[dependabot]

Bumps github.com/mikefarah/yq/v4 from 4.54.2 to 4.54.3.

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.54.3

• Fixed preservation of YAML aliases across documents within the same input stream, without leaking anchors between files (#2956) Thanks @​ingydotnet
• Restricted --split-exp output paths to the current directory by default. Use --security-allow-write-any-path with trusted input to restore the previous behaviour (#2965)
• Fixed --inplace to reject direct updates to read-only files and replace symbolic links instead of modifying their targets. (#2973)

Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.54.3:

• Fixed preservation of YAML aliases across documents within the same input stream, without leaking anchors between files (#2956) Thanks @​ingydotnet
• Restricted --split-exp output paths to the current directory by default. Use --security-allow-write-any-path with trusted input to restore the previous behaviour (#2965)
• Fixed --inplace to reject direct updates to read-only files and replace symbolic links instead of modifying their targets. A link to a read-only target can still be replaced, preserving the target's permissions (#2973)

Commits

• f2944b8 Bumping version
• 0cf6547 Release notes
• f48f1de Fix inplace writing (#2973)
• b809323 Prevent split-exp from writing outside the working directory (#2965)
• 4fdfdb4 Preserve aliases across YAML documents (#2956)
• 5398715 release notes
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.27%. Comparing base (5c54851) to head (05c5545).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #614   +/-   ##
=======================================
  Coverage   73.27%   73.27%           
=======================================
  Files          28       28           
  Lines        1474     1474           
=======================================
  Hits         1080     1080           
  Misses        324      324           
  Partials       70       70           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.