Update dependency aquaproj/aqua to v2.55.0 #45

Now aqua can get a GitHub App User Access Token by ghtkn integration.
Stop risking token leaks - Use secure, short-lived GitHub tokens for local development.

Requirements

The ghtkn integration requires:

Keyring

This feature doesn't depend on ghtkn CLI.

Limitation

The integration requires the user interaction when creating an access token via Device Flow, so it's unavailable in CI.

Set up

For more details, please see https://github.com/suzuki-shunsuke/ghtkn .

Create a GitHub App
Create a configuration file of ghtkn
Set the environment variable AQUA_GHTKN_ENABLED=true

export AQUA_GHTKN_ENABLED=true

Then aqua gets a user access token using ghtkn Go SDK when aqua calls GitHub APIs.

`v2.53.11`

Compare Source

Performance Improvement

#4159 Update github.com/gdamore/tcell/v2 to reduce startup time @refi64

Benchmark

$ git rev-parse HEAD
380a2334230ec9fd22adac3f4e137a4cf47d42b2

$ go version
go version go1.25.1 darwin/arm64

$ hyperfine --version
hyperfine 1.19.0

$ ls dist                         
aqua  aqua-25310

aqua.yaml

registries:
- type: standard
  ref: v4.408.0 # renovate: depName=aquaproj/aqua-registry
packages:
- name: suzuki-shunsuke/[email protected]
- name: suzuki-shunsuke/[email protected]

$ hyperfine --warmup=20 -N 'dist/aqua'{-25310,}' exec -- mkghtag -version'
Benchmark 1: dist/aqua-25310 exec -- mkghtag -version
  Time (mean ± σ):      24.7 ms ±   1.3 ms    [User: 2.7 ms, System: 1.6 ms]
  Range (min … max):    23.5 ms …  29.6 ms    125 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 2: dist/aqua exec -- mkghtag -version
  Time (mean ± σ):      10.8 ms ±   1.4 ms    [User: 2.4 ms, System: 1.6 ms]
  Range (min … max):     9.2 ms …  17.1 ms    250 runs
 
Summary
  dist/aqua exec -- mkghtag -version ran
    2.30 ± 0.33 times faster than dist/aqua-25310 exec -- mkghtag -version

$ hyperfine --warmup=20 -N 'dist/aqua'{-25310,}' exec -- cmdx -v'         
Benchmark 1: dist/aqua-25310 exec -- cmdx -v
  Time (mean ± σ):      25.7 ms ±   1.3 ms    [User: 3.5 ms, System: 1.7 ms]
  Range (min … max):    24.5 ms …  31.7 ms    120 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 2: dist/aqua exec -- cmdx -v
  Time (mean ± σ):      11.2 ms ±   1.0 ms    [User: 3.1 ms, System: 1.6 ms]
  Range (min … max):    10.2 ms …  15.9 ms    253 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Summary
  dist/aqua exec -- cmdx -v ran
    2.30 ± 0.24 times faster than dist/aqua-25310 exec -- cmdx -v

`v2.53.10`

Compare Source

🛡️ Starting from this release, Immutable Release is enabled!

#4147 Update Go to v1.25.1
#4145 Update aqua-proxy to v1.2.12

🐛 Bug Fixes

#4140 Fix error messages

`v2.53.9`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.8...v2.53.9

🐛 Bug Fixes

#4064 Fix a bug that environment variables aren't passed to gh attestation verify

Others

#4065 Update Go to v1.24.6
#4065 Update aqua-proxy to v1.2.11

go1.24.6 (released 2025-08-06) includes security fixes to the database/sql and os/exec packages, as well as bug fixes to the runtime.
See the Go 1.24.6 milestone on our issue tracker for details.

`v2.53.8`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.7...v2.53.8

🐛 Bug Fixes

#4047 cp: Add missing .exe on Windows @W1M0R

`v2.53.7`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.6...v2.53.7

Fixes

#4038 Fix a bug that it fails to verify GitHub Artifact Attestations on GitHub Enterprise Server @yamoyamoto

`v2.53.6`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.5...v2.53.6

🐛 Bug Fixes

#4024 #4025 Fix a bug that aqua works without registries' ref
#4019 Set User-Agent to GitHub Release downloads @yanolab

[!WARNING]
About #4019 , unfortunately the bug is still remaining. But maybe #4019 mitigates the bug to some extent.

