Fixes CVE-2025-49014 which was introduced in 1.8.0

tests/jq.test

@@ -2499,3 +2499,11 @@ foreach .[] as $x (0, 1; . + $x)
 3
 2
 4
+
+# regression test for CVE-2025-49014 (use of fmt after free)
+# tests with both empty string literal and empty string created by function
+# as they seems to behave referecne wise differently.
+strflocaltime("" | ., @uri)
+0
+""
+""