chore(deps): update devbox packages

[vtmocanu]

This PR contains the following updates:

Package	Update	Change
checkov	patch	3.3.0 → 3.3.6
trivy	minor	0.71.2 → 0.72.0

---

Release Notes

bridgecrewio/checkov (checkov)

v3.3.6

Compare Source

Bug Fix

• terraform: prevent crash in S3AllowsAnyPrincipal with unparsed v… - #​7581

aquasecurity/trivy (trivy)

v0.72.0

⚠ BREAKING CHANGES

• migrate docker config to dockers_v2 (#​10783)

Features

• bottlerocket: add vulnerability matching for Bottlerocket OS (#​10893) (246ee3c)
• dotnet: detect bundled runtime in self-contained deployments (#​10786) (bd78842)
• java: detect JAR licenses from packaged LICENSE files (#​10856) (b8a1ccd)
• java: detect JAR licenses from the embedded pom.xml (#​10851) (0a166c3)
• misconf: Adds CloudFront standard logging v2 support to AVD-AWS-0010 (#​10848) (a848925)
• secret: add OpenAI secret detection rules (#​10798) (65e5128)
• secret: support new stateless format for GitHub App installation tokens (#​10826) (e68f3d2)

Bug Fixes

• correct format verbs in diagnostic messages (#​10805) (859a933)
• forward ospkg detector options through ospkg.NewScanner (#​10811) (28d44d3)
• image: deterministic OS package deduplication for images with embedded SBOMs (#​10777) (888911b)
• image: lookup origin layer for custom resources in merged layers (#​10788) (dccb128)
• misconf: support github_repository_vulnerability_alerts resource (#​10680) (abb5174)
• nodejs: parse project dependencies from multi-document pnpm-lock.yaml (#​10861) (a10291b)
• server: propagate package repository class in client/server mode (#​10874) (a2777ae)
• spdx: guard against nil root component in SPDX marshaler (#​10771) (c0654e1)
• surface the original analysis error instead of context cancellation (#​10793) (3054b3b)
• terraform: avoid data race on global getter.Getters in remote module resolver (#​10843) (0aff3fd)
• use random suffix for process temp directory instead of PID (#​10431) (c8d1d0d)
• vex: load VEX documents from within the repository directory (#​10820) (1f56a34)
• vuln: fall back to UNKNOWN severity when vulnerability details are missing (#​10795) (dfd53cf)

Continuous Integration

• migrate docker config to dockers_v2 (#​10783) (848d135)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.