`v2.53.5`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.4...v2.53.5

#4008 Fix Homebrew tap to remove the quarantine bit from the binary on a post install hook

`v2.53.4`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.3...v2.53.4

#3995 Add license files of Go and Go modules to released assets
#3995 Release SBOM
#3995 Update Go to 1.24.5
#3996 Update aqua-proxy to v1.2.10

`v2.53.3`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.2...v2.53.3

🐛 Bug Fixes

#3957 Fix Shell Completion

Dependency Updates

#3956 Cosign v2.5.2
#3942 github.com/urfave/cli/v3 v3.3.8

Refactoring

#3949 apply gopls modernize improvements @scop

`v2.53.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.1...v2.53.2

🐛 Bug Fixes

#3932 Fix the issue that aqua can't be installed by go install

`v2.53.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.53.0...v2.53.1

🐛 Bug Fixes

#3926 checksum: Fix a bug that checksums of awslabs/amazon-ecr-credential-helper are wrong

Others

#3924 gr: Map arm to arm64

`v2.53.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.52.0...v2.53.0

Features

#3920 Retry HTTP requests for robustness

`v2.52.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.51.2...v2.52.0

Features

#3890 feat(generate-registry): cosign bundle support @scop

Update dependencies

#3915 Update golang.org/x/sync to v0.15.0
#3876 #3903 #3912 Update github.com/expr-lang/expr to v1.17.5
#3905 Update github.com/goccy/go-yaml to v1.18.0
#3881 Update github.com/mholt/archives to v0.1.2
#3870 Update github.com/google/go-github/v71 to v72

Others

#3891 chore(golangci-lint): remove gofmt, it's a gofumpt subset @scop

`v2.51.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.51.1...v2.51.2

🐛 Bug Fixes

#3868 Fix version command

Dependency Updates

update module github.com/urfave/cli/v3 to v3.3.3 (#3866)
golang.org/x/term to v0.32.0 (#3863)

`v2.51.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.51.0...v2.51.1

Features

#3852 #3853 Support managing a GitHub access token using Keyring

You can now manage a GitHub Access token using secret store such as Windows Credential Manager, macOS Keychain, and GNOME Keyring.

Configure a GitHub Access token by aqua token set command:

$ aqua token set
Enter a GitHub access token: # Input GitHub Access token

or you can also pass a GitHub Access token via standard input:

echo "<github access token>" | aqua tokn set -stdin

Enable the feature by setting the environment variable AQUA_KEYRING_ENABLED:

export AQUA_KEYRING_ENABLED=true

Note that if the environment variable GITHUB_TOKEN is set, this feature gets disabled.

You can remove a GitHub Access token from keyring by aqua token rm command:

aqua token rm

`v2.51.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.50.1...v2.51.0

[!WARNING]
We intended to add a new command token in this release, but we forgot it.
Please use v2.51.1 or newer.

`v2.50.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.50.0...v2.50.1

Improve the performance of command execution

#3826

This release improves the performance of aqua which and aqua exec command.

aqua which read registries, but the standard registry is very large (about 2MB) so it makes the performance worse.
Furthermore, the standard registry gets larger every time we improve the standard registry.

To solve the problem, this pull request introduces the cache mechanism of packages by aqua.yaml.
aqua creates a cache file per aqua.yaml into $(aqua root-dir)/registry-cache/<base64 encoded aqua.yaml absolute path>.json.

The structure of cache files is:

{
  "absolute path of registry.yaml": {
    "package name": {
      "type": "github_release",
      // ...
    }
  }
}

If a registry type is local, a cache file isn't created.
Cache files are much smaller than the standard registry, so aqua can read them much faster.
If packages aren't found in cache files, aqua reads the original registries and updates cache files.
aqua removes unused records from cache.

