chore(deps): update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.3

See merge request gitlab-com/gl-infra/common-ci-tasks!939

build: EXPERIMENTAL Truncate common-ci-tasks to MAJOR version

See merge request gitlab-com/gl-infra/common-ci-tasks!937

build: remove checkov ASDF plugin

See merge request gitlab-com/gl-infra/common-ci-tasks!938

Experimentally further reduce Renovate noise by only using MAJOR
versions on common-ci-tasks.

This change also switches from manually maintaining the Renovate
config for Truncated tasks, to a Jsonnet script, which will hopefully
prevent the two versions of the file going out of sync with one another.

The checkov ASDF plugin causes a great deal of problems due to the way
it uses the PYTHONPATH. We have been removing it across our projects,
replacing it with virtualenv and pip install.

## [2.62.3](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-02-27)

### Fixes

* use semver-coerced versioning ([859b6d05](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/859b6d05bb23ebeacb608981d1474cbe6e1b24f1))

### Dependencies

* **deps:** update dependency checkov to v3.2.377 ([9a7ccf59](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/9a7ccf5975c502d3b376632dbaa951719680fbea))
* **deps:** update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.1 ([29777b62](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/29777b62c75b83acbc0e093fe5fd4184566295c8))
* **deps:** update dependency python/cpython to v3.13.2 ([6a7462b5](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/6a7462b58b6ee536875410eb5d4651e12942f853))

fix: use semver-coerced versioning

See merge request gitlab-com/gl-infra/common-ci-tasks!935

I've noticed that truncated versioning upgrades is no longer working.

Looking at the logs in Renovate, the versions are reporting as invalid:

```json
 {
  "depName": "goreleaser/goreleaser",
  "currentValue": "2.3",
  "datasource": "github-releases",
  "versioning": "semver",
  "replaceString": " 2.3 # datasource=github-releases depName=goreleaser/goreleaser\n",
  "updates": [],
  "packageName": "goreleaser/goreleaser",
  "warnings": [],
  "skipReason": "invalid-value"
}
```

This is an attempt to fix this situation by switching to coerced semver,
which allows coersion of truncated version numbers

chore(deps): update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.1

See merge request gitlab-com/gl-infra/common-ci-tasks!933

chore(deps): update dependency checkov to v3.2.377

See merge request gitlab-com/gl-infra/common-ci-tasks!930

chore(deps): update dependency python/cpython to v3.13.0

See merge request gitlab-com/gl-infra/common-ci-tasks!788

## [2.62.2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-02-27)

### Reverts

* Revert "feat: Adds semantic-release dry-run for .releaserc changes" ([1564f2a4](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/1564f2a4151df103853fc4faad9ae0a86e712776))

fix: Revert "feat: Adds semantic-release dry-run for .releaserc changes"

See merge request gitlab-com/gl-infra/common-ci-tasks!934

This reverts commit 592f1d06.

## [2.62.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-02-27)

### Fixes

* install a specific mise_version instead of latest ([08aa002c](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/08aa002c0f7086c53fd8b7924a290f4bf2ba14dd))

### Dependencies

* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.62 ([6a0111db](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/6a0111db869f45f684057cb16e839f066edc3bb7))

fix: install a specific mise_version instead of latest in renovate image

See merge request gitlab-com/gl-infra/common-ci-tasks!932

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.62

See merge request gitlab-com/gl-infra/common-ci-tasks!931

## [2.62.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-02-26)

### Features

* emit the renovate report as a build artifact from renovate job ([dc5519cb](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/dc5519cb79440a2e2bff983e29432c8c5556691d))

### Others

* add dependency-type labels for Renovate upgrades ([396e88af](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/396e88af0570c1f2fa5e93de9bd50e7732ea771c))

### Dependencies

* **deps:** update dependency ruby/ruby to v3.4.2 ([b84fffd2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/b84fffd2dbcd4ee3657749b156bd011f10caa797))
* **deps:** update ghcr.io/containerbase/base docker tag to v13.8.0 ([2489df0c](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/2489df0c4f7b5b29b5fc11ccb44902b42db90343))
* **deps:** update golang-minor to v1.24.0 ([5d017272](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/5d017272ca0e207f5579a5382a7396cf202d54c9))

feat: emit the renovate report as a build artifact from renovate job

See merge request gitlab-com/gl-infra/common-ci-tasks!929

In future, this report may be useful for vulnerability management, for
example.

chore(deps): update ghcr.io/containerbase/base docker tag to v13.8.0

See merge request gitlab-com/gl-infra/common-ci-tasks!926

chore(deps): update golang-minor to v1.24.0 (minor)

See merge request gitlab-com/gl-infra/common-ci-tasks!918

chore(deps): update dependency ruby/ruby to v3.4.2

See merge request gitlab-com/gl-infra/common-ci-tasks!858

chore: add dependency-type labels for Renovate upgrades

See merge request gitlab-com/gl-infra/common-ci-tasks!928