Update dependency compliance-trestle to v4.0.2

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Change	Age	Confidence
compliance-trestle	==4.0.1 → ==4.0.2

---

Release Notes

oscal-compass/compliance-trestle (compliance-trestle)

v4.0.2

Compare Source

Bug Fixes

• Align OSCAL version references and fix CONTRIBUTING.md typos
  (#​2141,
  7b614c6)

• Allow empty parameter labels in OSCAL imports
  (#​2177,
  0e354a5)

• Correct additional CONTRIBUTING.md typos
  (#​2141,
  7b614c6)

• Cryptography (#​2199,
  cb54edf)

• Datetime.datetime.utcnow() is deprecated
  (#​2173,
  87fe40b)

• Invalid escape sequence warning while runnign tests
  (#​2172,
  0848cb4)

• Invalid escape sequence warning while running tests
  (#​2172,
  0848cb4)

• Switch from rev4 to rev5 in test files
  (#​2116,
  64639b0)

• Update to sonarqube replacement action
  (90e731a)

• Use timezone-aware datetimes in cache _time_since_modification
  (#​2130,
  16cde53)

• cache: Avoid duplicate file read in get_raw
  (#​2166,
  921145b)

• deps: Bump actions/cache from 5.0.3 to 5.0.4
  (#​2176,
  a9bb479)

• deps: Bump actions/create-github-app-token from 2.2.1 to 3.0.0
  (#​2157,
  42557af)

• deps: Bump actions/create-github-app-token from 3.0.0 to 3.1.1
  (#​2196,
  f2abb5c)

• deps: Bump actions/upload-artifact from 7.0.0 to 7.0.1
  (#​2198,
  bccc714)

• deps: Bump cryptography from 46.0.5 to 46.0.6
  (#​2180,
  4bf82c0)

• deps: Bump cryptography from 46.0.6 to 46.0.7
  (#​2194,
  11bacba)

• deps: Bump github/codeql-action from 4.32.6 to 4.34.1
  (#​2175,
  72b0e2d)

• deps: Bump github/codeql-action from 4.34.1 to 4.35.1
  (#​2183,
  8c5784e)

• deps: Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0
  (#​2197,
  66627af)

• deps: Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0
  (#​2182,
  582171f)

• deps: Bump SonarSource/sonarqube-scan-action from 7.0.0 to 7.1.0
  (#​2192,
  49c5ef0)

• model-utils: Harden indexed alias resolution path
  (#​2171,
  36d13be)

• model-utils: Resolve indexed terminal alias
  (#​2171,
  36d13be)

• model-utils: Reuse helper for indexed alias resolution
  (#​2171,
  36d13be)

Chores

• ci: Rerun lint for #​2130
  (#​2130,
  16cde53)

• ci: Rerun lint for #​2166
  (#​2166,
  921145b)

Code Style

• cache-test: Apply ruff formatting
  (#​2130,
  16cde53)

Documentation

• Update current OSCAL references to 1.2.1
  (#​2141,
  7b614c6)

Refactoring

• cache: Simplify get_raw single-read path
  (#​2166,
  921145b)

Testing

• cache: Add UTC coverage for mtime age calc
  (#​2130,
  16cde53)

• fs: Add regression coverage for alias resolution
  (#​2171,
  36d13be)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.