
   # Sourcing repos will have these configs available to applicable linters
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.61.0
+    - gh@2.62.0
     - grpcui@1.4.1
     - gt@1.4.8
-    - trunk-analytics-cli@0.5.39
+    - trunk-analytics-cli@0.5.40

From 6dc77d107a2041097fa3ba269d27bf1afd6bbc29 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 17 Nov 2024 22:08:05 -0800
Subject: [PATCH 071/176] Bump github/codeql-action from 3.27.1 to 3.27.4 in
 the dependencies group (#177)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.27.1 to 3.27.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.4</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.4/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.27.3</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.3/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.27.2</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.2/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576">#2576</a></li>
</ul>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/ea9e4e37992a54ee68a9622e985e60c8e8f12d9f"><code>ea9e4e3</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2605">#2605</a>
from github/update-v3.27.4-3ab67a219</li>
<li><a
href="https://github.com/github/codeql-action/commit/845ea9230baa1c02f895802221f61eb448caa267"><code>845ea92</code></a>
Update changelog for v3.27.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/3ab67a21932f9425e7dca53353787b8dda8e89d9"><code>3ab67a2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2597">#2597</a>
from github/mbg/caching/output-improvements</li>
<li><a
href="https://github.com/github/codeql-action/commit/6e3a010dfe7e41114c548b680d885bbd55b2834e"><code>6e3a010</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2583">#2583</a>
from jsoref/use-artifact-4</li>
<li><a
href="https://github.com/github/codeql-action/commit/1c83cd12920695d0a30eb88c71a10f79f5ae22b4"><code>1c83cd1</code></a>
Upgrade actions/upload-artifact to v4</li>
<li><a
href="https://github.com/github/codeql-action/commit/024283fcc9914a2f29343fa25558256c1799501f"><code>024283f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2602">#2602</a>
from github/mergeback/v3.27.3-to-main-396bb3e4</li>
<li><a
href="https://github.com/github/codeql-action/commit/613fe96926eddbad17ae49a608c6cd6fb07c4d10"><code>613fe96</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/e35d4aa1da5d4ef385c387ee6ad1f286494398f5"><code>e35d4aa</code></a>
Update changelog and version after v3.27.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/396bb3e45325a47dd9ef434068033c6d5bb0d11a"><code>396bb3e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2601">#2601</a>
from github/update-v3.27.3-f04790367</li>
<li><a
href="https://github.com/github/codeql-action/commit/2b1319450a8536cc55c2629acf08b8de0d6974fc"><code>2b13194</code></a>
Update changelog for v3.27.3</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/4f3212b61783c3c68e8309a0f18a699764811cda...ea9e4e37992a54ee68a9622e985e60c8e8f12d9f">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.27.1&new-version=3.27.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 25b0b17..6b17435 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 214b67a..b21157c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
         with:
           sarif_file: results.sarif

From 9106475449908934b4656e79af42a06670ad6116 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 18 Nov 2024 00:36:35 -0800
Subject: [PATCH 072/176] Upgrade trunk (#178)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- checkov 3.2.293 → 3.2.296
- renovate 39.15.0 → 39.16.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index eb9e16c..37d3c88 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.19.0
-    - checkov@3.2.293
+    - checkov@3.2.296
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.3.3
     - prisma@5.22.0
     - pylint@3.3.1
-    - renovate@39.15.0
+    - renovate@39.16.0
     - rubocop@1.39.0
     - ruff@0.7.3
     - rustfmt@1.68.2

From 10363ad77b768c543010426fb81360818e679fec Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 25 Nov 2024 10:20:02 -0800
Subject: [PATCH 073/176] Upgrade trunk (#179)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

1 linter was upgraded:

- trufflehog 3.83.6 → 3.83.7

1 tool was upgraded:

- trunk-analytics-cli 0.5.40 → 0.6.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 37d3c88..31ac5eb 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.83.6
+    - trufflehog@3.83.7
     - trunk-toolbox@0.5.3
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.62.0
     - grpcui@1.4.1
     - gt@1.4.8
-    - trunk-analytics-cli@0.5.40
+    - trunk-analytics-cli@0.6.2

From 2e8ceae67b596bd78b9ca5678d1a612f61a1d24f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 Nov 2024 10:51:22 -0800
Subject: [PATCH 074/176] Bump github/codeql-action from 3.27.4 to 3.27.5 in
 the dependencies group (#180)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.27.4 to 3.27.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.5</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.5/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576">#2576</a></li>
</ul>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f09c1c0a94de965c15400f5634aa42fac8fb8f88"><code>f09c1c0</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2616">#2616</a>
from github/update-v3.27.5-a6c8729a5</li>
<li><a
href="https://github.com/github/codeql-action/commit/67b73eaba559c7e6913377065b0362ccbfc94e87"><code>67b73ea</code></a>
Update changelog for v3.27.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/a6c8729a5d7573eb8d440e52a9645ce4db61d97c"><code>a6c8729</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2614">#2614</a>
from github/marcogario/per-platform-proxy</li>
<li><a
href="https://github.com/github/codeql-action/commit/8f3b48727ff1b076c28967a258b95fcee30a3a48"><code>8f3b487</code></a>
Start-proxy: Fetch OS specific binary</li>
<li><a
href="https://github.com/github/codeql-action/commit/cba5fb58d4f85affaf03eb9da32f5b6c9d76838b"><code>cba5fb5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2613">#2613</a>
from github/dependabot/npm_and_yarn/npm_and_yarn-018...</li>
<li><a
href="https://github.com/github/codeql-action/commit/e782c3a145d9946aba8fa390e406acbe4e4c05c5"><code>e782c3a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2612">#2612</a>
from github/angelapwen/report-linux-runner-release</li>
<li><a
href="https://github.com/github/codeql-action/commit/db6788195b646f87b3d1c616b0c14a6d5b7fa9a6"><code>db67881</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/ecde4d232d18cf2dba6c1a6b76810332abff736f"><code>ecde4d2</code></a>
Bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn group</li>
<li><a
href="https://github.com/github/codeql-action/commit/e3c67a01d31d9c173ba5ffccc9d0f275540d99de"><code>e3c67a0</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2610">#2610</a>
from github/dependabot/npm_and_yarn/npm-d2ca52e617</li>
<li><a
href="https://github.com/github/codeql-action/commit/f9ada54538b47b6db28c4d11f53848689968909e"><code>f9ada54</code></a>
Telemetry: report OS release for GitHub-hosted Linux runners</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/ea9e4e37992a54ee68a9622e985e60c8e8f12d9f...f09c1c0a94de965c15400f5634aa42fac8fb8f88">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.27.4&new-version=3.27.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 6b17435..d74aede 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b21157c..db2718c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
         with:
           sarif_file: results.sarif

From f7b49d3184ba4d16f3174d8fc35f116759b4422d Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Sun, 1 Dec 2024 18:16:32 -0800
Subject: [PATCH 075/176] Upgrade trunk (#181)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

12 linters were upgraded:

- bandit 1.7.10 → 1.8.0
- cfnlint 1.19.0 → 1.20.1
- checkov 3.2.296 → 3.2.321
- golangci-lint 1.62.0 → 1.62.2
- markdownlint 0.42.0 → 0.43.0
- prettier 3.3.3 → 3.4.1
- renovate 39.16.0 → 39.32.0
- ruff 0.7.3 → 0.8.0
- semgrep 1.96.0 → 1.97.0
- sort-package-json 2.10.1 → 2.12.0
- trufflehog 3.83.7 → 3.84.1
- trunk-toolbox 0.5.3 → 0.5.4

1 tool was upgraded:

- gh 2.62.0 → 2.63.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 31ac5eb..92bcca5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -13,39 +13,39 @@ lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
     - actionlint@1.7.4
-    - bandit@1.7.10
+    - bandit@1.8.0
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.19.0
-    - checkov@3.2.296
+    - cfnlint@1.20.1
+    - checkov@3.2.321
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.62.0
+    - golangci-lint@1.62.2
     - hadolint@2.12.1-beta
     - isort@5.13.2
-    - markdownlint@0.42.0
+    - markdownlint@0.43.0
     - markdown-link-check@3.13.6
     - mypy@1.13.0
     - nancy@1.0.46
     - osv-scanner@1.9.1
     - oxipng@9.1.2
     - pragma-once
-    - prettier@3.3.3
+    - prettier@3.4.1
     - prisma@5.22.0
     - pylint@3.3.1
-    - renovate@39.16.0
+    - renovate@39.32.0
     - rubocop@1.39.0
-    - ruff@0.7.3
+    - ruff@0.8.0
     - rustfmt@1.68.2
-    - semgrep@1.96.0
+    - semgrep@1.97.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@2.10.1
+    - sort-package-json@2.12.0
     - sql-formatter@15.4.6
     - stylelint@16.10.0:
         packages:
@@ -56,8 +56,8 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.83.7
-    - trunk-toolbox@0.5.3
+    - trufflehog@3.84.1
+    - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
   # Sourcing repos will have these configs available to applicable linters
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.62.0
+    - gh@2.63.0
     - grpcui@1.4.1
     - gt@1.4.8
     - trunk-analytics-cli@0.6.2

From 7d9043bd864d5303e964aaede09a6da4b96499e2 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 2 Dec 2024 00:37:31 -0800
Subject: [PATCH 076/176] Upgrade trunk (#182)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- checkov 3.2.321 → 3.2.322
- renovate 39.32.0 → 39.38.0
- ruff 0.8.0 → 0.8.1
- stylelint 16.10.0 → 16.11.0
  - stylelint-config-standard-scss 13.1.0 → 14.0.0

1 tool was upgraded:

- grpcui 1.4.1 → 1.4.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 92bcca5..b415f7f 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.20.1
-    - checkov@3.2.321
+    - checkov@3.2.322
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,18 +38,18 @@ lint:
     - prettier@3.4.1
     - prisma@5.22.0
     - pylint@3.3.1
-    - renovate@39.32.0
+    - renovate@39.38.0
     - rubocop@1.39.0
-    - ruff@0.8.0
+    - ruff@0.8.1
     - rustfmt@1.68.2
     - semgrep@1.97.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.12.0
     - sql-formatter@15.4.6
-    - stylelint@16.10.0:
+    - stylelint@16.11.0:
         packages:
-          - stylelint-config-standard-scss@13.1.0
+          - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@6.1.0
     - svgo@3.3.2
     - taplo@0.9.3
@@ -108,6 +108,6 @@ tools:
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
     - gh@2.63.0
-    - grpcui@1.4.1
+    - grpcui@1.4.2
     - gt@1.4.8
     - trunk-analytics-cli@0.6.2

From f66e5cbdca42cb323e704a0c50458ebea57c4d10 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 6 Dec 2024 00:17:49 -0800
Subject: [PATCH 077/176] Upgrade trunk (#183)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.20.1 → 1.20.2
- checkov 3.2.322 → 3.2.330
- oxipng 9.1.2 → 9.1.3
- prettier 3.4.1 → 3.4.2
- pylint 3.3.1 → 3.3.2
- renovate 39.38.0 → 39.49.3
- trufflehog 3.84.1 → 3.84.2

2 tools were upgraded:

- gh 2.63.0 → 2.63.2
- trunk-analytics-cli 0.6.2 → 0.6.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b415f7f..329de9a 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.20.1
-    - checkov@3.2.322
+    - cfnlint@1.20.2
+    - checkov@3.2.330
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -33,12 +33,12 @@ lint:
     - mypy@1.13.0
     - nancy@1.0.46
     - osv-scanner@1.9.1
-    - oxipng@9.1.2
+    - oxipng@9.1.3
     - pragma-once
-    - prettier@3.4.1
+    - prettier@3.4.2
     - prisma@5.22.0
-    - pylint@3.3.1
-    - renovate@39.38.0
+    - pylint@3.3.2
+    - renovate@39.49.3
     - rubocop@1.39.0
     - ruff@0.8.1
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.84.1
+    - trufflehog@3.84.2
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.63.0
+    - gh@2.63.2
     - grpcui@1.4.2
     - gt@1.4.8
-    - trunk-analytics-cli@0.6.2
+    - trunk-analytics-cli@0.6.5

From a792015923e4f5d9b2df1f728ac519cafaf685ec Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 8 Dec 2024 22:04:23 -0800
Subject: [PATCH 078/176] Bump github/codeql-action from 3.27.5 to 3.27.6 in
 the dependencies group (#184)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.27.5 to 3.27.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.6</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626">#2626</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.6/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li>
</ul>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626">#2626</a></li>
</ul>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576">#2576</a></li>
</ul>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/aa578102511db1f4524ed59b8cc2bae4f6e88195"><code>aa57810</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2628">#2628</a>
from github/update-v3.27.6-af49565b8</li>
<li><a
href="https://github.com/github/codeql-action/commit/34e77b772dca145ff26e8eb2dc7bc23d1bf81695"><code>34e77b7</code></a>
Update changelog for v3.27.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/af49565b852879ee08c297788e61c43f3b415aa4"><code>af49565</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2620">#2620</a>
from github/cklin/DiffThunkRange-fix</li>
<li><a
href="https://github.com/github/codeql-action/commit/5659f01a9cfe229917b5280574be312a57428a82"><code>5659f01</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2626">#2626</a>
from github/update-bundle/codeql-bundle-v2.19.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/5333ff3db771a9171f8cbc93a366aee114ec7821"><code>5333ff3</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/e4fb28de5201d2f183becc36e3d12f47c99a88a1"><code>e4fb28d</code></a>
Update default bundle to codeql-bundle-v2.19.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/3d3d628990a5f99229dd9fa1821cc5a4f31b613b"><code>3d3d628</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2617">#2617</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/2eea97e7b95203465a3a41b764530fbbe1c4605c"><code>2eea97e</code></a>
Fix DiffThunkRange access</li>
<li><a
href="https://github.com/github/codeql-action/commit/f8e782af5670be7b12c0acb5b25c1c5703b931b9"><code>f8e782a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2618">#2618</a>
from github/mergeback/v3.27.5-to-main-f09c1c0a</li>
<li><a
href="https://github.com/github/codeql-action/commit/49b7c9791d99b2600f169b7f8af924f0e323e3a0"><code>49b7c97</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/f09c1c0a94de965c15400f5634aa42fac8fb8f88...aa578102511db1f4524ed59b8cc2bae4f6e88195">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.27.5&new-version=3.27.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index d74aede..fe89808 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/autobuild@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index db2718c..d475c3c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
         with:
           sarif_file: results.sarif

From feb6e4785452c33b8d6e32412b735b9608eb2fb8 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 13 Dec 2024 01:14:32 -0800
Subject: [PATCH 079/176] Upgrade trunk (#185)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.20.2 → 1.22.0
- checkov 3.2.330 → 3.2.334
- prisma 5.22.0 → 6.0.1
- renovate 39.49.3 → 39.62.6
- ruff 0.8.1 → 0.8.2
- semgrep 1.97.0 → 1.99.0
- trufflehog 3.84.2 → 3.86.1

1 tool was upgraded:

- trunk-analytics-cli 0.6.5 → 0.6.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 329de9a..9952a49 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.20.2
-    - checkov@3.2.330
+    - cfnlint@1.22.0
+    - checkov@3.2.334
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,13 +36,13 @@ lint:
     - oxipng@9.1.3
     - pragma-once
     - prettier@3.4.2
-    - prisma@5.22.0
+    - prisma@6.0.1
     - pylint@3.3.2
-    - renovate@39.49.3
+    - renovate@39.62.6
     - rubocop@1.39.0
-    - ruff@0.8.1
+    - ruff@0.8.2
     - rustfmt@1.68.2
-    - semgrep@1.97.0
+    - semgrep@1.99.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.12.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.84.2
+    - trufflehog@3.86.1
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.63.2
     - grpcui@1.4.2
     - gt@1.4.8
-    - trunk-analytics-cli@0.6.5
+    - trunk-analytics-cli@0.6.8

From b8846a0a5961b81017f7507daceb9ab7a4433f9b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 15 Dec 2024 22:32:51 -0800
Subject: [PATCH 080/176] Bump github/codeql-action from 3.27.6 to 3.27.9 in
 the dependencies group (#186)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.27.6 to 3.27.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.9</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.9 - 12 Dec 2024</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.9/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.27.7</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636">#2636</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.7/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.9 - 12 Dec 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.8 - 12 Dec 2024</h2>
<ul>
<li>Fixed an issue where streaming the download and extraction of the
CodeQL bundle did not respect proxy settings. <a
href="https://redirect.github.com/github/codeql-action/pull/2624">#2624</a></li>
</ul>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636">#2636</a></li>
</ul>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626">#2626</a></li>
</ul>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576">#2576</a></li>
</ul>
<h2>3.27.0 - 22 Oct 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/df409f7d9260372bd5f19e5b04e83cb3c43714ae"><code>df409f7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2649">#2649</a>
from github/update-v3.27.9-7972a42f3</li>
<li><a
href="https://github.com/github/codeql-action/commit/feca44ddf6862ba0707723d320d5c42780fe6499"><code>feca44d</code></a>
Update changelog for v3.27.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/7972a42f3de41c0960aeae9d0efc1705c9d5da62"><code>7972a42</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2648">#2648</a>
from github/aeisenberg/add-environment</li>
<li><a
href="https://github.com/github/codeql-action/commit/44bf16d3a1ed508cdc836322a8e39526f7c301b8"><code>44bf16d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2646">#2646</a>
from github/mergeback/v3.27.8-to-main-8a93837a</li>
<li><a
href="https://github.com/github/codeql-action/commit/f124ad0e7ef6ecb9840fcd1b908d1630211d37c3"><code>f124ad0</code></a>
Adds an environment for creating releases</li>
<li><a
href="https://github.com/github/codeql-action/commit/92753708cf0395732c3e3ea1666edb55192158c5"><code>9275370</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/a059a7a0ee19212a3820398327f1ba34fd73676f"><code>a059a7a</code></a>
Update changelog and version after v3.27.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/8a93837afdf1873301a68d777844b43e98cd4313"><code>8a93837</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2645">#2645</a>
from github/update-v3.27.8-9cfbef4bd</li>
<li><a
href="https://github.com/github/codeql-action/commit/90a270091bce2bf4cc6f2fecafcfb7177e894f12"><code>90a2700</code></a>
Update changelog for v3.27.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/9cfbef4bdab412b69026a06a180a472038020f72"><code>9cfbef4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2644">#2644</a>
from github/aeisenberg/use-app-token-for-release</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/aa578102511db1f4524ed59b8cc2bae4f6e88195...df409f7d9260372bd5f19e5b04e83cb3c43714ae">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.27.6&new-version=3.27.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index fe89808..6f800be 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/autobuild@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d475c3c..5df3f65 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
         with:
           sarif_file: results.sarif

From 88b54d177b6ec25ce1d9b0a6cf681a3938002183 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 16 Dec 2024 21:39:15 -0500
Subject: [PATCH 081/176] Upgrade trunk (#187)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- cfnlint 1.22.0 → 1.22.1
- renovate 39.62.6 → 39.64.0
- ruff 0.8.2 → 0.8.3
- semgrep 1.99.0 → 1.100.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 9952a49..b4d6987 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.22.0
+    - cfnlint@1.22.1
     - checkov@3.2.334
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,11 +38,11 @@ lint:
     - prettier@3.4.2
     - prisma@6.0.1
     - pylint@3.3.2
-    - renovate@39.62.6
+    - renovate@39.64.0
     - rubocop@1.39.0
-    - ruff@0.8.2
+    - ruff@0.8.3
     - rustfmt@1.68.2
-    - semgrep@1.99.0
+    - semgrep@1.100.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.12.0

From 26c60b0f4da259f032daa13f8eef2d393aecfdeb Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 20 Dec 2024 10:50:07 -0500
Subject: [PATCH 082/176] Upgrade trunk (#188)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- cfnlint 1.22.1 → 1.22.2
- checkov 3.2.334 → 3.2.342
- osv-scanner 1.9.1 → 1.9.2
- prisma 6.0.1 → 6.1.0
- renovate 39.64.0 → 39.75.0
- semgrep 1.100.0 → 1.101.0
- stylelint 16.11.0 → 16.12.0
- trufflehog 3.86.1 → 3.87.2

2 tools were upgraded:

- gt 1.4.8 → 1.4.11
- trunk-analytics-cli 0.6.8 → 0.6.10

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b4d6987..9b688bb 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.22.1
-    - checkov@3.2.334
+    - cfnlint@1.22.2
+    - checkov@3.2.342
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,22 +32,22 @@ lint:
     - markdown-link-check@3.13.6
     - mypy@1.13.0
     - nancy@1.0.46
-    - osv-scanner@1.9.1
+    - osv-scanner@1.9.2
     - oxipng@9.1.3
     - pragma-once
     - prettier@3.4.2
-    - prisma@6.0.1
+    - prisma@6.1.0
     - pylint@3.3.2
-    - renovate@39.64.0
+    - renovate@39.75.0
     - rubocop@1.39.0
     - ruff@0.8.3
     - rustfmt@1.68.2
-    - semgrep@1.100.0
+    - semgrep@1.101.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.12.0
     - sql-formatter@15.4.6
-    - stylelint@16.11.0:
+    - stylelint@16.12.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@6.1.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.86.1
+    - trufflehog@3.87.2
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.63.2
     - grpcui@1.4.2
-    - gt@1.4.8
-    - trunk-analytics-cli@0.6.8
+    - gt@1.4.11
+    - trunk-analytics-cli@0.6.10

From 8e1f0558a6633867192739447890e210767eb9fa Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 30 Dec 2024 12:21:46 -0500
Subject: [PATCH 083/176] Upgrade trunk (#190)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- checkov 3.2.342 → 3.2.344
- mypy 1.13.0 → 1.14.0
- pylint 3.3.2 → 3.3.3
- renovate 39.75.0 → 39.83.3
- ruff 0.8.3 → 0.8.4
- sql-formatter 15.4.6 → 15.4.8
- trufflehog 3.87.2 → 3.88.0

1 tool was upgraded:

- gh 2.63.2 → 2.64.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 9b688bb..c004dc9 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.22.2
-    - checkov@3.2.342
+    - checkov@3.2.344
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,23 +30,23 @@ lint:
     - isort@5.13.2
     - markdownlint@0.43.0
     - markdown-link-check@3.13.6
-    - mypy@1.13.0
+    - mypy@1.14.0
     - nancy@1.0.46
     - osv-scanner@1.9.2
     - oxipng@9.1.3
     - pragma-once
     - prettier@3.4.2
     - prisma@6.1.0
-    - pylint@3.3.2
-    - renovate@39.75.0
+    - pylint@3.3.3
+    - renovate@39.83.3
     - rubocop@1.39.0
-    - ruff@0.8.3
+    - ruff@0.8.4
     - rustfmt@1.68.2
     - semgrep@1.101.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.12.0
-    - sql-formatter@15.4.6
+    - sql-formatter@15.4.8
     - stylelint@16.12.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.87.2
+    - trufflehog@3.88.0
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.63.2
+    - gh@2.64.0
     - grpcui@1.4.2
     - gt@1.4.11
     - trunk-analytics-cli@0.6.10

From fee5a5f57c9006ce3092fe6c81717dd9b669cc6d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 7 Jan 2025 10:30:16 -0800
Subject: [PATCH 084/176] Bump the dependencies group with 2 updates (#189)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.27.9 to 3.28.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.28.0 - 20 Dec 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.15.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li>
<li>Don't fail in the unusual case that a file is on the search path. <a
href="https://redirect.github.com/github/codeql-action/pull/2660">#2660</a>.</li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.0/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.0 - 20 Dec 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.15.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li>
<li>Don't fail in the unusual case that a file is on the search path. <a
href="https://redirect.github.com/github/codeql-action/pull/2660">#2660</a>.</li>
</ul>
<h2>3.27.9 - 12 Dec 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.8 - 12 Dec 2024</h2>
<ul>
<li>Fixed an issue where streaming the download and extraction of the
CodeQL bundle did not respect proxy settings. <a
href="https://redirect.github.com/github/codeql-action/pull/2624">#2624</a></li>
</ul>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636">#2636</a></li>
</ul>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626">#2626</a></li>
</ul>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<h2>3.27.1 - 08 Nov 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"><code>48ab28a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2662">#2662</a>
from github/update-v3.28.0-d01b25e64</li>
<li><a
href="https://github.com/github/codeql-action/commit/4946b765dee77596c258fee1bc1f8c5a86cb45a2"><code>4946b76</code></a>
Update changelog for v3.28.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d01b25e645295d11d0fbb084a8c5e7546b1e508b"><code>d01b25e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2660">#2660</a>
from github/henrymercer/fix-error-file-on-path</li>
<li><a
href="https://github.com/github/codeql-action/commit/7d6d36ce5f3654bed1de7eb8600c22e3a12910a4"><code>7d6d36c</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/b58f4471c8015d1581e4112c33316a6b04ace55f"><code>b58f447</code></a>
Use <code>@actions/io</code> to locate binaries</li>
<li><a
href="https://github.com/github/codeql-action/commit/64cc90bcd4b0a6919309f7882f920e60de2aef1c"><code>64cc90b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2653">#2653</a>
from github/dependabot/npm_and_yarn/npm-61c837125e</li>
<li><a
href="https://github.com/github/codeql-action/commit/d8f8eca6c5448bea9fbfb5a16bcdc9ecc5c4305d"><code>d8f8eca</code></a>
Merge branch 'main' into dependabot/npm_and_yarn/npm-61c837125e</li>
<li><a
href="https://github.com/github/codeql-action/commit/562042d742d834fa44c4fd29c197a62d76568c60"><code>562042d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2655">#2655</a>
from github/aeisenberg/deprecate-2.14</li>
<li><a
href="https://github.com/github/codeql-action/commit/beed6ff2e94aa8b13c7e8c50b7cb642f82855e37"><code>beed6ff</code></a>
Change codeql version used in test</li>
<li><a
href="https://github.com/github/codeql-action/commit/5f0a4d3e67a0f3cb983e0e664a6408ccf8866999"><code>5f0a4d3</code></a>
Bump the minimum supported version of CodeQL to 2.15.5</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/df409f7d9260372bd5f19e5b04e83cb3c43714ae...48ab28a6f5dbc2a99bf1e0131198dd8f1df78169">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.4.3 to 4.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: deprecated <code>Node.js</code> version in action by <a
href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/578">actions/upload-artifact#578</a></li>
<li>Add new <code>artifact-digest</code> output by <a
href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/656">actions/upload-artifact#656</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/578">actions/upload-artifact#578</a></li>
<li><a href="https://github.com/bdehamer"><code>@​bdehamer</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/656">actions/upload-artifact#656</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0">https://github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/6f51ac03b9356f520e9adb1b1b7802705f340c2b"><code>6f51ac0</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/656">#656</a>
from bdehamer/bdehamer/artifact-digest</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/c40c16d999899d3642ba1597014ba7ef8ff611e7"><code>c40c16d</code></a>
add new artifact-digest output</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/735efb4a0a50bb1a533b000483f2d0a23effbd26"><code>735efb4</code></a>
bump <code>@​actions/artifact</code> from 2.1.11 to 2.2.0</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/184d73b71b93c222403b2e7f1ffebe4508014249"><code>184d73b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/578">#578</a>
from hamirmahal/fix/deprecated-nodejs-usage-in-action</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/b4a0a984a056f94abb1db07895e844b9422e1e41"><code>b4a0a98</code></a>
Merge branch 'main' into fix/deprecated-nodejs-usage-in-action</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...6f51ac03b9356f520e9adb1b1b7802705f340c2b">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 6f800be..3f86fbb 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 5df3f65..6740dbd 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           sarif_file: results.sarif

From 4d2028e6c4a4c413b3ac197274cf62b776446a31 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Tue, 7 Jan 2025 10:57:21 -0800
Subject: [PATCH 085/176] Upgrade trunk (#191)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- actionlint 1.7.4 → 1.7.5
- cfnlint 1.22.2 → 1.22.3
- checkov 3.2.344 → 3.2.346
- mypy 1.14.0 → 1.14.1
- renovate 39.83.3 → 39.90.2
- ruff 0.8.4 → 0.8.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index c004dc9..2c674a1 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.4
+    - actionlint@1.7.5
     - bandit@1.8.0
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
-    - cfnlint@1.22.2
-    - checkov@3.2.344
+    - cfnlint@1.22.3
+    - checkov@3.2.346
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,7 +30,7 @@ lint:
     - isort@5.13.2
     - markdownlint@0.43.0
     - markdown-link-check@3.13.6
-    - mypy@1.14.0
+    - mypy@1.14.1
     - nancy@1.0.46
     - osv-scanner@1.9.2
     - oxipng@9.1.3
@@ -38,9 +38,9 @@ lint:
     - prettier@3.4.2
     - prisma@6.1.0
     - pylint@3.3.3
-    - renovate@39.83.3
+    - renovate@39.90.2
     - rubocop@1.39.0
-    - ruff@0.8.4
+    - ruff@0.8.5
     - rustfmt@1.68.2
     - semgrep@1.101.0
     - shellcheck@0.10.0

From e6d455fecda50fba04ef10d12c61d6892cc0fe4a Mon Sep 17 00:00:00 2001
From: Andrei Liviu Georgescu
 <146103342+andreilgeorgescu@users.noreply.github.com>
Date: Tue, 7 Jan 2025 17:49:41 -0500
Subject: [PATCH 086/176] Update default SVGO configuration file to an ESM
 Module (#192)

Updating the default SVGO configuration to an ES Module helps
future-proof it and prevent issues with NPM projects set to `"type":
"module"`.

---------

Co-authored-by: Tyler Jang <tyler@trunk.io>
---
 configs/{svgo.config.js => svgo.config.mjs} | 2 +-
 plugin.yaml                                 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
 rename configs/{svgo.config.js => svgo.config.mjs} (93%)

diff --git a/configs/svgo.config.js b/configs/svgo.config.mjs
similarity index 93%
rename from configs/svgo.config.js
rename to configs/svgo.config.mjs
index b257d13..55b4a7a 100644
--- a/configs/svgo.config.js
+++ b/configs/svgo.config.mjs
@@ -1,4 +1,4 @@
-module.exports = {
+export default {
   plugins: [
     {
       name: "preset-default",
diff --git a/plugin.yaml b/plugin.yaml
index 2c674a1..4ffa33e 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -75,7 +75,7 @@ lint:
         - configs/.shellcheckrc
         - configs/.sqlfluff
         - configs/.stylelintrc.js
-        - configs/svgo.config.js
+        - configs/svgo.config.mjs
         - configs/.yamllint.yaml
 
 # By sourcing this plugin, repos will enable these actions

From 738f19eb88ab6b4698925683336ffddc7c8e6e4a Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 10 Jan 2025 09:43:26 -0800
Subject: [PATCH 087/176] Upgrade trunk (#193)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- actionlint 1.7.5 → 1.7.6
- checkov 3.2.346 → 3.2.351
- golangci-lint 1.62.2 → 1.63.4
- prisma 6.1.0 → 6.2.1
- renovate 39.90.2 → 39.92.0
- ruff 0.8.5 → 0.8.6
- semgrep 1.101.0 → 1.102.0
- sql-formatter 15.4.8 → 15.4.9
- stylelint 16.12.0 → 16.12.0
  - stylelint-config-clean-order 6.1.0 → 7.0.0
- trufflehog 3.88.0 → 3.88.1

1 tool was upgraded:

- gh 2.64.0 → 2.65.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 4ffa33e..22353b5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,20 +12,20 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.5
+    - actionlint@1.7.6
     - bandit@1.8.0
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@7.3.1
     - cfnlint@1.22.3
-    - checkov@3.2.346
+    - checkov@3.2.351
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.62.2
+    - golangci-lint@1.63.4
     - hadolint@2.12.1-beta
     - isort@5.13.2
     - markdownlint@0.43.0
@@ -36,27 +36,27 @@ lint:
     - oxipng@9.1.3
     - pragma-once
     - prettier@3.4.2
-    - prisma@6.1.0
+    - prisma@6.2.1
     - pylint@3.3.3
-    - renovate@39.90.2
+    - renovate@39.92.0
     - rubocop@1.39.0
-    - ruff@0.8.5
+    - ruff@0.8.6
     - rustfmt@1.68.2
-    - semgrep@1.101.0
+    - semgrep@1.102.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.12.0
-    - sql-formatter@15.4.8
+    - sql-formatter@15.4.9
     - stylelint@16.12.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
-          - stylelint-config-clean-order@6.1.0
+          - stylelint-config-clean-order@7.0.0
     - svgo@3.3.2
     - taplo@0.9.3
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.0
+    - trufflehog@3.88.1
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.64.0
+    - gh@2.65.0
     - grpcui@1.4.2
     - gt@1.4.11
     - trunk-analytics-cli@0.6.10

From 920f68031ccb469cfdb0f214452367d98feeb894 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jan 2025 09:28:44 -0800
Subject: [PATCH 088/176] Bump the dependencies group with 2 updates (#194)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.28.0 to 3.28.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.1</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.1 - 10 Jan 2025</h2>
<ul>
<li>CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see <a
href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li>
<li>Update default CodeQL bundle version to 2.20.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2678">#2678</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.1/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.1 - 10 Jan 2025</h2>
<ul>
<li>CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see <a
href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li>
<li>Update default CodeQL bundle version to 2.20.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2678">#2678</a></li>
</ul>
<h2>3.28.0 - 20 Dec 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.15.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li>
<li>Don't fail in the unusual case that a file is on the search path. <a
href="https://redirect.github.com/github/codeql-action/pull/2660">#2660</a>.</li>
</ul>
<h2>3.27.9 - 12 Dec 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.8 - 12 Dec 2024</h2>
<ul>
<li>Fixed an issue where streaming the download and extraction of the
CodeQL bundle did not respect proxy settings. <a
href="https://redirect.github.com/github/codeql-action/pull/2624">#2624</a></li>
</ul>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636">#2636</a></li>
</ul>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626">#2626</a></li>
</ul>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message &quot;Invalid value 'undefined' for header
'authorization'&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/2590">#2590</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/b6a472f63d85b9c78a3ac5e89422239fc15e9b3c"><code>b6a472f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2681">#2681</a>
from github/update-v3.28.1-ea6acbfea</li>
<li><a
href="https://github.com/github/codeql-action/commit/bb999b434f581db70696c32bf01941ec0391c3cb"><code>bb999b4</code></a>
Update changelog for v3.28.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/ea6acbfeae40310725526bdaea16fb48c1f62be0"><code>ea6acbf</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2677">#2677</a>
from github/angelapwen/deprecate-action-v2</li>
<li><a
href="https://github.com/github/codeql-action/commit/4df151edec34bbfb2f213ed8b2dc74363baa69ca"><code>4df151e</code></a>
Merge branch 'main' into angelapwen/deprecate-action-v2</li>
<li><a
href="https://github.com/github/codeql-action/commit/a05a7eb09cb4faebee87507a854cbd429fbe6bc6"><code>a05a7eb</code></a>
Fix PR number in changenote</li>
<li><a
href="https://github.com/github/codeql-action/commit/8d2753b250830f4073d10fc13a3264a17ba82a20"><code>8d2753b</code></a>
Add public changelog blog post link</li>
<li><a
href="https://github.com/github/codeql-action/commit/e83e0a4f58f2ca25f7dd222e8689519a74bf26fc"><code>e83e0a4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2673">#2673</a>
from github/dependabot/npm_and_yarn/npm-877f465710</li>
<li><a
href="https://github.com/github/codeql-action/commit/b7ff30899f3f4aa6705d70c1456d7189e1b320ba"><code>b7ff308</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2678">#2678</a>
from github/update-bundle/codeql-bundle-v2.20.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/1aa16c2c36f41e9ce531bdcd2aa834171700e48d"><code>1aa16c2</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.20.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/fb65b6ce7884900fde5b15518bec92ad6875180e"><code>fb65b6c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2672">#2672</a>
from github/mbg/start-proxy/include-type-in-urls-output</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/48ab28a6f5dbc2a99bf1e0131198dd8f1df78169...b6a472f63d85b9c78a3ac5e89422239fc15e9b3c">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.5.0 to 4.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Expose env vars to control concurrency and timeout by <a
href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/662">actions/upload-artifact#662</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4...v4.6.0">https://github.com/actions/upload-artifact/compare/v4...v4.6.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08"><code>65c4c4a</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/662">#662</a>
from actions/yacaovsnc/add_variable_for_concurrency_a...</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/020761922861c5b0a0a9b98ae4adccf1f675862c"><code>0207619</code></a>
move files back to satisfy licensed ci</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/1ecca81102de35b6c140e930a09ea6144c27abf1"><code>1ecca81</code></a>
licensed cache updates</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/97422693d3a0493fc2d725fe8c0ac1c1097e9128"><code>9742269</code></a>
Expose env vars to controll concurrency and timeout</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/6f51ac03b9356f520e9adb1b1b7802705f340c2b...65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 3f86fbb..45dff0c 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 6740dbd..31c9768 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           sarif_file: results.sarif

From 3cc491abb02e522c737fba412dac07ee17a7918f Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 13 Jan 2025 10:23:36 -0800
Subject: [PATCH 089/176] Upgrade trunk (#195)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- buildifier 7.3.1 → 8.0.0
- cfnlint 1.22.3 → 1.22.4
- checkov 3.2.351 → 3.2.352
- renovate 39.92.0 → 39.100.2
- ruff 0.8.6 → 0.9.0
- trufflehog 3.88.1 → 3.88.2

1 tool was upgraded:

- trunk-analytics-cli 0.6.10 → 0.6.11

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 22353b5..4b40fc3 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -16,9 +16,9 @@ lint:
     - bandit@1.8.0
     - black@24.10.0
     - buf-lint@1.31.0!
-    - buildifier@7.3.1
-    - cfnlint@1.22.3
-    - checkov@3.2.351
+    - buildifier@8.0.0
+    - cfnlint@1.22.4
+    - checkov@3.2.352
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.4.2
     - prisma@6.2.1
     - pylint@3.3.3
-    - renovate@39.92.0
+    - renovate@39.100.2
     - rubocop@1.39.0
-    - ruff@0.8.6
+    - ruff@0.9.0
     - rustfmt@1.68.2
     - semgrep@1.102.0
     - shellcheck@0.10.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.1
+    - trufflehog@3.88.2
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.65.0
     - grpcui@1.4.2
     - gt@1.4.11
-    - trunk-analytics-cli@0.6.10
+    - trunk-analytics-cli@0.6.11

From c084c3b81c13071c3957a3db9340dc353bf27e88 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 17 Jan 2025 00:37:36 -0800
Subject: [PATCH 090/176] Upgrade trunk (#196)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- bandit 1.8.0 → 1.8.2
- buildifier 8.0.0 → 8.0.1
- cfnlint 1.22.4 → 1.22.5
- checkov 3.2.352 → 3.2.353
- renovate 39.100.2 → 39.109.0
- ruff 0.9.0 → 0.9.1
- semgrep 1.102.0 → 1.103.0
- sort-package-json 2.12.0 → 2.14.0
- stylelint 16.12.0 → 16.13.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 4b40fc3..b7f5451 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -13,12 +13,12 @@ lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
     - actionlint@1.7.6
-    - bandit@1.8.0
+    - bandit@1.8.2
     - black@24.10.0
     - buf-lint@1.31.0!
-    - buildifier@8.0.0
-    - cfnlint@1.22.4
-    - checkov@3.2.352
+    - buildifier@8.0.1
+    - cfnlint@1.22.5
+    - checkov@3.2.353
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,16 +38,16 @@ lint:
     - prettier@3.4.2
     - prisma@6.2.1
     - pylint@3.3.3
-    - renovate@39.100.2
+    - renovate@39.109.0
     - rubocop@1.39.0
-    - ruff@0.9.0
+    - ruff@0.9.1
     - rustfmt@1.68.2
-    - semgrep@1.102.0
+    - semgrep@1.103.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@2.12.0
+    - sort-package-json@2.14.0
     - sql-formatter@15.4.9
-    - stylelint@16.12.0:
+    - stylelint@16.13.2:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0

From 7df34ab7c04a94c22fb0808e8f6a7d79d70367b5 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Tue, 21 Jan 2025 11:05:13 -0800
Subject: [PATCH 091/176] Upgrade trunk (#197)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

1 linter was upgraded:

- ruff 0.9.1 → 0.9.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin.yaml b/plugin.yaml
index b7f5451..46a214c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -40,7 +40,7 @@ lint:
     - pylint@3.3.3
     - renovate@39.109.0
     - rubocop@1.39.0
-    - ruff@0.9.1
+    - ruff@0.9.2
     - rustfmt@1.68.2
     - semgrep@1.103.0
     - shellcheck@0.10.0

From 5d5479fb4fae2932a68cb9377fb50dc9ced7620d Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 24 Jan 2025 10:27:42 -0800
Subject: [PATCH 092/176] Upgrade trunk (#198)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- actionlint 1.7.6 → 1.7.7
- cfnlint 1.22.5 → 1.22.6
- checkov 3.2.353 → 3.2.356
- renovate 39.109.0 → 39.125.0
- semgrep 1.103.0 → 1.104.0

1 tool was upgraded:

- gt 1.4.11 → 1.5.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 46a214c..3b76000 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.6
+    - actionlint@1.7.7
     - bandit@1.8.2
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@8.0.1
-    - cfnlint@1.22.5
-    - checkov@3.2.353
+    - cfnlint@1.22.6
+    - checkov@3.2.356
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,11 +38,11 @@ lint:
     - prettier@3.4.2
     - prisma@6.2.1
     - pylint@3.3.3
-    - renovate@39.109.0
+    - renovate@39.125.0
     - rubocop@1.39.0
     - ruff@0.9.2
     - rustfmt@1.68.2
-    - semgrep@1.103.0
+    - semgrep@1.104.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.14.0
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.65.0
     - grpcui@1.4.2
-    - gt@1.4.11
+    - gt@1.5.2
     - trunk-analytics-cli@0.6.11

From 7e59d1ae22e88bf6f9a49f424b1e16f0bb52a642 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 26 Jan 2025 23:40:14 -0800
Subject: [PATCH 093/176] Bump github/codeql-action from 3.28.1 to 3.28.5 in
 the dependencies group (#199)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.1 to 3.28.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.5</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.5/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.28.4</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.4/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.28.3</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
<li>Uploading debug artifacts for CodeQL analysis is temporarily
disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2712">#2712</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.3/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.28.2</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.2 - 21 Jan 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.2/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
<li>Uploading debug artifacts for CodeQL analysis is temporarily
disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2712">#2712</a></li>
</ul>
<h2>3.28.2 - 21 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.1 - 10 Jan 2025</h2>
<ul>
<li>CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see <a
href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li>
<li>Update default CodeQL bundle version to 2.20.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2678">#2678</a></li>
</ul>
<h2>3.28.0 - 20 Dec 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.15.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li>
<li>Don't fail in the unusual case that a file is on the search path. <a
href="https://redirect.github.com/github/codeql-action/pull/2660">#2660</a>.</li>
</ul>
<h2>3.27.9 - 12 Dec 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.8 - 12 Dec 2024</h2>
<ul>
<li>Fixed an issue where streaming the download and extraction of the
CodeQL bundle did not respect proxy settings. <a
href="https://redirect.github.com/github/codeql-action/pull/2624">#2624</a></li>
</ul>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636">#2636</a></li>
</ul>
<h2>3.27.6 - 03 Dec 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4"><code>f6091c0</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2721">#2721</a>
from github/update-v3.28.5-01f001931</li>
<li><a
href="https://github.com/github/codeql-action/commit/064af10f0de41995b41632364b4bfb00a34df047"><code>064af10</code></a>
Update changelog for v3.28.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/01f0019310ce544d1cf748667a69f8fd6e26e48a"><code>01f0019</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2717">#2717</a>
from github/update-bundle/codeql-bundle-v2.20.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/573ad887cd5b527e9baef02653bd455e1ff5181c"><code>573ad88</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2718">#2718</a>
from github/kaeluka/4779-1</li>
<li><a
href="https://github.com/github/codeql-action/commit/d7f39764f685cbe3764f763469a0d72383d7b9c8"><code>d7f3976</code></a>
permissions block in query-filters.yml</li>
<li><a
href="https://github.com/github/codeql-action/commit/428975ce2cf327a0e919004c63e734eddd0e6255"><code>428975c</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/208091da0a1069394981cdf5e7a91a8ee3f10709"><code>208091d</code></a>
Update default bundle to codeql-bundle-v2.20.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a"><code>7e3036b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2716">#2716</a>
from github/mergeback/v3.28.4-to-main-ee117c90</li>
<li><a
href="https://github.com/github/codeql-action/commit/e32a0d62d44ac06377953bfaf3ffd43618be076a"><code>e32a0d6</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/67c21e4084d5e020fbc969b839d42911b87fb8b5"><code>67c21e4</code></a>
Update changelog and version after v3.28.4</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/b6a472f63d85b9c78a3ac5e89422239fc15e9b3c...f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.1&new-version=3.28.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 45dff0c..cbf08ba 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/autobuild@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 31c9768..011b686 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
         with:
           sarif_file: results.sarif

From 3d030a651399b9d8c6d359f2d137bedec88a17e6 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 27 Jan 2025 09:21:33 -0800
Subject: [PATCH 094/176] Upgrade trunk (#200)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- cfnlint 1.22.6 → 1.22.7
- checkov 3.2.356 → 3.2.357
- renovate 39.125.0 → 39.128.0
- ruff 0.9.2 → 0.9.3

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 3b76000..16ebf3c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@24.10.0
     - buf-lint@1.31.0!
     - buildifier@8.0.1
-    - cfnlint@1.22.6
-    - checkov@3.2.356
+    - cfnlint@1.22.7
+    - checkov@3.2.357
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.4.2
     - prisma@6.2.1
     - pylint@3.3.3
-    - renovate@39.125.0
+    - renovate@39.128.0
     - rubocop@1.39.0
-    - ruff@0.9.2
+    - ruff@0.9.3
     - rustfmt@1.68.2
     - semgrep@1.104.0
     - shellcheck@0.10.0

From 24478d2e0603d2369cb60e336da65aad0d2d288d Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 31 Jan 2025 10:46:41 -0800
Subject: [PATCH 095/176] Upgrade trunk (#201)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

12 linters were upgraded:

- black 24.10.0 → 25.1.0
- cfnlint 1.22.7 → 1.23.0
- checkov 3.2.357 → 3.2.358
- isort 5.13.2 → 6.0.0
- markdownlint 0.43.0 → 0.44.0
- prisma 6.2.1 → 6.3.0
- pylint 3.3.3 → 3.3.4
- renovate 39.128.0 → 39.141.0
- semgrep 1.104.0 → 1.106.0
- sql-formatter 15.4.9 → 15.4.10
- stylelint 16.13.2 → 16.14.1
- trufflehog 3.88.2 → 3.88.3

3 tools were upgraded:

- gh 2.65.0 → 2.66.0
- gt 1.5.2 → 1.5.3
- trunk-analytics-cli 0.6.11 → 0.6.12

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 16ebf3c..86913bb 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -14,11 +14,11 @@ lint:
   enabled:
     - actionlint@1.7.7
     - bandit@1.8.2
-    - black@24.10.0
+    - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.1
-    - cfnlint@1.22.7
-    - checkov@3.2.357
+    - cfnlint@1.23.0
+    - checkov@3.2.358
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -27,8 +27,8 @@ lint:
     - gofmt@1.20.4
     - golangci-lint@1.63.4
     - hadolint@2.12.1-beta
-    - isort@5.13.2
-    - markdownlint@0.43.0
+    - isort@6.0.0
+    - markdownlint@0.44.0
     - markdown-link-check@3.13.6
     - mypy@1.14.1
     - nancy@1.0.46
@@ -36,18 +36,18 @@ lint:
     - oxipng@9.1.3
     - pragma-once
     - prettier@3.4.2
-    - prisma@6.2.1
-    - pylint@3.3.3
-    - renovate@39.128.0
+    - prisma@6.3.0
+    - pylint@3.3.4
+    - renovate@39.141.0
     - rubocop@1.39.0
     - ruff@0.9.3
     - rustfmt@1.68.2
-    - semgrep@1.104.0
+    - semgrep@1.106.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.14.0
-    - sql-formatter@15.4.9
-    - stylelint@16.13.2:
+    - sql-formatter@15.4.10
+    - stylelint@16.14.1:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.2
+    - trufflehog@3.88.3
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.65.0
+    - gh@2.66.0
     - grpcui@1.4.2
-    - gt@1.5.2
-    - trunk-analytics-cli@0.6.11
+    - gt@1.5.3
+    - trunk-analytics-cli@0.6.12

From 0ec2baca513696e4bef7a6e558644995cf148451 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Feb 2025 00:05:27 -0800
Subject: [PATCH 096/176] Bump github/codeql-action from 3.28.5 to 3.28.8 in
 the dependencies group (#202)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.5 to 3.28.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.8</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.8/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.28.7</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.7/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.28.6</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.6/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
<li>Uploading debug artifacts for CodeQL analysis is temporarily
disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2712">#2712</a></li>
</ul>
<h2>3.28.2 - 21 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.1 - 10 Jan 2025</h2>
<ul>
<li>CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see <a
href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li>
<li>Update default CodeQL bundle version to 2.20.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2678">#2678</a></li>
</ul>
<h2>3.28.0 - 20 Dec 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.15.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li>
<li>Don't fail in the unusual case that a file is on the search path. <a
href="https://redirect.github.com/github/codeql-action/pull/2660">#2660</a>.</li>
</ul>
<h2>3.27.9 - 12 Dec 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/dd746615b3b9d728a6a37ca2045b68ca76d4841a"><code>dd74661</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2746">#2746</a>
from github/update-v3.28.8-a91a3f767</li>
<li><a
href="https://github.com/github/codeql-action/commit/3210a3cda6446234a897a079af1b684aa4c73326"><code>3210a3c</code></a>
Fix Kotlin version in changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/72f9d0296b7b9c91564f67ddf9def81c815ce0c6"><code>72f9d02</code></a>
Update changelog for v3.28.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/a91a3f76789881261b540fb7aa8a527214f8ac01"><code>a91a3f7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2744">#2744</a>
from github/igfoo/kot2.1.10</li>
<li><a
href="https://github.com/github/codeql-action/commit/c520fb59d4c28e13147ed378b4c12599df187412"><code>c520fb5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2745">#2745</a>
from github/mergeback/v3.28.7-to-main-6e545590</li>
<li><a
href="https://github.com/github/codeql-action/commit/3879c5766041d8b2b7504c5c4b2d6dbd289f7634"><code>3879c57</code></a>
Add changelog entry</li>
<li><a
href="https://github.com/github/codeql-action/commit/0c2193725f360a9b0adcad3a71ce0d9cd4acb219"><code>0c21937</code></a>
Run &quot;npm run build&quot;</li>
<li><a
href="https://github.com/github/codeql-action/commit/5a61bf07fab8324ecda8ebb1d817463b17b717d9"><code>5a61bf0</code></a>
Kotlin: The 2.20.3 release supports Kotlin 2.1.10.</li>
<li><a
href="https://github.com/github/codeql-action/commit/163d1195df65a0e49551cd9b4fa0383e68d64a39"><code>163d119</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/bcf5cecbc6b147de017e1841778fa8d8644bf8a2"><code>bcf5cec</code></a>
Update changelog and version after v3.28.7</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4...dd746615b3b9d728a6a37ca2045b68ca76d4841a">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.5&new-version=3.28.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index cbf08ba..02ad558 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 011b686..d953de6 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           sarif_file: results.sarif

From 225b5852f5d8e88c0868c0d03ec00b381ccad8d1 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 7 Feb 2025 10:15:42 -0800
Subject: [PATCH 097/176] Upgrade trunk (#203)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- cfnlint 1.23.0 → 1.24.0
- checkov 3.2.358 → 3.2.367
- mypy 1.14.1 → 1.15.0
- prisma 6.3.0 → 6.3.1
- renovate 39.141.0 → 39.162.0
- ruff 0.9.3 → 0.9.4
- semgrep 1.106.0 → 1.107.0
- trufflehog 3.88.3 → 3.88.5

2 tools were upgraded:

- gh 2.66.0 → 2.66.1
- trunk-analytics-cli 0.6.12 → 0.6.13

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 86913bb..d383dd4 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.1
-    - cfnlint@1.23.0
-    - checkov@3.2.358
+    - cfnlint@1.24.0
+    - checkov@3.2.367
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,19 +30,19 @@ lint:
     - isort@6.0.0
     - markdownlint@0.44.0
     - markdown-link-check@3.13.6
-    - mypy@1.14.1
+    - mypy@1.15.0
     - nancy@1.0.46
     - osv-scanner@1.9.2
     - oxipng@9.1.3
     - pragma-once
     - prettier@3.4.2
-    - prisma@6.3.0
+    - prisma@6.3.1
     - pylint@3.3.4
-    - renovate@39.141.0
+    - renovate@39.162.0
     - rubocop@1.39.0
-    - ruff@0.9.3
+    - ruff@0.9.4
     - rustfmt@1.68.2
-    - semgrep@1.106.0
+    - semgrep@1.107.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.14.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.3
+    - trufflehog@3.88.5
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.66.0
+    - gh@2.66.1
     - grpcui@1.4.2
     - gt@1.5.3
-    - trunk-analytics-cli@0.6.12
+    - trunk-analytics-cli@0.6.13

From 431fbde38cefcd99914179be1ad6eebc9ef26d5d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 9 Feb 2025 15:14:25 -0800
Subject: [PATCH 098/176] Bump github/codeql-action from 3.28.8 to 3.28.9 in
 the dependencies group (#204)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.8 to 3.28.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.9</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.9/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
<li>Uploading debug artifacts for CodeQL analysis is temporarily
disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2712">#2712</a></li>
</ul>
<h2>3.28.2 - 21 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.1 - 10 Jan 2025</h2>
<ul>
<li>CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see <a
href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li>
<li>Update default CodeQL bundle version to 2.20.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2678">#2678</a></li>
</ul>
<h2>3.28.0 - 20 Dec 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.15.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0"><code>9e8d078</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2757">#2757</a>
from github/update-v3.28.9-24e1c2d33</li>
<li><a
href="https://github.com/github/codeql-action/commit/43d9be670147092b305c63cf69481e8923af83b7"><code>43d9be6</code></a>
Update changelog for v3.28.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/24e1c2d337459cce262cbca8d69998e56cd5eb8e"><code>24e1c2d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2753">#2753</a>
from github/update-bundle/codeql-bundle-v2.20.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/57a08c0c7f05d4d8251162c9658ddd7cc7782198"><code>57a08c0</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/52189d23af4e071445f59d2e6fbbac566e49f15b"><code>52189d2</code></a>
Update default bundle to codeql-bundle-v2.20.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/08bc0cf022445eacafaa248bf48da20f26b8fd40"><code>08bc0cf</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2751">#2751</a>
from github/henrymercer/fix-init-post-without-config</li>
<li><a
href="https://github.com/github/codeql-action/commit/cf7c6879199cf6eb2a002d3b2530ea1e4ce99610"><code>cf7c687</code></a>
Send <code>init-post</code> status report in absence of config</li>
<li><a
href="https://github.com/github/codeql-action/commit/ad42dbd32d472b6fe380130655e27089c7eac343"><code>ad42dbd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2750">#2750</a>
from github/dependabot/npm_and_yarn/npm-768bd9b555</li>
<li><a
href="https://github.com/github/codeql-action/commit/a8f5935da08829e657dfc18d887df9385685a20a"><code>a8f5935</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2749">#2749</a>
from github/dependabot/github_actions/actions-29d379...</li>
<li><a
href="https://github.com/github/codeql-action/commit/9660df3fccdf5b20ab86e041325c17a2204cc1ae"><code>9660df3</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/dd746615b3b9d728a6a37ca2045b68ca76d4841a...9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.8&new-version=3.28.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 02ad558..44cd393 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d953de6..5e0479e 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         with:
           sarif_file: results.sarif

From 669192ff2d6c06e3a05b41aae8f7309897207f8b Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 10 Feb 2025 10:54:02 -0800
Subject: [PATCH 099/176] Upgrade trunk (#205)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- buildifier 8.0.1 → 8.0.3
- checkov 3.2.367 → 3.2.368
- renovate 39.162.0 → 39.163.0
- ruff 0.9.4 → 0.9.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index d383dd4..158f156 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -16,9 +16,9 @@ lint:
     - bandit@1.8.2
     - black@25.1.0
     - buf-lint@1.31.0!
-    - buildifier@8.0.1
+    - buildifier@8.0.3
     - cfnlint@1.24.0
-    - checkov@3.2.367
+    - checkov@3.2.368
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.4.2
     - prisma@6.3.1
     - pylint@3.3.4
-    - renovate@39.162.0
+    - renovate@39.163.0
     - rubocop@1.39.0
-    - ruff@0.9.4
+    - ruff@0.9.5
     - rustfmt@1.68.2
     - semgrep@1.107.0
     - shellcheck@0.10.0

From b97bea1a6c56bb21dcac8201189118b3fa9c2aa3 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 14 Feb 2025 09:35:33 -0800
Subject: [PATCH 100/176] Upgrade trunk (#206)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- checkov 3.2.368 → 3.2.369
- prettier 3.4.2 → 3.5.0
- renovate 39.163.0 → 39.169.3
- ruff 0.9.5 → 0.9.6
- semgrep 1.107.0 → 1.108.0
- trufflehog 3.88.5 → 3.88.7

2 tools were upgraded:

- gh 2.66.1 → 2.67.0
- trunk-analytics-cli 0.6.13 → 0.6.16

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 158f156..263cc02 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.0.3
     - cfnlint@1.24.0
-    - checkov@3.2.368
+    - checkov@3.2.369
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -35,14 +35,14 @@ lint:
     - osv-scanner@1.9.2
     - oxipng@9.1.3
     - pragma-once
-    - prettier@3.4.2
+    - prettier@3.5.0
     - prisma@6.3.1
     - pylint@3.3.4
-    - renovate@39.163.0
+    - renovate@39.169.3
     - rubocop@1.39.0
-    - ruff@0.9.5
+    - ruff@0.9.6
     - rustfmt@1.68.2
-    - semgrep@1.107.0
+    - semgrep@1.108.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.14.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.5
+    - trufflehog@3.88.7
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.66.1
+    - gh@2.67.0
     - grpcui@1.4.2
     - gt@1.5.3
-    - trunk-analytics-cli@0.6.13
+    - trunk-analytics-cli@0.6.16

From b26063b448f100ad54f9100d57a8c665cf213003 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Wed, 19 Feb 2025 15:05:28 -0800
Subject: [PATCH 101/176] Upgrade trunk (#207)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.24.0 → 1.25.1
- checkov 3.2.369 → 3.2.370
- golangci-lint 1.63.4 → 1.64.5
- prettier 3.5.0 → 3.5.1
- renovate 39.169.3 → 39.170.1
- trufflehog 3.88.7 → 3.88.8

1 tool was upgraded:

- trunk-analytics-cli 0.6.16 → 0.6.18

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 263cc02..3770314 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,15 +17,15 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.24.0
-    - checkov@3.2.369
+    - cfnlint@1.25.1
+    - checkov@3.2.370
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.63.4
+    - golangci-lint@1.64.5
     - hadolint@2.12.1-beta
     - isort@6.0.0
     - markdownlint@0.44.0
@@ -35,10 +35,10 @@ lint:
     - osv-scanner@1.9.2
     - oxipng@9.1.3
     - pragma-once
-    - prettier@3.5.0
+    - prettier@3.5.1
     - prisma@6.3.1
     - pylint@3.3.4
-    - renovate@39.169.3
+    - renovate@39.170.1
     - rubocop@1.39.0
     - ruff@0.9.6
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.7
+    - trufflehog@3.88.8
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.67.0
     - grpcui@1.4.2
     - gt@1.5.3
-    - trunk-analytics-cli@0.6.16
+    - trunk-analytics-cli@0.6.18

From 5e7b946ec0cf9649cc2e7807b2471e9c770b1a2d Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 21 Feb 2025 09:43:08 -0800
Subject: [PATCH 102/176] Upgrade trunk (#208)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- bandit 1.8.2 → 1.8.3
- checkov 3.2.370 → 3.2.372
- oxipng 9.1.3 → 9.1.4
- prisma 6.3.1 → 6.4.0
- renovate 39.170.1 → 39.176.4
- semgrep 1.108.0 → 1.109.0
- trufflehog 3.88.8 → 3.88.11

1 tool was upgraded:

- trunk-analytics-cli 0.6.18 → 0.6.19

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 3770314..7ee9ce3 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -13,12 +13,12 @@ lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
     - actionlint@1.7.7
-    - bandit@1.8.2
+    - bandit@1.8.3
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
     - cfnlint@1.25.1
-    - checkov@3.2.370
+    - checkov@3.2.372
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -33,16 +33,16 @@ lint:
     - mypy@1.15.0
     - nancy@1.0.46
     - osv-scanner@1.9.2
-    - oxipng@9.1.3
+    - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.1
-    - prisma@6.3.1
+    - prisma@6.4.0
     - pylint@3.3.4
-    - renovate@39.170.1
+    - renovate@39.176.4
     - rubocop@1.39.0
     - ruff@0.9.6
     - rustfmt@1.68.2
-    - semgrep@1.108.0
+    - semgrep@1.109.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@2.14.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.8
+    - trufflehog@3.88.11
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.67.0
     - grpcui@1.4.2
     - gt@1.5.3
-    - trunk-analytics-cli@0.6.18
+    - trunk-analytics-cli@0.6.19

From 1638bcff88a93d1ce7ea6175b9692376dddec1e6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 23 Feb 2025 19:32:00 -0800
Subject: [PATCH 103/176] Bump the dependencies group with 3 updates (#209)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 3 updates:
[github/codeql-action](https://github.com/github/codeql-action),
[ossf/scorecard-action](https://github.com/ossf/scorecard-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.28.9 to 3.28.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.10</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.10/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
<li>Uploading debug artifacts for CodeQL analysis is temporarily
disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2712">#2712</a></li>
</ul>
<h2>3.28.2 - 21 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.1 - 10 Jan 2025</h2>
<ul>
<li>CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see <a
href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d"><code>b56ba49</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2778">#2778</a>
from github/update-v3.28.10-9856c48b1</li>
<li><a
href="https://github.com/github/codeql-action/commit/60c9c77c33f2cd66390a3778d54de88b735b2526"><code>60c9c77</code></a>
Update changelog for v3.28.10</li>
<li><a
href="https://github.com/github/codeql-action/commit/9856c48b1a54789454314b4c32ef2354fe213208"><code>9856c48</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2773">#2773</a>
from github/redsun82/rust</li>
<li><a
href="https://github.com/github/codeql-action/commit/9572e09da430b4c71f7488e4195b4ca6ce1c6ef0"><code>9572e09</code></a>
Rust: fix log string</li>
<li><a
href="https://github.com/github/codeql-action/commit/1a529366ac3620317d953e2d4018eafa7459cb1c"><code>1a52936</code></a>
Rust: special case default setup</li>
<li><a
href="https://github.com/github/codeql-action/commit/cf7e90952bcceaebd4a548c2809ea6a5d461a1bc"><code>cf7e909</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2772">#2772</a>
from github/update-bundle/codeql-bundle-v2.20.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/b7006aab6d38638d18e38a27c18f67138529c2f8"><code>b7006aa</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.20.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/cfedae723eaced5e13052b529375e7b00d49a9cd"><code>cfedae7</code></a>
Rust: throw configuration errors if requested and not correctly
enabled</li>
<li><a
href="https://github.com/github/codeql-action/commit/3971ed2a74ede0669fa7f4f5af4292030280dbfd"><code>3971ed2</code></a>
Merge branch 'main' into redsun82/rust</li>
<li><a
href="https://github.com/github/codeql-action/commit/d38c6e60dfb0232f85e388dd416559ed07da5f3a"><code>d38c6e6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2775">#2775</a>
from github/angelapwen/bump-octokit</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0...b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d">compare
view</a></li>
</ul>
</details>
<br />

Updates `ossf/scorecard-action` from 2.4.0 to 2.4.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>This update bumps the Scorecard version to the v5.1.1 release. For a
complete list of changes, please refer to the <a
href="https://github.com/ossf/scorecard/releases/tag/v5.1.0">v5.1.0</a>
and <a
href="https://github.com/ossf/scorecard/releases/tag/v5.1.1">v5.1.1</a>
release notes.</li>
<li>Publishing results now uses half the API quota as before. The exact
savings depends on the repository in question.
<ul>
<li>use Scorecard library entrypoint instead of Cobra hooking by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1423">ossf/scorecard-action#1423</a></li>
</ul>
</li>
<li>Some errors were made into annotations to make them more visible
<ul>
<li>Make default branch error more prominent by <a
href="https://github.com/jsoref"><code>@​jsoref</code></a> in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1459">ossf/scorecard-action#1459</a></li>
</ul>
</li>
<li>There is now an optional <code>file_mode</code> input which controls
how repository files are fetched from GitHub. The default is
<code>archive</code>, but <code>git</code> produces the most accurate
results for repositories with <code>.gitattributes</code> files at the
cost of analysis speed.
<ul>
<li>add input for specifying <code>--file-mode</code> by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1509">ossf/scorecard-action#1509</a></li>
</ul>
</li>
<li>The underlying container for the action is now <a
href="https://github.com/ossf/scorecard-action/pkgs/container/scorecard-action">hosted
on GitHub Container Registry</a>. There should be no functional changes.
<ul>
<li>:seedling: publish docker images to GitHub Container Registry by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1453">ossf/scorecard-action#1453</a></li>
</ul>
</li>
</ul>
<h3>Docs</h3>
<ul>
<li>Installation docs update by <a
href="https://github.com/JeremiahAHoward"><code>@​JeremiahAHoward</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1416">ossf/scorecard-action#1416</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/JeremiahAHoward"><code>@​JeremiahAHoward</code></a>
made their first contribution in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1416">ossf/scorecard-action#1416</a></li>
<li><a href="https://github.com/jsoref"><code>@​jsoref</code></a> made
their first contribution in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1459">ossf/scorecard-action#1459</a>
<strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.4.0...v2.4.1">https://github.com/ossf/scorecard-action/compare/v2.4.0...v2.4.1</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ossf/scorecard-action/commit/f49aabe0b5af0936a0987cfb85d86b75731b0186"><code>f49aabe</code></a>
bump docker to ghcr v2.4.1 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1478">#1478</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/30a595ba8670f7bd5e2d33119dfeeb6ab2f64991"><code>30a595b</code></a>
:seedling: Bump github.com/sigstore/cosign/v2 from 2.4.2 to 2.4.3 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1515">#1515</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/69ae593b7addfd5241b46c43c7ed6abbd7203d55"><code>69ae593</code></a>
omit vcs info from build (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1514">#1514</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/6a62a1cbf28018bd61197d0c2852b94b046fe1a4"><code>6a62a1c</code></a>
add input for specifying <code>--file-mode</code> (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1509">#1509</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/2722664778d49161a69d42f8e82e15ed38fea8d1"><code>2722664</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1510">#1510</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/ae0ef3171a81cb48c3fdaaf34cba323d0c51fefb"><code>ae0ef31</code></a>
:seedling: Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1512">#1512</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/3676bbc29082184ac34a84d1573c0419f81c4a68"><code>3676bbc</code></a>
:seedling: Bump golang from 1.23.6 to 1.24.0 in the docker-images group
(<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1513">#1513</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/ae7548a0ff1b94dda3a89eeda8f59c031874f035"><code>ae7548a</code></a>
Limit codeQL push trigger to main branch (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1507">#1507</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/9165624e75f0c73d13a9db2d4d920bcc5fc3a801"><code>9165624</code></a>
upgrade scorecard to v5.1.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1508">#1508</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/620fd28d6b2ba01c1d70cf63dfb4bdf868e19d6f"><code>620fd28</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1505">#1505</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ossf/scorecard-action/compare/62b2cac7ed8198b15735ed49ab1e5cf35480ba46...f49aabe0b5af0936a0987cfb85d86b75731b0186">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.6.0 to 4.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update to use artifact 2.2.2 package by <a
href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/673">actions/upload-artifact#673</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4...v4.6.1">https://github.com/actions/upload-artifact/compare/v4...v4.6.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1"><code>4cec3d8</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/673">#673</a>
from actions/yacaovsnc/artifact_2.2.2</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/e9fad966ccdffceea5de0445882c9455934bcf8e"><code>e9fad96</code></a>
license cache update for artifact</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/b26fd06e9da88a61ada55f23d7863325b1f115d3"><code>b26fd06</code></a>
Update to use artifact 2.2.2 package</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 44cd393..80b1de9 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 5e0479e..d039dbb 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
+        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
         with:
           results_file: results.sarif
           results_format: sarif
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         with:
           sarif_file: results.sarif

From e77c347295567d1a227180340778c8ce1f33cd2a Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 24 Feb 2025 09:26:55 -0800
Subject: [PATCH 104/176] Upgrade trunk (#210)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- prisma 6.4.0 → 6.4.1
- ruff 0.9.6 → 0.9.7
- trufflehog 3.88.11 → 3.88.12

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 7ee9ce3..872c6a3 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -36,11 +36,11 @@ lint:
     - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.1
-    - prisma@6.4.0
+    - prisma@6.4.1
     - pylint@3.3.4
     - renovate@39.176.4
     - rubocop@1.39.0
-    - ruff@0.9.6
+    - ruff@0.9.7
     - rustfmt@1.68.2
     - semgrep@1.109.0
     - shellcheck@0.10.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.11
+    - trufflehog@3.88.12
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 

From 8eb9f387c74ade7945c62708f4855d1cb6565b40 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Sun, 2 Mar 2025 15:47:52 -0800
Subject: [PATCH 105/176] Upgrade trunk (#211)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.25.1 → 1.26.1
- checkov 3.2.372 → 3.2.377
- isort 6.0.0 → 6.0.1
- prettier 3.5.1 → 3.5.2
- renovate 39.176.4 → 39.182.3
- semgrep 1.109.0 → 1.110.0
- sort-package-json 2.14.0 → 2.15.0
- sql-formatter 15.4.10 → 15.4.11
- trufflehog 3.88.12 → 3.88.13

1 tool was upgraded:

- trunk-analytics-cli 0.6.19 → 0.7.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 872c6a3..d3da296 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.25.1
-    - checkov@3.2.372
+    - cfnlint@1.26.1
+    - checkov@3.2.377
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -27,7 +27,7 @@ lint:
     - gofmt@1.20.4
     - golangci-lint@1.64.5
     - hadolint@2.12.1-beta
-    - isort@6.0.0
+    - isort@6.0.1
     - markdownlint@0.44.0
     - markdown-link-check@3.13.6
     - mypy@1.15.0
@@ -35,18 +35,18 @@ lint:
     - osv-scanner@1.9.2
     - oxipng@9.1.4
     - pragma-once
-    - prettier@3.5.1
+    - prettier@3.5.2
     - prisma@6.4.1
     - pylint@3.3.4
-    - renovate@39.176.4
+    - renovate@39.182.3
     - rubocop@1.39.0
     - ruff@0.9.7
     - rustfmt@1.68.2
-    - semgrep@1.109.0
+    - semgrep@1.110.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@2.14.0
-    - sql-formatter@15.4.10
+    - sort-package-json@2.15.0
+    - sql-formatter@15.4.11
     - stylelint@16.14.1:
         packages:
           - stylelint-config-standard-scss@14.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.12
+    - trufflehog@3.88.13
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.67.0
     - grpcui@1.4.2
     - gt@1.5.3
-    - trunk-analytics-cli@0.6.19
+    - trunk-analytics-cli@0.7.0

From 70ed93e2d48f9bcd614b7532567bc54a36e70022 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 7 Mar 2025 00:21:54 -0800
Subject: [PATCH 106/176] Upgrade trunk (#212)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- cfnlint 1.26.1 → 1.28.0
- checkov 3.2.377 → 3.2.382
- golangci-lint 1.64.5 → 1.64.6
- prettier 3.5.2 → 3.5.3
- renovate 39.182.3 → 39.188.3
- ruff 0.9.7 → 0.9.9
- semgrep 1.110.0 → 1.111.0
- sort-package-json 2.15.0 → 3.0.0
- stylelint 16.14.1 → 16.15.0
- trufflehog 3.88.13 → 3.88.15

2 tools were upgraded:

- gh 2.67.0 → 2.68.1
- trunk-analytics-cli 0.7.0 → 0.7.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index d3da296..2c00062 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,15 +17,15 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.26.1
-    - checkov@3.2.377
+    - cfnlint@1.28.0
+    - checkov@3.2.382
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.64.5
+    - golangci-lint@1.64.6
     - hadolint@2.12.1-beta
     - isort@6.0.1
     - markdownlint@0.44.0
@@ -35,19 +35,19 @@ lint:
     - osv-scanner@1.9.2
     - oxipng@9.1.4
     - pragma-once
-    - prettier@3.5.2
+    - prettier@3.5.3
     - prisma@6.4.1
     - pylint@3.3.4
-    - renovate@39.182.3
+    - renovate@39.188.3
     - rubocop@1.39.0
-    - ruff@0.9.7
+    - ruff@0.9.9
     - rustfmt@1.68.2
-    - semgrep@1.110.0
+    - semgrep@1.111.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@2.15.0
+    - sort-package-json@3.0.0
     - sql-formatter@15.4.11
-    - stylelint@16.14.1:
+    - stylelint@16.15.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.13
+    - trufflehog@3.88.15
     - trunk-toolbox@0.5.4
     - yamllint@1.35.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.67.0
+    - gh@2.68.1
     - grpcui@1.4.2
     - gt@1.5.3
-    - trunk-analytics-cli@0.7.0
+    - trunk-analytics-cli@0.7.1

From 8b31fbf724266a4a943170b52da4d4b93afc2b3f Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 08:54:31 -0700
Subject: [PATCH 107/176] Upgrade trunk (#214)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

1 linter was upgraded:

- renovate 39.188.3 → 39.190.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin.yaml b/plugin.yaml
index 2c00062..baa9eca 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,7 +38,7 @@ lint:
     - prettier@3.5.3
     - prisma@6.4.1
     - pylint@3.3.4
-    - renovate@39.188.3
+    - renovate@39.190.1
     - rubocop@1.39.0
     - ruff@0.9.9
     - rustfmt@1.68.2

From 13a5937773d6e70ba4c099d05b960f50ecdd8d27 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 08:59:44 -0700
Subject: [PATCH 108/176] Bump github/codeql-action from 3.28.10 to 3.28.11 in
 the dependencies group (#213)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.10 to 3.28.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.11</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.11/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
<li>Uploading debug artifacts for CodeQL analysis is temporarily
disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2712">#2712</a></li>
</ul>
<h2>3.28.2 - 21 Jan 2025</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6bb031afdd8eb862ea3fc1848194185e076637e5"><code>6bb031a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2798">#2798</a>
from github/update-v3.28.11-56b25d5d5</li>
<li><a
href="https://github.com/github/codeql-action/commit/6bca7dd940f38115b5e3696bd79bbb020563bb1f"><code>6bca7dd</code></a>
Update changelog for v3.28.11</li>
<li><a
href="https://github.com/github/codeql-action/commit/56b25d5d5251df651f82070735778784aa383094"><code>56b25d5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2793">#2793</a>
from github/update-bundle/codeql-bundle-v2.20.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/256aa1658211f7bf42a0ee5b18a106fe81baa524"><code>256aa16</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.20.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/911d845ab60270de25813c5a148ec9501e857340"><code>911d845</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2796">#2796</a>
from github/nickfyson/adjust-rate-error-string</li>
<li><a
href="https://github.com/github/codeql-action/commit/7b7ed635033f63c6f84ab377f726dc0b933bd593"><code>7b7ed63</code></a>
adjust string for handling rate limit error</li>
<li><a
href="https://github.com/github/codeql-action/commit/608ccd6cd915d2c43d3059c3da518f36f07a56b0"><code>608ccd6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2794">#2794</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/35d04d3627f40144b1b19daa99f2449297367ec9"><code>35d04d3</code></a>
Update supported GitHub Enterprise Server versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/ec3b22164b6b09c9b3d63ff4e9d41084895602b0"><code>ec3b221</code></a>
Update supported GitHub Enterprise Server versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dc01f6342a3f934d1a339917531a4d8beda41bc"><code>8dc01f6</code></a>
Add changelog note</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d...6bb031afdd8eb862ea3fc1848194185e076637e5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.10&new-version=3.28.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 80b1de9..78894ac 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d039dbb..2cacc48 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         with:
           sarif_file: results.sarif

From b4bed1d9a701eec2e2c486c896118f500e91b8e6 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 14 Mar 2025 01:11:32 -0700
Subject: [PATCH 109/176] Upgrade trunk (#215)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- cfnlint 1.28.0 → 1.29.1
- checkov 3.2.382 → 3.2.384
- golangci-lint 1.64.6 → 1.64.7
- markdown-link-check 3.13.6 → 3.13.7
- prisma 6.4.1 → 6.5.0
- pylint 3.3.4 → 3.3.5
- renovate 39.190.1 → 39.197.0
- ruff 0.9.9 → 0.9.10
- trufflehog 3.88.15 → 3.88.16
- yamllint 1.35.1 → 1.36.0

2 tools were upgraded:

- grpcui 1.4.2 → 1.4.3
- trunk-analytics-cli 0.7.1 → 0.7.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index baa9eca..5da30d3 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,30 +17,30 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.28.0
-    - checkov@3.2.382
+    - cfnlint@1.29.1
+    - checkov@3.2.384
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.64.6
+    - golangci-lint@1.64.7
     - hadolint@2.12.1-beta
     - isort@6.0.1
     - markdownlint@0.44.0
-    - markdown-link-check@3.13.6
+    - markdown-link-check@3.13.7
     - mypy@1.15.0
     - nancy@1.0.46
     - osv-scanner@1.9.2
     - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.3
-    - prisma@6.4.1
-    - pylint@3.3.4
-    - renovate@39.190.1
+    - prisma@6.5.0
+    - pylint@3.3.5
+    - renovate@39.197.0
     - rubocop@1.39.0
-    - ruff@0.9.9
+    - ruff@0.9.10
     - rustfmt@1.68.2
     - semgrep@1.111.0
     - shellcheck@0.10.0
@@ -56,9 +56,9 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.15
+    - trufflehog@3.88.16
     - trunk-toolbox@0.5.4
-    - yamllint@1.35.1
+    - yamllint@1.36.0
 
   # Sourcing repos will have these configs available to applicable linters
   exported_configs:
@@ -108,6 +108,6 @@ tools:
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
     - gh@2.68.1
-    - grpcui@1.4.2
+    - grpcui@1.4.3
     - gt@1.5.3
-    - trunk-analytics-cli@0.7.1
+    - trunk-analytics-cli@0.7.2

From 60e41cff858bb5898d866d0ae5744a74b8e267f9 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 17 Mar 2025 10:28:55 -0700
Subject: [PATCH 110/176] Upgrade trunk (#216)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.29.1 → 1.30.0
- checkov 3.2.384 → 3.2.386
- nancy 1.0.46 → 1.0.48
- renovate 39.197.0 → 39.200.3
- ruff 0.9.10 → 0.10.0
- semgrep 1.111.0 → 1.112.0
- trufflehog 3.88.16 → 3.88.17

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 5da30d3..1f788b3 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.29.1
-    - checkov@3.2.384
+    - cfnlint@1.30.0
+    - checkov@3.2.386
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -31,18 +31,18 @@ lint:
     - markdownlint@0.44.0
     - markdown-link-check@3.13.7
     - mypy@1.15.0
-    - nancy@1.0.46
+    - nancy@1.0.48
     - osv-scanner@1.9.2
     - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.3
     - prisma@6.5.0
     - pylint@3.3.5
-    - renovate@39.197.0
+    - renovate@39.200.3
     - rubocop@1.39.0
-    - ruff@0.9.10
+    - ruff@0.10.0
     - rustfmt@1.68.2
-    - semgrep@1.111.0
+    - semgrep@1.112.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.16
+    - trufflehog@3.88.17
     - trunk-toolbox@0.5.4
     - yamllint@1.36.0
 

From 524c9b55bb6a08a1d63f5acb3b380eab1156e88e Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 21 Mar 2025 09:49:28 -0700
Subject: [PATCH 111/176] Upgrade trunk (#217)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

10 linters were upgraded:

- cfnlint 1.30.0 → 1.31.2
- checkov 3.2.386 → 3.2.388
- golangci-lint 1.64.7 → 1.64.8
- osv-scanner 1.9.2 → 2.0.0
- renovate 39.200.3 → 39.207.3
- ruff 0.10.0 → 0.11.0
- semgrep 1.112.0 → 1.113.0
- stylelint 16.15.0 → 16.16.0
- trufflehog 3.88.17 → 3.88.18
- yamllint 1.36.0 → 1.36.2

1 tool was upgraded:

- gh 2.68.1 → 2.69.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 1f788b3..a1a3bf0 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,37 +17,37 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.30.0
-    - checkov@3.2.386
+    - cfnlint@1.31.2
+    - checkov@3.2.388
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.64.7
+    - golangci-lint@1.64.8
     - hadolint@2.12.1-beta
     - isort@6.0.1
     - markdownlint@0.44.0
     - markdown-link-check@3.13.7
     - mypy@1.15.0
     - nancy@1.0.48
-    - osv-scanner@1.9.2
+    - osv-scanner@2.0.0
     - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.3
     - prisma@6.5.0
     - pylint@3.3.5
-    - renovate@39.200.3
+    - renovate@39.207.3
     - rubocop@1.39.0
-    - ruff@0.10.0
+    - ruff@0.11.0
     - rustfmt@1.68.2
-    - semgrep@1.112.0
+    - semgrep@1.113.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
     - sql-formatter@15.4.11
-    - stylelint@16.15.0:
+    - stylelint@16.16.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,9 +56,9 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.17
+    - trufflehog@3.88.18
     - trunk-toolbox@0.5.4
-    - yamllint@1.36.0
+    - yamllint@1.36.2
 
   # Sourcing repos will have these configs available to applicable linters
   exported_configs:
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.68.1
+    - gh@2.69.0
     - grpcui@1.4.3
     - gt@1.5.3
     - trunk-analytics-cli@0.7.2

From a0db26d7547285429eb4a2b1cbefb1f00c62d8a8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 23 Mar 2025 18:32:07 -0700
Subject: [PATCH 112/176] Bump the dependencies group with 2 updates (#218)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `github/codeql-action` from 3.28.11 to 3.28.12
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.12</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.12/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.3 - 22 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2707">#2707</a></li>
<li>Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise
Server instance which occurred when the CodeQL Bundle had been synced to
the instance using the <a
href="https://github.com/github/codeql-action-sync-tool">CodeQL Action
sync tool</a> and the Actions runner did not have Zstandard installed.
<a
href="https://redirect.github.com/github/codeql-action/pull/2710">#2710</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/5f8171a638ada777af81d42b55959a643bb29017"><code>5f8171a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2814">#2814</a>
from github/update-v3.28.12-6349095d1</li>
<li><a
href="https://github.com/github/codeql-action/commit/bb59f7707d836b040802dbdf2ad1a16482d319da"><code>bb59f77</code></a>
Update changelog for v3.28.12</li>
<li><a
href="https://github.com/github/codeql-action/commit/6349095d19ec30397ffb02a63b7aa4f867deb563"><code>6349095</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2810">#2810</a>
from github/update-bundle/codeql-bundle-v2.20.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/d7d03fda1241f6b0b3fae460c9f19c6e887158ad"><code>d7d03fd</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/4e3a5342c5e8e627915b9a29b363f49da8c4a32e"><code>4e3a534</code></a>
Update default bundle to codeql-bundle-v2.20.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/55f023701cfc1e7d11ef2ae0c5ec3193dae4fce4"><code>55f0237</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2802">#2802</a>
from github/mbg/dependency-caching/java-buildless</li>
<li><a
href="https://github.com/github/codeql-action/commit/6a151cd77488e58567da1dcf953e7aeeaca4950c"><code>6a151cd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2811">#2811</a>
from github/dependabot/github_actions/actions-c2c311...</li>
<li><a
href="https://github.com/github/codeql-action/commit/7866bcdb1b15b5d5cba0021b87f36d9f6d977156"><code>7866bcd</code></a>
Manually bump workflow to match autogenerated file</li>
<li><a
href="https://github.com/github/codeql-action/commit/611289e0b0ce1f6fc14820f1b72edaed2de4ba2c"><code>611289e</code></a>
build(deps): bump ruby/setup-ruby in the actions group</li>
<li><a
href="https://github.com/github/codeql-action/commit/4c409a5b664afa7d5b12cd8487e310f286487472"><code>4c409a5</code></a>
Remove temporary dependency directory in <code>analyze</code> post
action</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/6bb031afdd8eb862ea3fc1848194185e076637e5...5f8171a638ada777af81d42b55959a643bb29017">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 4.6.1 to 4.6.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Update to use artifact 2.3.2 package &amp; prepare for new
upload-artifact release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/685">actions/upload-artifact#685</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/685">actions/upload-artifact#685</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4...v4.6.2">https://github.com/actions/upload-artifact/compare/v4...v4.6.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/ea165f8d65b6e75b540449e92b4886f43607fa02"><code>ea165f8</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/685">#685</a>
from salmanmkc/salmanmkc/3-new-upload-artifacts-release</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/08396203c179e13c71b9754ce3472ed71842eec0"><code>0839620</code></a>
Prepare for new release of actions/upload-artifact with new toolkit
cache ver...</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...ea165f8d65b6e75b540449e92b4886f43607fa02">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 78894ac..da7ab5d 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 2cacc48..1f37ddb 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: SARIF file
           path: results.sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
         with:
           sarif_file: results.sarif

From 36c9831d268d677ce6cd0651d1e3d84fb5ee6d7b Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 24 Mar 2025 10:03:11 -0700
Subject: [PATCH 113/176] Upgrade trunk (#219)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.31.2 → 1.32.0
- checkov 3.2.388 → 3.2.390
- pylint 3.3.5 → 3.3.6
- renovate 39.207.3 → 39.210.1
- ruff 0.11.0 → 0.11.1
- semgrep 1.113.0 → 1.114.0
- sql-formatter 15.4.11 → 15.5.1

1 tool was upgraded:

- trunk-analytics-cli 0.7.2 → 0.7.3

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index a1a3bf0..02206c9 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.31.2
-    - checkov@3.2.388
+    - cfnlint@1.32.0
+    - checkov@3.2.390
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -37,16 +37,16 @@ lint:
     - pragma-once
     - prettier@3.5.3
     - prisma@6.5.0
-    - pylint@3.3.5
-    - renovate@39.207.3
+    - pylint@3.3.6
+    - renovate@39.210.1
     - rubocop@1.39.0
-    - ruff@0.11.0
+    - ruff@0.11.1
     - rustfmt@1.68.2
-    - semgrep@1.113.0
+    - semgrep@1.114.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
-    - sql-formatter@15.4.11
+    - sql-formatter@15.5.1
     - stylelint@16.16.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
@@ -110,4 +110,4 @@ tools:
     - gh@2.69.0
     - grpcui@1.4.3
     - gt@1.5.3
-    - trunk-analytics-cli@0.7.2
+    - trunk-analytics-cli@0.7.3

From 8299c122835aeb78d1ae81236e33128635ceb152 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Tue, 1 Apr 2025 13:43:50 -0700
Subject: [PATCH 114/176] Upgrade trunk (#220)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- cfnlint 1.32.0 → 1.32.1
- checkov 3.2.390 → 3.2.394
- renovate 39.210.1 → 39.219.3
- ruff 0.11.1 → 0.11.2
- sql-formatter 15.5.1 → 15.5.2
- stylelint 16.16.0 → 16.17.0
- trufflehog 3.88.18 → 3.88.20
- yamllint 1.36.2 → 1.37.0

2 tools were upgraded:

- gt 1.5.3 → 1.6.1
- trunk-analytics-cli 0.7.3 → 0.7.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 02206c9..dcaf001 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.32.0
-    - checkov@3.2.390
+    - cfnlint@1.32.1
+    - checkov@3.2.394
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,16 +38,16 @@ lint:
     - prettier@3.5.3
     - prisma@6.5.0
     - pylint@3.3.6
-    - renovate@39.210.1
+    - renovate@39.219.3
     - rubocop@1.39.0
-    - ruff@0.11.1
+    - ruff@0.11.2
     - rustfmt@1.68.2
     - semgrep@1.114.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
-    - sql-formatter@15.5.1
-    - stylelint@16.16.0:
+    - sql-formatter@15.5.2
+    - stylelint@16.17.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,9 +56,9 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.18
+    - trufflehog@3.88.20
     - trunk-toolbox@0.5.4
-    - yamllint@1.36.2
+    - yamllint@1.37.0
 
   # Sourcing repos will have these configs available to applicable linters
   exported_configs:
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.69.0
     - grpcui@1.4.3
-    - gt@1.5.3
-    - trunk-analytics-cli@0.7.3
+    - gt@1.6.1
+    - trunk-analytics-cli@0.7.4

From 75ee725fb0f82425e7ba41a82a54fe113a2523b1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Apr 2025 13:45:14 -0700
Subject: [PATCH 115/176] Bump github/codeql-action from 3.28.12 to 3.28.13 in
 the dependencies group (#221)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.12 to 3.28.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.13</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.13 - 24 Mar 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.13/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.13 - 24 Mar 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<h2>3.28.5 - 24 Jan 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2717">#2717</a></li>
</ul>
<h2>3.28.4 - 23 Jan 2025</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/1b549b9259bda1cb5ddde3b41741a82a2d15a841"><code>1b549b9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2819">#2819</a>
from github/update-v3.28.13-e0ea14102</li>
<li><a
href="https://github.com/github/codeql-action/commit/82630c85f38b5b7c2c9cc279f06af77a080fba19"><code>82630c8</code></a>
Update changelog for v3.28.13</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0ea141027937784e3c10ed1679e503fcc2245bc"><code>e0ea141</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2818">#2818</a>
from github/cklin/empty-pr-diff-range</li>
<li><a
href="https://github.com/github/codeql-action/commit/b361a915088c90790a0c458a63a4b63108a9ab0a"><code>b361a91</code></a>
Diff-informed analysis: fix empty PR handling</li>
<li><a
href="https://github.com/github/codeql-action/commit/bd1d9ab4eda903e1b5caa241368836575c6c476b"><code>bd1d9ab</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2816">#2816</a>
from github/cklin/overlay-file-list</li>
<li><a
href="https://github.com/github/codeql-action/commit/b98ae6ca52694a727f4a03c9bf7a52df66492f23"><code>b98ae6c</code></a>
Add overlay-database-utils tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/9825184a0aec625d59c8e5bcc122734a77e38e7b"><code>9825184</code></a>
Add getFileOidsUnderPath() tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/ac67cffe5c20e84b598930c8453336a7404b2786"><code>ac67cff</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2817">#2817</a>
from github/cklin/default-setup-diff-informed</li>
<li><a
href="https://github.com/github/codeql-action/commit/9c674ba4f548f8b6a6f1a7990756e80453894f56"><code>9c674ba</code></a>
build: refresh js files</li>
<li><a
href="https://github.com/github/codeql-action/commit/d109dd5d333ab79c34032e0443e15643c347e966"><code>d109dd5</code></a>
Detect PR branches for Default Setup</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/5f8171a638ada777af81d42b55959a643bb29017...1b549b9259bda1cb5ddde3b41741a82a2d15a841">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.12&new-version=3.28.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index da7ab5d..d093a2f 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 1f37ddb..3c5333b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         with:
           sarif_file: results.sarif

From 50cdb25aa4601a7e989f5c89e2d8eeace0245051 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 7 Apr 2025 01:17:29 -0700
Subject: [PATCH 116/176] Upgrade trunk (#222)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.32.1 → 1.32.3
- checkov 3.2.394 → 3.2.396
- osv-scanner 2.0.0 → 2.0.1
- renovate 39.219.3 → 39.233.2
- ruff 0.11.2 → 0.11.3
- semgrep 1.114.0 → 1.116.0
- trufflehog 3.88.20 → 3.88.22

1 tool was upgraded:

- trunk-analytics-cli 0.7.4 → 0.7.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index dcaf001..5727d56 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.32.1
-    - checkov@3.2.394
+    - cfnlint@1.32.3
+    - checkov@3.2.396
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,17 +32,17 @@ lint:
     - markdown-link-check@3.13.7
     - mypy@1.15.0
     - nancy@1.0.48
-    - osv-scanner@2.0.0
+    - osv-scanner@2.0.1
     - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.3
     - prisma@6.5.0
     - pylint@3.3.6
-    - renovate@39.219.3
+    - renovate@39.233.2
     - rubocop@1.39.0
-    - ruff@0.11.2
+    - ruff@0.11.3
     - rustfmt@1.68.2
-    - semgrep@1.114.0
+    - semgrep@1.116.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.20
+    - trufflehog@3.88.22
     - trunk-toolbox@0.5.4
     - yamllint@1.37.0
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.69.0
     - grpcui@1.4.3
     - gt@1.6.1
-    - trunk-analytics-cli@0.7.4
+    - trunk-analytics-cli@0.7.6

From 256f31eac5eb36cb51c35abd2adc0f0ceac2cd44 Mon Sep 17 00:00:00 2001
From: Eli Schleifer <1265982+EliSchleifer@users.noreply.github.com>
Date: Thu, 10 Apr 2025 09:02:24 -0700
Subject: [PATCH 117/176] Update tooling / analytics cli and renovate (#223)

Update renovate to 39.238.1
Update trunk analytics cli definition and version
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 5727d56..b3b6acc 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,7 +38,7 @@ lint:
     - prettier@3.5.3
     - prisma@6.5.0
     - pylint@3.3.6
-    - renovate@39.233.2
+    - renovate@39.238.1
     - rubocop@1.39.0
     - ruff@0.11.3
     - rustfmt@1.68.2
@@ -101,11 +101,11 @@ tools:
   definitions:
     - name: trunk-analytics-cli
       download: trunk-analytics-cli
-      known_good_version: 0.5.32
+      known_good_version: 0.7.6
       shims: [trunk-analytics-cli]
       health_checks:
         - command: trunk-analytics-cli --version
-          parse_regex: trunk-analytics-cli ${semver}
+          parse_regex: trunk flakytests ${semver}
   enabled:
     - gh@2.69.0
     - grpcui@1.4.3

From f4394bc4bf5054d09751747a8070ec4083c18212 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 11 Apr 2025 11:14:10 -0700
Subject: [PATCH 118/176] Upgrade trunk (#224)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.32.3 → 1.33.1
- checkov 3.2.396 → 3.2.403
- prisma 6.5.0 → 6.6.0
- ruff 0.11.3 → 0.11.4
- stylelint 16.17.0 → 16.18.0
- trufflehog 3.88.22 → 3.88.23

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b3b6acc..e650532 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.32.3
-    - checkov@3.2.396
+    - cfnlint@1.33.1
+    - checkov@3.2.403
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,18 +36,18 @@ lint:
     - oxipng@9.1.4
     - pragma-once
     - prettier@3.5.3
-    - prisma@6.5.0
+    - prisma@6.6.0
     - pylint@3.3.6
     - renovate@39.238.1
     - rubocop@1.39.0
-    - ruff@0.11.3
+    - ruff@0.11.4
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
     - sql-formatter@15.5.2
-    - stylelint@16.17.0:
+    - stylelint@16.18.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.22
+    - trufflehog@3.88.23
     - trunk-toolbox@0.5.4
     - yamllint@1.37.0
 

From 8e111574d81bcb3b09ad77b0a03539e1e51647f8 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 09:55:45 -0700
Subject: [PATCH 119/176] Upgrade trunk (#226)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

1 linter was upgraded:

- ruff 0.11.4 → 0.11.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin.yaml b/plugin.yaml
index e650532..8d80144 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -40,7 +40,7 @@ lint:
     - pylint@3.3.6
     - renovate@39.238.1
     - rubocop@1.39.0
-    - ruff@0.11.4
+    - ruff@0.11.5
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0

From 76c8b5969f2c2c1004bd4f14c3e75014f18a7463 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 09:57:45 -0700
Subject: [PATCH 120/176] Bump github/codeql-action from 3.28.13 to 3.28.15 in
 the dependencies group (#225)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.13 to 3.28.15
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.15</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.15 - 07 Apr 2025</h2>
<ul>
<li>Fix bug where the action would fail if it tried to produce a debug
artifact with more than 65535 files. <a
href="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.15/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.28.14</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.14 - 07 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.14/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.15 - 07 Apr 2025</h2>
<ul>
<li>Fix bug where the action would fail if it tried to produce a debug
artifact with more than 65535 files. <a
href="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li>
</ul>
<h2>3.28.14 - 07 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li>
</ul>
<h2>3.28.13 - 24 Mar 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.6 - 27 Jan 2025</h2>
<ul>
<li>Re-enable debug artifact upload for CLI versions 2.20.3 or greater.
<a
href="https://redirect.github.com/github/codeql-action/pull/2726">#2726</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/45775bd8235c68ba998cffa5171334d58593da47"><code>45775bd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2854">#2854</a>
from github/update-v3.28.15-a35ae8c38</li>
<li><a
href="https://github.com/github/codeql-action/commit/dd78aab4078b17a672a66d6a80a990beb672ede1"><code>dd78aab</code></a>
Update CHANGELOG.md with bug fix details</li>
<li><a
href="https://github.com/github/codeql-action/commit/e40af591743761de70080085b4e6ce37f7f6e657"><code>e40af59</code></a>
Update changelog for v3.28.15</li>
<li><a
href="https://github.com/github/codeql-action/commit/a35ae8c380fa35365cd546f9a397a46f60dd82cf"><code>a35ae8c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2843">#2843</a>
from github/cklin/diff-informed-compat</li>
<li><a
href="https://github.com/github/codeql-action/commit/bb59df6c174a91d88eec1c48f2ab0ef7b5f96e99"><code>bb59df6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2842">#2842</a>
from github/henrymercer/zip64</li>
<li><a
href="https://github.com/github/codeql-action/commit/4b508f59648bef88ef72c74f1ffff531fda55ea8"><code>4b508f5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2845">#2845</a>
from github/mergeback/v3.28.14-to-main-fc7e4a0f</li>
<li><a
href="https://github.com/github/codeql-action/commit/ca00afb5f1457cf1c85da6cda07d73e720ff061a"><code>ca00afb</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/2969c78ce0262bf75658058604498d2b4bdb0b9b"><code>2969c78</code></a>
Update changelog and version after v3.28.14</li>
<li><a
href="https://github.com/github/codeql-action/commit/fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2"><code>fc7e4a0</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2844">#2844</a>
from github/update-v3.28.14-362ef4ce2</li>
<li><a
href="https://github.com/github/codeql-action/commit/be0175c800fe14dd962aaa2c97f55371f6f95b35"><code>be0175c</code></a>
Update changelog for v3.28.14</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/1b549b9259bda1cb5ddde3b41741a82a2d15a841...45775bd8235c68ba998cffa5171334d58593da47">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.13&new-version=3.28.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index d093a2f..34587bb 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 3c5333b..c8e23af 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/upload-sarif@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           sarif_file: results.sarif

From 91c79ea1528c5110a206ff90deb7b808740ba2dd Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 18 Apr 2025 01:13:11 -0700
Subject: [PATCH 121/176] Upgrade trunk (#227)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- cfnlint 1.33.1 → 1.34.0
- checkov 3.2.403 → 3.2.405
- renovate 39.238.1 → 39.248.2
- trufflehog 3.88.23 → 3.88.24

2 tools were upgraded:

- gh 2.69.0 → 2.70.0
- trunk-analytics-cli 0.7.6 → 0.7.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 8d80144..45ab159 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.33.1
-    - checkov@3.2.403
+    - cfnlint@1.34.0
+    - checkov@3.2.405
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.5.3
     - prisma@6.6.0
     - pylint@3.3.6
-    - renovate@39.238.1
+    - renovate@39.248.2
     - rubocop@1.39.0
     - ruff@0.11.5
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.23
+    - trufflehog@3.88.24
     - trunk-toolbox@0.5.4
     - yamllint@1.37.0
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.69.0
+    - gh@2.70.0
     - grpcui@1.4.3
     - gt@1.6.1
-    - trunk-analytics-cli@0.7.6
+    - trunk-analytics-cli@0.7.7

From 81b42a7b4fd795ba2923a14581f11a614b8d9686 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 25 Apr 2025 01:24:36 -0700
Subject: [PATCH 122/176] Upgrade trunk (#228)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.34.0 → 1.34.1
- checkov 3.2.405 → 3.2.408
- renovate 39.248.2 → 39.257.5
- ruff 0.11.5 → 0.11.6
- sql-formatter 15.5.2 → 15.6.1
- stylelint 16.18.0 → 16.19.0
- trufflehog 3.88.24 → 3.88.25

2 tools were upgraded:

- gh 2.70.0 → 2.71.2
- trunk-analytics-cli 0.7.7 → 0.7.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 45ab159..a7a268c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.34.0
-    - checkov@3.2.405
+    - cfnlint@1.34.1
+    - checkov@3.2.408
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,16 +38,16 @@ lint:
     - prettier@3.5.3
     - prisma@6.6.0
     - pylint@3.3.6
-    - renovate@39.248.2
+    - renovate@39.257.5
     - rubocop@1.39.0
-    - ruff@0.11.5
+    - ruff@0.11.6
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
-    - sql-formatter@15.5.2
-    - stylelint@16.18.0:
+    - sql-formatter@15.6.1
+    - stylelint@16.19.0:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.24
+    - trufflehog@3.88.25
     - trunk-toolbox@0.5.4
     - yamllint@1.37.0
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.70.0
+    - gh@2.71.2
     - grpcui@1.4.3
     - gt@1.6.1
-    - trunk-analytics-cli@0.7.7
+    - trunk-analytics-cli@0.7.9

From 4684165469e6beeb85781cfe71d4c01da32651fa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 May 2025 11:06:35 -0700
Subject: [PATCH 123/176] Bump github/codeql-action from 3.28.15 to 3.28.16 in
 the dependencies group (#229)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.15 to 3.28.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.16</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.16 - 23 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.16/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.16 - 23 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li>
</ul>
<h2>3.28.15 - 07 Apr 2025</h2>
<ul>
<li>Fix bug where the action would fail if it tried to produce a debug
artifact with more than 65535 files. <a
href="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li>
</ul>
<h2>3.28.14 - 07 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li>
</ul>
<h2>3.28.13 - 24 Mar 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<h2>3.28.7 - 29 Jan 2025</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/28deaeda66b76a05916b6923827895f2b14ab387"><code>28deaed</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2865">#2865</a>
from github/update-v3.28.16-2a8cbadc0</li>
<li><a
href="https://github.com/github/codeql-action/commit/03c5d71c11f6cb2c5ba7eef371219a862be30193"><code>03c5d71</code></a>
Update changelog for v3.28.16</li>
<li><a
href="https://github.com/github/codeql-action/commit/2a8cbadc02bb64a7fd15d37c977acbad02496c80"><code>2a8cbad</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2863">#2863</a>
from github/update-bundle/codeql-bundle-v2.21.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/f76eaf51a636a5c1d927998267d92d6475363ace"><code>f76eaf5</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/e63b3f5166c15fda4eb17886f01abe9445dd13f5"><code>e63b3f5</code></a>
Update default bundle to codeql-bundle-v2.21.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/4c3e5362829f0b0bb62ff5f6c938d7f95574c306"><code>4c3e536</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2853">#2853</a>
from github/dependabot/npm_and_yarn/npm-7d84c66b66</li>
<li><a
href="https://github.com/github/codeql-action/commit/56dd02f26d99811d607284494ff84b7d862fe837"><code>56dd02f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2852">#2852</a>
from github/dependabot/github_actions/actions-457587...</li>
<li><a
href="https://github.com/github/codeql-action/commit/192406dd845fb2228fcea74898b98df2a6cdcef6"><code>192406d</code></a>
Merge branch 'main' into
dependabot/github_actions/actions-4575878e06</li>
<li><a
href="https://github.com/github/codeql-action/commit/c7dbb2084ed1bb623fbbb3976cd6dbae6daaf1fe"><code>c7dbb20</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2857">#2857</a>
from github/nickfyson/address-vulns</li>
<li><a
href="https://github.com/github/codeql-action/commit/9a45cd8c5025281c30bbb652197ace083c291e49"><code>9a45cd8</code></a>
move use of input variables into env vars</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/45775bd8235c68ba998cffa5171334d58593da47...28deaeda66b76a05916b6923827895f2b14ab387">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.15&new-version=3.28.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 34587bb..46dabd0 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
+        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
+        uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
+        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index c8e23af..ee74853 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
+        uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           sarif_file: results.sarif

From d11cb177ccd698d8fa86dc582ac7e52f6820d01f Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Thu, 1 May 2025 11:07:58 -0700
Subject: [PATCH 124/176] Upgrade trunk (#230)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- cfnlint 1.34.1 → 1.34.2
- renovate 39.257.5 → 39.257.8
- ruff 0.11.6 → 0.11.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index a7a268c..1955def 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,7 +17,7 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.0.3
-    - cfnlint@1.34.1
+    - cfnlint@1.34.2
     - checkov@3.2.408
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -38,9 +38,9 @@ lint:
     - prettier@3.5.3
     - prisma@6.6.0
     - pylint@3.3.6
-    - renovate@39.257.5
+    - renovate@39.257.8
     - rubocop@1.39.0
-    - ruff@0.11.6
+    - ruff@0.11.7
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0

From 6f8f101fc9b23813fb35a93232cc55e4188566e0 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 2 May 2025 02:39:57 -0700
Subject: [PATCH 125/176] Upgrade trunk (#231)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- buildifier 8.0.3 → 8.2.0
- checkov 3.2.408 → 3.2.413
- osv-scanner 2.0.1 → 2.0.2
- oxipng 9.1.4 → 9.1.5
- prisma 6.6.0 → 6.7.0
- renovate 39.257.8 → 40.0.6
- stylelint 16.19.0 → 16.19.1
- trufflehog 3.88.25 → 3.88.26

1 tool was upgraded:

- gh 2.71.2 → 2.72.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 1955def..45b9b1c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -16,9 +16,9 @@ lint:
     - bandit@1.8.3
     - black@25.1.0
     - buf-lint@1.31.0!
-    - buildifier@8.0.3
+    - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.408
+    - checkov@3.2.413
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,13 +32,13 @@ lint:
     - markdown-link-check@3.13.7
     - mypy@1.15.0
     - nancy@1.0.48
-    - osv-scanner@2.0.1
-    - oxipng@9.1.4
+    - osv-scanner@2.0.2
+    - oxipng@9.1.5
     - pragma-once
     - prettier@3.5.3
-    - prisma@6.6.0
+    - prisma@6.7.0
     - pylint@3.3.6
-    - renovate@39.257.8
+    - renovate@40.0.6
     - rubocop@1.39.0
     - ruff@0.11.7
     - rustfmt@1.68.2
@@ -47,7 +47,7 @@ lint:
     - shfmt@3.6.0
     - sort-package-json@3.0.0
     - sql-formatter@15.6.1
-    - stylelint@16.19.0:
+    - stylelint@16.19.1:
         packages:
           - stylelint-config-standard-scss@14.0.0
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.25
+    - trufflehog@3.88.26
     - trunk-toolbox@0.5.4
     - yamllint@1.37.0
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.71.2
+    - gh@2.72.0
     - grpcui@1.4.3
     - gt@1.6.1
     - trunk-analytics-cli@0.7.9

From 00ecd0588f8f7926bbc1a7982a4dd9b1720c4c1a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 May 2025 10:15:37 -0700
Subject: [PATCH 126/176] Bump github/codeql-action from 3.28.16 to 3.28.17 in
 the dependencies group (#232)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.16 to 3.28.17
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.17</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.17 - 02 May 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2872">#2872</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.17/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.17 - 02 May 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2872">#2872</a></li>
</ul>
<h2>3.28.16 - 23 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li>
</ul>
<h2>3.28.15 - 07 Apr 2025</h2>
<ul>
<li>Fix bug where the action would fail if it tried to produce a debug
artifact with more than 65535 files. <a
href="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li>
</ul>
<h2>3.28.14 - 07 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li>
</ul>
<h2>3.28.13 - 24 Mar 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li>
</ul>
<h2>3.28.8 - 29 Jan 2025</h2>
<ul>
<li>Enable support for Kotlin 2.1.10 when running with CodeQL CLI
v2.20.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/60168efe1c415ce0f5521ea06d5c2062adbeed1b"><code>60168ef</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2886">#2886</a>
from github/update-v3.28.17-97a2bfd2a</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d5a3115da6459f8ab4333164184f8292c0c7a7f"><code>0d5a311</code></a>
Update changelog for v3.28.17</li>
<li><a
href="https://github.com/github/codeql-action/commit/97a2bfd2a3d26d458da69e548f7f859d6fca634d"><code>97a2bfd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2872">#2872</a>
from github/update-bundle/codeql-bundle-v2.21.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/9aba20e4c91fd8c3a71d5ab2bdeba0da11713864"><code>9aba20e</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.21.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/81a9508deb02898c1a7be79bd5b49bb0ab9c787e"><code>81a9508</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2876">#2876</a>
from github/henrymercer/fix-diff-informed-multiple-a...</li>
<li><a
href="https://github.com/github/codeql-action/commit/1569f4c145413fbce7d6573c6ee9212d2612d27f"><code>1569f4c</code></a>
Disable diff-informed queries in code scanning config tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/62fbeb66b359bfbdec7d4d96af8f68aece59b4db"><code>62fbeb6</code></a>
Merge branch 'main' into
henrymercer/fix-diff-informed-multiple-analyze</li>
<li><a
href="https://github.com/github/codeql-action/commit/f122d1dc9eb83b12dc16b38495b667a2dddfa6f9"><code>f122d1d</code></a>
Address test failures from computing temporary directory too early</li>
<li><a
href="https://github.com/github/codeql-action/commit/083772aae48a3be5654921bb6e6ccb00e0e1d563"><code>083772a</code></a>
Do not fail diff informed analyses when <code>analyze</code> is run
twice in the same job</li>
<li><a
href="https://github.com/github/codeql-action/commit/5db14d0471303d6eee1e2a51393f5ae1669b6703"><code>5db14d0</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.21.2</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/28deaeda66b76a05916b6923827895f2b14ab387...60168efe1c415ce0f5521ea06d5c2062adbeed1b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.16&new-version=3.28.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 46dabd0..6d379ca 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ee74853..0148b9b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           sarif_file: results.sarif

From 6a2ce43e548b272a1a962df3f6f8da83fe563217 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 5 May 2025 10:17:38 -0700
Subject: [PATCH 127/176] Upgrade trunk (#233)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- checkov 3.2.413 → 3.2.414
- ruff 0.11.7 → 0.11.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 45b9b1c..bab5df0 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.413
+    - checkov@3.2.414
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -40,7 +40,7 @@ lint:
     - pylint@3.3.6
     - renovate@40.0.6
     - rubocop@1.39.0
-    - ruff@0.11.7
+    - ruff@0.11.8
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0

From 01660067bf490cec164ed5d2bf54132413ba4004 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 9 May 2025 11:35:56 -0700
Subject: [PATCH 128/176] Upgrade trunk (#234)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- checkov 3.2.414 → 3.2.416
- pylint 3.3.6 → 3.3.7
- trufflehog 3.88.26 → 3.88.28
- yamllint 1.37.0 → 1.37.1

1 tool was upgraded:

- trunk-analytics-cli 0.7.9 → 0.7.10

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index bab5df0..dde2cef 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.414
+    - checkov@3.2.416
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -37,7 +37,7 @@ lint:
     - pragma-once
     - prettier@3.5.3
     - prisma@6.7.0
-    - pylint@3.3.6
+    - pylint@3.3.7
     - renovate@40.0.6
     - rubocop@1.39.0
     - ruff@0.11.8
@@ -56,9 +56,9 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.26
+    - trufflehog@3.88.28
     - trunk-toolbox@0.5.4
-    - yamllint@1.37.0
+    - yamllint@1.37.1
 
   # Sourcing repos will have these configs available to applicable linters
   exported_configs:
@@ -110,4 +110,4 @@ tools:
     - gh@2.72.0
     - grpcui@1.4.3
     - gt@1.6.1
-    - trunk-analytics-cli@0.7.9
+    - trunk-analytics-cli@0.7.10

From 96993c814e5aeff7eb130dc231fca39bb6cb03ae Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 11 May 2025 19:11:56 -0700
Subject: [PATCH 129/176] Bump trunk-io/trunk-action from 1.1.19 to 1.2.1 in
 the dependencies group (#235)

Bumps the dependencies group with 1 update:
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `trunk-io/trunk-action` from 1.1.19 to 1.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixes token issue when posting deprecation comment (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/278">#278</a>)</li>
</ul>
<p>For more information, see the <a
href="https://docs.trunk.io/code-quality/setup-and-installation/prevent-new-issues/migration-guide">migration
guide</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.2.0...v1.2.1">https://github.com/trunk-io/trunk-action/compare/v1.2.0...v1.2.1</a></p>
<h2>v1.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add deprecation notice for check uploads (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/276">#276</a>)</li>
<li>Add deprecation notice for check on PRs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/277">#277</a>)</li>
</ul>
<p>For more information, see the <a
href="https://docs.trunk.io/code-quality/setup-and-installation/prevent-new-issues/migration-guide">migration
guide</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.1.19...v1.2.0">https://github.com/trunk-io/trunk-action/compare/v1.1.19...v1.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/12243abae10c54b42a32cb25a465023c66e40e5b"><code>12243ab</code></a>
fix: use correct check for check on PRs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/278">#278</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/188fcf65e6218570e8dc5d0954e13b132c312a2d"><code>188fcf6</code></a>
feat: add deprecation notice to check on PRs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/277">#277</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/2ec7ee718d160fde0d3e3ee5e8528c001216d3ca"><code>2ec7ee7</code></a>
(Chore): Add deprecation notice for check uploads (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/276">#276</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/c5b5aff3e989c9af30247d3a7a28ae415d024199"><code>c5b5aff</code></a>
Upgrade trunk to 1.22.15 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/275">#275</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/ceda31f002b9026d60ebd3d8ed8c2ddf61f5a946"><code>ceda31f</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/274">#274</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/89377059518844ed399f30fd0295e5332d69eb88"><code>8937705</code></a>
Upgrade trunk to 1.22.12 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/273">#273</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/1f40c273b349d8c740a40b3e4d69640221b71c29"><code>1f40c27</code></a>
Upgrade trunk to 1.22.11 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/272">#272</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/d6ff94159db51416d62bd65c11ba1b2e759ad635"><code>d6ff941</code></a>
Upgrade trunk to 1.22.10 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/271">#271</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/4c56ad8897a070295741ca50d41d87852e0237dd"><code>4c56ad8</code></a>
Upgrade trunk (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/270">#270</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/8e4c812061ece3fa253bbfa5a80ee1caefa19eb1"><code>8e4c812</code></a>
Upgrade trunk to 1.22.9 (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/269">#269</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/trunk-io/trunk-action/compare/4d5ecc89b2691705fd08c747c78652d2fc806a94...12243abae10c54b42a32cb25a465023c66e40e5b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trunk-io/trunk-action&package-manager=github_actions&previous-version=1.1.19&new-version=1.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/upgrade_trunk.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index 48a4219..bed8368 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@4d5ecc89b2691705fd08c747c78652d2fc806a94
+        uses: trunk-io/trunk-action/upgrade@12243abae10c54b42a32cb25a465023c66e40e5b
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From 9452f3a0ff6060841d8e4370525cdcc789d67972 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 12 May 2025 10:52:54 -0700
Subject: [PATCH 130/176] Upgrade trunk (#236)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- stylelint 16.19.1 → 16.19.1
  - stylelint-config-standard-scss 14.0.0 → 15.0.0
- trufflehog 3.88.28 → 3.88.29

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index dde2cef..0e6c453 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -49,14 +49,14 @@ lint:
     - sql-formatter@15.6.1
     - stylelint@16.19.1:
         packages:
-          - stylelint-config-standard-scss@14.0.0
+          - stylelint-config-standard-scss@15.0.0
           - stylelint-config-clean-order@7.0.0
     - svgo@3.3.2
     - taplo@0.9.3
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.28
+    - trufflehog@3.88.29
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 

From 7a32d74fa67d175a42346702daa296afae186f4c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 16 May 2025 06:30:13 -0700
Subject: [PATCH 131/176] Upgrade trunk (#237)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- checkov 3.2.416 → 3.2.423
- ruff 0.11.8 → 0.11.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 0e6c453..41310a4 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.416
+    - checkov@3.2.423
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -40,7 +40,7 @@ lint:
     - pylint@3.3.7
     - renovate@40.0.6
     - rubocop@1.39.0
-    - ruff@0.11.8
+    - ruff@0.11.9
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0

From 4fd9577aee1cc98d2922eb0daaf8c4160ebba94b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:04:12 -0700
Subject: [PATCH 132/176] Bump the dependencies group with 2 updates (#238)

Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[trunk-io/trunk-action](https://github.com/trunk-io/trunk-action).

Updates `github/codeql-action` from 3.28.17 to 3.28.18
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.28.18</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.28.18 - 16 May 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li>
<li>Skip validating SARIF produced by CodeQL for improved performance.
<a
href="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li>
<li>The number of threads and amount of RAM used by CodeQL can now be
set via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code>
runner environment variables. If set, these environment variables
override the <code>threads</code> and <code>ram</code> inputs
respectively. <a
href="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.28.18/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.28.18 - 16 May 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li>
<li>Skip validating SARIF produced by CodeQL for improved performance.
<a
href="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li>
<li>The number of threads and amount of RAM used by CodeQL can now be
set via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code>
runner environment variables. If set, these environment variables
override the <code>threads</code> and <code>ram</code> inputs
respectively. <a
href="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li>
</ul>
<h2>3.28.17 - 02 May 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2872">#2872</a></li>
</ul>
<h2>3.28.16 - 23 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li>
</ul>
<h2>3.28.15 - 07 Apr 2025</h2>
<ul>
<li>Fix bug where the action would fail if it tried to produce a debug
artifact with more than 65535 files. <a
href="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li>
</ul>
<h2>3.28.14 - 07 Apr 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li>
</ul>
<h2>3.28.13 - 24 Mar 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.12 - 19 Mar 2025</h2>
<ul>
<li>Dependency caching should now cache more dependencies for Java
<code>build-mode: none</code> extractions. This should speed up
workflows and avoid inconsistent alerts in some cases.</li>
<li>Update default CodeQL bundle version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li>
</ul>
<h2>3.28.11 - 07 Mar 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li>
</ul>
<h2>3.28.10 - 21 Feb 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.20.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li>
<li>Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS. <a
href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li>
</ul>
<h2>3.28.9 - 07 Feb 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/ff0a06e83cb2de871e5a09832bc6a81e7276941f"><code>ff0a06e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2896">#2896</a>
from github/update-v3.28.18-b86edfc27</li>
<li><a
href="https://github.com/github/codeql-action/commit/a41e0844be4d25fcef7ce7fa536f3e30275a9a1c"><code>a41e084</code></a>
Update changelog for v3.28.18</li>
<li><a
href="https://github.com/github/codeql-action/commit/b86edfc27a1e0d3b55127a7496a1c770a02b2f84"><code>b86edfc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2893">#2893</a>
from github/update-bundle/codeql-bundle-v2.21.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e93b90025f7c49dccc3ee640c4155b63eb9a6b39"><code>e93b900</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.21.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/510dfa3460b15b34a807ab5609b4691aed5ebbee"><code>510dfa3</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2894">#2894</a>
from github/henrymercer/skip-validating-codeql-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/492d7832457da825a964331d860789f3f19d105b"><code>492d783</code></a>
Merge branch 'main' into henrymercer/skip-validating-codeql-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/83bdf3b7f92061d2f6d74e2a4555ecf719adad68"><code>83bdf3b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2859">#2859</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/cffc916774454a5ead1c8fb7925abad20cda85e4"><code>cffc916</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2891">#2891</a>
from austinpray-mixpanel/patch-1</li>
<li><a
href="https://github.com/github/codeql-action/commit/4420887272f1c68c7c58ca2970bdfb5eb657cf08"><code>4420887</code></a>
Add deprecation warning for CodeQL 2.16.5 and earlier</li>
<li><a
href="https://github.com/github/codeql-action/commit/4e178c584157c51ff3d6fb87c764e7ed0715f82a"><code>4e178c5</code></a>
Update supported versions table in README</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/60168efe1c415ce0f5521ea06d5c2062adbeed1b...ff0a06e83cb2de871e5a09832bc6a81e7276941f">compare
view</a></li>
</ul>
</details>
<br />

Updates `trunk-io/trunk-action` from 1.2.1 to 1.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trunk-io/trunk-action/releases">trunk-io/trunk-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Update deprecation comment copy (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/280">#280</a>)</li>
</ul>
<p>For more information, see the <a
href="https://docs.trunk.io/code-quality/setup-and-installation/prevent-new-issues/migration-guide">migration
guide</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.2.2...v1.2.3">https://github.com/trunk-io/trunk-action/compare/v1.2.2...v1.2.3</a></p>
<h2>v1.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Only posts deprecation comment when checking PRs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/279">#279</a>)</li>
</ul>
<p>For more information, see the <a
href="https://docs.trunk.io/code-quality/setup-and-installation/prevent-new-issues/migration-guide">migration
guide</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trunk-io/trunk-action/compare/v1.2.1...v1.2.2">https://github.com/trunk-io/trunk-action/compare/v1.2.1...v1.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/b8812b3da2f527db878ef7541c4177f8d280cd89"><code>b8812b3</code></a>
fix: update deprecation comment copy (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/280">#280</a>)</li>
<li><a
href="https://github.com/trunk-io/trunk-action/commit/06c428bf05832198443baab1096754b166a6c466"><code>06c428b</code></a>
fix: only post comment when checking PRs (<a
href="https://redirect.github.com/trunk-io/trunk-action/issues/279">#279</a>)</li>
<li>See full diff in <a
href="https://github.com/trunk-io/trunk-action/compare/12243abae10c54b42a32cb25a465023c66e40e5b...b8812b3da2f527db878ef7541c4177f8d280cd89">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml        | 6 +++---
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/upgrade_trunk.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 6d379ca..3fe1615 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 0148b9b..4b189dc 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index bed8368..b83bc06 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -26,7 +26,7 @@ jobs:
           private_key: ${{ secrets.TRUNK_OPEN_PR_APP_PRIVATE_KEY }}
 
       - name: Trunk Upgrade
-        uses: trunk-io/trunk-action/upgrade@12243abae10c54b42a32cb25a465023c66e40e5b
+        uses: trunk-io/trunk-action/upgrade@b8812b3da2f527db878ef7541c4177f8d280cd89
         with:
           add-paths: plugin.yaml
           arguments: --apply-to=plugin.yaml -n

From 2c6f9d5fa8888e61662268300a6ca890042647a9 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 11:46:22 -0700
Subject: [PATCH 133/176] Upgrade trunk (#239)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- checkov 3.2.423 → 3.2.424
- prisma 6.7.0 → 6.8.1
- ruff 0.11.9 → 0.11.10
- stylelint 16.19.1 → 16.19.1
  - stylelint-config-standard-scss 15.0.0 → 15.0.1

1 tool was upgraded:

- gt 1.6.1 → 1.6.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 41310a4..3e71c15 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.423
+    - checkov@3.2.424
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,11 +36,11 @@ lint:
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.5.3
-    - prisma@6.7.0
+    - prisma@6.8.1
     - pylint@3.3.7
     - renovate@40.0.6
     - rubocop@1.39.0
-    - ruff@0.11.9
+    - ruff@0.11.10
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0
@@ -49,7 +49,7 @@ lint:
     - sql-formatter@15.6.1
     - stylelint@16.19.1:
         packages:
-          - stylelint-config-standard-scss@15.0.0
+          - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0
     - svgo@3.3.2
     - taplo@0.9.3
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.72.0
     - grpcui@1.4.3
-    - gt@1.6.1
+    - gt@1.6.2
     - trunk-analytics-cli@0.7.10

From 0fbd2d6ddd6d78c48c49dcac219489b7022e3a31 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 23 May 2025 01:44:30 -0700
Subject: [PATCH 134/176] Upgrade trunk (#240)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- checkov 3.2.424 → 3.2.427
- markdownlint 0.44.0 → 0.45.0
- prisma 6.8.1 → 6.8.2
- sql-formatter 15.6.1 → 15.6.2
- trufflehog 3.88.29 → 3.88.32

2 tools were upgraded:

- gh 2.72.0 → 2.73.0
- trunk-analytics-cli 0.7.10 → 0.8.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 3e71c15..e7c2ff5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.424
+    - checkov@3.2.427
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -28,7 +28,7 @@ lint:
     - golangci-lint@1.64.8
     - hadolint@2.12.1-beta
     - isort@6.0.1
-    - markdownlint@0.44.0
+    - markdownlint@0.45.0
     - markdown-link-check@3.13.7
     - mypy@1.15.0
     - nancy@1.0.48
@@ -36,7 +36,7 @@ lint:
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.5.3
-    - prisma@6.8.1
+    - prisma@6.8.2
     - pylint@3.3.7
     - renovate@40.0.6
     - rubocop@1.39.0
@@ -46,7 +46,7 @@ lint:
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.0.0
-    - sql-formatter@15.6.1
+    - sql-formatter@15.6.2
     - stylelint@16.19.1:
         packages:
           - stylelint-config-standard-scss@15.0.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.29
+    - trufflehog@3.88.32
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.72.0
+    - gh@2.73.0
     - grpcui@1.4.3
     - gt@1.6.2
-    - trunk-analytics-cli@0.7.10
+    - trunk-analytics-cli@0.8.1

From efd3ddad85602ab9b136ebb0af91d0380bcd325e Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 26 May 2025 21:19:16 -0700
Subject: [PATCH 135/176] Upgrade trunk (#241)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.427 → 3.2.432
- ruff 0.11.10 → 0.11.11
- trufflehog 3.88.32 → 3.88.33

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index e7c2ff5..afa183c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.0
     - cfnlint@1.34.2
-    - checkov@3.2.427
+    - checkov@3.2.432
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -40,7 +40,7 @@ lint:
     - pylint@3.3.7
     - renovate@40.0.6
     - rubocop@1.39.0
-    - ruff@0.11.10
+    - ruff@0.11.11
     - rustfmt@1.68.2
     - semgrep@1.116.0
     - shellcheck@0.10.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.32
+    - trufflehog@3.88.33
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 

From 35e2de5b25bf6ee4033c0e707dcade06b1efe3f7 Mon Sep 17 00:00:00 2001
From: Eli Schleifer <1265982+EliSchleifer@users.noreply.github.com>
Date: Tue, 27 May 2025 13:27:50 -0700
Subject: [PATCH 136/176] Update config to latest trunk releases (#242)

---
 .trunk/trunk.yaml | 4 ++--
 plugin.yaml       | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 90ec77f..a69f4b7 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -1,11 +1,11 @@
 version: 0.1
 cli:
-  version: 1.22.6
+  version: 1.22.15
 plugins:
   sources:
     - id: trunk
       uri: https://github.com/trunk-io/plugins
-      ref: v1.6.4
+      ref: v1.7.0
 
     - id: configs
       local: .
diff --git a/plugin.yaml b/plugin.yaml
index afa183c..b272977 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -4,8 +4,8 @@ required_trunk_version: ">=1.7.1-beta.9"
 # Applicable linters and actions will run with these runtime versions
 runtimes:
   enabled:
-    - go@1.21.0
-    - node@20.11.0
+    - go@1.24.3
+    - node@22.16.0
     - python@3.10.8
     - ruby@3.1.4
 
@@ -101,7 +101,7 @@ tools:
   definitions:
     - name: trunk-analytics-cli
       download: trunk-analytics-cli
-      known_good_version: 0.7.6
+      known_good_version: 0.8.1
       shims: [trunk-analytics-cli]
       health_checks:
         - command: trunk-analytics-cli --version

From 974194556f463cd9fd4d8dd6f821f800b3b2ba70 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 2 Jun 2025 09:43:45 -0700
Subject: [PATCH 137/176] Upgrade trunk (#243)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.34.2 → 1.35.3
- checkov 3.2.432 → 3.2.435
- mypy 1.15.0 → 1.16.0
- renovate 40.0.6 → 40.36.2
- ruff 0.11.11 → 0.11.12
- semgrep 1.116.0 → 1.123.0
- sort-package-json 3.0.0 → 3.2.1
- stylelint 16.19.1 → 16.20.0
- trufflehog 3.88.33 → 3.88.35

1 runtime was upgraded:

- ruby 3.1.4 → 3.4.2

2 tools were upgraded:

- gh 2.73.0 → 2.74.0
- trunk-analytics-cli 0.8.1 → 0.9.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b272977..ede48f1 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -7,7 +7,7 @@ runtimes:
     - go@1.24.3
     - node@22.16.0
     - python@3.10.8
-    - ruby@3.1.4
+    - ruby@3.4.2
 
 lint:
   # By sourcing this plugin, repos will enable these linters
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.2.0
-    - cfnlint@1.34.2
-    - checkov@3.2.432
+    - cfnlint@1.35.3
+    - checkov@3.2.435
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,7 +30,7 @@ lint:
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
-    - mypy@1.15.0
+    - mypy@1.16.0
     - nancy@1.0.48
     - osv-scanner@2.0.2
     - oxipng@9.1.5
@@ -38,16 +38,16 @@ lint:
     - prettier@3.5.3
     - prisma@6.8.2
     - pylint@3.3.7
-    - renovate@40.0.6
+    - renovate@40.36.2
     - rubocop@1.39.0
-    - ruff@0.11.11
+    - ruff@0.11.12
     - rustfmt@1.68.2
-    - semgrep@1.116.0
+    - semgrep@1.123.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@3.0.0
+    - sort-package-json@3.2.1
     - sql-formatter@15.6.2
-    - stylelint@16.19.1:
+    - stylelint@16.20.0:
         packages:
           - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.33
+    - trufflehog@3.88.35
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.73.0
+    - gh@2.74.0
     - grpcui@1.4.3
     - gt@1.6.2
-    - trunk-analytics-cli@0.8.1
+    - trunk-analytics-cli@0.9.1

From c15ef2cc4cb4f701244617fa70a22a7b2de768ba Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Tue, 22 Jul 2025 09:55:48 -0700
Subject: [PATCH 138/176] Upgrade trunk (#245)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

16 linters were upgraded:

- bandit 1.8.3 → 1.8.6
- buildifier 8.2.0 → 8.2.1
- cfnlint 1.35.3 → 1.38.0
- checkov 3.2.435 → 3.2.451
- mypy 1.16.0 → 1.17.0
- osv-scanner 2.0.2 → 2.0.3
- prettier 3.5.3 → 3.6.2
- prisma 6.8.2 → 6.12.0
- renovate 40.36.2 → 41.38.1
- ruff 0.11.12 → 0.12.4
- semgrep 1.123.0 → 1.128.1
- sort-package-json 3.2.1 → 3.4.0
- sql-formatter 15.6.2 → 15.6.6
- stylelint 16.20.0 → 16.21.1
- svgo 3.3.2 → 4.0.0
- trufflehog 3.88.35 → 3.90.0

3 tools were upgraded:

- gh 2.74.0 → 2.76.0
- gt 1.6.2 → 1.6.6
- trunk-analytics-cli 0.9.1 → 0.10.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 38 +++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index ede48f1..19cefe8 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -13,12 +13,12 @@ lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
     - actionlint@1.7.7
-    - bandit@1.8.3
+    - bandit@1.8.6
     - black@25.1.0
     - buf-lint@1.31.0!
-    - buildifier@8.2.0
-    - cfnlint@1.35.3
-    - checkov@3.2.435
+    - buildifier@8.2.1
+    - cfnlint@1.38.0
+    - checkov@3.2.451
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,33 +30,33 @@ lint:
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
-    - mypy@1.16.0
+    - mypy@1.17.0
     - nancy@1.0.48
-    - osv-scanner@2.0.2
+    - osv-scanner@2.0.3
     - oxipng@9.1.5
     - pragma-once
-    - prettier@3.5.3
-    - prisma@6.8.2
+    - prettier@3.6.2
+    - prisma@6.12.0
     - pylint@3.3.7
-    - renovate@40.36.2
+    - renovate@41.38.1
     - rubocop@1.39.0
-    - ruff@0.11.12
+    - ruff@0.12.4
     - rustfmt@1.68.2
-    - semgrep@1.123.0
+    - semgrep@1.128.1
     - shellcheck@0.10.0
     - shfmt@3.6.0
-    - sort-package-json@3.2.1
-    - sql-formatter@15.6.2
-    - stylelint@16.20.0:
+    - sort-package-json@3.4.0
+    - sql-formatter@15.6.6
+    - stylelint@16.21.1:
         packages:
           - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0
-    - svgo@3.3.2
+    - svgo@4.0.0
     - taplo@0.9.3
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.88.35
+    - trufflehog@3.90.0
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.74.0
+    - gh@2.76.0
     - grpcui@1.4.3
-    - gt@1.6.2
-    - trunk-analytics-cli@0.9.1
+    - gt@1.6.6
+    - trunk-analytics-cli@0.10.5

From cd68ba971f3bdc3c663741b419a444b26cdce8ea Mon Sep 17 00:00:00 2001
From: Tyler Jang <tyler@trunk.io>
Date: Wed, 23 Jul 2025 12:00:19 -0700
Subject: [PATCH 139/176] (Chore): Switch to GH Action for Code Quality (#247)

---
 .github/workflows/code_quality.yaml | 20 ++++++++++++++++++++
 .trunk/trunk.yaml                   |  4 ++--
 2 files changed, 22 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/code_quality.yaml

diff --git a/.github/workflows/code_quality.yaml b/.github/workflows/code_quality.yaml
new file mode 100644
index 0000000..b55524d
--- /dev/null
+++ b/.github/workflows/code_quality.yaml
@@ -0,0 +1,20 @@
+name: Trunk Code Quality
+on:
+  pull_request: {}
+
+concurrency:
+  group: ${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Trunk Code Quality
+        uses: trunk-io/trunk-action@v1
diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index a69f4b7..b1e5af6 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -1,11 +1,11 @@
 version: 0.1
 cli:
-  version: 1.22.15
+  version: 1.24.0
 plugins:
   sources:
     - id: trunk
       uri: https://github.com/trunk-io/plugins
-      ref: v1.7.0
+      ref: v1.7.1
 
     - id: configs
       local: .

From 3d4b92746fe202a640d00ad779bc5a03f6ab4094 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 25 Jul 2025 02:25:05 -0700
Subject: [PATCH 140/176] Upgrade trunk (#248)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

5 linters were upgraded:

- checkov 3.2.451 → 3.2.454
- renovate 41.38.1 → 41.43.0
- semgrep 1.128.1 → 1.130.0
- stylelint 16.21.1 → 16.22.0
- trufflehog 3.90.0 → 3.90.2

2 tools were upgraded:

- gh 2.76.0 → 2.76.1
- gt 1.6.6 → 1.6.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 19cefe8..c128012 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.1
     - cfnlint@1.38.0
-    - checkov@3.2.451
+    - checkov@3.2.454
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,16 +38,16 @@ lint:
     - prettier@3.6.2
     - prisma@6.12.0
     - pylint@3.3.7
-    - renovate@41.38.1
+    - renovate@41.43.0
     - rubocop@1.39.0
     - ruff@0.12.4
     - rustfmt@1.68.2
-    - semgrep@1.128.1
+    - semgrep@1.130.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
     - sql-formatter@15.6.6
-    - stylelint@16.21.1:
+    - stylelint@16.22.0:
         packages:
           - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.0
+    - trufflehog@3.90.2
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.76.0
+    - gh@2.76.1
     - grpcui@1.4.3
-    - gt@1.6.6
+    - gt@1.6.7
     - trunk-analytics-cli@0.10.5

From d25e7e34eb86da07fba6015ed36e733344e0df8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 27 Jul 2025 22:03:50 -0700
Subject: [PATCH 141/176] Bump the dependencies group across 1 directory with 2
 updates (#249)

Bumps the dependencies group with 2 updates in the / directory:
[github/codeql-action](https://github.com/github/codeql-action) and
[ossf/scorecard-action](https://github.com/ossf/scorecard-action).

Updates `github/codeql-action` from 3.28.18 to 3.29.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.4</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.4/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.29.3</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.3/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.29.2</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.2/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.29.1</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.1 - 27 Jun 2025</h2>
<ul>
<li>Fix bug in PR analysis where user-provided <code>include</code>
query filter fails to exclude non-included queries. <a
href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li>
<li>Update default CodeQL bundle version to 2.22.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.1/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.29.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<ul>
<li>Fix bug in PR analysis where user-provided <code>include</code>
query filter fails to exclude non-included queries. <a
href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li>
<li>Update default CodeQL bundle version to 2.22.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li>
</ul>
<h2>3.29.0 - 11 Jun 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2925">#2925</a></li>
<li>Bump minimum CodeQL bundle version to 2.16.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2912">#2912</a></li>
</ul>
<h2>3.28.20 - 21 July 2025</h2>
<ul>
<li>Remove support for combining SARIF files from a single upload for
GHES 3.18, see <a
href="https://github.blog/changelog/2024-05-06-code-scanning-will-stop-combining-runs-from-a-single-upload/">the
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2959">#2959</a></li>
</ul>
<h2>3.28.19 - 03 Jun 2025</h2>
<ul>
<li>The CodeQL Action no longer includes its own copy of the extractor
for the <code>actions</code> language, which is currently in public
preview.
The <code>actions</code> extractor has been included in the CodeQL CLI
since v2.20.6. If your workflow has enabled the <code>actions</code>
language <em>and</em> you have pinned
your <code>tools:</code> property to a specific version of the CodeQL
CLI earlier than v2.20.6, you will need to update to at least CodeQL
v2.20.6 or disable
<code>actions</code> analysis.</li>
<li>Update default CodeQL bundle version to 2.21.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2910">#2910</a></li>
</ul>
<h2>3.28.18 - 16 May 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.21.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li>
<li>Skip validating SARIF produced by CodeQL for improved performance.
<a
href="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li>
<li>The number of threads and amount of RAM used by CodeQL can now be
set via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code>
runner environment variables. If set, these environment variables
override the <code>threads</code> and <code>ram</code> inputs
respectively. <a
href="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li>
</ul>
<h2>3.28.17 - 02 May 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/4e828ff8d448a8a6e532957b1811f387a63867e8"><code>4e828ff</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2989">#2989</a>
from github/update-v3.29.4-37264dc0b</li>
<li><a
href="https://github.com/github/codeql-action/commit/b3114b8965a8002633cfceedf18a9562d3de70b5"><code>b3114b8</code></a>
Update changelog for v3.29.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/37264dc0b346df153adcc14ea7f2533da70c9533"><code>37264dc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2988">#2988</a>
from github/koesie10/disable-combine-single-file</li>
<li><a
href="https://github.com/github/codeql-action/commit/5a29823d01450f8a87396bfd6dd5faf9a44d0edf"><code>5a29823</code></a>
Merge remote-tracking branch 'origin/main' into
koesie10/disable-combine-sing...</li>
<li><a
href="https://github.com/github/codeql-action/commit/5a2327a6fd9cf873932e1145b6bde5613674d4d2"><code>5a2327a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2987">#2987</a>
from github/mbg/combine-sarif-error</li>
<li><a
href="https://github.com/github/codeql-action/commit/287d421cf3c240d86f99ccb0819255f2e4aa951d"><code>287d421</code></a>
Disable combining runs within a single file</li>
<li><a
href="https://github.com/github/codeql-action/commit/43afe6ec0b413a4e120c82c9f9a45740aba86b3d"><code>43afe6e</code></a>
Treat processing error for multiple runs with the same category as
configurat...</li>
<li><a
href="https://github.com/github/codeql-action/commit/8f2e63676d057294d8bd44f5bc15f85375860cda"><code>8f2e636</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2981">#2981</a>
from github/dependabot/npm_and_yarn/npm-fe13dfda46</li>
<li><a
href="https://github.com/github/codeql-action/commit/76bf77db0b4f84ce3351e7dccabb79e3e2aa8ad3"><code>76bf77d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2980">#2980</a>
from github/dependabot/github_actions/actions-504b6c...</li>
<li><a
href="https://github.com/github/codeql-action/commit/9e7d13dd99bb1d5ebcd519366018f47c6a2ca6e2"><code>9e7d13d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2983">#2983</a>
from github/koesie10/update-changelog-link</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/ff0a06e83cb2de871e5a09832bc6a81e7276941f...4e828ff8d448a8a6e532957b1811f387a63867e8">compare
view</a></li>
</ul>
</details>
<br />

Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.2</h2>
<h2>What's Changed</h2>
<p>This update bumps the Scorecard version to the v5.2.1 release. For a
complete list of changes, please refer to the Scorecard <a
href="https://github.com/ossf/scorecard/releases/tag/v5.2.0">v5.2.0</a>
and <a
href="https://github.com/ossf/scorecard/releases/tag/v5.2.1">v5.2.1</a>
release notes.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.4.1...v2.4.2">https://github.com/ossf/scorecard-action/compare/v2.4.1...v2.4.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ossf/scorecard-action/commit/05b42c624433fc40578a4040d5cf5e36ddca8cde"><code>05b42c6</code></a>
:seedling: bump docker to ghcr v2.4.2 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/b225da6b2b97811a123bb34532642f3ad6a4f011"><code>b225da6</code></a>
Bump github.com/ossf/scorecard/v5 from v5.2.0 to v5.2.1 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1550">#1550</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/9399f6f42496e38fbb8dbcf85e17223226a5dafe"><code>9399f6f</code></a>
:seedling: Bump the docker-images group across 1 directory with 2
updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1">#1</a>...</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/e1daa8c5c7ed469dbb0167e261ed1c9fa673a9ae"><code>e1daa8c</code></a>
:seedling: Bump the github-actions group across 1 directory with 5
updates (#...</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/9fe6511b9b36af3b03200e49cf8fb09d261b5402"><code>9fe6511</code></a>
:seedling: Bump golang.org/x/net from 0.39.0 to 0.40.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1542">#1542</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/25b9cd9cd11610dcac11e59afed9910714b12129"><code>25b9cd9</code></a>
:seedling: Bump github.com/ossf/scorecard/v5 from v5.1.1 to v5.2.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1547">#1547</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/18cc9b81307fc5ab3c2cd7092955f06dcfdf8c42"><code>18cc9b8</code></a>
:seedling: Bump golang.org/x/net from 0.38.0 to 0.39.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1536">#1536</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/db7814227b097a902957aa24d989c6e473613a8e"><code>db78142</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1538">#1538</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/de386ed459e2f85111697f50fe076d0ea617a32f"><code>de386ed</code></a>
:seedling: Bump golang from 1.24.1 to 1.24.2 in the docker-images group
(<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1534">#1534</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/5b7cedba4eccfb66a6277e40cbe18d1d559ecc00"><code>5b7cedb</code></a>
:seedling: Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1537">#1537</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...05b42c624433fc40578a4040d5cf5e36ddca8cde">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 3fe1615..de3cf3b 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/autobuild@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 4b189dc..e2b3866 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
+        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
         with:
           results_file: results.sarif
           results_format: sarif
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         with:
           sarif_file: results.sarif

From c0f11c7b95a3b81f59d07e1c277f9202a64707f6 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Tue, 29 Jul 2025 09:48:45 -0700
Subject: [PATCH 142/176] Upgrade trunk (#250)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- renovate 41.43.0 → 41.43.2
- ruff 0.12.4 → 0.12.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index c128012..16e8b07 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,9 +38,9 @@ lint:
     - prettier@3.6.2
     - prisma@6.12.0
     - pylint@3.3.7
-    - renovate@41.43.0
+    - renovate@41.43.2
     - rubocop@1.39.0
-    - ruff@0.12.4
+    - ruff@0.12.5
     - rustfmt@1.68.2
     - semgrep@1.130.0
     - shellcheck@0.10.0

From c97f2d36571ddefac688defba07bcacb95fc00b1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 4 Aug 2025 12:52:13 -0400
Subject: [PATCH 143/176] Bump github/codeql-action from 3.29.4 to 3.29.5 in
 the dependencies group (#252)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.4 to 3.29.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.5</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.5/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<ul>
<li>Fix bug in PR analysis where user-provided <code>include</code>
query filter fails to exclude non-included queries. <a
href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li>
<li>Update default CodeQL bundle version to 2.22.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li>
</ul>
<h2>3.29.0 - 11 Jun 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2925">#2925</a></li>
<li>Bump minimum CodeQL bundle version to 2.16.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2912">#2912</a></li>
</ul>
<h2>3.28.21 - 28 July 2025</h2>
<p>No user facing changes.</p>
<h2>3.28.20 - 21 July 2025</h2>
<ul>
<li>Remove support for combining SARIF files from a single upload for
GHES 3.18, see <a
href="https://github.blog/changelog/2024-05-06-code-scanning-will-stop-combining-runs-from-a-single-upload/">the
changelog post</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/2959">#2959</a></li>
</ul>
<h2>3.28.19 - 03 Jun 2025</h2>
<ul>
<li>The CodeQL Action no longer includes its own copy of the extractor
for the <code>actions</code> language, which is currently in public
preview.
The <code>actions</code> extractor has been included in the CodeQL CLI
since v2.20.6. If your workflow has enabled the <code>actions</code>
language <em>and</em> you have pinned
your <code>tools:</code> property to a specific version of the CodeQL
CLI earlier than v2.20.6, you will need to update to at least CodeQL
v2.20.6 or disable
<code>actions</code> analysis.</li>
<li>Update default CodeQL bundle version to 2.21.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2910">#2910</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/51f77329afa6477de8c49fc9c7046c15b9a4e79d"><code>51f7732</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2997">#2997</a>
from github/update-v3.29.5-80a09d7b0</li>
<li><a
href="https://github.com/github/codeql-action/commit/8e90243ddbe0de3f12f4fa361675387b7f94c48d"><code>8e90243</code></a>
Update changelog for v3.29.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/80a09d7b0b5468297f127c81b43cb7335eed0f30"><code>80a09d7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2996">#2996</a>
from github/dependabot/npm_and_yarn/npm-240ab9fad0</li>
<li><a
href="https://github.com/github/codeql-action/commit/8388115dc8d6af25bf915cc8455a7d6a77253970"><code>8388115</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2994">#2994</a>
from github/mergeback/changelog/v3.28.21</li>
<li><a
href="https://github.com/github/codeql-action/commit/401ecaf503b1a19fc0fbd253cc5afe7759870068"><code>401ecaf</code></a>
Merge branch 'main' into mergeback/changelog/v3.28.21</li>
<li><a
href="https://github.com/github/codeql-action/commit/ab5c0c5fa56442a68c2d51b194ccc93faaaaa639"><code>ab5c0c5</code></a>
Merge branch 'main' into dependabot/npm_and_yarn/npm-240ab9fad0</li>
<li><a
href="https://github.com/github/codeql-action/commit/cd264d4dcdc5ee89d8590821e29c66a1bdcaa968"><code>cd264d4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2986">#2986</a>
from github/update-bundle/codeql-bundle-v2.22.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/4599055b1e273f63344615ade2c46c852c6d5c63"><code>4599055</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.22.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/fd7ad511e6bd5985ebbc84944e0e173d39a968b8"><code>fd7ad51</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2971">#2971</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/ac0c9bfe1e34d6a76860325c1b4abe8208ce98a6"><code>ac0c9bf</code></a>
Merge branch 'main' into
update-supported-enterprise-server-versions</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/4e828ff8d448a8a6e532957b1811f387a63867e8...51f77329afa6477de8c49fc9c7046c15b9a4e79d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.4&new-version=3.29.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index de3cf3b..2409653 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index e2b3866..dc4bae9 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         with:
           sarif_file: results.sarif

From 6c02d3cc0dd2a746a9412ae9d2915d9056b493a7 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 4 Aug 2025 13:03:20 -0400
Subject: [PATCH 144/176] Upgrade trunk (#251)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- cfnlint 1.38.0 → 1.38.1
- checkov 3.2.454 → 3.2.457
- mypy 1.17.0 → 1.17.1
- prisma 6.12.0 → 6.13.0
- renovate 41.43.2 → 41.46.8
- ruff 0.12.5 → 0.12.7
- semgrep 1.130.0 → 1.131.0
- stylelint 16.22.0 → 16.23.0

1 tool was upgraded:

- gh 2.76.1 → 2.76.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 16e8b07..196cca9 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.38.0
-    - checkov@3.2.454
+    - cfnlint@1.38.1
+    - checkov@3.2.457
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -30,24 +30,24 @@ lint:
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
-    - mypy@1.17.0
+    - mypy@1.17.1
     - nancy@1.0.48
     - osv-scanner@2.0.3
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.12.0
+    - prisma@6.13.0
     - pylint@3.3.7
-    - renovate@41.43.2
+    - renovate@41.46.8
     - rubocop@1.39.0
-    - ruff@0.12.5
+    - ruff@0.12.7
     - rustfmt@1.68.2
-    - semgrep@1.130.0
+    - semgrep@1.131.0
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
     - sql-formatter@15.6.6
-    - stylelint@16.22.0:
+    - stylelint@16.23.0:
         packages:
           - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.76.1
+    - gh@2.76.2
     - grpcui@1.4.3
     - gt@1.6.7
     - trunk-analytics-cli@0.10.5

From ce1b20b8b4a9970d0b092446fa086b46c9a44309 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 8 Aug 2025 11:25:16 -0400
Subject: [PATCH 145/176] Upgrade trunk (#253)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- cfnlint 1.38.1 → 1.38.2
- checkov 3.2.457 → 3.2.458
- renovate 41.46.8 → 41.56.0
- trufflehog 3.90.2 → 3.90.3

1 tool was upgraded:

- trunk-analytics-cli 0.10.5 → 0.10.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 196cca9..dcae828 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.38.1
-    - checkov@3.2.457
+    - cfnlint@1.38.2
+    - checkov@3.2.458
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.6.2
     - prisma@6.13.0
     - pylint@3.3.7
-    - renovate@41.46.8
+    - renovate@41.56.0
     - rubocop@1.39.0
     - ruff@0.12.7
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.2
+    - trufflehog@3.90.3
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -110,4 +110,4 @@ tools:
     - gh@2.76.2
     - grpcui@1.4.3
     - gt@1.6.7
-    - trunk-analytics-cli@0.10.5
+    - trunk-analytics-cli@0.10.6

From 8b1192e4345acf8e8677eb9383c00ab70cef03f4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 10 Aug 2025 21:57:41 -0400
Subject: [PATCH 146/176] Bump github/codeql-action from 3.29.7 to 3.29.8 in
 the dependencies group (#254)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.7 to 3.29.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.8</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.8/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<ul>
<li>Fix bug in PR analysis where user-provided <code>include</code>
query filter fails to exclude non-included queries. <a
href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li>
<li>Update default CodeQL bundle version to 2.22.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li>
</ul>
<h2>3.29.0 - 11 Jun 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2925">#2925</a></li>
<li>Bump minimum CodeQL bundle version to 2.16.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2912">#2912</a></li>
</ul>
<h2>3.28.21 - 28 July 2025</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/76621b61decf072c1cee8dd1ce2d2a82d33c17ed"><code>76621b6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3019">#3019</a>
from github/update-v3.29.8-679a40d33</li>
<li><a
href="https://github.com/github/codeql-action/commit/29ac3cefbb645d41622f6f9baa1415e06d73cf06"><code>29ac3ce</code></a>
Add release notes for 3.29.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/737cfdebe687c6e720fb99761f23d89751c3b93a"><code>737cfde</code></a>
Update changelog for v3.29.8</li>
<li><a
href="https://github.com/github/codeql-action/commit/679a40d337fedd9b7318253dd72bfe7dc6d1886c"><code>679a40d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3014">#3014</a>
from github/henrymercer/rebuild-dispatch</li>
<li><a
href="https://github.com/github/codeql-action/commit/6fe50b283a3d2e5533299f72d99216cd8815500f"><code>6fe50b2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3015">#3015</a>
from github/henrymercer/language-autodetection-worka...</li>
<li><a
href="https://github.com/github/codeql-action/commit/6bc91d64f66d435200c8ba85c64878c3cbfad33b"><code>6bc91d6</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b4fedca4f3428195d7ba1ca7c7404f9ea472911"><code>6b4fedc</code></a>
Bump Action patch version</li>
<li><a
href="https://github.com/github/codeql-action/commit/5794ffcb4ab0e87e4b8a8446ef048488303db295"><code>5794ffc</code></a>
Fix auto-detection of extractors that aren't languages</li>
<li><a
href="https://github.com/github/codeql-action/commit/bd62bf449cd8695f818546752cc8157693e1716c"><code>bd62bf4</code></a>
Finish in-progress merges</li>
<li><a
href="https://github.com/github/codeql-action/commit/2afb4e6f3c84ec0534284f2b47ae8206dcb401bf"><code>2afb4e6</code></a>
Avoid specifying branch unnecessarily</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/51f77329afa6477de8c49fc9c7046c15b9a4e79d...76621b61decf072c1cee8dd1ce2d2a82d33c17ed">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.7&new-version=3.29.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 2409653..c73957d 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/autobuild@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/analyze@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index dc4bae9..bdb0fe7 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/upload-sarif@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
         with:
           sarif_file: results.sarif

From c6ca5b3f812238d35600de356700d0993480ed65 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 11 Aug 2025 10:44:57 -0400
Subject: [PATCH 147/176] Upgrade trunk (#255)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- renovate 41.56.0 → 41.59.0
- stylelint 16.23.0 → 16.23.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index dcae828..6a9ec41 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,7 +38,7 @@ lint:
     - prettier@3.6.2
     - prisma@6.13.0
     - pylint@3.3.7
-    - renovate@41.56.0
+    - renovate@41.59.0
     - rubocop@1.39.0
     - ruff@0.12.7
     - rustfmt@1.68.2
@@ -47,7 +47,7 @@ lint:
     - shfmt@3.6.0
     - sort-package-json@3.4.0
     - sql-formatter@15.6.6
-    - stylelint@16.23.0:
+    - stylelint@16.23.1:
         packages:
           - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0

From 9f8ab8d11db3815171ce03d9a9b512adc1e24a9e Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 15 Aug 2025 10:14:49 -0400
Subject: [PATCH 148/176] Upgrade trunk (#256)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- cfnlint 1.38.2 → 1.38.3
- checkov 3.2.458 → 3.2.461
- prisma 6.13.0 → 6.14.0
- pylint 3.3.7 → 3.3.8
- renovate 41.59.0 → 41.71.1
- trufflehog 3.90.3 → 3.90.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 6a9ec41..cb19458 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.38.2
-    - checkov@3.2.458
+    - cfnlint@1.38.3
+    - checkov@3.2.461
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,9 +36,9 @@ lint:
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.13.0
-    - pylint@3.3.7
-    - renovate@41.59.0
+    - prisma@6.14.0
+    - pylint@3.3.8
+    - renovate@41.71.1
     - rubocop@1.39.0
     - ruff@0.12.7
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.3
+    - trufflehog@3.90.4
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 

From bd321be12640f0d442b233524ca8972acddf2bf3 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 18 Aug 2025 10:13:14 -0400
Subject: [PATCH 149/176] Upgrade trunk (#258)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 41.71.1 → 41.74.0
- semgrep 1.131.0 → 1.132.1
- trufflehog 3.90.4 → 3.90.5

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index cb19458..7862f67 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,11 +38,11 @@ lint:
     - prettier@3.6.2
     - prisma@6.14.0
     - pylint@3.3.8
-    - renovate@41.71.1
+    - renovate@41.74.0
     - rubocop@1.39.0
     - ruff@0.12.7
     - rustfmt@1.68.2
-    - semgrep@1.131.0
+    - semgrep@1.132.1
     - shellcheck@0.10.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.4
+    - trufflehog@3.90.5
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 

From 8b62643a9188af74910a9a91585d33bc4dbb1443 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 Aug 2025 10:16:06 -0400
Subject: [PATCH 150/176] Bump the dependencies group with 2 updates (#257)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the dependencies group with 2 updates:
[actions/checkout](https://github.com/actions/checkout) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 4 to 5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
</ul>
<h2>⚠️ Minimum Compatible Runner Version</h2>
<p><strong>v2.327.1</strong><br />
<a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></p>
<p>Make sure your runner is updated to this version or newer to use this
release.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
<li>Prepare release v4.3.0 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2237">actions/checkout#2237</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/motss"><code>@​motss</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li><a href="https://github.com/mouismail"><code>@​mouismail</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li><a href="https://github.com/benwells"><code>@​benwells</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v4.3.0">https://github.com/actions/checkout/compare/v4...v4.3.0</a></p>
<h2>v4.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
<h2>v4.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a>
Prepare v5.0.0 release (<a
href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/9f265659d3bb64ab1440b03b12f4d47a24320917"><code>9f26565</code></a>
Update actions checkout to use node 24 (<a
href="https://redirect.github.com/actions/checkout/issues/2226">#2226</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 3.29.8 to 3.29.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.9</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.9/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<ul>
<li>Fix bug in PR analysis where user-provided <code>include</code>
query filter fails to exclude non-included queries. <a
href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li>
<li>Update default CodeQL bundle version to 2.22.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li>
</ul>
<h2>3.29.0 - 11 Jun 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2925">#2925</a></li>
<li>Bump minimum CodeQL bundle version to 2.16.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2912">#2912</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/df559355d593797519d70b90fc8edd5db049e7a2"><code>df55935</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3026">#3026</a>
from github/update-v3.29.9-cc722e476</li>
<li><a
href="https://github.com/github/codeql-action/commit/53f255b421827a59779971bf544a2002a3d1871f"><code>53f255b</code></a>
Update changelog for v3.29.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/cc722e476f9cba97a940df29dd8b75eac4dd5292"><code>cc722e4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3023">#3023</a>
from github/redsun82/rust-test</li>
<li><a
href="https://github.com/github/codeql-action/commit/a4cd8fd0364554c5cbfe9b85747cd6ef9aee1d38"><code>a4cd8fd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3024">#3024</a>
from github/dependabot/npm_and_yarn/npm-3a4f9bf414</li>
<li><a
href="https://github.com/github/codeql-action/commit/542b274f93eb63e741025a278cea45e3d45ae6ae"><code>542b274</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/1a376ca348f7009ef1d5708e2c7dfd1cdaa5ac8c"><code>1a376ca</code></a>
Bump the npm group with 6 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/9f966bbbf5900c1bddc63d6ca07dc19f2c2e0599"><code>9f966bb</code></a>
Merge branch 'main' into redsun82/rust-test</li>
<li><a
href="https://github.com/github/codeql-action/commit/c6dcdfa33a7454bb54083cae422eb0d285ad74bc"><code>c6dcdfa</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2993">#2993</a>
from github/cklin/overlay-pack-check</li>
<li><a
href="https://github.com/github/codeql-action/commit/821d3bd162d1c1ed42f14b445cc5fe7deb20689a"><code>821d3bd</code></a>
Merge branch 'main' into cklin/overlay-pack-check</li>
<li><a
href="https://github.com/github/codeql-action/commit/bf1dd6901d5ef57875343b8fcc347a8a1c39be60"><code>bf1dd69</code></a>
Move comments up in <code>rust.yml</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/76621b61decf072c1cee8dd1ce2d2a82d33c17ed...df559355d593797519d70b90fc8edd5db049e7a2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/code_quality.yaml  | 2 +-
 .github/workflows/codeql.yaml        | 8 ++++----
 .github/workflows/scorecard.yml      | 4 ++--
 .github/workflows/upgrade_trunk.yaml | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/code_quality.yaml b/.github/workflows/code_quality.yaml
index b55524d..9b43605 100644
--- a/.github/workflows/code_quality.yaml
+++ b/.github/workflows/code_quality.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Trunk Code Quality
         uses: trunk-io/trunk-action@v1
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index c73957d..e47aaf7 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -34,11 +34,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.1.1
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index bdb0fe7..278d2e3 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.1.1
         with:
           persist-credentials: false
 
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/upgrade_trunk.yaml b/.github/workflows/upgrade_trunk.yaml
index b83bc06..a166234 100644
--- a/.github/workflows/upgrade_trunk.yaml
+++ b/.github/workflows/upgrade_trunk.yaml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write # For trunk to create PRs
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Create App Token for TrunkBuild App (Internal)
         uses: tibdex/github-app-token@v2

From 5f941e2cf88b7a3bf29bf30617490d8310c83767 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 22 Aug 2025 10:18:05 -0400
Subject: [PATCH 151/176] Upgrade trunk (#259)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

8 linters were upgraded:

- cfnlint 1.38.3 → 1.39.0
- checkov 3.2.461 → 3.2.464
- nancy 1.0.48 → 1.0.51
- osv-scanner 2.0.3 → 2.2.1
- renovate 41.74.0 → 41.82.1
- ruff 0.12.7 → 0.12.9
- shellcheck 0.10.0 → 0.11.0
- taplo 0.9.3 → 0.10.0

2 tools were upgraded:

- gh 2.76.2 → 2.78.0
- gt 1.6.7 → 1.6.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 7862f67..b8930fd 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.38.3
-    - checkov@3.2.461
+    - cfnlint@1.39.0
+    - checkov@3.2.464
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -31,19 +31,19 @@ lint:
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
     - mypy@1.17.1
-    - nancy@1.0.48
-    - osv-scanner@2.0.3
+    - nancy@1.0.51
+    - osv-scanner@2.2.1
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
     - prisma@6.14.0
     - pylint@3.3.8
-    - renovate@41.74.0
+    - renovate@41.82.1
     - rubocop@1.39.0
-    - ruff@0.12.7
+    - ruff@0.12.9
     - rustfmt@1.68.2
     - semgrep@1.132.1
-    - shellcheck@0.10.0
+    - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
     - sql-formatter@15.6.6
@@ -52,7 +52,7 @@ lint:
           - stylelint-config-standard-scss@15.0.1
           - stylelint-config-clean-order@7.0.0
     - svgo@4.0.0
-    - taplo@0.9.3
+    - taplo@0.10.0
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.76.2
+    - gh@2.78.0
     - grpcui@1.4.3
-    - gt@1.6.7
+    - gt@1.6.8
     - trunk-analytics-cli@0.10.6

From 03e25c2509d6e018d25906abf9bf58c1ceb1d5a5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 24 Aug 2025 16:10:26 -0400
Subject: [PATCH 152/176] Bump github/codeql-action from 3.29.9 to 3.29.11 in
 the dependencies group (#260)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.9 to 3.29.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.29.11</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.29.10</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.29.10/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.2 - 30 Jun 2025</h2>
<ul>
<li>Experimental: When the <code>quality-queries</code> input for the
<code>init</code> action is provided with an argument, separate
<code>.quality.sarif</code> files are produced and uploaded for each
language with the results of the specified queries. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li>
</ul>
<h2>3.29.1 - 27 Jun 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/3c3833e0f8c1c83d449a7478aa59c036a9165498"><code>3c3833e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3052">#3052</a>
from github/update-v3.29.11-14148a433</li>
<li><a
href="https://github.com/github/codeql-action/commit/8c4bfbd99ba6ef652eca12461ad7618142e00679"><code>8c4bfbd</code></a>
Update changelog for v3.29.11</li>
<li><a
href="https://github.com/github/codeql-action/commit/14148a433d789d9b6c7dadb56d8e3f8ad1e59605"><code>14148a4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3044">#3044</a>
from github/update-bundle/codeql-bundle-v2.22.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/71b2cb38a1e682cb9b2453a5f1400eef870a37df"><code>71b2cb3</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/2bf78254cceec27aab20b1623ba68c63c6eb85c6"><code>2bf7825</code></a>
Update default bundle to codeql-bundle-v2.22.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/db69a5182d331d562e511302ae3c9aafd5fada6c"><code>db69a51</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3049">#3049</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/a68d47bfa574c69f3de7d6484cf28a9c55ff7287"><code>a68d47b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3050">#3050</a>
from github/henrymercer/init-not-called-config-error</li>
<li><a
href="https://github.com/github/codeql-action/commit/e496ff959372e828f30b1518fd22cb76170cf5db"><code>e496ff9</code></a>
Make &quot;init not called&quot; a configuration error</li>
<li><a
href="https://github.com/github/codeql-action/commit/fd2ea72d34cdf8157d85d93decf87671705166a3"><code>fd2ea72</code></a>
Update supported GitHub Enterprise Server versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/6dee5bc9c165ca206a70f4e3d18271971cf6ff26"><code>6dee5bc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3045">#3045</a>
from github/dependabot/npm_and_yarn/npm-5b4171dd16</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/df559355d593797519d70b90fc8edd5db049e7a2...3c3833e0f8c1c83d449a7478aa59c036a9165498">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.9&new-version=3.29.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index e47aaf7..f0a4ab2 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/autobuild@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 278d2e3..73d0a22 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           sarif_file: results.sarif

From 5dea4db96300c57083267dc12f4837bdd0813e47 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 25 Aug 2025 10:40:30 -0400
Subject: [PATCH 153/176] Upgrade trunk (#261)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

2 linters were upgraded:

- renovate 41.82.1 → 41.82.4
- ruff 0.12.9 → 0.12.10

1 tool was upgraded:

- trunk-analytics-cli 0.10.6 → 0.10.7

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b8930fd..c07e5d2 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,9 +38,9 @@ lint:
     - prettier@3.6.2
     - prisma@6.14.0
     - pylint@3.3.8
-    - renovate@41.82.1
+    - renovate@41.82.4
     - rubocop@1.39.0
-    - ruff@0.12.9
+    - ruff@0.12.10
     - rustfmt@1.68.2
     - semgrep@1.132.1
     - shellcheck@0.11.0
@@ -110,4 +110,4 @@ tools:
     - gh@2.78.0
     - grpcui@1.4.3
     - gt@1.6.8
-    - trunk-analytics-cli@0.10.6
+    - trunk-analytics-cli@0.10.7

From 1d9dcd936eb3111bb3dfaa4cfe12c490c7c58f0c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Sun, 7 Sep 2025 23:00:49 -0400
Subject: [PATCH 154/176] Upgrade trunk (#262)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.39.0 → 1.39.1
- checkov 3.2.464 → 3.2.469
- hadolint 2.12.1-beta → 2.13.1
- osv-scanner 2.2.1 → 2.2.2
- prisma 6.14.0 → 6.15.0
- renovate 41.82.4 → 41.96.1
- ruff 0.12.10 → 0.12.11
- semgrep 1.132.1 → 1.135.0
- sql-formatter 15.6.6 → 15.6.7

1 tool was upgraded:

- trunk-analytics-cli 0.10.7 → 0.10.9

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index c07e5d2..bc9fb3c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.1.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.39.0
-    - checkov@3.2.464
+    - cfnlint@1.39.1
+    - checkov@3.2.469
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -26,27 +26,27 @@ lint:
     - git-diff-check
     - gofmt@1.20.4
     - golangci-lint@1.64.8
-    - hadolint@2.12.1-beta
+    - hadolint@2.13.1
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
     - mypy@1.17.1
     - nancy@1.0.51
-    - osv-scanner@2.2.1
+    - osv-scanner@2.2.2
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.14.0
+    - prisma@6.15.0
     - pylint@3.3.8
-    - renovate@41.82.4
+    - renovate@41.96.1
     - rubocop@1.39.0
-    - ruff@0.12.10
+    - ruff@0.12.11
     - rustfmt@1.68.2
-    - semgrep@1.132.1
+    - semgrep@1.135.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
-    - sql-formatter@15.6.6
+    - sql-formatter@15.6.7
     - stylelint@16.23.1:
         packages:
           - stylelint-config-standard-scss@15.0.1
@@ -110,4 +110,4 @@ tools:
     - gh@2.78.0
     - grpcui@1.4.3
     - gt@1.6.8
-    - trunk-analytics-cli@0.10.7
+    - trunk-analytics-cli@0.10.9

From f8e0c69ea2918800dfdfd9767299205cd69f230a Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 8 Sep 2025 09:06:59 -0400
Subject: [PATCH 155/176] Upgrade trunk (#264)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- renovate 41.96.1 → 41.97.5
- ruff 0.12.11 → 0.12.12
- sql-formatter 15.6.7 → 15.6.8
- trufflehog 3.90.5 → 3.90.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index bc9fb3c..437782d 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,15 +38,15 @@ lint:
     - prettier@3.6.2
     - prisma@6.15.0
     - pylint@3.3.8
-    - renovate@41.96.1
+    - renovate@41.97.5
     - rubocop@1.39.0
-    - ruff@0.12.11
+    - ruff@0.12.12
     - rustfmt@1.68.2
     - semgrep@1.135.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
-    - sql-formatter@15.6.7
+    - sql-formatter@15.6.8
     - stylelint@16.23.1:
         packages:
           - stylelint-config-standard-scss@15.0.1
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.5
+    - trufflehog@3.90.6
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 

From 5f11c2513d4ae045e091f32c78de57026d3a4ee8 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 12 Sep 2025 12:57:13 -0400
Subject: [PATCH 156/176] Upgrade trunk (#265)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- checkov 3.2.469 → 3.2.470
- prisma 6.15.0 → 6.16.0
- renovate 41.97.5 → 41.99.11
- ruff 0.12.12 → 0.13.0
- semgrep 1.135.0 → 1.136.0
- sql-formatter 15.6.8 → 15.6.9
- stylelint 16.23.1 → 16.24.0
  - stylelint-config-standard-scss 15.0.1 → 16.0.0

2 tools were upgraded:

- gh 2.78.0 → 2.79.0
- trunk-analytics-cli 0.10.9 → 0.10.10

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 437782d..3e5abe5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.1
     - cfnlint@1.39.1
-    - checkov@3.2.469
+    - checkov@3.2.470
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,20 +36,20 @@ lint:
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.15.0
+    - prisma@6.16.0
     - pylint@3.3.8
-    - renovate@41.97.5
+    - renovate@41.99.11
     - rubocop@1.39.0
-    - ruff@0.12.12
+    - ruff@0.13.0
     - rustfmt@1.68.2
-    - semgrep@1.135.0
+    - semgrep@1.136.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
-    - sql-formatter@15.6.8
-    - stylelint@16.23.1:
+    - sql-formatter@15.6.9
+    - stylelint@16.24.0:
         packages:
-          - stylelint-config-standard-scss@15.0.1
+          - stylelint-config-standard-scss@16.0.0
           - stylelint-config-clean-order@7.0.0
     - svgo@4.0.0
     - taplo@0.10.0
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.78.0
+    - gh@2.79.0
     - grpcui@1.4.3
     - gt@1.6.8
-    - trunk-analytics-cli@0.10.9
+    - trunk-analytics-cli@0.10.10

From 5ac8e5c64c21a97390404a14f05445e96d45697b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 14 Sep 2025 16:14:33 -0400
Subject: [PATCH 157/176] Bump github/codeql-action from 3.29.11 to 3.30.1 in
 the dependencies group (#263)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.11 to 3.30.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.30.1</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.1/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.30.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.0/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<p>This release rolls back 3.29.6 to address issues with language
autodetection. It is identical to 3.29.5.</p>
<h2>3.29.6 - 07 Aug 2025</h2>
<ul>
<li>The <code>cleanup-level</code> input to the <code>analyze</code>
Action is now deprecated. The CodeQL Action has written a limited amount
of intermediate results to the database since version 2.2.5, and now
automatically manages cleanup. <a
href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li>
<li>Update default CodeQL bundle version to 2.22.3. <a
href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li>
</ul>
<h2>3.29.5 - 29 Jul 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li>
</ul>
<h2>3.29.4 - 23 Jul 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.3 - 21 Jul 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/f1f6e5f6af878fb37288ce1c627459e94dbf7d01"><code>f1f6e5f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3081">#3081</a>
from github/update-v3.30.1-2d2f57ed3</li>
<li><a
href="https://github.com/github/codeql-action/commit/5dd2164a3d69fc450bc99ff83e46354092852955"><code>5dd2164</code></a>
Update changelog for v3.30.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/2d2f57ed3a96a5c55ea34a02d2787de24943ebea"><code>2d2f57e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3079">#3079</a>
from github/mbg/proxy/accept-git-source</li>
<li><a
href="https://github.com/github/codeql-action/commit/b364f99409ed3cd283e99b317d8e29cd062f4c06"><code>b364f99</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3077">#3077</a>
from github/update-bundle/codeql-bundle-v2.23.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/5b8860ac11161b727664576c3f8b9924d6f2038e"><code>5b8860a</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.23.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/8fe8b2420215df90da3cc29b24f7809dfc7d5373"><code>8fe8b24</code></a>
Add <code>git_source</code> as supported registry type for Go</li>
<li><a
href="https://github.com/github/codeql-action/commit/6242bcbf1b24d310505ba9bd8be374eb1433557a"><code>6242bcb</code></a>
Allow multiple registry types in
<code>LANGUAGE_TO_REGISTRY_TYPE</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/dfb741d27f8d018f727c8caf9033781133fdf550"><code>dfb741d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3075">#3075</a>
from github/mbg/remove-augmentation-properties</li>
<li><a
href="https://github.com/github/codeql-action/commit/920bba1769f279c4373d93131c769e74bc258100"><code>920bba1</code></a>
Add unit tests for <code>createInitWithConfigStatusReport</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/37ddb03e0d7f9f4f374a33bd14142694e5c89b0b"><code>37ddb03</code></a>
Add <code>createInitWithConfigStatusReport</code> function</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/3c3833e0f8c1c83d449a7478aa59c036a9165498...f1f6e5f6af878fb37288ce1c627459e94dbf7d01">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.11&new-version=3.30.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index f0a4ab2..706f0f8 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 73d0a22..b71cf2e 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
         with:
           sarif_file: results.sarif

From b9cbe8e5b60884f1959ffe2d5ff6545872ffb687 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 15 Sep 2025 10:04:34 -0400
Subject: [PATCH 158/176] Upgrade trunk (#266)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- mypy 1.17.1 → 1.18.1
- prisma 6.16.0 → 6.16.1
- renovate 41.99.11 → 41.107.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 3e5abe5..03538bf 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -30,15 +30,15 @@ lint:
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
-    - mypy@1.17.1
+    - mypy@1.18.1
     - nancy@1.0.51
     - osv-scanner@2.2.2
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.16.0
+    - prisma@6.16.1
     - pylint@3.3.8
-    - renovate@41.99.11
+    - renovate@41.107.0
     - rubocop@1.39.0
     - ruff@0.13.0
     - rustfmt@1.68.2

From 7d84bfcd18bb6c7af2d5c99075501b080e3b21ec Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 19 Sep 2025 10:18:18 -0400
Subject: [PATCH 159/176] Upgrade trunk (#267)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- checkov 3.2.470 → 3.2.471
- prisma 6.16.1 → 6.16.2
- renovate 41.107.0 → 41.116.7

2 tools were upgraded:

- gt 1.6.8 → 1.7.0
- trunk-analytics-cli 0.10.10 → 0.10.11

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 03538bf..aaf015a 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -18,7 +18,7 @@ lint:
     - buf-lint@1.31.0!
     - buildifier@8.2.1
     - cfnlint@1.39.1
-    - checkov@3.2.470
+    - checkov@3.2.471
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,9 +36,9 @@ lint:
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.16.1
+    - prisma@6.16.2
     - pylint@3.3.8
-    - renovate@41.107.0
+    - renovate@41.116.7
     - rubocop@1.39.0
     - ruff@0.13.0
     - rustfmt@1.68.2
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.79.0
     - grpcui@1.4.3
-    - gt@1.6.8
-    - trunk-analytics-cli@0.10.10
+    - gt@1.7.0
+    - trunk-analytics-cli@0.10.11

From 5353d2e7e507b8718cca88fd42b18910e0791c3e Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 22 Sep 2025 10:04:34 -0400
Subject: [PATCH 160/176] Upgrade trunk (#268)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

6 linters were upgraded:

- black 25.1.0 → 25.9.0
- mypy 1.18.1 → 1.18.2
- renovate 41.116.7 → 41.118.1
- ruff 0.13.0 → 0.13.1
- semgrep 1.136.0 → 1.137.0
- trufflehog 3.90.6 → 3.90.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index aaf015a..973ef77 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -14,7 +14,7 @@ lint:
   enabled:
     - actionlint@1.7.7
     - bandit@1.8.6
-    - black@25.1.0
+    - black@25.9.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
     - cfnlint@1.39.1
@@ -30,7 +30,7 @@ lint:
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
-    - mypy@1.18.1
+    - mypy@1.18.2
     - nancy@1.0.51
     - osv-scanner@2.2.2
     - oxipng@9.1.5
@@ -38,11 +38,11 @@ lint:
     - prettier@3.6.2
     - prisma@6.16.2
     - pylint@3.3.8
-    - renovate@41.116.7
+    - renovate@41.118.1
     - rubocop@1.39.0
-    - ruff@0.13.0
+    - ruff@0.13.1
     - rustfmt@1.68.2
-    - semgrep@1.136.0
+    - semgrep@1.137.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.6
+    - trufflehog@3.90.8
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 

From c20828fe2a316327e7fba31204df79704fbc96b3 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 26 Sep 2025 10:12:23 -0400
Subject: [PATCH 161/176] Upgrade trunk (#269)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- hadolint 2.13.1 → 2.14.0
- nancy 1.0.51 → 1.0.52
- renovate 41.118.1 → 41.130.1
- semgrep 1.137.0 → 1.137.1

1 tool was upgraded:

- gh 2.79.0 → 2.80.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 973ef77..e80d73d 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -26,23 +26,23 @@ lint:
     - git-diff-check
     - gofmt@1.20.4
     - golangci-lint@1.64.8
-    - hadolint@2.13.1
+    - hadolint@2.14.0
     - isort@6.0.1
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
     - mypy@1.18.2
-    - nancy@1.0.51
+    - nancy@1.0.52
     - osv-scanner@2.2.2
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
     - prisma@6.16.2
     - pylint@3.3.8
-    - renovate@41.118.1
+    - renovate@41.130.1
     - rubocop@1.39.0
     - ruff@0.13.1
     - rustfmt@1.68.2
-    - semgrep@1.137.0
+    - semgrep@1.137.1
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.79.0
+    - gh@2.80.0
     - grpcui@1.4.3
     - gt@1.7.0
     - trunk-analytics-cli@0.10.11

From 78dc07fc791d8e6882d22587ecf4bab3d6b7ad66 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 29 Sep 2025 11:19:05 -0400
Subject: [PATCH 162/176] Bump github/codeql-action from 3.30.3 to 3.30.5 in
 the dependencies group (#270)

Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.30.3 to 3.30.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.30.5</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="https://redirect.github.com/github/codeql-action/pull/3160">#3160</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.5/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v3.30.4</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="https://redirect.github.com/github/codeql-action/pull/3099">#3099</a>
and <a
href="https://redirect.github.com/github/codeql-action/pull/3100">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="https://redirect.github.com/github/codeql-action/pull/3107">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="https://redirect.github.com/github/codeql-action/pull/3130">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="https://redirect.github.com/github/codeql-action/pull/3118">#3118</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.30.4/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="https://redirect.github.com/github/codeql-action/pull/3160">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="https://redirect.github.com/github/codeql-action/pull/3099">#3099</a>
and <a
href="https://redirect.github.com/github/codeql-action/pull/3100">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="https://redirect.github.com/github/codeql-action/pull/3107">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="https://redirect.github.com/github/codeql-action/pull/3130">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="https://redirect.github.com/github/codeql-action/pull/3118">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="https://redirect.github.com/github/codeql-action/pull/3084">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3064">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/3599b3baa15b485a2e49ef411a7a4bb2452e7f93"><code>3599b3b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3161">#3161</a>
from github/update-v3.30.5-0a67bd46a</li>
<li><a
href="https://github.com/github/codeql-action/commit/2ca0085e584affd600efbd3930bc90e48dbacb46"><code>2ca0085</code></a>
Update changelog for v3.30.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/0a67bd46a0f456ddad9e4b732137f519280275db"><code>0a67bd4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3160">#3160</a>
from github/mbg/fix/upload-sarif</li>
<li><a
href="https://github.com/github/codeql-action/commit/8e34f2f3bf0f3f0b192913b0e0f234372329699b"><code>8e34f2f</code></a>
Add changelog</li>
<li><a
href="https://github.com/github/codeql-action/commit/0b7fc5664842c1a6bb23c4ef64b85438afcb76c5"><code>0b7fc56</code></a>
Fix <code>upload-sarif</code> not uploading non-<code>.sarif</code>
files</li>
<li><a
href="https://github.com/github/codeql-action/commit/94a9b7a1101a1320dcadcbda5e7fd9a1e6abaaca"><code>94a9b7a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3155">#3155</a>
from github/mbg/node/no-install-in-actions</li>
<li><a
href="https://github.com/github/codeql-action/commit/a0ae9ba2026911d58db9df06e6b074d8ef6c24c9"><code>a0ae9ba</code></a>
Log what the script is doing</li>
<li><a
href="https://github.com/github/codeql-action/commit/b27a8ef21f72b5c541232d50400874a3f0a374b9"><code>b27a8ef</code></a>
Exit if running in an Actions workflow</li>
<li><a
href="https://github.com/github/codeql-action/commit/65925679a36e83b45b5f1673869dabf891669742"><code>6592567</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3139">#3139</a>
from github/henrymercer/fix-log-message</li>
<li><a
href="https://github.com/github/codeql-action/commit/fa64a7dee67e389b18445aa15d26426512d9ab97"><code>fa64a7d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3154">#3154</a>
from github/mbg/node/check-up-to-date-deps</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/192325c86100d080feab897ff886c34abd4c83a3...3599b3baa15b485a2e49ef411a7a4bb2452e7f93">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.30.3&new-version=3.30.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yaml   | 6 +++---
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 706f0f8..fe49e0d 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: javascript
@@ -46,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below).
       - name: Autobuild
-        uses: github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -60,4 +60,4 @@ jobs:
       #     make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b71cf2e..a70cf5f 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
         with:
           sarif_file: results.sarif

From fabc6c3bc615c2edc549042f73c0b3fa86b44008 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 29 Sep 2025 11:19:56 -0400
Subject: [PATCH 163/176] Upgrade trunk (#271)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 41.130.1 → 41.131.4
- ruff 0.13.1 → 0.13.2
- semgrep 1.137.1 → 1.138.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index e80d73d..fb3691c 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,11 +38,11 @@ lint:
     - prettier@3.6.2
     - prisma@6.16.2
     - pylint@3.3.8
-    - renovate@41.130.1
+    - renovate@41.131.4
     - rubocop@1.39.0
-    - ruff@0.13.1
+    - ruff@0.13.2
     - rustfmt@1.68.2
-    - semgrep@1.137.1
+    - semgrep@1.138.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0

From f99f9465518cfb00ecca226b10996cccc88ed12c Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 6 Oct 2025 09:33:06 -0400
Subject: [PATCH 164/176] Upgrade trunk (#272)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.39.1 → 1.40.0
- checkov 3.2.471 → 3.2.473
- isort 6.0.1 → 6.1.0
- osv-scanner 2.2.2 → 2.2.3
- prisma 6.16.2 → 6.16.3
- renovate 41.131.4 → 41.132.5
- ruff 0.13.2 → 0.13.3
- semgrep 1.138.0 → 1.139.0
- sql-formatter 15.6.9 → 15.6.10

2 tools were upgraded:

- gh 2.80.0 → 2.81.0
- trunk-analytics-cli 0.10.11 → 0.11.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index fb3691c..b6bc7b8 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.9.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.39.1
-    - checkov@3.2.471
+    - cfnlint@1.40.0
+    - checkov@3.2.473
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -27,26 +27,26 @@ lint:
     - gofmt@1.20.4
     - golangci-lint@1.64.8
     - hadolint@2.14.0
-    - isort@6.0.1
+    - isort@6.1.0
     - markdownlint@0.45.0
     - markdown-link-check@3.13.7
     - mypy@1.18.2
     - nancy@1.0.52
-    - osv-scanner@2.2.2
+    - osv-scanner@2.2.3
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.16.2
+    - prisma@6.16.3
     - pylint@3.3.8
-    - renovate@41.131.4
+    - renovate@41.132.5
     - rubocop@1.39.0
-    - ruff@0.13.2
+    - ruff@0.13.3
     - rustfmt@1.68.2
-    - semgrep@1.138.0
+    - semgrep@1.139.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
-    - sql-formatter@15.6.9
+    - sql-formatter@15.6.10
     - stylelint@16.24.0:
         packages:
           - stylelint-config-standard-scss@16.0.0
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.80.0
+    - gh@2.81.0
     - grpcui@1.4.3
     - gt@1.7.0
-    - trunk-analytics-cli@0.10.11
+    - trunk-analytics-cli@0.11.1

From 91a9d89667230ed31da364ad6208895a5cab3995 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 10 Oct 2025 10:22:22 -0400
Subject: [PATCH 165/176] Upgrade trunk (#274)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

7 linters were upgraded:

- cfnlint 1.40.0 → 1.40.1
- checkov 3.2.473 → 3.2.477
- prisma 6.16.3 → 6.17.0
- pylint 3.3.8 → 3.3.9
- renovate 41.132.5 → 41.143.2
- ruff 0.13.3 → 0.14.0
- stylelint 16.24.0 → 16.25.0

1 tool was upgraded:

- trunk-analytics-cli 0.11.1 → 0.11.2

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index b6bc7b8..e6cb9ef 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.9.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.40.0
-    - checkov@3.2.473
+    - cfnlint@1.40.1
+    - checkov@3.2.477
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -36,18 +36,18 @@ lint:
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.16.3
-    - pylint@3.3.8
-    - renovate@41.132.5
+    - prisma@6.17.0
+    - pylint@3.3.9
+    - renovate@41.143.2
     - rubocop@1.39.0
-    - ruff@0.13.3
+    - ruff@0.14.0
     - rustfmt@1.68.2
     - semgrep@1.139.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
     - sql-formatter@15.6.10
-    - stylelint@16.24.0:
+    - stylelint@16.25.0:
         packages:
           - stylelint-config-standard-scss@16.0.0
           - stylelint-config-clean-order@7.0.0
@@ -110,4 +110,4 @@ tools:
     - gh@2.81.0
     - grpcui@1.4.3
     - gt@1.7.0
-    - trunk-analytics-cli@0.11.1
+    - trunk-analytics-cli@0.11.2

From 2d8712ed4828346e2e4b914db214daeef43886aa Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 13 Oct 2025 19:12:22 -0400
Subject: [PATCH 166/176] Upgrade trunk (#275)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

1 linter was upgraded:

- renovate 41.143.2 → 41.144.1

1 tool was upgraded:

- gt 1.7.0 → 1.7.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index e6cb9ef..93f0202 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,7 +38,7 @@ lint:
     - prettier@3.6.2
     - prisma@6.17.0
     - pylint@3.3.9
-    - renovate@41.143.2
+    - renovate@41.144.1
     - rubocop@1.39.0
     - ruff@0.14.0
     - rustfmt@1.68.2
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.81.0
     - grpcui@1.4.3
-    - gt@1.7.0
+    - gt@1.7.1
     - trunk-analytics-cli@0.11.2

From 02495bc2f4d1b29e105eb5e6c052fc6f3cf5a154 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 17 Oct 2025 09:34:42 -0400
Subject: [PATCH 167/176] Upgrade trunk (#276)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- actionlint 1.7.7 → 1.7.8
- cfnlint 1.40.1 → 1.40.2
- checkov 3.2.477 → 3.2.484
- isort 6.1.0 → 7.0.0
- markdown-link-check 3.13.7 → 3.14.1
- prisma 6.17.0 → 6.17.1
- pylint 3.3.9 → 4.0.1
- renovate 41.144.1 → 41.149.2
- trufflehog 3.90.8 → 3.90.11

3 tools were upgraded:

- gh 2.81.0 → 2.82.0
- gt 1.7.1 → 1.7.2
- trunk-analytics-cli 0.11.2 → 0.11.4

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 93f0202..205bf52 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.7
+    - actionlint@1.7.8
     - bandit@1.8.6
     - black@25.9.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.40.1
-    - checkov@3.2.477
+    - cfnlint@1.40.2
+    - checkov@3.2.484
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -27,18 +27,18 @@ lint:
     - gofmt@1.20.4
     - golangci-lint@1.64.8
     - hadolint@2.14.0
-    - isort@6.1.0
+    - isort@7.0.0
     - markdownlint@0.45.0
-    - markdown-link-check@3.13.7
+    - markdown-link-check@3.14.1
     - mypy@1.18.2
     - nancy@1.0.52
     - osv-scanner@2.2.3
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.17.0
-    - pylint@3.3.9
-    - renovate@41.144.1
+    - prisma@6.17.1
+    - pylint@4.0.1
+    - renovate@41.149.2
     - rubocop@1.39.0
     - ruff@0.14.0
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.8
+    - trufflehog@3.90.11
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.81.0
+    - gh@2.82.0
     - grpcui@1.4.3
-    - gt@1.7.1
-    - trunk-analytics-cli@0.11.2
+    - gt@1.7.2
+    - trunk-analytics-cli@0.11.4

From e2334ecdb0523ba2387ea7abdd2920bc2160f5b2 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 10:19:32 -0400
Subject: [PATCH 168/176] Upgrade trunk (#277)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

3 linters were upgraded:

- renovate 41.149.2 → 41.151.1
- ruff 0.14.0 → 0.14.1
- semgrep 1.139.0 → 1.140.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 205bf52..2e78dcf 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -38,11 +38,11 @@ lint:
     - prettier@3.6.2
     - prisma@6.17.1
     - pylint@4.0.1
-    - renovate@41.149.2
+    - renovate@41.151.1
     - rubocop@1.39.0
-    - ruff@0.14.0
+    - ruff@0.14.1
     - rustfmt@1.68.2
-    - semgrep@1.139.0
+    - semgrep@1.140.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0

From 93c2fb96dff6767bfacfff1edd953b6b7832a298 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 3 Nov 2025 08:54:50 -0500
Subject: [PATCH 169/176] Upgrade trunk (#278)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

9 linters were upgraded:

- cfnlint 1.40.2 → 1.40.3
- checkov 3.2.484 → 3.2.489
- osv-scanner 2.2.3 → 2.2.4
- prisma 6.17.1 → 6.18.0
- pylint 4.0.1 → 4.0.2
- renovate 41.151.1 → 41.167.2
- ruff 0.14.1 → 0.14.3
- semgrep 1.140.0 → 1.142.0
- trufflehog 3.90.11 → 3.90.12

3 tools were upgraded:

- gh 2.82.0 → 2.82.1
- gt 1.7.2 → 1.7.5
- trunk-analytics-cli 0.11.4 → 0.11.6

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 2e78dcf..a148708 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -17,8 +17,8 @@ lint:
     - black@25.9.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.40.2
-    - checkov@3.2.484
+    - cfnlint@1.40.3
+    - checkov@3.2.489
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -32,17 +32,17 @@ lint:
     - markdown-link-check@3.14.1
     - mypy@1.18.2
     - nancy@1.0.52
-    - osv-scanner@2.2.3
+    - osv-scanner@2.2.4
     - oxipng@9.1.5
     - pragma-once
     - prettier@3.6.2
-    - prisma@6.17.1
-    - pylint@4.0.1
-    - renovate@41.151.1
+    - prisma@6.18.0
+    - pylint@4.0.2
+    - renovate@41.167.2
     - rubocop@1.39.0
-    - ruff@0.14.1
+    - ruff@0.14.3
     - rustfmt@1.68.2
-    - semgrep@1.140.0
+    - semgrep@1.142.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.4.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.1
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.11
+    - trufflehog@3.90.12
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.82.0
+    - gh@2.82.1
     - grpcui@1.4.3
-    - gt@1.7.2
-    - trunk-analytics-cli@0.11.4
+    - gt@1.7.5
+    - trunk-analytics-cli@0.11.6

From fdca3ba880a0545a81004349fc4d7e972e3bbc89 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 5 Dec 2025 10:14:50 -0500
Subject: [PATCH 170/176] Upgrade trunk (#280)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

20 linters were upgraded:

- actionlint 1.7.8 → 1.7.9
- bandit 1.8.6 → 1.9.2
- black 25.9.0 → 25.11.0
- cfnlint 1.40.3 → 1.42.0
- checkov 3.2.489 → 3.2.495
- golangci-lint 1.64.8 → 2.7.1
- markdown-link-check 3.14.1 → 3.14.2
- markdownlint 0.45.0 → 0.46.0
- mypy 1.18.2 → 1.19.0
- osv-scanner 2.2.4 → 2.3.0
- prettier 3.6.2 → 3.7.4
- prisma 6.18.0 → 7.1.0
- pylint 4.0.2 → 4.0.4
- renovate 41.167.2 → 42.37.1
- ruff 0.14.3 → 0.14.8
- semgrep 1.142.0 → 1.144.1
- sort-package-json 3.4.0 → 3.5.0
- stylelint 16.25.0 → 16.26.1
  - stylelint-config-clean-order 7.0.0 → 8.0.0
- terrascan 1.19.1 → 1.19.9
- trufflehog 3.90.12 → 3.91.2

3 tools were upgraded:

- gh 2.82.1 → 2.83.1
- gt 1.7.5 → 1.7.10
- trunk-analytics-cli 0.11.6 → 0.11.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 48 ++++++++++++++++++++++++------------------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index a148708..c2560ea 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,51 +12,51 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.8
-    - bandit@1.8.6
-    - black@25.9.0
+    - actionlint@1.7.9
+    - bandit@1.9.2
+    - black@25.11.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.40.3
-    - checkov@3.2.489
+    - cfnlint@1.42.0
+    - checkov@3.2.495
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@1.64.8
+    - golangci-lint@2.7.1
     - hadolint@2.14.0
     - isort@7.0.0
-    - markdownlint@0.45.0
-    - markdown-link-check@3.14.1
-    - mypy@1.18.2
+    - markdownlint@0.46.0
+    - markdown-link-check@3.14.2
+    - mypy@1.19.0
     - nancy@1.0.52
-    - osv-scanner@2.2.4
+    - osv-scanner@2.3.0
     - oxipng@9.1.5
     - pragma-once
-    - prettier@3.6.2
-    - prisma@6.18.0
-    - pylint@4.0.2
-    - renovate@41.167.2
+    - prettier@3.7.4
+    - prisma@7.1.0
+    - pylint@4.0.4
+    - renovate@42.37.1
     - rubocop@1.39.0
-    - ruff@0.14.3
+    - ruff@0.14.8
     - rustfmt@1.68.2
-    - semgrep@1.142.0
+    - semgrep@1.144.1
     - shellcheck@0.11.0
     - shfmt@3.6.0
-    - sort-package-json@3.4.0
+    - sort-package-json@3.5.0
     - sql-formatter@15.6.10
-    - stylelint@16.25.0:
+    - stylelint@16.26.1:
         packages:
           - stylelint-config-standard-scss@16.0.0
-          - stylelint-config-clean-order@7.0.0
+          - stylelint-config-clean-order@8.0.0
     - svgo@4.0.0
     - taplo@0.10.0
-    - terrascan@1.19.1
+    - terrascan@1.19.9
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.90.12
+    - trufflehog@3.91.2
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.82.1
+    - gh@2.83.1
     - grpcui@1.4.3
-    - gt@1.7.5
-    - trunk-analytics-cli@0.11.6
+    - gt@1.7.10
+    - trunk-analytics-cli@0.11.8

From f8543b1636734c1cbbf56de2cb72493f39b1b0cb Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 10:30:52 -0500
Subject: [PATCH 171/176] Upgrade trunk (#282)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

14 linters were upgraded:

- black 25.11.0 → 25.12.0
- cfnlint 1.42.0 → 1.43.1
- golangci-lint 2.7.1 → 2.7.2
- markdownlint 0.46.0 → 0.47.0
- mypy 1.19.0 → 1.19.1
- osv-scanner 2.3.0 → 2.3.1
- oxipng 9.1.5 → 10.0.0
- prisma 7.1.0 → 7.2.0
- renovate 42.37.1 → 42.64.1
- ruff 0.14.8 → 0.14.10
- semgrep 1.144.1 → 1.146.0
- sort-package-json 3.5.0 → 3.6.0
- sql-formatter 15.6.10 → 15.6.12
- trufflehog 3.91.2 → 3.92.3

3 tools were upgraded:

- gh 2.83.1 → 2.83.2
- gt 1.7.10 → 1.7.13
- trunk-analytics-cli 0.11.8 → 0.12.0

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index c2560ea..c9a9a4f 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -14,10 +14,10 @@ lint:
   enabled:
     - actionlint@1.7.9
     - bandit@1.9.2
-    - black@25.11.0
+    - black@25.12.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.42.0
+    - cfnlint@1.43.1
     - checkov@3.2.495
     - clang-format@17.0.1
     - clang-tidy@17.0.1
@@ -25,28 +25,28 @@ lint:
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@2.7.1
+    - golangci-lint@2.7.2
     - hadolint@2.14.0
     - isort@7.0.0
-    - markdownlint@0.46.0
+    - markdownlint@0.47.0
     - markdown-link-check@3.14.2
-    - mypy@1.19.0
+    - mypy@1.19.1
     - nancy@1.0.52
-    - osv-scanner@2.3.0
-    - oxipng@9.1.5
+    - osv-scanner@2.3.1
+    - oxipng@10.0.0
     - pragma-once
     - prettier@3.7.4
-    - prisma@7.1.0
+    - prisma@7.2.0
     - pylint@4.0.4
-    - renovate@42.37.1
+    - renovate@42.64.1
     - rubocop@1.39.0
-    - ruff@0.14.8
+    - ruff@0.14.10
     - rustfmt@1.68.2
-    - semgrep@1.144.1
+    - semgrep@1.146.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
-    - sort-package-json@3.5.0
-    - sql-formatter@15.6.10
+    - sort-package-json@3.6.0
+    - sql-formatter@15.6.12
     - stylelint@16.26.1:
         packages:
           - stylelint-config-standard-scss@16.0.0
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.9
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.91.2
+    - trufflehog@3.92.3
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk flakytests ${semver}
   enabled:
-    - gh@2.83.1
+    - gh@2.83.2
     - grpcui@1.4.3
-    - gt@1.7.10
-    - trunk-analytics-cli@0.11.8
+    - gt@1.7.13
+    - trunk-analytics-cli@0.12.0

From 637369f1ab233f72f09ae61b094551596d078e48 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Sun, 4 Jan 2026 22:13:18 -0500
Subject: [PATCH 172/176] Upgrade trunk (#283)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

4 linters were upgraded:

- actionlint 1.7.9 → 1.7.10
- checkov 3.2.495 → 3.2.497
- renovate 42.64.1 → 42.69.2
- trufflehog 3.92.3 → 3.92.4

2 tools were upgraded:

- gt 1.7.13 → 1.7.14
- trunk-analytics-cli 0.12.0 → 0.12.1

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index c9a9a4f..01633c8 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,13 +12,13 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.9
+    - actionlint@1.7.10
     - bandit@1.9.2
     - black@25.12.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
     - cfnlint@1.43.1
-    - checkov@3.2.495
+    - checkov@3.2.497
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -38,7 +38,7 @@ lint:
     - prettier@3.7.4
     - prisma@7.2.0
     - pylint@4.0.4
-    - renovate@42.64.1
+    - renovate@42.69.2
     - rubocop@1.39.0
     - ruff@0.14.10
     - rustfmt@1.68.2
@@ -56,7 +56,7 @@ lint:
     - terrascan@1.19.9
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.92.3
+    - trufflehog@3.92.4
     - trunk-toolbox@0.5.4
     - yamllint@1.37.1
 
@@ -109,5 +109,5 @@ tools:
   enabled:
     - gh@2.83.2
     - grpcui@1.4.3
-    - gt@1.7.13
-    - trunk-analytics-cli@0.12.0
+    - gt@1.7.14
+    - trunk-analytics-cli@0.12.1

From 52c55b2574b3496e074ccb88528a97cd3865d458 Mon Sep 17 00:00:00 2001
From: Eli Schleifer <1265982+EliSchleifer@users.noreply.github.com>
Date: Sat, 7 Mar 2026 12:29:13 -0800
Subject: [PATCH 173/176] Rev major versions of tools (#285)

---
 .trunk/trunk.yaml |  2 +-
 plugin.yaml       | 38 +++++++++++++++++++-------------------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index b1e5af6..da500b4 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -1,6 +1,6 @@
 version: 0.1
 cli:
-  version: 1.24.0
+  version: 1.25.0
 plugins:
   sources:
     - id: trunk
diff --git a/plugin.yaml b/plugin.yaml
index 01633c8..1d2e5d2 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -13,12 +13,12 @@ lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
     - actionlint@1.7.10
-    - bandit@1.9.2
-    - black@25.12.0
+    - bandit@1.9.4
+    - black@26.3.0
     - buf-lint@1.31.0!
     - buildifier@8.2.1
-    - cfnlint@1.43.1
-    - checkov@3.2.497
+    - cfnlint@1.46.0
+    - checkov@3.2.507
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
@@ -27,38 +27,38 @@ lint:
     - gofmt@1.20.4
     - golangci-lint@2.7.2
     - hadolint@2.14.0
-    - isort@7.0.0
-    - markdownlint@0.47.0
+    - isort@8.0.1
+    - markdownlint@0.48.0
     - markdown-link-check@3.14.2
     - mypy@1.19.1
     - nancy@1.0.52
     - osv-scanner@2.3.1
     - oxipng@10.0.0
     - pragma-once
-    - prettier@3.7.4
-    - prisma@7.2.0
-    - pylint@4.0.4
-    - renovate@42.69.2
+    - prettier@3.8.1
+    - prisma@7.4.2
+    - pylint@4.0.5
+    - renovate@43.59.2
     - rubocop@1.39.0
-    - ruff@0.14.10
+    - ruff@0.15.5
     - rustfmt@1.68.2
-    - semgrep@1.146.0
+    - semgrep@1.154.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
-    - sort-package-json@3.6.0
-    - sql-formatter@15.6.12
-    - stylelint@16.26.1:
+    - sort-package-json@3.6.1
+    - sql-formatter@15.7.2
+    - stylelint@17.4.0:
         packages:
-          - stylelint-config-standard-scss@16.0.0
-          - stylelint-config-clean-order@8.0.0
-    - svgo@4.0.0
+          - stylelint-config-standard-scss@17.0.0
+          - stylelint-config-clean-order@8.0.1
+    - svgo@4.0.1
     - taplo@0.10.0
     - terrascan@1.19.9
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
     - trufflehog@3.92.4
     - trunk-toolbox@0.5.4
-    - yamllint@1.37.1
+    - yamllint@1.38.0
 
   # Sourcing repos will have these configs available to applicable linters
   exported_configs:

From b1d1e46f23f9e00c31eb3a31793664364a5191c0 Mon Sep 17 00:00:00 2001
From: Eli Schleifer <1265982+EliSchleifer@users.noreply.github.com>
Date: Sat, 7 Mar 2026 13:02:11 -0800
Subject: [PATCH 174/176] Update plugin.yaml

---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 1d2e5d2..00b03f5 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -101,7 +101,7 @@ tools:
   definitions:
     - name: trunk-analytics-cli
       download: trunk-analytics-cli
-      known_good_version: 0.8.1
+      known_good_version: 0.12.5
       shims: [trunk-analytics-cli]
       health_checks:
         - command: trunk-analytics-cli --version
@@ -110,4 +110,4 @@ tools:
     - gh@2.83.2
     - grpcui@1.4.3
     - gt@1.7.14
-    - trunk-analytics-cli@0.12.1
+    - trunk-analytics-cli@0.12.5

From e9cf897887c3e72e76db2df12a1f3144c394b295 Mon Sep 17 00:00:00 2001
From: Eli Schleifer <1265982+EliSchleifer@users.noreply.github.com>
Date: Sat, 7 Mar 2026 13:20:23 -0800
Subject: [PATCH 175/176] Fix broken trunk-analytics-cli (#286)

- Fix broken trunk-analytics-cli definition
- upgrade to latest golangci-lint2
---
 plugin.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index 00b03f5..eafbe8f 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -25,7 +25,7 @@ lint:
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint@2.7.2
+    - golangci-lint2@2.0.0
     - hadolint@2.14.0
     - isort@8.0.1
     - markdownlint@0.48.0
@@ -105,7 +105,7 @@ tools:
       shims: [trunk-analytics-cli]
       health_checks:
         - command: trunk-analytics-cli --version
-          parse_regex: trunk flakytests ${semver}
+          parse_regex: trunk-analytics-cli ${semver}
   enabled:
     - gh@2.83.2
     - grpcui@1.4.3

From bd631b9ab3ce012bad2c2d57cb8813691d27d110 Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
 <131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Mon, 27 Apr 2026 10:08:22 -0400
Subject: [PATCH 176/176] Upgrade trunk (#284)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[![Trunk](https://static.trunk.io/assets/trunk_action_upgrade_banner.png)](https://trunk.io)

19 linters were upgraded:

- actionlint 1.7.10 → 1.7.12
- black 26.3.0 → 26.3.1
- buildifier 8.2.1 → 8.5.1
- cfnlint 1.46.0 → 1.49.3
- checkov 3.2.507 → 3.2.525
- golangci-lint2 2.0.0 → 2.11.4
- mypy 1.19.1 → 1.20.2
- nancy 1.0.52 → 1.2.0
- osv-scanner 2.3.1 → 2.3.5
- oxipng 10.0.0 → 10.1.1
- prettier 3.8.1 → 3.8.3
- prisma 7.4.2 → 7.8.0
- renovate 43.59.2 → 43.142.0
- ruff 0.15.5 → 0.15.12
- semgrep 1.154.0 → 1.161.0
- sql-formatter 15.7.2 → 15.7.3
- stylelint 17.4.0 → 17.9.0
- trufflehog 3.92.4 → 3.95.2
- trunk-toolbox 0.5.4 → 0.7.0

3 tools were upgraded:

- gh 2.83.2 → 2.91.0
- gt 1.7.14 → 1.8.5
- trunk-analytics-cli 0.12.5 → 0.12.8

This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].

[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/

Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
---
 plugin.yaml | 44 ++++++++++++++++++++++----------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/plugin.yaml b/plugin.yaml
index eafbe8f..2b2f9ce 100644
--- a/plugin.yaml
+++ b/plugin.yaml
@@ -12,42 +12,42 @@ runtimes:
 lint:
   # By sourcing this plugin, repos will enable these linters
   enabled:
-    - actionlint@1.7.10
+    - actionlint@1.7.12
     - bandit@1.9.4
-    - black@26.3.0
+    - black@26.3.1
     - buf-lint@1.31.0!
-    - buildifier@8.2.1
-    - cfnlint@1.46.0
-    - checkov@3.2.507
+    - buildifier@8.5.1
+    - cfnlint@1.49.3
+    - checkov@3.2.525
     - clang-format@17.0.1
     - clang-tidy@17.0.1
     - clippy@1.71.1
     - eslint@8.56.0
     - git-diff-check
     - gofmt@1.20.4
-    - golangci-lint2@2.0.0
+    - golangci-lint2@2.11.4
     - hadolint@2.14.0
     - isort@8.0.1
     - markdownlint@0.48.0
     - markdown-link-check@3.14.2
-    - mypy@1.19.1
-    - nancy@1.0.52
-    - osv-scanner@2.3.1
-    - oxipng@10.0.0
+    - mypy@1.20.2
+    - nancy@1.2.0
+    - osv-scanner@2.3.5
+    - oxipng@10.1.1
     - pragma-once
-    - prettier@3.8.1
-    - prisma@7.4.2
+    - prettier@3.8.3
+    - prisma@7.8.0
     - pylint@4.0.5
-    - renovate@43.59.2
+    - renovate@43.142.0
     - rubocop@1.39.0
-    - ruff@0.15.5
+    - ruff@0.15.12
     - rustfmt@1.68.2
-    - semgrep@1.154.0
+    - semgrep@1.161.0
     - shellcheck@0.11.0
     - shfmt@3.6.0
     - sort-package-json@3.6.1
-    - sql-formatter@15.7.2
-    - stylelint@17.4.0:
+    - sql-formatter@15.7.3
+    - stylelint@17.9.0:
         packages:
           - stylelint-config-standard-scss@17.0.0
           - stylelint-config-clean-order@8.0.1
@@ -56,8 +56,8 @@ lint:
     - terrascan@1.19.9
     # Disabled until filesystem scanner initialize error resolved.
     # - trivy@0.54.1
-    - trufflehog@3.92.4
-    - trunk-toolbox@0.5.4
+    - trufflehog@3.95.2
+    - trunk-toolbox@0.7.0
     - yamllint@1.38.0
 
   # Sourcing repos will have these configs available to applicable linters
@@ -107,7 +107,7 @@ tools:
         - command: trunk-analytics-cli --version
           parse_regex: trunk-analytics-cli ${semver}
   enabled:
-    - gh@2.83.2
+    - gh@2.91.0
     - grpcui@1.4.3
-    - gt@1.7.14
-    - trunk-analytics-cli@0.12.5
+    - gt@1.8.5
+    - trunk-analytics-cli@0.12.8