Update dependency gitlab-ci-utils/gitlab-ci-templates to v21

This MR contains the following updates:

Package	Type	Update	Change
gitlab-ci-utils/gitlab-ci-templates	repository	major	20.2.1 -> 21.0.1

---

Release Notes

gitlab-ci-utils/gitlab-ci-templates (gitlab-ci-utils/gitlab-ci-templates)

v21.0.1

Compare Source

Fixed

• BREAKING: Updated lint_npm_package job to config-files@9.0.1, fixing an issue with the latest script names.

v21.0.0

Compare Source

Changed

• BREAKING: Added Code-Quality and Code-Quality-Npm collections with the appropriate code quality related jobs. (#​261)
  • Code-Quality is included in the All-Projects collection.
  • Code-Quality-Npm is included in the Node-Build-Test collection.
  • Removed the All-Project-Slim collection since All-Projects (with Code-Quality), should be included on all pipelines.
  • Removed lint_container from container collections.
• BREAKING: Updated semgrep-sast job to gitlab-semgrep-plus:1.0.0. See breaking changes in the release notes. (#​265)
• BREAKING: Updated lint_npm_package job to config-files@9.0.0, updating package rules to deprecate Node 16 (end-of-life as of 2023-09-11). Compatible with all current and LTS releases (^18.12.0 || >=20.0.0).
• BREAKING: Updated the Node-Version-Tests collection to deprecate Node 16 tests (end-of-life 2023-09-11). (#​263)
• BREAKING: Updated jobs running npm scripts to use the standard type:sub-type, with each element kebab cased, e.g. lint:js (previously lint-js). (#​260)
• BREAKING: Changed pmd-cpd-* jobs to duplication-* to better reflect the job function. (#​262)
• BREAKING: Updated language lint jobs with rules to only run by file type. (#​262)
• BREAKING: Updated npm package lint jobs with rules to only run if package.json or package-lock.json exists. (#​262)
• Updated secret_detection in GitLab-Security-Scans collection to use needs: []. (#​266)
• Updated sokrates job to only run on tag pipelines. (#​267)

Fixed

• Fixed lint_sh job to check all *.sh files in the repository. (#​258)
• Updated lint_md job to markdownlint-cli2@​0.9.2.
• Updated lint_lockfile job to lockfile-lint@4.12.1.
• Updated the node_sbom job to cyclonedx-npm@1.14.0.
• Updated README with missing jobs.

Miscellaneous

• Added GitLab security scans to CI pipeline.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.