Upgrade trunk

[trunk-open-pr-bot]

19 linters were upgraded:

• bandit 1.9.2 → 1.9.3
• black 25.12.0 → 26.1.0
• buildifier 8.2.1 → 8.5.1
• cfnlint 1.43.1 → 1.44.0
• checkov 3.2.497 → 3.2.500
• golangci-lint 2.7.2 → 2.8.0
• nancy 1.0.52 → 1.2.0
• osv-scanner 2.3.1 → 2.3.2
• oxipng 10.0.0 → 10.1.0
• prettier 3.7.4 → 3.8.1
• prisma 7.2.0 → 7.3.0
• renovate 42.69.2 → 43.4.3
• ruff 0.14.10 → 0.15.0
• semgrep 1.146.0 → 1.151.0
• sort-package-json 3.6.0 → 3.6.1
• sql-formatter 15.6.12 → 15.7.0
• stylelint 16.26.1 → 17.1.1
  • stylelint-config-standard-scss 16.0.0 → 17.0.0
• trufflehog 3.92.4 → 3.93.1
• yamllint 1.37.1 → 1.38.0

3 tools were upgraded:

• gh 2.83.2 → 2.86.0
• gt 1.7.14 → 1.7.18
• trunk-analytics-cli 0.12.1 → 0.12.5

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.