chore(deps, cpp): update ms-vscode.cpptools, sonarsource.sonarlint-vscode in devcontainer-metadata.json

[philips-software-forest-releaser]

Note

Before merging this PR, please conduct a manual test checking basic functionality of the updated plug-ins. There are limited automated tests for the VS Code Extension updates.

Updates sonarsource.sonarlint-vscode from 4.35.1 to 4.37.0

Release notes

• Update CFamily analyzer 6.73 -> 6.74
• Update IaC analyzer 1.52 -> 2.1
• Update JS/TS/CSS analyzer 11.5 -> 11.6
• Update Python analyzer 5.12 -> 5.13
• Update PHP analyzer 3.51 -> 3.52
• Update Go analyzer 1.29 -> 1.30
• Update Text & Secrets analyzer 2.32 -> 2.33
• Support .slnx projects
• Support one-click generation of Windsurf Cascade hooks for post-generation analysis (beta)

Updates ms-vscode.cpptools from 1.28.3 to 1.29.3

Release notes

Instructions

The extension can be obtained by one of the methods below:

• Install the "C/C++" or "C/C++ Extension Pack" extension published by Microsoft from the Extensions view in VS Code.
• Download a vsix that matches your OS from the Assets section below (and install it via the method mentioned above). The previous download methods have the vsix signatures verified by the Marketplace, but for this method, you can do the verification by downloading the matching manifest and signature.p7s file and running npx [at]vscode/vsce@latest verify-signature -i <.vsix> -m <.signature.manifest> -s <.signature.p7s> vscode-vsce#1044.

Requirements

• VS Code 1.67.0 or later (April 2022).
• Windows 7+ (x64, arm64), macOS 10.12+, Linux (Ubuntu 16+, etc.).
  • Debugging is not supported on CentOS 7 or RHEL 7. The last supported version was 1.22.11: #13219.

Change

Bug Fix

• Remove NETFXSDKDir from the developer environment check. #14084

Instructions

The extension can be obtained by one of the methods below:

• Install the "C/C++" or "C/C++ Extension Pack" extension published by Microsoft from the Extensions view in VS Code.
• Download a vsix that matches your OS from the Assets section below (and install it via the method mentioned above). The previous download methods have the vsix signatures verified by the Marketplace, but for this method, you can do the verification by downloading the matching manifest and signature.p7s file and running npx [at]vscode/vsce@latest verify-signature -i <.vsix> -m <.signature.manifest> -s <.signature.p7s> vscode-vsce#1044.

Requirements

• VS Code 1.67.0 or later (April 2022).
• Windows 7+ (x64, arm64), macOS 10.12+, Linux (Ubuntu 16+, etc.).
  • Debugging is not supported on CentOS 7 or RHEL 7. The last supported version was 1.22.11: #13219.

Changes

New Feature

• Enable setting the VS developer environment without running VS Code from the developer command prompt. #4742

Enhancements

• Add built-in file associations for C++ extensionless system headers and set C_Cpp.autoAddFileAssociations to false by default. #4077
• Add IntelliSense support for c23 enums with an underlying type. #13675

Bug Fixes

• Fix 'Find All References' and 'Rename' on #define macro definitions. #6194
• Fix anonymous enums not working in gcc/clang modes. #10436
• Fix Doxygen comments at the end of a function. #13725
• Fix mac framework search path detection to include paths passed in the includePath from a configuration provider, and fix omission of unpopulated Mac framework paths. #13993
• Fix formatting with clang-tidy randomly getting stuck on Windows (on a call to GetOverlappedResult). #14025
• Fix IntelliSense with MSVC mode C++23 deduced type construction with auto. #14041
• Fix code analysis re-running automatically after a settings change when diagnostics already exist if it was manually instead of automatically invoked.
• Reduce the memory usage in a couple cases to reduce the chance of a bad_alloc in cpptools.
• Update clang-format and clang-tidy from 21.1.3 to 21.1.4 (fixes some formatting bugs).
• Fix the handling of the cl.exe /external:I argument for IntelliSense configuration.
• Fix a case where a large file could cause a bad_alloc in cpptools-srv on Windows.
• Update the default compiler search to include newer versions of clang/gcc.
• Fix a potential memory corruption crash of cpptools-srv (related to PCH).
• Fix a crash in detect_encoding.

