Update dependency buildcage/docker to v3.1.2

[renovate]

This PR contains the following updates:

Package	Update	Change
buildcage/docker	patch	v3.1.1 → v3.1.2

---

Release Notes

buildcage/docker (buildcage/docker)

v3.1.2

Compare Source

Bug Fixes

• Keep injecting NODE_EXTRA_CA_CERTS/DENO_CERT when a build has no system CA store (#​302)
  • The inspect engine's buildkit-runc wrapper aborted the whole per-step CA injection whenever the rootfs had no system CA store to add to, which also skipped the two variables that don't need one. A base image like node:*-slim — no OS CA store, but Node trusts its own bundled roots for everything else — never showed the gap until something needed the proxy's own CA, e.g. corepack enable failing with a self-signed-certificate error. Now only the store-dependent variables (REQUESTS_CA_BUNDLE, PIP_CERT, SSL_CERT_FILE) are skipped when there's no store; NODE_EXTRA_CA_CERTS/DENO_CERT get their own dedicated file regardless.

Dependencies

• Bump github/codeql-action to v4.37.7 (#​300)
• Bump pnpm to v11.22.0 (#​301)

Full Changelog: buildcage/docker@v3.1.1...v3.1.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.