chore(deps): update all digest updates

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/python	stage	digest	3955a7d → d517cd3
gcr.io/distroless/python3-debian12	final	digest	498e3cb → 17b27c8

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	7		0	0	0.08s
✅ COPYPASTE	jscpd	yes		no	no	1.43s
✅ DOCKERFILE	hadolint	1		0	0	0.03s
✅ JSON	jsonlint	3		0	0	0.15s
⚠️ JSON	prettier	3		1	0	1.18s
✅ JSON	v8r	3		0	0	2.9s
✅ PYTHON	bandit	1		0	0	2.61s
✅ PYTHON	black	1		0	0	0.87s
✅ PYTHON	flake8	1		0	0	0.57s
✅ PYTHON	isort	1		0	0	0.22s
✅ PYTHON	mypy	1		0	0	3.12s
✅ PYTHON	pylint	1		0	0	2.82s
✅ PYTHON	pyright	1		0	0	1.63s
✅ PYTHON	ruff	1		0	0	0.02s
✅ REPOSITORY	checkov	yes		no	no	22.92s
✅ REPOSITORY	devskim	yes		no	no	1.58s
✅ REPOSITORY	dustilock	yes		no	no	0.02s
✅ REPOSITORY	gitleaks	yes		no	no	0.31s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
✅ REPOSITORY	grype	yes		no	no	37.14s
✅ REPOSITORY	kics	yes		no	no	3.56s
✅ REPOSITORY	secretlint	yes		no	no	1.52s
✅ REPOSITORY	syft	yes		no	no	2.32s
✅ REPOSITORY	trivy	yes		no	no	9.43s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.2s
✅ REPOSITORY	trufflehog	yes		no	no	4.64s
✅ YAML	prettier	9		0	0	0.66s
✅ YAML	v8r	9		0	0	7.2s
✅ YAML	yamllint	9		0	0	0.73s

Detailed Issues

⚠️ JSON / prettier - 1 error

Checking formatting...
[warn] renovate/default.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.2.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

[github-actions]

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 12.13)

No Vulnerabilities found

No Misconfigurations found

[github-actions]

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-without-test-image:pr-166 (debian 12.13)

No Vulnerabilities found

No Misconfigurations found

[github-actions]

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow:pr-166 (debian 12.13)

No Vulnerabilities found

No Misconfigurations found

[github-actions]

🎉 This PR is included in version 1.20.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