Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.6.0

.cspell.json

@@ -10,7 +10,13 @@
     "report",
     ".*"
   ],
-  "ignoreWords": ["niek", "npalm", "nvmrc", "markdownlintignore"],
+  "ignoreWords": [
+    "niek",
+    "npalm",
+    "nvmrc",
+    "markdownlintignore",
+    "devcontainer"
+  ],
   "language": "en",
   "noConfigSearch": true,
   "words": ["linebreak", "megalinter", "oxsecurity", "REAMDE"],

.devcontainer/Dockerfile

@@ -1,4 +1,7 @@
 ARG VARIANT="20-bullseye"
-FROM mcr.microsoft.com/vscode/devcontainers/typescript-node:0-${VARIANT}
+FROM mcr.microsoft.com/vscode/devcontainers/typescript-node:1-${VARIANT}
 
-RUN apt-get update && apt-get install bash-completion gnupg2 --no-install-recommends -y
+# hadolint ignore=DL3008
+RUN apt-get update && apt-get install bash-completion gnupg2 --no-install-recommends -y && rm -rf /var/lib/apt/lists/*
+
+USER node

.trivyignore

@@ -0,0 +1,2 @@
+# Healthcheck isn't necessary in a devcontainer
+AVD-DS-0026