[renovate]

This PR contains the following updates:

Package	Type	Update	Change
mikefarah/yq	action	minor	v4.53.6 → v4.54.2

---

Release Notes

mikefarah/yq

v4.54.2

Compare Source

• Fixed command injection risk in shell output with -o=shell -r: unsafe values are now quoted and a warning is logged. Use --security-force-never-escape-shell-output to restore the previous unsafe behaviour (GHSA-h2cv-65fq-jgrp)
  • Fixed YAML structure being changed when assigning head comments (#​2847) Thanks @​rootsec1
  • Fixed ireduce to run per pipeline input, matching jq's reduce behaviour (#​2869) Thanks @​00200200
  • Fixed map_values to remove entries when the expression returns nothing (#​2862) Thanks @​yuefdev
  • Fixed preservation of comments on TOML inline table values (#​2879) Thanks @​iamhuman-cheolheelee
  • Fixed INI keys containing colons (#​2886)
  • Fixed YAML line numbers after header preprocessing (#​2939) Thanks @​imharjot
  • Fixed an extra leading comment blank line with CRLF input (#​2856) Thanks @​cestercian
  • Cleaned up failed in-place edits (#​2920) Thanks @​Boulea7
  • Bumped dependencies

v4.54.1: - if-then-else

Compare Source

• Added jq style if-then-elif-else-end conditional operator (#​2871) Thanks to @​anandghegde
  • Added @base64url/@base64urld operators (RFC 4648 §5) (#​2827) Thanks @​MsfPablo
  • Fixed: preserve explicit assignments in read-only expressions (#​2850) Thanks @​RRXXZZYY
  • Fixed: error on int64 overflow in +, -, * instead of silently wrapping (#​2826) Thanks @​MsfPablo
  • Fixed(toml): quote empty keys (#​2870) Thanks @​jakezwang
  • Fixed: /dev/null was triggering colour output (#​2852) Thanks @​laraibg786
  • Fixed dead snapcraft confinement link in README (#​2840) Thanks @​ShurongCAO
  • Bumped dependencies

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.