feat: bump conan from 2.30.0 to 2.31.2 in /.devcontainer

[dependabot]

Bumps conan from 2.30.0 to 2.31.2.

Release notes

Sourced from conan's releases.

2.31.2 (04-Aug-2026)

• Bugfix: conan upload .. --dry-run -f=json > to_upload.json now allows round-trip for conan upload -l=to_upload.json without re-preparing the artifacts. (conan-io/conan#20237)

2.31.1 (24-Jul-2026)

• Fix: Fixed replace_in_file() raising a false "pattern not found" error when the replacement produced the same content as the original (no-op replace). (conan-io/conan#20211)

2.31.0 (23-Jul-2026)

• Feature: Get Workspace feature out of incubating. (conan-io/conan#20202). Docs: 📃
• Feature: replace_in_file now supports regex patterns. (conan-io/conan#20194). Docs: 📃
• Feature: Warn when conan config install is used after conan config install-pkg. (conan-io/conan#20188). Docs: 📃
• Feature: Support GCC 14.4 and 15.3 in settings.yml. (conan-io/conan#20184)
• Feature: Support intel-cc 2025.2, 2025.3 and 2026.1 in settings.yml. (conan-io/conan#20184)
• Feature: Change the Workspace approach to not process python_requires just to derive name/version. Proposed a new get_ref(folder) method in the conanws.py file to be able to define versions dynamically. (conan-io/conan#20176). Docs: 📃
• Feature: Define new cpp_info. ignored_requires attribute to avoid downstream propagation of dependencies. (conan-io/conan#20171). Docs: 📃
• Feature: Add NO_SONAME support to CMakeConfigDeps to skip SONAME generation. (conan-io/conan#20168). Docs: 📃
• Feature: Assert invalid parameters in ConanFile.run() method. (conan-io/conan#20156)
• Feature: Add .tar.zst (Zstandard) archive support to the unzip() tool function. (conan-io/conan#20140)
• Feature: Reduce verbose terminal output produced during the package() step. (conan-io/conan#20134)
• Feature: Add tools.build:asmflags config and CMakeToolchain.extra_asmflags to populate CMAKE_ASM_FLAGS. (conan-io/conan#20127)
• Feature: Add micro modes to package_id_modes to model changes over MAJOR.MINOR.PATCH.MICRO micro digit. (conan-io/conan#20102). Docs: 📃
• Feature: New win_runtime_copy capability of VirtualRunEnv, so it can copy on Windows the runtime files of dependencies (the cpp_info.bindirs directories contents) to a single location and point to it, avoiding path overflows (like in Windows) for large graphs. (conan-io/conan#18638). Docs: 📃
• Fix: Update remaining audit.conan.io/<page> links to conan.io/audit/<page>. (conan-io/conan#20203)
• Fix: Fix upload with empty uploads from pattern, to make it equal to package lists behavior (conan-io/conan#20197)
• Fix: Avoid conflict with Automake's LINK var when using AutotoolsDeps with MSVC by using _LINK_ for linker flags. (conan-io/conan#20192). Docs: 📃
• Fix: Add support for VS 2026 in the Premake generator (requires Premake 5.0 beta 8). (conan-io/conan#20189)
• Fix: Fix rpath flags from AutotoolsDeps being dropped by Libtool on macOS, causing missing LC_RPATH in executables. (conan-io/conan#20179)
• Fix: Avoid option names shadowing internal Options implementation methods. (conan-io/conan#20172). Docs: 📃
• Fix: Fix deprecation warning for emcc/em++ >= 6.0.1, changing -sMEMORY64 flag with the modern -m64 one. (conan-io/conan#20152)
• Fix: Avoid a corner-case in component requires when replace_requires creates diamond divergent requirements. (conan-io/conan#20139)
• Fix: Fix Artifactory search patterns not matching *@user/channel, now requiring explicit */*@user/channel. (conan-io/conan#20136)
• Fix: Use LINK env-var in Windows for AutotoolsDeps msvc compiler. (conan-io/conan#20130). Docs: 📃
• Bugfix: Require default_components, or all existing components, in PkgConfigDeps when root pkg_config_name="none". (conan-io/conan#20169)
• Bugfix: Apply sorting to include() profiles settings patterns. (conan-io/conan#20164)
• Bugfix: Raise an exception when layout() fails in the Docker runner. (conan-io/conan#20154)
• Bugfix: Fix early return in workspace complete that could skip necessary packages. (conan-io/conan#20150)
• Bugfix: Fix crash in replace_requires when the graph had an override to a replaced requirement that did not apply. (conan-io/conan#20146)

Commits

• 5b94bfb conan upload .. --dry-run -f=json > to_upload.json now allows round-trip ...
• 8fc5927 Fix replace_in_file false "pattern not found" on no-op replace (#20211)
• f9ce976 replace_in_file with regex (#20194)
• f1da81c Conan 2.31.0
• 22db22c Workspace not incubating anymore (#20202)
• 9aa6ea7 Fix broken audit page URLs (audit.conan.io/* -> conan.io/audit/*) (#20203)
• 170e7b5 change workspace load_conanfile and python_requires (#20176)
• 1b0b910 fix upload with empty uploads from pattern, to make it equal to package lists...
• 128e5dd Update docs for new and audit subapis (#20190)
• 7065353 Use $runcovtest to activate covtest (#20182)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	24		0	0	0.71s
✅ ACTION	zizmor	24	0	0	0	5.01s
✅ DOCKERFILE	hadolint	3		0	0	0.34s
✅ JSON	npm-package-json-lint	yes		no	no	0.6s
✅ JSON	prettier	22	3	0	0	0.68s
✅ JSON	v8r	22		0	0	12.02s
✅ MARKDOWN	markdownlint	12	0	0	0	1.38s
✅ MARKDOWN	markdown-table-formatter	12	1	0	0	0.33s
✅ REPOSITORY	checkov	yes		no	no	29.31s
✅ REPOSITORY	gitleaks	yes		no	no	1.6s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	71.53s
✅ REPOSITORY	osv-scanner	yes		no	no	0.78s
✅ REPOSITORY	secretlint	yes		no	no	1.82s
✅ REPOSITORY	syft	yes		no	no	2.57s
✅ REPOSITORY	trivy	yes		no	no	14.12s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.46s
✅ REPOSITORY	trufflehog	yes		no	no	4.0s
⚠️ SPELL	lychee	86		2	0	87.38s
✅ YAML	prettier	32	0	0	0	1.37s
❌ YAML	v8r	32		1	0	14.8s
✅ YAML	yamllint	32		0	0	1.38s

Detailed Issues

❌ YAML / v8r - 1 error

✖ .github/workflows/wc-publish-templates.yml is invalid

.github/workflows/wc-publish-templates.yml#/on must be string
.github/workflows/wc-publish-templates.yml#/on must be equal to one of the allowed values
.github/workflows/wc-publish-templates.yml#/on must be array
.github/workflows/wc-publish-templates.yml#/on/workflow_call must be object
.github/workflows/wc-publish-templates.yml#/on must match exactly one schema in oneOf

⚠️ SPELL / lychee - 2 errors

📝 Summary
---------------------
🔍 Total..........133
🔗 Unique.........112
✅ Successful.....123
⏳ Timeouts.........3
🔀 Redirected......13
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........2
⛔ Unsupported......2

Errors in .github/TOOL_VERSION_ISSUE_TEMPLATE.md
[403] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads (at 30:7) | Rejected status code: 403 Forbidden

Errors in test/cpp/features/security.feature
[TIMEOUT] https://slsa.dev/spec/v1.0/levels (at 20:30) | Request timed out
[ERROR] https://slsa.dev/spec/v1.0/threats (at 28:19) | Connection failed. Check network connectivity and firewall settings
[TIMEOUT] https://slsa.dev/spec/v1.0/threats (at 42:44) | Request timed out
[TIMEOUT] https://slsa.dev/spec/v1.0/verifying-artifacts (at 24:25) | Request timed out

Hint: Followed 13 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/salesforce@v9.5.0 (59 linters)
• oxsecurity/megalinter/flavors/javascript@v9.5.0 (62 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository