chore(deps): update all minor and patch dependencies#61
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
ddc45c8 to
9027d2e
Compare
edbca37 to
af80514
Compare
a4707dc to
7813e7f
Compare
cb1bf16 to
0984124
Compare
02f0220 to
bc84f7c
Compare
c17ef70 to
fbc2561
Compare
5ed3add to
4c7163b
Compare
aafffe2 to
32cde77
Compare
b7ef631 to
e865137
Compare
3b6c911 to
b2191a7
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.3.0→v4.3.1v2.1.1→v2.2.2v7.0.1→v7.1.0v5.5.0→v5.6.0v2.53.9→v2.60.1v4.0.2→v4.0.4v4.407.0→v4.526.02.8.2→2.13.0v2.0.1→v2.1.6v6.18.0→v6.19.2v5.8.0→v5.10.0v3.11.1→v3.12.0v3.0.2→v3.0.3v1.66.1→v1.72.0v2.3.2→v2.6.2v0.0.10→v0.1.2v1.5.3→v1.5.6v1.0.0→v1.4.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
actions/checkout (actions/checkout)
v4.3.1Compare Source
actions/create-github-app-token (actions/create-github-app-token)
v2.2.2Compare Source
Bug Fixes
v2.2.1Compare Source
Bug Fixes
v2.2.0Compare Source
Bug Fixes
Features
v2.1.4Compare Source
Bug Fixes
v2.1.3Compare Source
Bug Fixes
v2.1.2Compare Source
Bug Fixes
actions/github-script (actions/github-script)
v7.1.0Compare Source
What's Changed
actions/upload-artifactby @joshmgross in #512npm audit fixby @joshmgross in #515permissionsin workflows and update actions by @joshmgross in #531octokitREADME updates for v7 by @joshmgross in #557scriptby @joshmgross in #603New Contributors
Full Changelog: actions/github-script@v7...v7.1.0
actions/setup-go (actions/setup-go)
v5.6.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v5...v5.6.0
aquaproj/aqua (aquaproj/aqua)
v2.60.1Compare Source
d5b02b2fix(unarchive): prevent archive extraction from writing outside the destinationFor more details, please see the security advisory.
*.sigand*.pemfiles are no longer included in the release assets*.bundlefiles are renamed to*.sigstore.jsonFixes
#4938 Remove GitHub Release Attestation verification
v2.60.0Compare Source
Features
#4894 Update ghtkn-go-sdk to v0.3.0 to support new features suche as backends and disabling device flow
New Contributors
v2.59.1Compare Source
Fixes
#4865 gr: don't treat *.minisig as checksum files @scop
v2.59.0Compare Source
Features
#4517 Get checksums from GitHub API Release Asset Digest
v2.58.1Compare Source
Fixes
#4786 checksum: Change the algorithm to sha256 when registry file isn't cached
v2.58.0Compare Source
Features
#4733 #4742 #4755 Add the variants override mechanism with libc detection
https://aquaproj.github.io/docs/reference/registry-config/overrides/#variants
#4667 Refactor GitHub release attestations control naming @scop
#4634 Get a GitHub access token from AQUA_GITHUB_TOKEN and pass it to gh command if GH_TOKEN and GITHUB_TOKEN aren't set
Document
#4729 Update edit URL in docusaurus configuration @dsychin
#4756 Add musl vs glibc section to registry style guide
v2.57.2Compare Source
Fixes
#4719 Fix jar support
#4722 Map x86-64 to amd64
#4688 Normalize CRLF line endings in checksum file parser
Documentation
#4668 Deprecate signer-workflow @scop
#4663 JSON Schema: signer-workflow string format @scop
v2.57.1Compare Source
🐛 Bug Fixes
#4659 Fix a bug that
aqua update-checksumdoesn't verify checksum files using tools like Cosignv2.57.0Compare Source
Features
#4625 Support executing .jar
If
aqua whichreturns a.jarfile, aqua executes it byjava -jar.This requires
javacommand.Fixes
#4629 Re-add
envfield to logv2.56.7Compare Source
Bug Fixes
#4585 remove: fix a bug that
-idoesn't workRefactoring
#4527 Refactor Checksum Verification
Document
#4560 Fix typos and invalid links in documents @kangetsu121
Dependency Updates
v2.56.6Compare Source
🐛 Bug Fixes
#4510 Fix a bug that
-log-colordoesn't work#4526 aqua gr: Fix a bug that
win32are excludedv2.56.5Compare Source
🐛 Bug Fixes
#4495 Fix a bug that
aqua gr's-cmdoption doesn't workThis was a bug of v2.56.2 ~ v2.56.4. #4450
v2.56.4Compare Source
🐛 Bub Fixes
#4484 #4485 Prevent duplicate log field output
v2.56.3Compare Source
🐛 Bug Fixes
#4475 cp: Fix a bug that command arguments are ignored and always all commands are copied
#4476 update-aqua: Fix a bug that a command argument is ignored and always the latest version is installed
Others
#4471 Update sigstore/cosign to v3.0.4
v2.56.2Compare Source
Refactoring
#4448 Replace logrus with slog
#4450 Use urfave/cli/v3 Destination pattern for flag values
v2.56.1Compare Source
Fixes
#4436 gr: Exclude
eabihfv2.56.0Compare Source
Features
#4422 Get pseudo-versions from Go Proxy if no tagged version exists @gizmoguy
Fixes
#4401 Add YAML tags @Shion1305
#4404 Update golangci-lint to v2.7.2, with lint fixes @Shion1305
Dependency Updates
#4402 Update goreleaser to v2.13.1
#4405 Update anchore/syft to v1.38.2
#4406 Update Cosign to v3.0.3
#4420 Update expr to v1.17.7
#4424 Update goccy/go-yaml to v1.19.1
v2.55.3Compare Source
Bug Fixes
#4393 gr: Fix the support of
sigstoreandsigstore.jsonfile extensionsRefactoring
#4369 Enable
tagalignrule in golangci-lint @Shion1305#4394 chore(deps): migrate to go.yaml.in/yaml @scop
v2.55.2Compare Source
Performance Improvement
#4342 Skip packages that cannot provide the desired exe @refi64
Others
#4312 Update Go to 1.25.4
v2.55.1Compare Source
🐛 Bug Fixes
#4274 #4276 exec: Fix the command name (
args[0])Dependency Updates
#4220 #4266 Update github.com/google/go-github/v74 to v76
#4233 #4251 #4261 Update Go to 1.25.2
Others
Release Cosign Bundle file *.bundle
v2.55.0Compare Source
Features
#4195 #4213 Support verifying the integrity of GitHub Releases
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/verifying-the-integrity-of-a-release
https://aquaproj.github.io/docs/reference/security/github-immutable-release
v2.54.1Compare Source
🐛 Bug Fixes
#4182 Fix a bug of
generate-registrycommand thatarm64is replaced toarmincorrectlyv2.54.0Compare Source
Features
#4173 ghtkn integration
https://aquaproj.github.io/docs/reference/security/ghtkn/
Now aqua can get a GitHub App User Access Token by ghtkn integration.
Stop risking token leaks - Use secure, short-lived GitHub tokens for local development.
Requirements
The ghtkn integration requires:
This feature doesn't depend on ghtkn CLI.
Limitation
The integration requires the user interaction when creating an access token via Device Flow, so it's unavailable in CI.
Set up
For more details, please see https://github.com/suzuki-shunsuke/ghtkn .
AQUA_GHTKN_ENABLED=trueexport AQUA_GHTKN_ENABLED=trueThen aqua gets a user access token using ghtkn Go SDK when aqua calls GitHub APIs.
v2.53.11Compare Source
Performance Improvement
#4159 Update github.com/gdamore/tcell/v2 to reduce startup time @refi64
Benchmark
aqua.yaml
v2.53.10Compare Source
🛡️ Starting from this release, Immutable Release is enabled!
#4147 Update Go to v1.25.1
#4145 Update aqua-proxy to v1.2.12
🐛 Bug Fixes
#4140 Fix error messages
aquaproj/aqua-installer (aquaproj/aqua-installer)
v4.0.4Compare Source
Pull Requests aquaproj/aqua-installer@v4.0.3...v4.0.4
SHA256 Checksum
#886 Configure export-ignore in .gitattributes
#887 Update the bootstrap version of aqua to v2.55.1
v4.0.3Compare Source
🛡️ Starting from this release, Immutable Release is enabled!
SHA256 Checksum
#867 Update the bootstrap aqua version to v2.53.10
aquaproj/aqua-registry (aquaproj/aqua-registry)
v4.526.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.525.0...v4.526.0
🎉 New Packages
#55428 Latias94/merman - Mermaid.js, but headless, in Rust @yashikota
#55421 coder/boo - A GNU screen style terminal multiplexer built on libghostty @yashikota
Fixes
#55443 Rename bitnami-labs/sealed-secrets to bitnami/sealed-secrets
#55445 suzuki-shunsuke/ghtkn: support v0.2.6 or later
v4.525.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.524.1...v4.525.0
🎉 New Packages
#55397 #55401 CycloneDX/cdxgen - Creates CycloneDX Bill of Materials (BOM) from source code and container images @sebdanielsson
#55389 fallow-rs/fallow: Codebase intelligence for TypeScript and JavaScript. Free static layer: unused code, duplication, circular deps, complexity hotspots, architecture boundaries. Optional paid runtime layer: hot-path review and cold-path deletion evidence from real production traffic. Rust-native, sub-second, zero-config framework support @wancup
Fixes
#55395 haskell/ghcup-hs: Support Windows @cprecioso
#55393 Remove the verification of release attestations
v4.524.1Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.524.0...v4.524.1
Fixes
#55237 oracle.com/sqlcl: Fetch available versions and checksums from jasonlyle88/sqlcl-releases @jasonlyle88
#55311 oxc-project/oxc/oxlint: Support v1.28.0 or later @hituzi-no-sippo
#55314 suzuki-shunsuke/docfresh: Support v0.3.0 or later
#55313 suzuki-shunsuke/ghaperf: Support v1.0.0 or later
#55310 suzuki-shunsuke/ghir: Support ghir v1.0.0 or later
v4.524.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.523.0...v4.524.0
🎉 New Packages
#55083 lexfrei/claudeline - Claude Code statusline with real usage limits from Anthropic API @sanchpet
Security
#55150 ubugeeei-prod/vize: Cosign config @scop
Fixes
#55131 SonarSource/sonarqube-cli: Fixing format in URL @3PeatVR
#55084 Rename endevco/aube to jdx/aube @jdx
#55064 Rename endevco/pitchfork to jdx/pitchfork
#55071 Update codeberg.org/mergiraf/mergiraf @A2va
v4.523.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.522.0...v4.523.0
🎉 New Packages
#55028 alibaba/open-code-review: Open-source & free — Battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in fine-tuned ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible
#55027 visioncortex/vtracer - Raster to Vector Graphics Converter @dnwe
#55020 macstadium.com/orka3 - CLI for the Orka virtualization platform on Apple hardware @ffittschen
Fixes
#54992 Rename the package grafana/grizzly to grafana-cold-storage/grizzly
v4.522.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.521.0...v4.522.0
🎉 New Packages
#54867 klauspost/asmfmt Go assembler formatter @scop
#54869 hashicorp/hcl/hclfmt HashiCorp configuration language formatter @scop
Fixes
#54866 Rename the package cirruslabs/tart to openai/tart @djgoku
#54868 FiloSottile/age: Add support for darwin/amd64 @acouvreur
Security
#54871 GitGuardian/ggshield: GitHub artifact attestations config @scop
CI
#54912 Install golang/go on macOS
#54890 Update macos to 26
#54889 Replace tibdex/github-app-token with actions/create-github-app-token
#54872 Update aqua-registry-updater to v0.1.8 for fixing the auto-update workflow
v4.521.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.520.2...v4.521.0
🎉 New Packages
#54861 dahlia/submark - Extract a part from CommonMark/Markdown docs @dahlia
#54862 dahlia/seonbi - SmartyPants for Korean language @dahlia
#54864 oxc-project/oxc/oxfmt: A collection of high-performance JavaScript tools @hituzi-no-sippo
Fixes
#54865 sayanarijit/jf: Support v1.0.0 or later @scop
#54860 dahlia/hongdown: Handle tarball layout change in 0.4.3 @dahlia
v4.520.2Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.520.1...v4.520.2
Fixes
#54859 dahlia/gukhanmun: Handle tarball layout change in 0.1.2 @dahlia
v4.520.1Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.520.0...v4.520.1
Fixes
#54724 #54749 #54750 Rename the package
google.com/antigravity-clitogoogle-antigravity/antigravity-cli@hayatoscv4.520.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.519.0...v4.520.0
🎉 New Packages
#54702 cliwright/whoiam - CLI tool for checking and validating your current AWS IAM identity @cliwright
#54684 tidewave-ai/tidewave_app - Tidewave is the coding agent for full-stack web app development @mfilej
Fixes
#54683 endevco/aube: Use glibc assets for performance (PGO+BOLT optimization) @jdx
v4.519.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.518.0...v4.519.0
🎉 New Packages
#54642 dahlia/hongdown - A Markdown formatter that enforces Hong Minhee's Markdown style conventions @dahlia
#54641 dahlia/gukhanmun - Convert mixed-script Korean text into hangul-only text @dahlia
Fixes
#54624 Rename ubugeeei/vize to ubugeeei-prod/vize
#54605 ImageMagick/ImageMagick: Support linux/amd64
#54556 Re-scaffold Boeing/config-file-validator to support 2.2.0 or later
v4.518.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.517.0...v4.518.0
🎉 New Packages
#54524 grafana/oats - OpenTelemetry Acceptance Tests (OATs), or OATs for short, is a test framework for OpenTelemetry @zeitlinger
#54458 s0undt3ch/ToolR - In-project CLI tooling support @s0undt3ch
#54433 Bearer/bearer - Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks @NikitaCOEUR
#50281 ImageMagick/ImageMagick - ImageMagick is a free and open-source software suite for displaying, creating, converting, modifying, and editing raster images @iki
Fixes
#54474 npm/cli: Drop broken Windows support @risu729
v4.517.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.516.0...v4.517.0
🎉 New Packages
#54411 x.ai/cli/grok - Grok Build TUI @lucasew
#54350 databricks/cli - Databricks CLI @yigal100
#54329 felixgwilliams/nbwipers - nbwipers is a command line tool to wipe clean jupyter notebooks, written in Rust @sanemat
Security
#54317 coder/coder: GitHub artifact attestations config @scop
#54367 gittuf/gittuf: GitHub artifact attestations config @scop
#54371 jdx/mise: checksums and minisign config @scop
#54421 jedisct1/minisign: minisign config @scop
#54422 minio/mc: minisign config @scop
v4.516.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.515.0...v4.516.0
🎉 New Packages
#54298 jgm/pandoc - Universal markup converter @sh1Nome
Security
#54299 betterleaks/betterleaks: cosign config @scop
Fixes
#54237 pinterest/ktlint: Transfer the repository to ktlint/ktlint
v4.515.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.514.0...v4.515.0
🎉 New Packages
#54103 openclaw/wacli - WhatsApp in your terminal @dovocoder
#54148 Staffbase/gq - CLI and MCP server for querying logs and metrics via Grafana datasource proxy @harikaduyu
v4.514.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.513.1...v4.514.0
🎉 New Packages
#54065 #54090 sholdee/crd-schema-publisher - Browsable CRD docs and IDE validation schemas, straight from your Kubernetes cluster @sholdee
#54064 google.com/antigravity-cli - Google's agentic development platform CLI companion @hayatosc
Security
#54104 wasmCloud/wasmCloud/wash: cosign config @scop
#54043 wasmCloud/wasmCloud/wash: GitHub artifact attestations config @scop
#54033 goccy/bigquery-emulator: Fix 0.7.0+, GitHub artifact attestations config @scop
v4.513.1Compare Source
Issues | [Pull Req
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.