chore(deps-dev): Bump shfmt-py from 4.1.0 to 4.2.0

[dependabot]

Bumps shfmt-py from 4.1.0 to 4.2.0.

Release notes

Sourced from shfmt-py's releases.

v4.2.0

Bundles shfmt v3.14.1 (upstream release), up from 3.14.0 in v4.1.0.

- repo: https://github.com/MaxWinterstein/shfmt-py
  rev: v4.2.0
  hooks:
    - id: shfmt

What's in shfmt 3.14.1

An upstream bugfix release. Nothing in shfmt-py changes how it is invoked, so this is a drop-in update:

• Heredocs nested inside command substitutions are indented correctly again (#1403)
• <<- heredoc bodies keep literal tabs instead of having them rewritten to spaces
• Heredocs without dashes nested inside <<- ones are no longer indented — that output had stopped parsing
• Zsh: short forms like $#"$foo" and $+"$foo" keep their prefix (#1405)
• Escaped characters such as \* no longer act as glob metacharacters when expanding
• Unclosed extended operator groups like @(a are treated as literals instead of panicking

If your scripts contain heredocs, this release may reformat them — that is the fix, not a regression.

Packaging

• LICENSE is now the verbatim MIT text and nothing else, so GitHub's sidebar detects the repository as MIT instead of "Other". The shellcheck-py attribution moved to NOTICE, which is listed in license-files and still ships in every sdist and wheel next to LICENSE and LICENSE-shfmt. The declared MIT AND BSD-3-Clause expression is unchanged (#85).

Artifacts are published via PyPI Trusted Publishing with PEP 740 attestations, as in v4.1.0.

Full Changelog: MaxWinterstein/shfmt-py@v4.1.0...v4.2.0

Commits

• 259c873 Update dependency cli/cli to v2.100.0 (#90)
• 0debb4d Update dependency aquaproj/aqua-registry to v4.558.1 (#88)
• c64cb1d Update dependency mvdan/sh to v3.14.1 (#91)
• fb8e0c4 Update dependency astral-sh/uv to v0.12.10 (#89)
• 96870f4 [pre-commit.ci] pre-commit autoupdate (#87)
• 1cb9d72 Update dependency aquaproj/aqua-registry to v4.558.0 (#86)
• 7003f7d Split the attribution out of LICENSE so GitHub detects MIT (#85)
• 02a8123 Sync README rev to v4.1.0 (#84)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)