Update Managed Files

[ChiaAutomation]

Note

Medium Risk
Touches the Dependabot review workflow’s malware scanning script; mistakes could cause false negatives/positives or broken CI for dependency PRs. Changes are mostly mechanical refactors, but they impact security-signal generation.

Overview
Improves the dependabot-cursor-review.yml upstream malware scan step by refactoring bash helpers to avoid local -n nameref usage, passing allowlists as explicit arguments instead.

Tightens scan execution flow by guarding several rg-based heuristics behind a non-empty file list, and makes a small semver parsing tweak to ignore the patch component when evaluating large version jumps.

Reformats malware-scan env inputs to YAML folded scalars (no behavioral change intended) for consistency/readability.

^{Written by Cursor Bugbot for commit 9fbb33e. This will update automatically on new commits. Configure here.}