[github-actions]

7 linters were upgraded:

• buildifier 8.5.1 → 10.1.0
• checkov 3.3.16 → 3.3.21
• osv-scanner 2.5.1 → 2.6.0
• oxipng 10.2.0 → 10.2.1
• prettier 3.9.6 → 3.9.9
• shfmt 3.14.0 → 3.14.1
• trufflehog 3.97.1 → 3.97.9

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.

[pr-security-agent]

🔒 Security Scan Complete

✅ No security issues detected

Scanned files against 45 rules. · Reviewed commit: d00265d805

📜 Scan history (1 scan)

Commit	Time (UTC)	Status	Findings
d00265d	2026-10-01 00:34:42	✅ success	0

ℹ️ About PR Security Agent

This scan was performed by PR Security Agent, an automated security review tool for pull requests. See the User Guide for details on severity levels, feedback reactions, and scan configuration.

Reply @pr-security-agent help for the list of commands you can run on this PR.

[claude]

LGTM, straightforward automated version bump.

What was reviewed: the single-file diff to .trunk/trunk.yaml bumping seven linter versions (buildifier, checkov, osv-scanner, oxipng, prettier, shfmt, trufflehog); confirmed the diff matches the versions listed in the PR description exactly; no other config keys or files were touched.

Extended reasoning...

This is a routine auto-generated Trunk Action PR that only bumps pinned linter/scanner tool versions in .trunk/trunk.yaml; no application code, build logic, or security-sensitive paths are touched. The diff is small (7 lines changed), mechanical, and matches the PR's own description of the version bumps exactly, so no human review is needed.