Upgrade trunk

[trunk-open-pr-bot]

15 linters were upgraded:

• actionlint 1.7.10 → 1.7.11
• black 26.3.0 → 26.3.1
• buildifier 8.2.1 → 8.5.1
• cfnlint 1.46.0 → 1.47.0
• checkov 3.2.507 → 3.2.510
• golangci-lint2 2.0.0 → 2.11.4
• nancy 1.0.52 → 1.2.0
• osv-scanner 2.3.1 → 2.3.3
• oxipng 10.0.0 → 10.1.0
• prisma 7.4.2 → 7.5.0
• renovate 43.59.2 → 43.86.1
• ruff 0.15.5 → 0.15.7
• semgrep 1.154.0 → 1.156.0
• stylelint 17.4.0 → 17.5.0
• trufflehog 3.92.4 → 3.94.0

2 tools were upgraded:

• gh 2.83.2 → 2.88.1
• gt 1.7.14 → 1.8.2

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.