Bench mark

$ hyperfine --warmup 3 "/Users/shunsukesuzuki/go/bin/aqua which golangci-lint" "/Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.1-1/aqua_darwin_arm64.tar.gz/aqua which golangci-lint" "/Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.0/aqua_darwin_arm64.tar.gz/aqua which golangci-lint"
Benchmark 1: /Users/shunsukesuzuki/go/bin/aqua which golangci-lint
  Time (mean ± σ):      25.0 ms ±   3.5 ms    [User: 21.4 ms, System: 3.7 ms]
  Range (min … max):    21.6 ms …  45.4 ms    77 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 2: /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.1-1/aqua_darwin_arm64.tar.gz/aqua which golangci-lint
  Time (mean ± σ):      41.7 ms ±   4.5 ms    [User: 41.1 ms, System: 5.3 ms]
  Range (min … max):    37.2 ms …  62.3 ms    55 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 3: /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.0/aqua_darwin_arm64.tar.gz/aqua which golangci-lint
  Time (mean ± σ):      42.8 ms ±   4.0 ms    [User: 41.9 ms, System: 5.6 ms]
  Range (min … max):    39.4 ms …  55.4 ms    43 runs
 
  Warning: The first benchmarking run for this command was significantly slower than the rest (54.4 ms). This could be caused by (filesystem) caches that were not filled until after the first run. You are already using the '--warmup' option which helps to fill these caches before the actual benchmark. You can either try to increase the warmup count further or re-run this benchmark on a quiet system in case it was a random outlier. Alternatively, consider using the '--prepare' option to clear the caches before each timing run.
 
Summary
  /Users/shunsukesuzuki/go/bin/aqua which golangci-lint ran
    1.67 ± 0.29 times faster than /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.1-1/aqua_darwin_arm64.tar.gz/aqua which golangci-lint
    1.71 ± 0.29 times faster than /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.0/aqua_darwin_arm64.tar.gz/aqua which golangci-lint

Others

#3840 chore: update aqua-proxy to v1.2.9
#3839 chore: update urfave-cli-v3-util to v0.0.4

`v2.50.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.49.0...v2.50.0

Features

#3794 GitHub Artifact Attestations: Non-default predicate type support @scop

`v2.49.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.3...v2.49.0

Features

#3780 Support creating hardlinks

`v2.48.3`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.2...v2.48.3

🐛 Bug Fixes

#3774 Fix aqua version command

`v2.48.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.1...v2.48.2

🐛 Bug Fixes

#3771 Fix fish completion
#3750 generate-registry: Fix panic if version isn't semver

Improvement

#3772 Improve -v option and version command
#3740 checksum: don't treat *.bundle as checksum @scop

`v2.48.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.0...v2.48.1

🐛 Bug Fixes

#3729 Fix bash and zsh completion command generation @takumin

`v2.48.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.47.2...v2.48.0

Features

#3725 support disabling slsa-verifier's --source-tag

`v2.47.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.47.1...v2.47.2

Bug Fixes

#3721 Fix a bug that a panic occurs if aqua tries to verify assets using Minisign on linux/arm64

Improvement

#3718 generate-registry: Add os patterns

macosx
linux-gnu

`v2.47.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.47.0...v2.47.1

🐛 Bug Fixes

#3717 Fix the output of the version command

`v2.47.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.46.0...v2.47.0

Features

#3711 Support cosign veryf-blob's --bundle option
#3710 generate-registry: Use cosign cert if sig is keyless, not pubkey even if available @scop

Fixes

#3689 generate-registry: Exclude the last element of version_overrides from sort

Others

#3703 Update module github.com/urfave/cli/v2 to v3

`v2.46.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.45.1...v2.46.0

Features

Improved aqua generate-registry command:

#3649 Generate Cosign configuration of checksum @scop
#3663 Include version in generated cert id regexp @scop
#3664 Generate cosign config for releases with a pubkey @scop
#3653 Fix a panic
#3657 Convert versions to {{.SemVer}}
#3675 Fix a bug that a template variable AssetWithoutExt misses

`v2.45.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.45.0...v2.45.1

Fixes

#3641 Fix typo @scop
#3643 Fix typo using typos

Refactoring

#3642 gopls modernize @scop
#3644 Fix typo

`v2.45.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.44.1...v2.45.0

Features

Improved generate-registry:

#3560 Generate slsa_provenance
#3562 #3568 #3576 Support config file and filter versions and assets
#3566 Fix complete_windows_ext
#3577 Sort and group version_overrides
#3578 Merge groups with only a single release
#3579 Move no_asset to the top

Fixes

#3593 Support signer_workflow too
#3603 Skip the verification of GitHub Artifact Attestation if the authentication fails

Others

#3586 Update checksums of cosign, slsa-verifier, minisign, and GitHub CLI automatically
#3595 Output grammar fixes @scop
#3580 ghattestation: Error message fixes @scop

`v2.44.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.44.0...v2.44.1

🐛 Bug Fixes

#3554 update: Fix a bug that aqua up fails if import_dir is used

This is a bug of aqua v2.44.0.

`v2.44.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.43.3...v2.44.0

Features

#3537 init: add a command line option -d
#3528 Support import_dir and add command line options -u and -i to aqua init command

aqua init -d # Create a directory `aqua` and create `aqua/aqua.yaml`
aqua init -u # Create aqua.yaml with `import_dir: imports`
aqua init -i pkgs # Create aqua.yaml with `import_dir: pkgs`

e.g. aqua.yaml

registries:
- type: standard
  ref: v4.311.0
import_dir: imports

You can use import_dir and packages at the same time.
In addition to packages, aqua searches packages from the directory specified with import_dir.

import_dir: imports is equivalent to the following settings.

packages:
- import: imports/*.yml
- import: imports/*.yaml

And if import_dir is set, aqua g -i command creates a directory <import_dir> and adds packages to the file <import_dir>/<command name>.yaml.
For instance, if import_dir is imports, aqua g -i cli/cli creates a directory imports and adds cli/cli to imports/gh.yaml.

If the package has multiple commands, <command name> is the first command name in the files setting.
For instance, in case of FiloSottile/age, <command name> is age.

https://github.com/aquaproj/aqua-registry/blob/d39d4b5d0fb0635f6be7a70f3cb8b994f075a639/pkgs/FiloSottile/age/registry.yaml#L13-L17

    files:
      - name: age
        src: age/age
      - name: age-keygen
        src: age/age-keygen

Fixes

#3537 init: Fix file existence check

aqua init skips creating a configuration file if configuration files already exist.
This release improves the logic.

`v2.43.3`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.43.2...v2.43.3

Features

#3521 generate-registry: Detect checksum files from some more typical SHA filenames @scop

Others

#3523 Update slsa-verifier to v2.7.0
#3514 #3534 Update Cosign to v2.4.2

`v2.43.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.43.1...v2.43.2

Bug Fixes

#3506 Exclude unavailable versions from the list of aqua g -s and aqua up -s

`v2.43.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.43.0...v2.43.1

`v2.43.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.42.2...v2.43.0

Features

#3467 #3478 Support vacuuming unused packages

https://aquaproj.github.io/docs/guides/vacuum

Now you can remove unused packages by aqua vacuum command, which is useful to save storage and keep your machine clean.

aqua vacuum

This command removes installed packages which haven't been used for over the expiration days.
The default expiration days is 60, but you can change it by the environment variable $AQUA_VACUUM_DAYS or the command line option aqua vacuum -days <expiration days>.

e.g.

export AQUA_VACUUM_DAYS=90

aqua vacuum -d 30

[!CAUTION]
aqua vacuum command doesn't remove links from the bin directory and doesn't remove packages from aqua.yaml

As of aqua v2.43.0, aqua records packages' last used date times.
Date times are updated when packages are installed or executed.
Packages installed by aqua v2.42.2 or older don't have records of last used date times, so aqua can't remove them.
To solve the problem, aqua vacuum --init is available.

aqua vacuum --init

aqua vacuum --init searches installed packages from aqua.yaml including $AQUA_GLOBAL_CONFIG and records the current date time as the last used date time of those packages if their last used date times aren't recorded.

aqua vacuum --init can't record date times of install packages which are not found in aqua.yaml.
If you want to record their date times, you need to remove them by aqua rm command and re-install them.

`v2.42.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.42.1...v2.42.2

🐛 Bug Fixes

#3436 Fix a bug that aqua update command fails if version_expr or go_version_file is used

As of this release, aqua update command ignores packages with version_expr or go_version_file.

`v2.42.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.42.0...v2.42.1

🐞 Bug Fixes

#3433 Create symlinks if unarchived files are symlinks

This fixes a bug of aqua v2.42.0. #3432

`v2.42.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.41.0...v2.42.0

[!CAUTION]
This version has a known bug.
#3432
This bug was fixed at v2.42.1. https://github.com/aquaproj/aqua/releases/tag/v2.42.1

Features

#3422 Support 7 zip

Others

#3422 Replace mholt/archiver/v3 with mholt/archives

mholt/archiver/v3 was deprecated and it's encourage to migrate to mholt/archives.

`v2.41.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.40.0...v2.41.0

Features

#3407 Support cargo install's --locked option

https://aquaproj.github.io/docs/reference/registry-config/cargo-package

e.g. registry.yaml:

            type: cargo
            crate: rhit
            cargo:
              locked: true

      --locked               Assert that `Cargo.lock` will remain unchanged

#3399 update: Support filtering updated packages using package tags

https://aquaproj.github.io/docs/guides/package-tag

e.g.

aqua up -t bootstrap # Update only packages with a tag `bootstrap`
aqua up --exclude-tags bootstrap # Exclude packages with a tag `bootstrap`

`v2.40.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.39.1...v2.40.0

Features

#3363 Support getting package versions from external files

This release enables you to get package versions from external files.
This feature is useful when:

Migrate any tool to aqua gradually
Support aqua and other tools

This release adds some fields to aqua.yaml's packages.

version_expr: An expr expression to read external files
version_expr_prefix: A prefix of version

e.g.

packages:
- name: hashicorp/terraform
  version_expr: |
    "v" + readFile('.terraform-version')

  version_expr: |
    readJSON('version.json').version
  version_expr_prefix: cli-

  version_expr: |
    readYAML('version.yaml').version

version_expr is evaluated using expr.
The following custom functions are available.

readFile("file path"): reads a file and returns a file content
readJSON("file path"): read and unmarshal a JSON file and returns an object
readYAML("file path"): read and unmarshal a YAML file and returns an object

⚠️ Constraint of `version_expr`

Allowing to read external files is potentially risky in terms of security.
Malicious users can try to read secret files and expose secrets via log using version_expr.
To prevent such a threat, we restrict the evaluation result of version_expr.
It must match with the regular expression ^v?\d+\.\d+(\.\d+)*[.-]?((alpha|beta|dev|rc)[.-]?)?\d*.

`v2.39.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.39.0...v2.39.1

Fixes

#3365 cargo: Normalize the install path of cargo packages

Others

#3361 Refactor reading config

`v2.39.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.38.4...v2.39.0

Features

#3354 policy: add a code comment for YAML Language Servers to a generated file aqua-policy.yaml

### yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/policy.json

#3352 init: Add a code comment for YAML Language Servers to a generated file aqua.yaml

### yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/aqua-yaml.json

These code comments are useful when you edit files with editors such as VSCode.

`v2.38.4`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.38.3...v2.38.4

Bug Fixes

#3337 generate-registry: Fix a bug that unused replacements are added

`v2.38.3`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.38.2...v2.38.3

Bug Fixes

#3325 #3333 Fix a bug that aqua g -i removes comments from packages

`v2.38.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.38.1...v2.38.2

🐛 Bug Fixes

#3307 generate-registry: Fix a bug that description isn't formatted

`v2.38.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.38.0...v2.38.1

Fixes

#3297 completion: Improve the completion settings suggested in aqua completion --help @akinomyoga

`v2.38.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.37.2...v2.38.0

Features

#3269 Get available versions from Go Module Proxy

https://aquaproj.github.io/docs/reference/registry-config/go-version-path

This release adds the new field go_version_path to registries.

e.g.

packages:
  - name: _go/sigsum.org/sigsum-go#cmd/sigsum-key
    type: go_install
    path: sigsum.org/sigsum-go/cmd/sigsum-key
    go_version_path: sigsum.org/sigsum-go

If this field is set, aqua g and aqua up commands gets available versions from Go Module Proxy.

`v2.37.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.37.1...v2.37.2

Fixes

#3233 which, exec: Search configuration files even if AQUA_CONFIG is set

`v2.37.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.37.0...v2.37.1

Bug Fixes

#3226 #584 Fix a bug that newlines in aqua.yaml are removed when updating aqua.yaml by aqua g -i and aqua up

This issue came from the bug of goccy/go-yaml. goccy/go-yaml#285
The issue was solved at goccy/go-yaml 1.13.3.
So we updated goccy/go-yaml to 1.13.3 and solve the issue.

