Upgrade trunk to 1.25.0

[github-actions]

cli upgraded: 1.24.0 → 1.25.0

11 linters were upgraded:

• actionlint 1.7.7 → 1.7.9
• bandit 1.8.6 → 1.9.1
• checkov 3.2.457 → 3.2.494
• gitleaks 8.28.0 → 8.29.1
• hadolint 2.12.1-beta → 2.14.0
• markdownlint 0.45.0 → 0.46.0
• renovate 41.43.5 → 42.19.0
• ruff 0.12.5 → 0.14.5
• trivy 0.64.1 → 0.67.2
• trufflehog 3.90.2 → 3.91.1
• ty 0.0.1-alpha.16 → 0.0.1-alpha.27

2 plugins were upgraded:

• trunk-io/configs v1.1.0 → v1.1.2
• trunk-io/plugins v1.7.1 → v1.7.4

This PR was generated by the Trunk Action. For more info, see our docs or reach out on Slack.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[deepsource-io]

Here's the code health analysis summary for commits f3664de..ccc77ec. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Python	✅ Success		View Check ↗
Secrets	✅ Success		View Check ↗

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud