chore(deps, base): update ca-certificates, locales, qemu-system-arm, udev, wget

[embedded-releaser-app]

Automated changes by create-pull-request GitHub action

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	24		0	0	0.56s
✅ ACTION	zizmor	24	0	0	0	7.36s
✅ DOCKERFILE	hadolint	3		0	0	0.36s
✅ JSON	npm-package-json-lint	yes		no	no	0.43s
✅ JSON	prettier	22	3	0	0	0.5s
✅ JSON	v8r	22		0	0	6.61s
✅ MARKDOWN	markdownlint	12	0	0	0	1.02s
✅ MARKDOWN	markdown-table-formatter	12	1	0	0	0.24s
✅ REPOSITORY	checkov	yes		no	no	24.46s
✅ REPOSITORY	gitleaks	yes		no	no	1.21s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	53.39s
✅ REPOSITORY	osv-scanner	yes		no	no	0.78s
✅ REPOSITORY	secretlint	yes		no	no	1.04s
✅ REPOSITORY	syft	yes		no	no	2.01s
✅ REPOSITORY	trivy	yes		no	no	14.09s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.31s
✅ REPOSITORY	trufflehog	yes		no	no	2.88s
⚠️ SPELL	lychee	86		1	0	11.39s
✅ YAML	prettier	32	0	0	0	0.9s
✅ YAML	v8r	32		0	0	8.55s
✅ YAML	yamllint	32		0	0	0.74s

Detailed Issues

⚠️ SPELL / lychee - 1 error

📝 Summary
---------------------
🔍 Total..........133
🔗 Unique.........112
✅ Successful.....127
⏳ Timeouts.........0
🔀 Redirected......13
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1
⛔ Unsupported......1

Errors in .github/TOOL_VERSION_ISSUE_TEMPLATE.md
[403] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads (at 30:7) | Rejected status code: 403 Forbidden

Hint: Followed 13 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/salesforce@v9.5.0 (59 linters)
• oxsecurity/megalinter/flavors/javascript@v9.5.0 (62 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

[github-actions]

📦 Container Size Analysis

Note

Comparing docker.io/gabrielfrasantos/embedded-devcontainer-base:edge ➔ docker.io/gabrielfrasantos/embedded-devcontainer-base:pr-101

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	0 B	970.04 MB	+970.04 MB (+∞)	🔼
linux/arm64	0 B	962.44 MB	+962.44 MB (+∞)	🔼

[github-actions]

📦 Container Size Analysis

Note

Comparing docker.io/gabrielfrasantos/embedded-devcontainer-rust:edge ➔ docker.io/gabrielfrasantos/embedded-devcontainer-rust:pr-101

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	0 B	1.37 GB	+1.37 GB (+∞)	🔼
linux/arm64	0 B	1.31 GB	+1.31 GB (+∞)	🔼

[github-actions]

📦 Container Size Analysis

Note

Comparing docker.io/gabrielfrasantos/embedded-devcontainer-cpp:edge ➔ docker.io/gabrielfrasantos/embedded-devcontainer-cpp:pr-101

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	732.36 MB	1.44 GB	+703.99 MB (+96.13%)	🔼
linux/arm64	0 B	1.41 GB	+1.41 GB (+∞)	🔼

[github-actions]

Test Results

 12 files   12 suites   16m 53s ⏱️
 36 tests  36 ✅ 0 💤 0 ❌
152 runs  152 ✅ 0 💤 0 ❌

Results for commit d4b603a.

♻️ This comment has been updated with latest results.

[gabrielfrasantos]

@copilot fix this issue:

❌ REPOSITORY / osv-scanner - 1 error
Scanning dir .
Starting filesystem walk for root: /
Scanned package-lock.json file and found 73 packages
Scanned .devcontainer/cpp/requirements.txt file and found 20 packages
Scanned test/rust/workspace/clippy/Cargo.lock file and found 1 package
Scanned test/rust/workspace/cortex-m/Cargo.lock file and found 30 packages
Scanned test/rust/workspace/cortex-mf/Cargo.lock file and found 30 packages
Scanned test/rust/workspace/test/Cargo.lock file and found 1 package
Scanned test/rust/workspace/cargo/Cargo.lock file and found 1 package
End status: 83 dirs visited, 301 inodes visited, 7 Extract calls, 25.667769ms elapsed, 25.667909ms wall time
Loaded filter from: test/rust/workspace/cortex-m/osv-scanner.toml
Loaded filter from: test/rust/workspace/cortex-mf/osv-scanner.toml
RUSTSEC-2026-0110 has been filtered out because: bare-metal is deprecated/unmaintained upstream with no fixed version; pulled in transitively by cortex-m in this test fixture crate
RUSTSEC-2026-0110 has been filtered out because: bare-metal is deprecated/unmaintained upstream with no fixed version; pulled in transitively by cortex-m in this test fixture crate
Filtered 2 vulnerabilities from output

Total 1 package affected by 1 known vulnerability (0 Critical, 1 High, 0 Medium, 0 Low, 0 Unknown) from 1 ecosystem.
1 vulnerability can be fixed.

+-------------------------------------+------+-----------+-----------------------+---------+---------------+-------------------+
| OSV URL | CVSS | ECOSYSTEM | PACKAGE | VERSION | FIXED VERSION | SOURCE |
+-------------------------------------+------+-----------+-----------------------+---------+---------------+-------------------+
| https://osv.dev/GHSA-rgw5-rvv9-x895 | 7.5 | npm | brace-expansion (dev) | 5.0.8 | 5.0.9 | package-lock.json |
+-------------------------------------+------+-----------+-----------------------+---------+---------------+-------------------+

[Copilot]

@copilot fix this issue:

❌ REPOSITORY / osv-scanner - 1 error
...

Fixed in the latest commit by running npm update brace-expansion, which bumped brace-expansion from 5.0.8 to 5.0.9 in package-lock.json, resolving GHSA-rgw5-rvv9-x895.

[github-actions]

Pull Request Report (#101)

Static measures

Description	Value
Number of added lines	6
Number of deleted lines	5
Number of changed files	2
Number of commits	2
Number of reviews	0
Number of comments (w/o review comments)	7
Number of reviews that contains a comment to resolve	0
Number of reviews that requested a change from the author	0
Number of reviews that approved the Pull Request	0
Get the total number of participants of a Pull Request	6

Time related measures

Description	Value
PR lead time (from creation to close of PR)	6.5 Hours
Time that was spend on the branch before the PR was created	2 Sec
Time that was spend on the branch before the PR was merged	6.5 Hours
Time to merge after last review	0 Sec

Status check related measures

Description	Value
Total runtime for last status check run (Workflow for PR)	1.4 Hours
Total time spend in last status check run on PR	33 Min