`v2.37.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.36.2...v2.37.0

Features

#3224 Allow to set command aliases in aqua.yaml

You can now define command aliases in aqua.yaml.
This is useful to use multiple versions of the same package.

e.g.

registries:
- type: standard
  ref: v4.246.0 # renovate: depName=aquaproj/aqua-registry
packages:
- name: hashicorp/[email protected]
- name: hashicorp/terraform
  version: v0.13.7
  command_aliases:
    - command: terraform
      alias: terraform-013

### no_link: true

Then you can run terraform (v1.9.8) and terraform-013 (v0.13.7).

$ terraform version
Terraform v1.9.8
on darwin_arm64

$ terraform-013 version
Terraform v0.13.7

Your version of Terraform is out of date! The latest version
is 1.9.8. You can update by downloading from https://www.terraform.io/downloads.html

You can skip creating symbolic links for aliases by no_link: true

  command_aliases:
    - command: terraform
      alias: terraform-013
      no_link: true

You can still run aliases via aqua exec.

aqua exec -- terraform-013 version

`v2.36.2`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.36.1...v2.36.2

Bug Fixes

#3193 #3194 Fix a bug that vars are not replaced in files[].src

`v2.36.1`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.36.0...v2.36.1

Fixes

#3146 generate-registry: Remove rosetta2 and windows_arm_emulation if {{.Arch}} isn't included in asset

Dependency updates

#3148 Update aqua-proxy to 1.2.8
#3149 Update Go to 1.23.2

`v2.36.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.35.0...v2.36.0

Features

#3130 #3134 support changing $0 by symlink

Some tools change their behavior by $0.

For example, granted changes the behavior based on args[0].

https://github.com/common-fate/granted/blob/e8de3ec7d62d543062d8be802b27abb3d8fac429/cmd/granted/main.go#L37-L44

	// Use a single binary to keep keychain ACLs simple, swapping behavior via argv[0]
	var app *cli.App
	switch filepath.Base(os.Args[0]) {
	case "assumego", "assumego.exe", "dassumego", "dassumego.exe":
		app = assume.GetCliApp()
	default:
		app = granted.GetCliApp()
	}

This release supports changing $0 by symlink.

        files:
          - name: granted
          - name: assumego
            src: granted
            link: assumego # link is the relative path from src to the symlink

Bug Fixes

#3136 #3137 remove: Handle panic error when package is not found @Shion1305
#3138 remove: Ignore not found commands

`v2.35.0`

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.34.0...v2.35.0

Features

#3119 #3131 Verify packages' GitHub Artifact Attestations

When aqua installs packages, it verifies their GitHub

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot requested a review from tsuzu as a code owner May 12, 2024 18:12

renovate bot added the renovate label May 12, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch 2 times, most recently from 9e13c03 to 8eb6f48 Compare May 19, 2024 03:45

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.28.0~~ Update dependency aquaproj/aqua to v2.28.1 May 19, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch 2 times, most recently from dfff2df to e2625df Compare May 21, 2024 14:45

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.28.1~~ Update dependency aquaproj/aqua to v2.29.0 May 31, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from e2625df to 599d58f Compare May 31, 2024 16:47

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 599d58f to 499a4e7 Compare June 9, 2024 15:50

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 499a4e7 to f230692 Compare July 14, 2024 08:50

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.29.0~~ Update dependency aquaproj/aqua to v2.29.1 Jul 14, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from f230692 to 1b18287 Compare July 14, 2024 09:49

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.29.1~~ Update dependency aquaproj/aqua to v2.29.2 Jul 14, 2024

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.29.2~~ Update dependency aquaproj/aqua to v2.30.0 Jul 17, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch 2 times, most recently from a78e0a4 to 4683663 Compare July 17, 2024 08:12

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 4683663 to 305f731 Compare August 17, 2024 15:15

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.30.0~~ Update dependency aquaproj/aqua to v2.31.0 Aug 29, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 305f731 to d05fdb9 Compare August 29, 2024 01:03

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from d05fdb9 to d53798c Compare September 17, 2024 16:41

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.31.0~~ Update dependency aquaproj/aqua to v2.32.0 Sep 17, 2024

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.32.0~~ Update dependency aquaproj/aqua to v2.33.0 Sep 21, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from d53798c to 4540ae2 Compare September 21, 2024 23:06

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.33.0~~ Update dependency aquaproj/aqua to v2.34.0 Sep 23, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch 2 times, most recently from b762ea8 to 0a470a4 Compare September 27, 2024 13:50

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.34.0~~ Update dependency aquaproj/aqua to v2.35.0 Sep 27, 2024

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 0a470a4 to d36a34d Compare September 29, 2024 01:20

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.35.0~~ Update dependency aquaproj/aqua to v2.36.0 Sep 29, 2024

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.51.1~~ Update dependency aquaproj/aqua to v2.51.2 May 11, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 976d14d to e5eefe8 Compare June 8, 2025 14:06

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.51.2~~ Update dependency aquaproj/aqua to v2.52.0 Jun 8, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from e5eefe8 to 3751c2a Compare June 9, 2025 03:03

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.52.0~~ Update dependency aquaproj/aqua to v2.53.0 Jun 9, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 3751c2a to 7436a7a Compare June 10, 2025 02:08

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.0~~ Update dependency aquaproj/aqua to v2.53.1 Jun 10, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 7436a7a to b377d9e Compare June 12, 2025 13:15

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.1~~ Update dependency aquaproj/aqua to v2.53.2 Jun 12, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from b377d9e to a1fc547 Compare June 21, 2025 20:52

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.2~~ Update dependency aquaproj/aqua to v2.53.3 Jun 21, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from a1fc547 to f4f9f19 Compare July 14, 2025 12:58

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.3~~ Update dependency aquaproj/aqua to v2.53.4 Jul 14, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from f4f9f19 to 3f796f6 Compare July 17, 2025 03:08

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.4~~ Update dependency aquaproj/aqua to v2.53.5 Jul 17, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch 2 times, most recently from c1d44bb to 9625b9f Compare July 21, 2025 13:51

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.5~~ Update dependency aquaproj/aqua to v2.53.6 Jul 21, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 9625b9f to 207c42d Compare July 28, 2025 00:34

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.6~~ Update dependency aquaproj/aqua to v2.53.7 Jul 28, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 207c42d to 3b7ab0b Compare August 7, 2025 11:30

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.7~~ Update dependency aquaproj/aqua to v2.53.8 Aug 7, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 3b7ab0b to a8e662f Compare August 8, 2025 01:38

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.8~~ Update dependency aquaproj/aqua to v2.53.9 Aug 8, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from a8e662f to 6eb2788 Compare September 19, 2025 16:09

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.53.9~~ Update dependency aquaproj/aqua to v2.54.1 Sep 19, 2025

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 6eb2788 to a77ee3e Compare September 21, 2025 09:14

renovate bot changed the title ~~Update dependency aquaproj/aqua to v2.54.1~~ Update dependency aquaproj/aqua to v2.55.0 Sep 21, 2025

Update dependency aquaproj/aqua to v2.55.0

281fcc9

renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from a77ee3e to 281fcc9 Compare October 12, 2025 17:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency aquaproj/aqua to v2.55.0 #45

Update dependency aquaproj/aqua to v2.55.0 #45

Uh oh!

renovate bot commented May 12, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Update dependency aquaproj/aqua to v2.55.0 #45

Are you sure you want to change the base?

Update dependency aquaproj/aqua to v2.55.0 #45

Uh oh!

Conversation

renovate bot commented May 12, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

🐛 Bug Fixes

Features

Requirements

Limitation

Set up

Performance Improvement

Benchmark

🐛 Bug Fixes

🐛 Bug Fixes

Others

🐛 Bug Fixes

Fixes

🐛 Bug Fixes

🐛 Bug Fixes

Dependency Updates

Refactoring

🐛 Bug Fixes

🐛 Bug Fixes

Others

Features

Features

Update dependencies

Others

🐛 Bug Fixes

Dependency Updates

Features

Improve the performance of command execution

Bench mark

Others

Features

Features

🐛 Bug Fixes

🐛 Bug Fixes

Improvement

🐛 Bug Fixes

Features

Bug Fixes

Improvement

🐛 Bug Fixes

Features

Fixes

Others

Features

Fixes

Refactoring

Features

Fixes

Others

🐛 Bug Fixes

Features

Fixes

Features

Others

Bug Fixes

Features

🐛 Bug Fixes

🐞 Bug Fixes

Features

Others

Features

Features

⚠️ Constraint of version_expr

Fixes

Others

Features

Bug Fixes

Bug Fixes

🐛 Bug Fixes

Fixes

Features

Fixes

renovate bot commented May 12, 2024 •

edited

Loading

⚠️ Constraint of `version_expr`