chore(deps, rust): update rust-lang.rust-analyzer, sonarsource.sonarlint-vscode in devcontainer.json

[embedded-releaser-app]

Note

Before merging this PR, please conduct a manual test checking basic functionality of the updated plug-ins. There are limited automated tests for the VS Code Extension updates.

Updates sonarsource.sonarlint-vscode from 5.6.0 to 5.8.1

Release notes

For full release notes, see JIRA

For full release notes, see JIRA

For full release notes, see JIRA

Updates rust-lang.rust-analyzer from 0.3.2989 to 0.3.3016

Release notes

Commit: bb3bbbd
Release: 2026-08-17 (v0.3.3016)

New Features

• #22325 (first contribution) support Reborrow and CoerceShared built-in derives.

Fixes

• #23109 (first contribution) offer replace_arith_op on references, too.
• #23159 (first contribution) don't panic on non-ASCII character after a short frontmatter closing fence.
• #23078 (first contribution) normalize associated types in orphan check.
• #23118 avoid panic with mismatched associated type parameters.
• #23107 fix off-by-one in lifetime binders when lowering dyn Trait<'a>.
• #23103 don't consider locals of async functions as upvars of the returned coroutine.
• #23072 replace unresolved type variables during impl selection.
• #23138 return an error const to the solver when consteval fails.
• #23115 lower range expressions during HIR lowering.
• #23127 handle divergence correctly in cases like break return.
• #23120 fix a panic in resolve_path.
• #23117 add parentheses in some common cases of type_mismatch.
• #23122 handle functions defined by macros in inline_call.
• #22225 check original type in replace_arith_op.
• #23111 ensure every workspace has a proc macro server.
• #23140 fix rustc_private support for rustc_proc_macro.

Internal Improvements

• #23112 avoid newlines in "overly long loop" message.
• #23123 let pad16 take an enum instead of a bool.
• #23121 build armhf binaries inside a container.
• #23108 support multiple stable releases in one day.

See also the changelog post.

Commit: 57411b3
Release: 2026-08-10 (v0.3.3005)

New Features

• #23082 (first contribution) add replace_arith_with_strict assist.
• #23043 remove broken and incomplete borrow checker.
• #23042 support #[rustc_must_implement_one_of] in assists.

Performance Improvements

• #23056 optimize item tree memory usage (saves 29 MB on self).
• #23001 save an allocation in lifetime handling.

Fixes

• #23014 (first contribution) accept trailing self in paths.
• #23020 (first contribution) parse inner attributes in loop bodies.
• #23070 (first contribution) avoid adding some extra spaces to function signatures.
• #23055 allow struct literals in match guards.
• #23077 parse 0 .. | _.
• #23016 resolve assignment LHS in its expression scope.
• #23085 merge the inference code for let expressions and statements.
• #23008 fix ExprScopes handling of expressions inside patterns.
• #23017 allow diverging RHS in destructuring assignments.
• #23040 fix upvars query for const blocks inside closures.
• #23096 don't declare a value namespace constructor for struct and enum variants if it doesn't exist.
• #22899 support macros in #[doc] attributes in IDE features.
• #23059 fix a panic caused by bound variables.
• #22922 don't panic on m!('a).
• #23019 don't panic on [usize; ""].
• #22974, #23034 propagate macro expansion depth across body and block boundaries.
• #23021 always allocate anonymous consts for C strings and byte string literals.
• #23032 account for trailing line continuations in byte strings.
• #23028 preserve trailing text when InsertReplaceEdit is unsupported.
• #23036 make pub macros available to reverse dependencies.
• #23054 parse inline asm with keyword as operand name.
• #22994, #23015 exclude unit, never and unknown types from term search.
• #21846 pass -Zjson-target-spec to Cargo when needed.

Internal Improvements

• #23071 (first contribution) support built-in derives in Param::parent_fn.
• #23010 install a single-threaded rayon pool in non-parallel analysis-stats.
• #23037 support quiet mode in rust-analyzer diagnostics.
• #23041 only show progress bars on TTYs.
• #23047 use rustc_type_ir::try_visit.
• #23013 bump salsa.
• #23002 bump gen-lsp-types.

See also the changelog post.

Commit: b54a82b
Release: 2026-08-03 (v0.3.2997)

New Features

• #22306 emit inactive-code diagnostics in macros.
• #22959 support CovariantUnsafeCell.

Performance Improvements

• #22966 avoid having a separate query for defined opaques.

Fixes

• #22886 (first contribution) fix a glob import shadowing bug.
• #22964 (first contribution) show qualified paths on collisions in type-mismatch.
• #22947 (first contribution) fix error code for mismatched-arg-count.
• #22977 (first contribution) handle disallowed names in unlinked_file.
• #22996 (first contribution) parse multi-line component arrays in rust-toolchain.toml
• #22743 resolve path in all namespaces in resolve_path.
• #22943 mark auto traits as coinductive.
• #22932 fix a panic with large discriminant values.
• #22930 fix a panic on <S as S>::S.
• #22933 fix a Semantics panic on include!.
• #22938 fix a panic with HRTB closure arguments.
• #22957 hide parameter inlay hints with matching raw identifiers.
• #22965 don't allocate anonymous consts for bare paths in blocks.
• #22956 double stack size to 16MB.
• #22948 implement slice_get_unchecked in MIR debug execution, to fix bitflags!.
• #22992 don't panic on a self-referential impl Trait function.
• #22993 handle backslash in r"\{foo}".
• #23004 parse || 1.. .field.
• #23003 add reference when completing a parameter where coercion applies.
• #22940 match virtual paths by components.
• #22660 respect references.exclude{Tests,Imports} in references lens.
• #22903 only try to parse discoverConfig command stdout.

Internal Improvements

• #22937 (first contribution) disallow postix snippets with item scope.
• #22958 (first contribution) temporarily re-add --lockfile-path support.
• #22909 (first contribution) make analysis-stats progress bar Unicode-safe.
• #22945 store "liberated" closure signatures in InferenceResult.
• #22864, #22997 fully port ExprScopes to take a visitor.
• #22808 remove clone_for_update and mutable rowan APIs.
• #22998 bump rowan to the version without mutable APIs.
• #22969 simplify SourceChange.
• #22939 bump rustc_next_trait_solver.

See also the changelog post.

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	24		0	0	0.82s
✅ ACTION	zizmor	24	0	0	0	5.22s
✅ DOCKERFILE	hadolint	3		0	0	0.48s
✅ JSON	npm-package-json-lint	yes		no	no	0.57s
✅ JSON	prettier	22	3	0	0	1.19s
✅ JSON	v8r	22		0	0	12.16s
✅ MARKDOWN	markdownlint	12	0	0	0	1.6s
✅ MARKDOWN	markdown-table-formatter	12	1	0	0	0.32s
✅ REPOSITORY	checkov	yes		no	no	31.22s
✅ REPOSITORY	gitleaks	yes		no	no	2.34s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	71.43s
✅ REPOSITORY	osv-scanner	yes		no	no	0.65s
✅ REPOSITORY	secretlint	yes		no	no	1.62s
✅ REPOSITORY	syft	yes		no	no	2.38s
✅ REPOSITORY	trivy	yes		no	no	14.41s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.47s
✅ REPOSITORY	trufflehog	yes		no	no	3.67s
⚠️ SPELL	lychee	86		1	0	12.37s
✅ YAML	prettier	32	0	0	0	1.45s
✅ YAML	v8r	32		0	0	14.73s
✅ YAML	yamllint	32		0	0	1.18s

Detailed Issues

⚠️ SPELL / lychee - 1 error

📝 Summary
---------------------
🔍 Total..........133
🔗 Unique.........112
✅ Successful.....127
⏳ Timeouts.........0
🔀 Redirected......13
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1
⛔ Unsupported......1

Errors in .github/TOOL_VERSION_ISSUE_TEMPLATE.md
[403] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads (at 30:7) | Rejected status code: 403 Forbidden

Hint: Followed 13 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/salesforce@v9.5.0 (59 linters)
• oxsecurity/megalinter/flavors/javascript@v9.5.0 (62 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository