[gha] Bump open-edge-platform/orch-ci/.github/workflows/pre-merge.yml from 2026.0.13 to 2026.0.17 (#592)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alexandru Dimofte <alexandru.dimofte@intel.com>

Author: dependabot[bot]

.github/workflows/e2e-tests.yml

@@ -15,7 +15,7 @@ jobs:
   pre-merge-pipeline:
     permissions:
       contents: read
-    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@24a3a495be45af021486e265cf09a17ac3798405  # 2026.0.13
+    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@b5930c48c1fcdb6b34ffbcd465cff96dabfbde70  # 2026.0.17
     with:
       bootstrap_tools: "base"
       run_version_check: true

.github/workflows/pr-checks.yml

@@ -1,4 +1,4 @@
-# SPDX-FileCopyrightText: (C) 2025 Intel Corporation
+# SPDX-FileCopyrightText: (C) 2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
 ---
@@ -94,7 +94,7 @@ jobs:
       fail-fast: false
       matrix:
         project_folder: ${{ (needs.setup-conditions.outputs.common_condition == 'true' && fromJson('["admin", "app-orch", "cluster-orch", "infra", "root"]')) || fromJson(needs.detect-changed-folders.outputs.changed_apps) }}
-    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@24a3a495be45af021486e265cf09a17ac3798405  # 2026.0.4
+    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@b5930c48c1fcdb6b34ffbcd465cff96dabfbde70  # 2026.0.4
     with:
       bootstrap_tools: "base,helm,yq,jq"
       run_security_scans: true
@@ -113,6 +113,7 @@ jobs:
       prefix_tag_separator: "/"
       project_folder: apps/${{ matrix.project_folder }}
       version_suffix: "-pr-${{ github.event.number }}"
+      trivy_image_skip: "ghcr.io/github/github-mcp-server:latest,ghcr.io/github/gh-aw-mcpg:latest,ghcr.io/github/gh-aw-firewall/agent:latest,ghcr.io/github/gh-aw-firewall/api-proxy:latest,ghcr.io/github/gh-aw-firewall/squid:latest"
     secrets: inherit
 
   final-check: