chore(deps): update common-ci-tasks to v2.87

See merge request !1103

This change allows the checkov job to succeed when no passing tests
are found.

When `checkov` is run, if no rules match then there is no output,
which can be seen in the `results_cli.txt` output file. This causes
the `grep` to fail, which causes the job to fail, even though we have
no failing results.

---

I believe this is the intention of this task, but an alternative is to
use `jq` to match against `json` output from `checkov` to check for
failures.

e.g.

```
jq --exit-status '.failed > 0 or .parsing_errors > 0'
```

This would return a non-zero exit code we can use to test for failure
if required.

chore(deps): update dependency pre-commit/pre-commit to v4.3.0

See merge request !1109

chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6

See merge request !1110

chore(deps): update dependency koalaman/shellcheck to v0.11.0

See merge request !1108

chore(deps): update ghcr.io/containerbase/base docker tag to v13.8.63

See merge request !1085

chore(deps): update golang-patch to v1.24.6 (patch)

See merge request !1107

chore(deps): update node.js to v22.18.0

See merge request !1087

chore(deps): update dependency open-policy-agent/conftest to v0.62.0

See merge request !1092

chore(deps): update dependency hashicorp/hcl to v2.24.0

See merge request !1088

chore(deps): update dependency helm/helm to v3.18.5

See merge request !1083

chore(deps): update dependency git/git to v2.50.1

See merge request !1082

chore(deps): update dependency bridgecrewio/checkov to v3.2.461

See merge request !1080

chore(deps): update ghcr.io/containerbase/base docker tag to v13.10.2

See merge request !1111

chore(deps): update dependency jdx/mise to v2025.8.11

See merge request !1089

chore(deps): update dependency ruby/ruby to v3.4.5

See merge request !1084

chore(deps): update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.6

See merge request !1094

Addresses the problem described in
https://gitlab.com/gitlab-com/gl-infra/gitlab-dedicated/library/intermediate-builds/-/merge_requests/130#note_2689142914

feat: allow cache:policy overrides for gomodcache

See merge request !1113

## [2.88.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-08-18)

### Features

* allow cache:policy overrides for gomodcache ([b1227ecb](b1227ecb))

### Dependencies

* **deps:** update common-ci-tasks to v2.87 ([f8447555](f8447555))
* **deps:** update dependency bridgecrewio/checkov to v3.2.461 ([0d485818](0d485818))
* **deps:** update dependency git/git to v2.50.1 ([6a69345e](6a69345e))
* **deps:** update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.6 ([51d1b421](51d1b421))
* **deps:** update dependency hashicorp/hcl to v2.24.0 ([6de36745](6de36745))
* **deps:** update dependency helm/helm to v3.18.5 ([60ff9589](60ff9589))
* **deps:** update dependency jdx/mise to v2025.8.11 ([16d25ee2](16d25ee2))
* **deps:** update dependency koalaman/shellcheck to v0.11.0 ([635dea56](635dea56))
* **deps:** update dependency open-policy-agent/conftest to v0.62.0 ([b7d49496](b7d49496))
* **deps:** update dependency pre-commit/pre-commit to v4.3.0 ([da152101](da152101))
* **deps:** update dependency ruby/ruby to v3.4.5 ([1a73a0ff](1a73a0ff))
* **deps:** update ghcr.io/containerbase/base docker tag to v13.10.2 ([96b78395](96b78395))
* **deps:** update ghcr.io/containerbase/base docker tag to v13.8.63 ([54c2b646](54c2b646))
* **deps:** update golang-patch to v1.24.6 ([b43ec333](b43ec333))
* **deps:** update node.js to v22.18.0 ([5c0a0a8e](5c0a0a8e))
* **deps:** update pre-commit hook pre-commit/pre-commit-hooks to v6 ([93804a71](93804a71))

fix: Allow checkov job to succeed when no matches are found

See merge request !1105

## [2.88.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-08-21)

### Fixes

* Allow checkov job to succeed when no matches are found ([215bbe3b](215bbe3b))