diff --git a/.gitignore b/.gitignore
index c6bba5913..ea37edcf7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -128,3 +128,6 @@ dist
 .yarn/build-state.yml
 .yarn/install-state.gz
 .pnp.*
+
+# One-off scripts
+*.sh
diff --git a/.trunk/.gitignore b/.trunk/.gitignore
index 1e2465290..15966d087 100644
--- a/.trunk/.gitignore
+++ b/.trunk/.gitignore
@@ -6,3 +6,4 @@
 plugins
 user_trunk.yaml
 user.yaml
+tmp
diff --git a/.trunk/configs/.markdownlint.yaml b/.trunk/configs/.markdownlint.yaml
index e99a2ead1..338305813 100644
--- a/.trunk/configs/.markdownlint.yaml
+++ b/.trunk/configs/.markdownlint.yaml
@@ -8,3 +8,13 @@ line_length: false
 spaces: false
 url: false
 whitespace: false
+
+# Override individual rules based on our README files
+first-line-heading: false
+no-inline-html:
+  allowed_elements:
+    - a
+    - picture
+    - source
+    - img
+    - p
diff --git a/.trunk/configs/.shellcheckrc b/.trunk/configs/.shellcheckrc
new file mode 100644
index 000000000..8c7b1ada8
--- /dev/null
+++ b/.trunk/configs/.shellcheckrc
@@ -0,0 +1,7 @@
+enable=all
+source-path=SCRIPTDIR
+disable=SC2154
+
+# If you're having issues with shellcheck following source, disable the errors via:
+# disable=SC1090
+# disable=SC1091
diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 431576b2a..dafc61c04 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -2,32 +2,35 @@
 # To learn more about the format of this file, see https://docs.trunk.io/reference/trunk-yaml
 version: 0.1
 cli:
-  version: 1.18.0
+  version: 1.19.0
 # Trunk provides extensibility via plugins. (https://docs.trunk.io/plugins)
 plugins:
   sources:
     - id: trunk
-      ref: v1.4.0
+      ref: v1.4.2
       uri: https://github.com/trunk-io/plugins
 # Many linters and tools depend on runtimes - configure them here. (https://docs.trunk.io/runtimes)
 runtimes:
   enabled:
+    - go@1.21.0
     - node@18.12.1
     - python@3.10.8
 # This is the section where you manage your linters. (https://docs.trunk.io/check/configuration)
 lint:
   enabled:
-    - trivy@0.48.0
+    - shellcheck@0.9.0
+    - shfmt@3.6.0
+    - trivy@0.48.2
     - yamllint@1.33.0
-    - semgrep@1.52.0
+    - semgrep@1.55.2
     - gitleaks@8.18.1
     - actionlint@1.6.26
     - git-diff-check
-    - markdownlint@0.37.0
+    - markdownlint@0.38.0
     - osv-scanner@1.5.0
-    - prettier@3.1.0
-    - svgo@3.0.5
-    - trufflehog@3.63.2
+    - prettier@3.1.1
+    - svgo@3.2.0
+    - trufflehog@3.63.7
   disabled:
     # tfsec and checkov are replaced by Trivy
     - tfsec
@@ -38,6 +41,9 @@ lint:
         - analyze/wasm/**
         - protocol/gen/**
         - "**/LICENSE"
+        - "**/CHANGELOG.md"
+        - .github/CODEOWNERS
+        - examples/**
   threshold:
     - linters: [markdownlint]
       level: medium