ci: pre-commit autoupdate

[pre-commit-ci]

updates:

• github.com/gitleaks/gitleaks: v8.24.2 → v8.24.3
• github.com/astral-sh/ruff-pre-commit: v0.11.4 → v0.11.5
• github.com/astral-sh/uv-pre-commit: 0.6.12 → 0.6.14

[trunk-io]

⏱️ 11m total CI duration on this PR

Slowest 15 Jobs	Cumulative Duration	Recent Runs
megalinter	4m	🟩
docker	1m	🟩
Analyze (python)	1m	🟩
msdo	43s	🟩
python (windows-latest, 3.12)	38s	🟩
devskim	30s	🟩
osv-scan-pr / osv-scan	27s	🟩
trivy	25s	🟩
python (macos-latest, 3.12)	22s	🟩
ossf	22s	🟩
python (ubuntu-latest, 3.12)	20s	🟩
trufflehog	12s	🟩
trunk	12s	🟩
label-size	8s	🟩
lint-title	7s	🟩

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no	no	1.06s
✅ EDITORCONFIG	editorconfig-checker	1		0	0	0.01s
✅ REPOSITORY	checkov	yes		no	no	13.12s
✅ REPOSITORY	devskim	yes		no	no	0.96s
✅ REPOSITORY	dustilock	yes		no	no	0.0s
✅ REPOSITORY	gitleaks	yes		no	no	0.35s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
✅ REPOSITORY	grype	yes		no	no	22.44s
⚠️ REPOSITORY	kics	yes		6	no	2.05s
✅ REPOSITORY	secretlint	yes		no	no	0.94s
✅ REPOSITORY	semgrep	yes		no	no	14.53s
✅ REPOSITORY	syft	yes		no	no	1.18s
✅ REPOSITORY	trivy	yes		no	no	6.93s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.08s
✅ REPOSITORY	trufflehog	yes		no	no	4.94s
✅ SPELL	lychee	1		0	0	0.66s
✅ YAML	prettier	1	0	0	0	0.47s
✅ YAML	v8r	1		0	0	3.01s
✅ YAML	yamllint	1		0	0	0.33s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff