Update dependency goreleaser/nfpm to v2.49.0 (re-pin the matching SHA256_AMD64/ARM64 ARG lines by hand — see images/*/Dockerfile)

images/aptly-deb-builder/Dockerfile

@@ -6,7 +6,7 @@
 #   - the real Debian toolchain, for projects that already have a debian/ dir
 #
 # renovate: datasource=github-releases depName=goreleaser/nfpm
-ARG NFPM_VERSION=2.47.0
+ARG NFPM_VERSION=2.49.0
 ARG NFPM_SHA256_AMD64=3f1cf344bd0b57373ca55636a78c08b0491f7293d609a456a9ac3b0b150fda97
 ARG NFPM_SHA256_ARM64=27419eb382695a7942be8ad52259f3ec1854fad001b3ae4baed34ce39a223b97
 ARG RUNTIME_IMAGE=debian:trixie-slim

images/aptly-server/Dockerfile

@@ -19,7 +19,7 @@ ARG GO_IMAGE=golang:1.25-trixie
 ARG RUNTIME_IMAGE=debian:trixie-slim
 
 # renovate: datasource=github-releases depName=mikefarah/yq
-ARG YQ_VERSION=4.54.1
+ARG YQ_VERSION=4.53.3
 ARG YQ_SHA256_AMD64=fa52a4e758c63d38299163fbdd1edfb4c4963247918bf9c1c5d31d84789eded4
 ARG YQ_SHA256_ARM64=578648e463a11c1b6db6010cbf41eafed6bee79466fcffa1bb446672cf7945ea