[renovate]

This PR contains the following updates:

Package	Type	Update	Change
yq	tools	patch	4.54.1 → 4.54.2

---

Release Notes

mikefarah/yq (yq)

v4.54.2

Compare Source

• Fixed command injection risk in shell output with -o=shell -r: unsafe values are now quoted and a warning is logged. Use --security-force-never-escape-shell-output to restore the previous unsafe behaviour (GHSA-h2cv-65fq-jgrp)
  • Fixed YAML structure being changed when assigning head comments (#​2847) Thanks @​rootsec1
  • Fixed ireduce to run per pipeline input, matching jq's reduce behaviour (#​2869) Thanks @​00200200
  • Fixed map_values to remove entries when the expression returns nothing (#​2862) Thanks @​yuefdev
  • Fixed preservation of comments on TOML inline table values (#​2879) Thanks @​iamhuman-cheolheelee
  • Fixed INI keys containing colons (#​2886)
  • Fixed YAML line numbers after header preprocessing (#​2939) Thanks @​imharjot
  • Fixed an extra leading comment blank line with CRLF input (#​2856) Thanks @​cestercian
  • Cleaned up failed in-place edits (#​2920) Thanks @​Boulea7
  • Bumped dependencies

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no		no	0.51s
✅ REPOSITORY	git_diff	yes		no		no	0.39s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ REPOSITORY	betterleaks	yes		no		no	1.15s
✅ REPOSITORY	checkov	yes		no		no	11.85s
✅ REPOSITORY	devskim	yes		no		no	1.31s
✅ REPOSITORY	dustilock	yes		no		no	0.01s
✅ REPOSITORY	grype	yes		no		no	50.17s
✅ REPOSITORY	kingfisher	yes		no		no	6.65s
✅ REPOSITORY	osv-scanner	yes		no		no	0.12s
✅ REPOSITORY	secretlint	yes		no		no	0.83s
✅ REPOSITORY	syft	yes		no		no	1.55s
✅ REPOSITORY	trivy	yes		no		no	7.7s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.12s
✅ REPOSITORY	trufflehog	yes		no		no	1.8s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository