chore: Upgrade trunk

[masterpointbot]

7 linters were upgraded:

• checkov 3.2.533 → 3.3.6
• markdownlint 0.48.0 → 0.49.0
• osv-scanner 2.3.8 → 2.4.0
• prettier 3.8.4 → 3.9.4
• trivy 0.71.0 → 0.72.0
• trufflehog 3.95.5 → 3.95.7
• zizmor 1.25.2 → 1.26.1

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.

[github-actions]

Below is the Action testing on itself with this PR's source code against policies in /examples file by file. Confirm it is as expected.

File	Status	Passed	Total	Coverage	Details
./examples/tests/cancel-in-progress-runs_test.rego	✅ PASS	2	2	83.33% Uncovered Lines 18	Show Details ✅ test_cancel_runs_allowed ✅ test_cancel_runs_denied
./examples/tests/track-using-labels_test.rego	✅ PASS	8	8	45.45% Uncovered Lines 5, 7, 14-15, 25-28, 37, 39-40, 43	Show Details ✅ test_track_different_branches ✅ test_propose_non_empty_branch ✅ test_propose_empty_branch ✅ test_affected_directory ✅ test_affected_extension ✅ test_not_affected_directory ✅ test_not_affected_extension ✅ test_ignore_not_affected
./examples/tests/do-not-delete-stateful-resources_test.rego	✅ PASS	5	5	85.71% Uncovered Lines 34	Show Details ✅ test_deny_s3_bucket_deletion ✅ test_deny_db_instance_deletion ✅ test_deny_efs_file_system_deletion ✅ test_deny_dynamodb_table_deletion ✅ test_allow_instance_deletion
./examples/tests/enforce-password-length_test.rego	✅ PASS	3	3	90.91% Uncovered Lines 29	Show Details ✅ test_deny_creation_of_password_with_less_than_16_characters ✅ test_warn_creation_of_password_between_16_and_20_characters ✅ test_allow_creation_of_password_longer_than_20_characters
./examples/tests/notification-stack-failure-origins_test.rego	✅ PASS	7	7	96.67% Uncovered Lines 79	Show Details ✅ test_slack_notification_for_tracked_failed_run ✅ test_no_slack_notification_for_non_tracked_run ✅ test_no_slack_notification_for_successful_run ✅ test_slack_notification_with_unknown_github_user ✅ test_pr_comment_for_tracked_failed_run ✅ test_no_pr_comment_for_non_tracked_run ✅ test_no_pr_comment_for_successful_run
./examples/tests/enforce-module-use-policy_test.rego	✅ PASS	3	3	47.83% Uncovered Lines 37, 42, 46, 52, 54, 57, 60-61, 64, 68, 78, 80	Show Details ✅ test_deny_creation_of_controlled_resource_type ✅ test_deny_update_of_controlled_resource_type ✅ test_allow_creation_of_uncontrolled_resource_type
./examples/tests/ignore-changes-outside-root_test.rego	✅ PASS	12	12	92.86% Uncovered Lines 42	Show Details ✅ test_affected_no_files ✅ test_affected_tf_files ✅ test_affected_no_tf_files ✅ test_affected_outside_project_root ✅ test_ignore_affected ✅ test_ignore_not_affected ✅ test_ignore_tag ✅ test_propose_affected ✅ test_propose_not_affected ✅ test_track_affected ✅ test_track_not_affected ✅ test_track_not_stack_branch
./examples/tests/readers-writers-admins-teams_test.rego	✅ PASS	6	6	83.33% Uncovered Lines 14, 22, 26	Show Details ✅ test_allow_writers ✅ test_allow_admins ✅ test_allow_readers ✅ test_space_admin_access ✅ test_space_write_access ✅ test_space_read_access
./examples/drift-detection.rego	⚠️ NO TESTS	0	0	N/A	Show Details No test file found

Report generated by 🧪 GitHub Actions for OPA Rego Test

[github-actions]

Below is the Action testing on itself with this PR's source code against /examples entire package directory. Confirm it is as expected.

File	Status	Passed	Total	Coverage	Details
examples/tests/cancel-in-progress-runs_test.rego	✅ PASS	2	2	83.33% Uncovered Lines 18	Show Details ✅ test_cancel_runs_allowed ✅ test_cancel_runs_denied
examples/tests/do-not-delete-stateful-resources_test.rego	✅ PASS	5	5	85.71% Uncovered Lines 34	Show Details ✅ test_deny_s3_bucket_deletion ✅ test_deny_db_instance_deletion ✅ test_deny_efs_file_system_deletion ✅ test_deny_dynamodb_table_deletion ✅ test_allow_instance_deletion
examples/tests/enforce-module-use-policy_test.rego	✅ PASS	3	3	47.83% Uncovered Lines 37, 42, 46, 52, 54, 57, 60-61, 64, 68, 78, 80	Show Details ✅ test_deny_creation_of_controlled_resource_type ✅ test_deny_update_of_controlled_resource_type ✅ test_allow_creation_of_uncontrolled_resource_type
examples/tests/enforce-password-length_test.rego	✅ PASS	3	3	90.91% Uncovered Lines 29	Show Details ✅ test_deny_creation_of_password_with_less_than_16_characters ✅ test_warn_creation_of_password_between_16_and_20_characters ✅ test_allow_creation_of_password_longer_than_20_characters
examples/tests/ignore-changes-outside-root_test.rego	✅ PASS	12	12	92.86% Uncovered Lines 42	Show Details ✅ test_affected_no_files ✅ test_affected_tf_files ✅ test_affected_no_tf_files ✅ test_affected_outside_project_root ✅ test_ignore_affected ✅ test_ignore_not_affected#01 ✅ test_ignore_tag ✅ test_propose_affected ✅ test_propose_not_affected ✅ test_track_affected ✅ test_track_not_affected ✅ test_track_not_stack_branch
examples/tests/notification-stack-failure-origins_test.rego	✅ PASS	7	7	96.67% Uncovered Lines 79	Show Details ✅ test_slack_notification_for_tracked_failed_run ✅ test_no_slack_notification_for_non_tracked_run ✅ test_no_slack_notification_for_successful_run ✅ test_slack_notification_with_unknown_github_user ✅ test_pr_comment_for_tracked_failed_run ✅ test_no_pr_comment_for_non_tracked_run ✅ test_no_pr_comment_for_successful_run
examples/tests/readers-writers-admins-teams_test.rego	✅ PASS	6	6	83.33% Uncovered Lines 14, 22, 26	Show Details ✅ test_allow_writers ✅ test_allow_admins ✅ test_allow_readers ✅ test_space_admin_access ✅ test_space_write_access ✅ test_space_read_access
examples/tests/track-using-labels_test.rego	✅ PASS	8	8	86.36% Uncovered Lines 5, 14, 43	Show Details ✅ test_track_different_branches ✅ test_propose_non_empty_branch ✅ test_propose_empty_branch ✅ test_affected_directory ✅ test_affected_extension ✅ test_not_affected_directory ✅ test_not_affected_extension ✅ test_ignore_not_affected
./examples/drift-detection.rego	⚠️ NO TESTS	0	0	N/A	Show Details No test file found

Report generated by 🧪 GitHub Actions for OPA Rego Test

[masterpoint-team]

Auto-approved by trunk upgrade action (all required checks passed)