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	20		0	0	0.54s
✅ DOCKERFILE	hadolint	2		0	0	0.78s
✅ GHERKIN	gherkin-lint	6		0	0	2.26s
✅ JSON	npm-package-json-lint	yes		no	no	0.47s
✅ JSON	prettier	19	4	0	0	0.57s
✅ JSON	v8r	19		0	0	7.62s
✅ MARKDOWN	markdownlint	11	0	0	0	0.83s
✅ MARKDOWN	markdown-table-formatter	11	0	0	0	0.25s
✅ REPOSITORY	checkov	yes		no	no	18.43s
✅ REPOSITORY	gitleaks	yes		no	no	0.53s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	27.66s
✅ REPOSITORY	secretlint	yes		no	no	1.02s
✅ REPOSITORY	syft	yes		no	no	1.97s
✅ REPOSITORY	trivy	yes		no	no	5.18s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.23s
✅ REPOSITORY	trufflehog	yes		no	no	2.27s
⚠️ SPELL	lychee	77		1	0	11.64s
✅ YAML	prettier	28	0	0	0	0.98s
✅ YAML	v8r	28		0	0	8.36s
✅ YAML	yamllint	28		0	0	0.68s

Detailed Issues

⚠️ SPELL / lychee - 1 error

[IGNORED] docker://pandoc/extra:3.7.0@sha256:a703d335fa237f8fc3303329d87e2555dca5187930da38bfa9010fa4e690933a | Unsupported: Error creating request client: builder error for url (docker://pandoc/extra:3.7.0@sha256:a703d335fa237f8fc3303329d87e2555dca5187930da38bfa9010fa4e690933a)
[IGNORED] https://vscode.dev/redirect?url=vscode://ms-vscode-remote.remote-containers/cloneInVolume?url=https://github.com/philips-software/amp-devcontainer | Unsupported: Error creating request client: builder error for url (vscode://ms-vscode-remote.remote-containers/cloneInVolume?url=https://github.com/philips-software/amp-devcontainer)
[ERROR] https://www.sigstore.dev/ | Network error: error sending request for url (https://www.sigstore.dev/) Maybe a certificate error?
📝 Summary
---------------------
🔍 Total..........126
✅ Successful.....123
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1

Errors in README.md
[ERROR] https://www.sigstore.dev/ | Network error: error sending request for url (https://www.sigstore.dev/) Maybe a certificate error?

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.2.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,DOCKERFILE_HADOLINT,GHERKIN_GHERKIN_LINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

[github-actions]

📦 Container Size Analysis

Note

Comparing ghcr.io/philips-software/amp-devcontainer-cpp:edge ➔ ghcr.io/philips-software/amp-devcontainer-cpp:pr-1026

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	683.21 MB	683.21 MB	+528 B (+0%)	🔼
linux/arm64	665.02 MB	665.02 MB	1.65 kB (0%)	🔽

[github-actions]

Test Results

 5 files  ±0   5 suites  ±0   3m 42s ⏱️ - 2m 9s
32 tests ±0  32 ✅ ±0  0 💤 ±0  0 ❌ ±0 
67 runs  ±0  67 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 1067786. ± Comparison against base commit e07d588.

♻️ This comment has been updated with latest results.

[github-actions]

📦 Container Size Analysis

Note

Comparing ghcr.io/philips-software/amp-devcontainer-rust:edge ➔ ghcr.io/philips-software/amp-devcontainer-rust:pr-1026

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	548.01 MB	548.01 MB	109 B (0%)	🔽
linux/arm64	502.7 MB	502.7 MB	183 B (0%)	🔽

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Pull Request Report (#1026)

Static measures

Description	Value
Number of added lines	2
Number of deleted lines	2
Number of changed files	1
Number of commits	2
Number of reviews	1
Number of comments (w/o review comments)	5
Number of reviews that contains a comment to resolve	0
Number of reviews that requested a change from the author	0
Number of reviews that approved the Pull Request	1
Get the total number of participants of a Pull Request	5

Time related measures

Description	Value
PR lead time (from creation to close of PR)	17.3 Days
Time that was spend on the branch before the PR was created	0 Sec
Time that was spend on the branch before the PR was merged	2.9 Hours
Time to merge after last review	12.9 Days

Status check related measures

Description	Value
Total runtime for last status check run (Workflow for PR)	40.4 Min
Total time spend in last status check run on PR	15.9 Min

[github-actions]

🎉 Hooray! The changes in this pull request went live with the release of v6.6.2 🎉