v7.4.2

What's Changed

• ci: Bump actions/cache from 4.2.3 to 6.1.0 by @dependabot[bot] in #345
• ci: Bump actions/checkout from 4 to 7 by @dependabot[bot] in #347
• ci: Bump softprops/action-gh-release from 2.2.2 to 3.0.3 by @dependabot[bot] in #346
• fix(linter): SC2242 counts case/loop nesting instead of flagging it (closes #331) by @noahgift in #332
• Drop the unused renacer dev-dependency: x86_64-only, broke every aarch64 build of a crate nothing links (Refs PMAT-352) by @noahgift in #353
• SEC005: a secret-format prefix is only a prefix at a token start — sk- inside disk-watch is not an OpenAI key (Refs PMAT-350) by @noahgift in #351
• SC2242 reports an English sentence as an error: it counts case depth in raw source (PMAT-355) by @noahgift in #356
• SC2086/SC2154 fire on $name inside '...' and after a trailing #: lint them against mask_inert (#362) by @noahgift in #363
• SC2107: an operator inside $( ), $(( )) or backticks is not a test operator (#366) by @noahgift in #367
• Eight rules read a single-quoted awk program as shell: add them to QUOTE_SENSITIVE_RULES (#364) by @noahgift in #365
• nightly: Linux assets run on glibc 2.35 and aarch64-linux ships (#380, #385) by @noahgift in #394
• ci(nightly): build when the nightly tag is not HEAD, not when a commit landed in the last 24h by @noahgift in #397
• lint: SC1087 read $s[0] in a single-quoted jq program as an array expansion, SEC012 read .eval_count as eval (#375) by @noahgift in #399
• SC2210/SC2225/SC2058: find assignments and test builtins by word position, not by line regex (#370 #371) by @noahgift in #372
• lint: DET002 date conversions, DET002 continuation lines, SC1066 quoted words (folds #387 #378, Refs #386 #376 #388) by @noahgift in #392
• R4 closeout: PMAT-355 merged in #356, so v7.4.2 has one open entry left — the release itself (PMAT-354) by @noahgift in #358
• Release v7.4.2, second cut: the paperwork names the thirteen fixes a tag from main carries, not the four the first cut named by @noahgift in #416
• Nightly Full Gate: wasm latency budgets measured with --release, the build C-WASM-002 describes by @noahgift in #427
• SEC012: eval of a variable assigned from $(yq ...)/$(jq ...)/$(curl ...) fires like the direct form by @noahgift in #430
• book: gates.md lists make latency-gate (release-gate and nightly run it, the PR gate does not) by @noahgift in #433
• SC2075: a backslash inside single quotes is literal — no false positive on '\' followed by another quoted string (#439) by @noahgift in #441
• Release v7.4.2, third cut: the paperwork names the fifteen fixes a tag from main carries (Refs PMAT-354) by @noahgift in #442
• epics: v7.4.2 open train (core PMAT-354), v7.4.3 look-ahead patch by @noahgift in #443
• keyring CLI tests each own a TempDir keyring: init and list no longer race on the real $HOME keyring (#444) by @noahgift in #445

New Contributors

• @dependabot[bot] made their first contribution in #345

Full Changelog: v7.4.1...v7.4.2