🌱 Bump the dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the dependencies group with 3 updates in the /hack/tools directory: github.com/itchyny/gojq, github.com/mikefarah/yq/v4 and k8s.io/apimachinery.

Updates github.com/itchyny/gojq from 0.12.17 to 0.12.18

Release notes

Sourced from github.com/itchyny/gojq's releases.

Release v0.12.18

• implement trimstr/1, toboolean/0 function
• fix last/1 to be included in builtins/0
• fix --indent 0 to preserve newlines
• fix string repetition to emit error when the result is too large
• increase the array index limit to 536870912 (2^29)
• stop numeric normalization for concurrent execution (see 1ace748d08df)
• support binding expressions with binary operators (1 + 2 as $x | -$x)
• improve gojq.NewIter to be a generic function
• improve logic for getting file contents on JSON parse error
• improve JSON parsing to preserve the precision of floating-point numbers
• improve YAML parsing performance and preserve the precision of large integers
• improve performance and reduce memory allocation of long-running queries

Changelog

Sourced from github.com/itchyny/gojq's changelog.

v0.12.18 (2025-12-02)

• implement trimstr/1, toboolean/0 function
• fix last/1 to be included in builtins/0
• fix --indent 0 to preserve newlines
• fix string repetition to emit error when the result is too large
• increase the array index limit to 536870912 (2^29)
• stop numeric normalization for concurrent execution (see 1ace748d08df)
• support binding expressions with binary operators (1 + 2 as $x | -$x)
• improve gojq.NewIter to be a generic function
• improve logic for getting file contents on JSON parse error
• improve JSON parsing to preserve the precision of floating-point numbers
• improve YAML parsing performance and preserve the precision of large integers
• improve performance and reduce memory allocation of long-running queries

Commits

• fa534a1 bump up version to 0.12.18
• d7e1531 update CHANGELOG.md for v0.12.18
• 672cc79 update dependencies
• 2263e18 update actions/checkout to v6
• 5d8a53c add more tests for empty strings and NO_COLOR
• 97274d3 make use of cmp package for comparisons
• 3e31863 merge identical cases for getting operator functions
• e4d456b avoid variable names that shadow built-in functions
• 19a3975 stop replacing capturing group syntax
• 5bb6d33 support binding expressions with binary operators (fix #283)
• Additional commits viewable in compare view

Updates github.com/mikefarah/yq/v4 from 4.48.1 to 4.49.2

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.49.2

• Fixing escape character bugs 😓 #2517
• Fixing snap release pipeline #2518 Thanks @​aalexjo

v4.49.1 - Security Flags and TOML fixes

• Added --security flags to disable env and file ops #2515
• Fixing TOML ArrayTable parsing issues #1758
• Fixing parsing of escaped characters #2506

v4.48.2

• Strip whitespace when decoding base64 #2507
• Upgraded to go-yaml v4! (thanks @​ccoVeille, @​ingydotnet)
• Add linux/loong64 to release target (thanks @​znley)
• Added --shell-key-separator flag for customizable shell output format #2497 (thanks @​rsleedbx)
• Bumped dependencies

Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.49.2:

• Fixing escape character bugs 😓 #2517
• Fixing snap release pipeline #2518 Thanks @​aalexjo

4.49.1:

• Added --security flags to disable env and file ops #2515
• Fixing TOML ArrayTable parsing issues #1758
• Fixing parsing of escaped characters #2506

4.48.2:

• Strip whitespace when decoding base64 #2507
• Upgraded to go-yaml v4! (thanks @​ccoVeille, @​ingydotnet)
• Add linux/loong64 to release target (thanks @​znley)
• Added --shell-key-separator flag for customizable shell output format #2497 (thanks @​rsleedbx)
• Bumped dependencies

Commits

• 7ccaf8e Bumping version
• a1a27b8 Updating release notes
• 1b91fc6 Removing escape char processing from strenv #2517
• 9e0c5fd Fixing escape charaters again 😢 #2517
• 5d0481c Running build step on launchpad remote builder with supported architectures
• f91176a Fixed architecture builders
• 8e86bdb Attempting to fix snap again
• fc164ca Updating README with latest yq help
• 810e9d9 Syncing how-it-works from gitbook branch
• 45be35c Bumping version
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.34.1 to 0.34.2

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[k8s-ci-robot]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign neolit123 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment