Bump limen to v0.6.1 - #8
Merged
Merged
Conversation
Skipping v0.6.0, whose `limen fix` cannot create the isolated golangci-lint and nilaway tool modules in a Go repository (farcloser/limen#183). This repository has no Go, but v0.6.1 is the release to take regardless. The checksum refresh touches limen's five assets only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: closer-claudio <claudio@farcloser.world>
`just do fix limen` at the new pin: - The shared just modules are reset to v0.6.1, adding the perf and security families (perf.just, perf-go.just, security.just, security-go.just). No recipe this Justfile names has moved. - aqua.yaml drops golangci/golangci-lint, which limen now builds from a tool module in Go repositories (this one has none), and adds forkcloser/curl as a canonical package; the local registry and the checksums follow. - renovate.json extends the shared preset at v0.6.1. - update-aqua-checksum.yaml, the setup-aqua action and .limen/lychee.toml are reset to the v0.6.1 baseline. The security workflow limen fix seeded is the next commit. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: closer-claudio <claudio@farcloser.world>
Written by `limen fix` now that the pinned limen carries the security recipe family, and the project's own from here. It runs `just do security` on pull requests, pushes to main and a daily schedule. Here, with no Go module, the recipe reports it has nothing to scan and passes, checked locally. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: closer-claudio <claudio@farcloser.world>
limen v0.6.1 changes one thing in the canonical ci.yaml: its header no longer says DO NOT EDIT. It says the file is seeded once and then the project's own, realigned by hand, with every project line commented. This file was byte-identical to v0.5.2's, and it is to v0.6.1's again. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: closer-claudio <claudio@farcloser.world>
apostasie
approved these changes
Sep 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the farcloser/limen pin from v0.5.2 to v0.6.1 (https://github.com/farcloser/limen/releases/tag/v0.6.1), skipping v0.6.0, whose
limen fixbreaks the Go tool modules (farcloser/limen#183). One commit per change:limen fix's remediation. The shared just modules are reset, adding the perf and security families; no recipe this Justfile names has moved. aqua drops golangci-lint, which limen now builds from a tool module in Go repositories (this one has none), and adds forkcloser/curl. Renovate extends the v0.6.1 preset. update-aqua-checksum, setup-aqua and the lychee baseline are reset.security.yaml, seeded bylimen fix. It runsjust do securityon pull requests, pushes to main and daily. With no Go module here, the recipe reports nothing to scan and passes, checked locally.ci.yamltakes v0.6.1's canonical header, the release's only change to that file. The file is byte-identical to the canonical again.Local verification.
just lintis green in full.just testcould not run in my sandbox: its Homebrew tap, install and service steps need a writable Homebrew prefix and brew's API hosts, which the sandbox refuses. That is the same limit as on #7. The macOS CI leg runs it.