chore(deps): update dependency aquaproj/aqua to v2

[renovate]

This PR contains the following updates:

Package	Update	Change
aquaproj/aqua	major	v0.8.9 -> v2.30.0
aquaproj/aqua	major	v0.8.7 -> v2.30.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aquaproj/aqua (aquaproj/aqua)

v2.30.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.29.2...v2.30.0

Features

#​2918 #​3005 Use aqua-proxy and hard links instead of shell scripts and bat scripts on Windows

Document: https://github.com/aquaproj/aquaproj.github.io/pull/1049 https://aquaproj.github.io/docs/reference/lazy-install#on-windows

aqua doesn't use symbolic links on Windows because symbolic links have several issues on Windows.

1. Non-administrators can't create symbolic links by default on Windows
2. PowerShell doesn't use the final target of a symbolic link when starting a process or running a native command on Windows

aqua v2.29.2 or older used shell scripts and bat scripts instead of symbolic links and aqua-proxy.

#​885 #​892 #​893 aqua >= v1.12.0, aqua <= v2.29.2

But using shell scripts and bat scripts also had several issues.

1. Using both shell scripts and bat scripts is confusing
2. tools can't be executed on Nushell https://github.com/aquaproj/aqua/issues/2918#issuecomment-2223107022
3. bat scripts can't handle signals properly https://github.com/aquaproj/aqua/issues/2918#issuecomment-2228449541

So aqua v2.30.0 or later uses hard links and aqua-proxy instead of shell scripts and bat scripts. #​2918
aqua installs aqua-proxy and creates hard links to aqua-proxy on $(aqua root-dir)/bin directory.
When aqua updates aqua-proxy, aqua recreates hard links.
From aqua v2.30.0, aqua doesn't use bat scripts so you can remove $(aqua root-dir)/bat directory and remove $(aqua root-dir)/bat from PATH.

Others

#​3004 Update slsa-verifier to v2.6.0
#​3008 Update module github.com/goccy/go-yaml to v1.12.0

v2.29.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.29.1...v2.29.2

Bug Fixes

#​3001 Fix checksums of Cosign

Fixed a bug of aqua v2.29.1

v2.29.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.29.0...v2.29.1

Features

#​2965 list: Add an alias of command line option -installed

aqua list -i

Fixes

#​2981 Fix a bug that the shell completion of specific tools doesn't work

For detail, please see the following issues and pull request.

• https://github.com/lintnet/lintnet/issues/528#issuecomment-2192810380
• https://github.com/urfave/cli/issues/1932
• https://github.com/urfave/cli/pull/1938

Others

Update Go to 1.22.5

v2.29.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.28.1...v2.29.0

Features

#​2929 Support fish completion

Added a sub command aqua completion fish, which outputs scripts for fish completion

You can source the output to enable the completion.

aqua completion fish | source

Or you can write the output to a file.

https://fishshell.com/docs/current/completions.html#where-to-put-completions

aqua completion fish > ~/.config/fish/completions/aqua.fish

v2.28.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.28.0...v2.28.1

Bug Fixes

#​2904 generate: Fix a bug that aqua g -i fails if aqua.yaml doesn't have the field packages
#​2902 info: Fix a bug that user names aren't masked on Windows @​sapphi-red

v2.28.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.27.4...v2.28.0

Features

#​2609 #​2730 #​2632 Support getting a package version from go directive in go.mod or go.work

From Go 1.21, the version of Go is decided by go directive in go.mod or go.work.

https://go.dev/doc/toolchain

e.g.

module github.com/aquaproj/aqua/v2

go 1.22.3

This can cause an issue that the version of Go may be different from the version defined in aqua.yaml.
And we need to define go version in two places.

To solve the issue, this pull request enables aqua to get the version of go from go directive in go.mod or go.work.
You can specify the path to go.mod or go.work by a field go_version_file.

e.g.

packages:
- name: golang/go
  go_version_file: go.mod

Then you can define go version only in go.mod or go.work.

[!CAUTION]
The version of Go must be a semver x.y.z.
You can't omit a patch version.

#​2880 Ignore invalid packages and continue working

When reading aqua.yaml, aqua ignores invalid packages and continues working.
This improves the robustness.

v2.27.4

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.27.3...v2.27.4

Bug Fixes

#​2144 #​2510 #​2871 Fix a bug that update-aqua fails on Windows

Others

Update Go 1.22.2 to 1.22.3

v2.27.3

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.27.2...v2.27.3

Bug Fixes

#​2833 #​2834 Fix a bug that a checksum id of go_build type package is empty

aqua-checksums.json

    {
      "id": "",
      "checksum": "C4D72E482B85570A1A73776EEF47E993B5F8FA6C204E0B1CAA794E4DF4F13521",
      "algorithm": "sha256"
    }

v2.27.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.27.1...v2.27.2

Bug Fixes

#​2830 Improve handling of broken registry JSON files

When aqua reads Standard Registry and github_content Registries, aqua converts them to JSON once and saves them.
And aqua reads JSON files instead of YAML files from the next time.
This improves the performance a bit. #​2517

But if a JSON file got broken, aqua got not working.
In that case, you had to remove the file yourself.

This issue rarely occurs, but this release resolves it.
If a JSON file gets broken, aqua removes and recreates the file.
So aqua continues working and you don't have to remove the file yourself.

v2.27.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.27.0...v2.27.1

Others

#​2824 #​2825 Generate shell completion on brew install @​ryota2357

ref. https://github.com/aquaproj/homebrew-aqua/blob/c4731da7c66a797e93b5efbcc5340b39f86f559b/aqua.rb#L19

⚠️ To enable shell completion, you have to configure FPATH and so on.

#​2809 chore: update aqua-proy to v1.2.6

🎉 New Contributors

Thank you for your contribution!

@​ryota2357 #​2825

v2.27.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.26.0...v2.27.0

Features

#​2702 #​2806 checksum: Support enforcing checksum verification via environment variables

You can enforce checksum verification by environment variables AQUA_ENFORCE_CHECKSUM and AQUA_ENFORCE_REQUIRE_CHECKSUM.

export AQUA_ENFORCE_CHECKSUM=true
export AQUA_ENFORCE_REQUIRE_CHECKSUM=true

This is useful for both CI and local development.

Checksum verification is disabled by default, and you can disable checksum verification by setting.
If you manage a Monorepo and want to make checksum verification mandatory in CI, you can set these environment variables in CI. Then checksum verification is enabled regardless of the setting of aqua.yaml.

And if you want to enforce checksum verification on your laptop, you can set these environment variables in your shell configuration files such as .bashrc and .zshrc.

v2.26.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.25.2...v2.26.0

Features

#​2782 #​2804 generate: add -g option to add packages to a global configuration file

e.g.

$ aqua g -g cli/cli

You can add packages to a global configuration file with -g and -i option.

e.g.

$ aqua g -g -i cli/cli

If there are multiple global configuration files, a first global configuration file is used.

Others

#​2803 Update the help message of remove command

Note that this command remove files from AQUA_ROOT_DIR/pkgs, but doesn't remove packages from aqua.yaml and doesn't remove files from AQUA_ROOT_DIR/bin and AQUA_ROOT_DIR/bat.

v2.25.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.25.1...v2.25.2

Bug Fixes

#​2781 #​2786 list: Fix a bug that packages in that same aqua.yaml is outputted by aqua list --installed

Others

#​2779 #​2788 Update slsa-verifier to v2.5.1
#​2787 Update go directive to 1.22 and refactor codes with Go new features

v2.25.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.25.0...v2.25.1

Bug Fixes

#​1665 #​2757 Fix the verification error of Cosign
#​2764 #​2765 Fix SIGSEGV: segmentation violation of aqua update and aqua generate commands

Others

#​2756 Update the template of aqua.yaml generated by aqua init to follow a yamllint comment rule @​bhundven

v2.25.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.24.1...v2.25.0

Features

#​2749 #​2752 Support excluding some packages from the target of aqua update

e.g. aqua.yaml

packages:
  - name: golang/vuln/[email protected]
    update:

##### If enabled is false, aqua up command ignores the package.
##### If the package name is passed to aqua up command explicitly, enabled is ignored.

##### By default, enabled is true.
      enabled: false

Fixes

#​2747 #​2354 #​2750 #​2751 Improve the logic to get the latest version

We've changed the logic to get the latest version in some commands such as aqua update and aqua generate.
The original logic was to call GitHub API Get a latest release, but a latest release wan't necessarily a latest version.
So we changed the logic to list the recent releases and get a latest version by semver.

v2.24.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.24.0...v2.24.1

Bug Fixes

#​2742 #​2744 fix a bug that aqua g and aqua gr commands don't work for cargo package

This bug was due to crates.io crawler policy.

We are unable to process your request at this time.
This usually means that you are in violation of our crawler policy.

We could resolve the issue by setting the User-Agent header.

v2.24.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.23.2...v2.24.0

Features

#​2709 #​2733 Support listing installed packages

Command line options -installed and -all [-a] were added to aqua list command.

aqua list -installed [-a]

If -installed is set, installed packages are outputted.

e.g.

$ aqua list -installed   
rhysd/actionlint	v1.6.27	standard
suzuki-shunsuke/cmdx	v1.7.4	standard
sigstore/cosign	v1.13.2	standard
suzuki-shunsuke/ghalint	v0.2.9	standard
int128/ghcp	v1.13.2	standard
golangci/golangci-lint	v1.56.2	standard
goreleaser/goreleaser	v1.24.0	standard
reviewdog/reviewdog	v0.17.1	standard

By default, global configuration files are ignored.
To output packages in global configuration files too, please set the option -all [-a].

$ aqua list -a -installed

v2.23.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.23.1...v2.23.2

Fixes

#​2714 Fix a bug that it fails to download large files from GitHub repositories

Use the API RepositoriesService.DownloadContents instead of RepositoriesService.GetContents to download large files from GitHub.

https://pkg.go.dev/github.com/google/go-github/v60/github#RepositoriesService.DownloadContents

DownloadContents returns an io.ReadCloser that reads the contents of the specified file.
This function will work with files of any size, as opposed to GetContents which is limited to 1 Mb files. It is the caller's responsibility to close the ReadCloser.

If you use old aqua and face the following error, please update aqua to v2.23.2 or newer.

unsupported content encoding: none, this may occur when file size > 1 MB, if that is the case consider using DownloadContents

Others

Update Go 1.21.6 to 1.22.0

v2.23.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.23.0...v2.23.1

Bug Fixes

#​2661 #​2662 update-checksum: Fix a bug that update-checksum doesn't work well if packages use both cargo or go_install types and other types

For example, the package eza-community/eza uses cargo type for darwin and windows/arm64 and github_relaese type for other platforms. In this case, aqua update-checksum didn't work well.

https://github.com/aquaproj/aqua-registry/blob/15d67414625ea37e68ea8436dba9413d9bd9b540/pkgs/eza-community/eza/registry.yaml#L2
https://github.com/aquaproj/aqua-registry/blob/15d67414625ea37e68ea8436dba9413d9bd9b540/pkgs/eza-community/eza/registry.yaml#L54-L57

This release fixed the issue.

v2.23.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.22.0...v2.23.0

Features

#​2649 #​2652 cargo: Trim a prefix from cargo package's version

Bug Fixes

#​2642 info: Output AQUA_DISABLE_COSIGN and AQUA_DISABLE_SLSA

https://aquaproj.github.io/docs/reference/security/cosign-slsa/#disable-the-verification-with-cosign-and-slsa-provenance

#​2654 generate-registry: Fix a bug that same version_overrides aren't merged properly

Others

#​2644 Update aqua-proxy to v1.2.5
#​2653 Update JSON Schema

v2.22.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.21.3...v2.22.0

Features

#​2631 #​2633 #​2634 Support disabling the verification with Cosign and SLSA Provenance

You can disable the verification with Cosign and SLSA Provenance if you can't use them.

Why is the feature needed?

[!CAUTION]
This feature is for users who can't use Cosign and slsa-verifier.
Most users can use them, so most users don't need this feature.
aqua installs Cosign and slsa-verifier internally, so you don't need to install them yourself.
If you can use Cosign and slsa-verifier, you should not disable them because they are important for security.

Cosign and sla-verifier access some endpoints such as oauth2.sigstore.dev and fulcio.sigstore.dev.
So to use them you need to allow the access to these endpoints.

But in some use cases you can't or don't want to do that.
For example, your company's network policy might not allow the access to these endpoints.

To resolve the issue, this issue proposes to support disabling the verification with Cosign and slsa-verifier.

How to use

You can use command line options -disable-cosign and -disable-slsa or environment variables AQUA_DISABLE_COSIGN and AQUA_DISABLE_SLSA.

e.g.

aqua [-disable-cosign] [-disable-slsa] i

env AQUA_DISABLE_COSIGN=true AQUA_DISABLE_SLSA=true aqua i

Update dependencies

• Go 1.21.5 to 1.21.6
• goreleaser v1.22.1 to v1.23.0
• go.mod

v2.21.3

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.21.2...v2.21.3

Bug Fixes

#​2585 #​2586 Update checksums of cosign

v2.21.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.21.1...v2.21.2

⚠️ This release has a bug

The bug was already fixed at v2.21.3

Others

#​2582 Fix a bug of release workflow

v2.21.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.21.0...v2.21.1

⚠️ The release failed

https://github.com/aquaproj/aqua/actions/runs/7260967360/job/19781204828#step:10:147

  ⨯ release failed after 2m26s               error=1 error occurred:
	* scoop manifests: could not update "aqua.json": PUT https://api.github.com/repos/aquaproj/scoop-bucket/contents/aqua.json: 403 Resource not accessible by integration []

We fixed the bug and release v2.21.2.

Bug Fixes

#​2534 Fix a bug of root dir on Windows
#​2580 #​2581 Fix a bug that validation fails even if no_asset or error_message is set https://github.com/aquaproj/aqua-registry/pull/18326#issuecomment-1862164476

v2.21.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.20.0...v2.21.0

Features

#​2517 #​2518 perf: Convert Standard Registry and github_content Registries from YAML to JSON when installing them

This update improves the performance to read Registries.
Stanard registry is a huge YAML file over 30,000 lines so it has a little overhead to read it.
By this update, aqua converts Standard Registry and github_content Registries from YAML to JSON.
JSON format decreases the overhead.
aqua converts them internally, so we don't need to do anything.

v2.20.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.19.0...v2.20.0

Features

#​2514 #​2515 Add a field windows_arm_emulation for Windows ARM Emulation

ARM based Windows 11 supports the emulation to run x64 Windows apps.

https://learn.microsoft.com/en-us/windows/arm/add-arm-support#emulation-on-arm-based-devices-for-x86-or-x64-windows-apps

Windows 11 extends that emulation to run unmodified x64 Windows apps on Arm-powered devices.

If the field windows_arm_emulation is true, aqua uses pre built binaries for Windows amd64 on Windows arm64. windows_arm_emulation must be boolean. By default, windows_arm_emulation is false.

windows_arm_emulation is similar with rosetta2.

v2.19.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.18.0...v2.19.0

Features

#​2506 #​2507 which: Add the command line option --version

e.g.

$ aqua which --version yq
v4.40.2

Bug Fixes

#​2508 #​2512 Fix a bug of bash scripts for Git Bash

https://www.shellcheck.net/wiki/SC2086

Bash scripts generated by aqua had a bug that command line arguments having spaces were separated to multiple arguments incorrectly.

$  curl -sSfL https://jsonplaceholder.typicode.com/todos | jq '.[] | .id'
jq: error: Could not open file |: Invalid argument
jq: error: Could not open file .id: No such file or directory

v2.18.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.4...v2.18.0

Features

#​2494 update: Support specifying new package versions

e.g.

aqua up [email protected]

#​2461 Add debug logs of update and generate commands @​dreamjz

Bug Fixes

#​2493 #​2495 generate-registry: Fix the pagination of GitHub API List Releases

v2.17.4

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.3...v2.17.4

Others

#​2401 #​2483 Release aqua to Winget 🎉

https://github.com/microsoft/winget-pkgs/pull/127174

v2.17.3

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.2...v2.17.3

Bug Fixes 🐞

#​2476 #​2479 policy: fix a bug that the Git Repository root's policy file doesn't work well in working trees

Others

#​2470 #​2472 Replace the third party library github.com/codingsince1985/checksum with standard libraries

This library caused the bug #​2467 and we can replace the library with standard libraries easily.
We should use standard libraries as much as possible.

#​2473 Revert #​2469

#​2469 was required to resolve #​2467 , but #​2467 was resolved by #​2472 so #​2469 is unnecessary anymore.

https://github.com/aquaproj/aqua/pull/2472#issuecomment-1812023515

v2.17.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.1...v2.17.2

Bug Fixes

#​2457 #​2458 update: Fix a panic when trying to update commands unmanaged by aqua @​dreamjz
#​2468 policy init: Fix typo in CLI output @​ka2n
#​2467 #​2469 update-checksum: Copy an asset to a temporal file to calculate the checksum correctly

update-checksum: Copy an asset to a temporal file to calculate the checksum correctly

#​2467 #​2469

This fixes a bug that the checksum verification of aws/aws-cli fails because the expected checksum of aws/aws-cli is wrong.

If you face the issue already, please remove checksums of aws/aws-cli from aqua-checksums.json and run aqua update-checksum with aqua v2.17.2 or newer.

aqua-checksums.json

    // Delete this element
    {
      "id": "http/awscli.amazonaws.com/AWSCLIV2-2.13.35.pkg",
      "checksum": "520E1CB49004ECED7DB1CFE70E6FA73EFC6EDDF1CDB38AF535D126F1DB6574C8",
      "algorithm": "sha256"
    },

🎉 New Contributors

Thank you for your contribution!

@​ka2n #​2468

v2.17.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.0...v2.17.1

Bug Fixes 🐞

#​2456 generate-registry: Fix a bug that the order of versions in pkg.yaml is wrong

v2.17.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.16.4...v2.17.0

Features

#​2355 #​2447 Limit the number of versions retrieved by command generate and update @​dreamjz

With aqua v2.16.4 or earlier, aqua generate -s and aqua update -s retrieved all versions and these commands couldn't change the number of versions.
This release adds the command line option --limit/-l to these commands.
The value of this option is the number of versions.
The default value is 30.
If the value is less than zero, all versions are retrieved.

This change would reduced useless GitHub API calls and make these commands faster.

e.g.

aqua g -s # Retrieve 30 versions
aqua g -s -l 10 # Retrieve 10 versions
aqua g -s -l -1 # Retrieve all versions

#​2445 Change the default checksum algorithm from sha512 to sha256

sha256 is enough.
We don't need to use sha512.

#​2428 Add an alias of update-checksum command

aqua upc

#​2105 #​2425 #​2413 generate-registry: Improve the format of version_overrides and improve the logic to generate version_overrides

Bug Fixes 🐞

#​2444 generate-registry: Fix checksum filename for sha1

Others

#​2436 chore(deps): update dependency slsa-framework/slsa-verifier to v2.4.1
#​2395 change the format of prebuilt binaries for Windows to zip

Before:

aqua_windows_amd64.tar.gz
aqua_windows_arm64.tar.gz

After:

aqua_windows_amd64.zip
aqua_windows_arm64.zip

On Windows zip is more user friendly than tar.gz.
And to support Winget for Windows, it seems we need to change the format to zip.

• https://github.com/aquaproj/aqua/issues/2401

  • winget
  ⨯ release failed after 1m11s               error=no zip archives found matching goos=[windows] goarch=[amd64 386] goamd64=v1 ids=[]
Error: Process completed with exit code 1.

⚠️ To upgrade aqua to v2.17.0 or newer on Windows, you need to upgrade aqua to v2.16.1 ~ v2.16.4 once.

e.g.

aqua upa v2.16.4
aqua upa

New Contributors 🎉

Thank you for your contribution!

@​dreamjz #​2447

v2.16.4

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.16.3...v2.16.4

Bug Fixes

#​2420 generate-registry: Get latest versions of cargo packages

v2.16.3

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.16.2...v2.16.3

Bug Fixes

#​2414 #​2415 fix a bug that AQUA_DISABLE_POLIDY doesn't work
#​2412 generate-registry: Improve the judgement of OS by file extensions such as .exe, .pkg, and .dmg

Others

Refactoring

v2.16.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.16.1...v2.16.2

Others

#​2399 #​2400 Support Scoop 🎉

You can install aqua by Scoop on Windows.

scoop bucket add aquaproj https://github.com/aquaproj/scoop-bucket
scoop install aqua

v2.16.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.16.0...v2.16.1

Bug Fixes

#​2393 generate-registry: Fix the usage of -cmd option

Others

#​2394 #​2396 Change the format to zip on Windows at aqua v2.17.0

This is a preparation for the future change.
At aqua v2.17.0, the format of prebuilt binaries for Windows will be changed from tar.gz to zip.
This is because zip is more user friendly for Windows Users and some tools such as Winget expects zip.

https://github.com/goreleaser/goreleaser/blob/b1271d2559e05711e31c6d39c9cbf9eb3e808d5a/internal/pipe/winget/winget.go#L41

To upgrade aqua to v2.17.0 or later on Windows, you need to upgrade aqua to v2.16.1 or later first.
aqua can't upgrade aqua from v2.16.0 or earlier to v2.17.0 or later on Windows.

$ aqua update-aqua v2.16.1
$ aqua update-aqua

v2.16.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.15.1...v2.16.0

Features

#​2380 Support removing packages by command names

e.g.

aqua rm tfcmt # Remove suzuki-shunsuke/tfcmt

v2.15.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.15.0...v2.15.1

Bug Fixes

#​2376 Fix a bug that aqua stops searching configuration files if files are located in either aqua or .aqua directory

How to reproduce the issue

Directory structure

/workspace/
  aqua.yaml
  foo/ # current directory
    aqua/
      aqua.yaml

Run aqua i.

aqua i

Expected behaviour

aqua installs packages with /workspace/aqua.yaml and /workspace/foo/aqua/aqua.yaml.

Actual behaviour

aqua installs packages with only /workspace/foo/aqua/aqua.yaml, and ignores /workspace/aqua.yaml.

v2.15.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.14.1...v2.15.0

Overview

• Features
  • #​2351 #​2366 generate-registry: Get all GitHub Releases by default
  • #​2349 #​2362 generate-registry: Add an option -cmd
• Others
  • #​2359 update-aqua: Add an alias upa to the command

generate-registry: Get all GitHub Releases by default

#​2351 #​2366

The behaviour of generate-registry command was changed.
The command gets all GitHub Releases by default to generate version_overrides.

The option --deep is deprecated. The option has no meaning anymore. The option is kept only for the compatibility.
The option will be removed at aqua v3.

The option --limit (-l) is added. This option takes an integer, which is the maximum number of releases.

e.g.

aqua gr --limit 100

generate-registry: Add an option -cmd

#​2349 #​2362

If -cmd is set, files is set.

e.g.

$ aqua gr -cmd gh cli/cli

##### ...
  files:
    - name: gh

You can specify multiple commands with commas ,.

e.g.

$ aqua gr -cmd age,age-keygen FiloSottile/age

##### ...
  files:
    - name: age
    - name: age-keygen

update-aqua: Add an alias upa to the command

#​2359

update-aqua is too long.

$ aqua upa # update-aqua

v2.14.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.14.0...v2.14.1

Fixes

#​2354 #​2356 generate: Fixed a bug that sometimes aqua g outputs non latest version

versiongetter: Fix getting the latest version

Use GetLatestRelease API before using ListReleases API

#​2245 #​2358 generate: Fixed a bug that aqua g -i fails when a comment exists in the same line with packages:

Get string values from *ast.StringNode.Value instead of ast.MapKeyNode.String()

Others

#​2340 fix(deps): update module github.com/google/go-github/v55 to v56

v2.14.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.13.1...v2.14.0

#​1657 #​2329 Update registries and packages by update command

Finally aqua update command is supported 🎉
You can update all packages and registries, or select updated packages.
You can also select packages and versions with fuzzy finder.

Document

[!NOTE]
You can update registries and packages by Renovate too.
Please see Update packages by Renovate.

You can update registries and packages by aqua update (up) command.

If no argument is passed, all registries and packages are updated to the latest.

##### Update all packages and registries to the latest versions
aqua update

This command has an alias "up"

aqua up

This command

• gets the latest version from GitHub Releases, GitHub Tags, and crates.io and updates aqua.yaml
• doesn't install packages

Updated configuration file paths

This command finds a configuration file aqua.yaml according to the rule and updates only one file.
Once this command finds one file, it stops searching other aqua.yaml.

So if you want to update other files, please change the current directory or specify the configuration file path with the option -c.

aqua -c foo/aqua.yaml update

Update only registries

If you want to update only registries, please use the --only-registry [-r] option.

##### Update only registries
aqua update -r

Update only packages

If you want to update only packages, please use the --only-package [-p] option.

##### Update only packages
aqua update -p

Update only specific commands

You can specify packages with command names. aqua finds packages that have these commands and updates them.

aqua update <command name> [<command name> ...]

e.g.

##### Update cli/cli
aqua update gh

Select packages with Fuzzy Finder

If you want to update only specific packages, please use the -i option.
You can select packages with the fuzzy finder.
If -i option is used, registries aren't updated.

##### Select updated packages with fuzzy finder
aqua update -i

Select the package version with Fuzzy Finder

If you want to select versions, please use the -s option.
You can select versions with the fuzzy finder. You can not only update but also downgrade packages.

##### Select updated packages and versions with fuzzy finder
aqua update -i -s

The field version is ignored

This command doesn't update packages if the version field is used.

packages:
  - name: cli/[email protected] # Update
  - name: gohugoio/hugo
    version: v0.118.0 # Doesn't update

So if you don't want to update specific packages, the version field is useful.

commit hashes are ignored

This command doesn't update commit hashes.

packages:
  - name: google/pprof@d04f2422c8a17569c14e84da0fae252d9529826b # Doesn't update

⚠️ Known Issues

There are some known issues related to the third party library goccy/go-yaml.

null is set to packages wrongly if registries are updated and packages is empty

This issue is because of the third party library goccy/go-yaml.

Before

registries:
- ref: v4.60.0
  type: standard
packages:

Run aqua up.

$ aqua up
INFO[0000] updating a registry                           aqua_version= env=darwin/arm64 new_version=v4.65.0 old_version=v4.60.0 program=aqua registry_name=standard

After

registries:
- ref: v4.65.0
  type: standard
packages: null

Newlines are removed wrongly

This issue is because of the third party library goccy/go-yaml.

• https://github.com/goccy/go-yaml/issues/285

Before

registries:
- ref: v4.60.0
  type: standard

packages:
- name: suzuki-shunsuke/[email protected]

Run aqua up.

$ aqua up
INFO[0000] updating a registry                           aqua_version= env=darwin/arm64 new_version=v4.65.0 old_version=v4.60.0 program=aqua registry_name=standard

After

registries:
- ref: v4.65.0
  type: standard
packages:
- name: suzuki-shunsuke/[email protected]

Discord Channel was open 🎉

This has nothing to do with this release, but we opened a Discord channel 🎉

https://discord.com/channels/1141777454164365382/1162444533959757955

v2.13.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.13.0...v2.13.1

Others

#​2332 chore(deps): update dependency golang/go to v1.21.3
#​2335 fix(deps): update module github.com/google/go-cmp to v0.6.0

v2.13.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.12.2...v2.13.0

This release includes several improvement of Registry settings.
This updates affect Registry developers including aqua-registry's contributors.
There is no direct change for almost all aqua users.

To keep the compatibility and minimize the effect to users, we won't use new features in aqua-registry for at least one month after v2.13.0 is released.
If we apply new features to existing packages of aqua-registry, this requires a major update of aqua-registry because this is a breaking change.

Features

#​2318 #​2320 Add a new field envs to overrides instead of goos and goarch
#​2132 #​2317 Support using go_install or go_build if the platform isn't included in supported_envs
#​1774 #​2314 Support omitting .{{.Format}} in asset and url
#​1876 #​2313 Support short file extensions in format
#​1774 #​2310 Add the template variable AssetWithoutExt to files[].src

Add a new field envs to overrides instead of goos and goarch

#​2318 #​2320

Add a new field envs to overrides.
The syntax of envs is same with supported_envs.

The syntax of envs is more flexible than the combination of goos and goarch.
In some cases we can simplify the code.

For example, the combination of goos and goarch can't express the pair of linux/arm64 and windows/arm64.

overrides:
  - goos: windows
    goarch: arm64

### ...
  - goos: linux
    goarch: arm64

### ...

envs can simplify the code.

overrides:
  - envs:
      - windows/arm64
      - linux/arm64

### ...

Support using go_install or go_build if the platform isn't included in supported_envs

#​2132 #​2317

A new field build is added to Registry settings.
This enables to install packages by go_install or go_build on platforms where prebuilt binaries aren't published.

This is an example usage of the new field build.

packages:
  - type: github_release
    repo_owner: suzuki-shunsuke
    repo_name: tfcmt
    asset: tfcmt_{{.OS}}_{{.Arch}}.{{.Format}}
    format: tar.gz
    supported_envs:
      - linux
    build:
      type: go_build
      files:
        - name: tfcmt
          src: ./cmd/tfcmt
          dir: tfcmt-{{trimV .Version}}

supported_envs is linux, so on platforms other than linux aqua installs tfcmt by go_build.

go_install is also available.

    build:
      type: go_install
      path: github.com/suzuki-shunsuke/tfcmt/v4/cmd/tfcmt

If go_build failed on windows/arm64 and you'd like to exclude windows/arm64, excluded_envs is available.

    build:
      type: go_build
      excluded_envs:
        - windows/arm64
      files

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/aquaproj/test-aqua-renovate-config).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNC4yIiwidXBkYXRlZEluVmVyIjoiMzcuNDMxLjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->