chore(deps): update all minor and patch dependencies #61
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.3.0->v4.3.1v2.1.1->v2.1.4v7.0.1->v7.1.0v2.53.9->v2.55.1v4.0.2->v4.0.4v4.407.0->v4.436.02.8.2->2.9.00.33.0->0.33.1v5.8.0->v5.9.0v1.66.1->v1.68.0v2.3.2->v2.4.2v0.0.10->v0.0.14Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
actions/checkout (actions/checkout)
v4.3.1Compare Source
actions/create-github-app-token (actions/create-github-app-token)
v2.1.4Compare Source
Bug Fixes
v2.1.3Compare Source
Bug Fixes
v2.1.2Compare Source
Bug Fixes
actions/github-script (actions/github-script)
v7.1.0Compare Source
What's Changed
actions/upload-artifactby @joshmgross in #512npm audit fixby @joshmgross in #515permissionsin workflows and update actions by @joshmgross in #531octokitREADME updates for v7 by @joshmgross in #557scriptby @joshmgross in #603New Contributors
Full Changelog: actions/github-script@v7...v7.1.0
aquaproj/aqua (aquaproj/aqua)
v2.55.1Compare Source
🐛 Bug Fixes
#4274 #4276 exec: Fix the command name (
args[0])Dependency Updates
#4220 #4266 Update github.com/google/go-github/v74 to v76
#4233 #4251 #4261 Update Go to 1.25.2
Others
Release Cosign Bundle file *.bundle
v2.55.0Compare Source
Features
#4195 #4213 Support verifying the integrity of GitHub Releases
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/verifying-the-integrity-of-a-release
https://aquaproj.github.io/docs/reference/security/github-immutable-release
v2.54.1Compare Source
🐛 Bug Fixes
#4182 Fix a bug of
generate-registrycommand thatarm64is replaced toarmincorrectlyv2.54.0Compare Source
Features
#4173 ghtkn integration
https://aquaproj.github.io/docs/reference/security/ghtkn/
Now aqua can get a GitHub App User Access Token by ghtkn integration.
Stop risking token leaks - Use secure, short-lived GitHub tokens for local development.
Requirements
The ghtkn integration requires:
This feature doesn't depend on ghtkn CLI.
Limitation
The integration requires the user interaction when creating an access token via Device Flow, so it's unavailable in CI.
Set up
For more details, please see https://github.com/suzuki-shunsuke/ghtkn .
AQUA_GHTKN_ENABLED=trueexport AQUA_GHTKN_ENABLED=trueThen aqua gets a user access token using ghtkn Go SDK when aqua calls GitHub APIs.
v2.53.11Compare Source
Performance Improvement
#4159 Update github.com/gdamore/tcell/v2 to reduce startup time @refi64
Benchmark
aqua.yaml
v2.53.10Compare Source
🛡️ Starting from this release, Immutable Release is enabled!
#4147 Update Go to v1.25.1
#4145 Update aqua-proxy to v1.2.12
🐛 Bug Fixes
#4140 Fix error messages
aquaproj/aqua-installer (aquaproj/aqua-installer)
v4.0.4Compare Source
Pull Requests aquaproj/aqua-installer@v4.0.3...v4.0.4
SHA256 Checksum
#886 Configure export-ignore in .gitattributes
#887 Update the bootstrap version of aqua to v2.55.1
v4.0.3Compare Source
🛡️ Starting from this release, Immutable Release is enabled!
SHA256 Checksum
#867 Update the bootstrap aqua version to v2.53.10
aquaproj/aqua-registry (aquaproj/aqua-registry)
v4.436.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.435.0...v4.436.0
🎉 New Packages
#44281 houseabsolute/omegasort: The last text sorting tool you'll ever need
Fixes
#44282 rustic-rs/rustic: Support rustic v0.10.2
#44287 leoafarias/fvm: Support fvm v4.0.1 on windows
#44283 chaqchase/lla/: Support lla v0.5.1
#44284 sigstore/rekor: Support rekor v1.4.3
v4.435.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.434.0...v4.435.0
🎉 New Packages
#43910 cirruslabs/cirrus-cli - CLI for executing Cirrus tasks locally and in any CI @djgoku
Fixes
#44106 Re-scaffold phiresky/ripgrep-all
Security
#43857 topgrade-rs/topgrade: GitHub artifact attestations config @scop
#44024 axodotdev/cargo-dist: GitHub artifact attestations config @scop
v4.434.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.433.0...v4.434.0
🎉 New Packages
#44060 CrociDB/bulletty: bulletty is a pretty feed reader for the terminal that stores the articles as Markdown
#44058 Gaurav-Gosain/tuios: Terminal UI OS (Terminal Multiplexer)
#44059 ck-zhang/reddix: Reddix – Reddit, refined for the terminal
#43836 hokaccha/spannerdef: Idempotent Google Cloud Spanner schema management by SQL, inspired by sqldef @yukukotani
#44061 lasantosr/intelli-shell: Like IntelliSense, but for shells
Improvement
#43941 flutter/flutter: Enable to change Flutter channel @yumafuu
e.g.
Fixes
#44057 Re-scaffold cue-lang/cue
#43790 Rename the package microsandbox/microsandbox to zerocore-ai/microsandbox
v4.433.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.432.0...v4.433.0
🎉 New Packages
#43697 minc-org/minc - MicroShift in Container @dronenb
#43702 neilpa/yajsv - Yet Another JSON Schema Validator [CLI] @dronenb
#43699 nmstate/nmstate - Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner @dronenb
#43704 openshift-pipelines/pipelines-as-code - Pipelines-as-Code for Tekton @dronenb
#43701 pete911/certinfo - print x509 certificate info @dronenb
Fixes
#43698 Support caarlos0/svu v3.3.0 or later
#43695 Re-scaffold amir20/dtop
#43666 Fix borgbackup/borg @risu729
v4.432.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.431.0...v4.432.0
🎉 New Packages
#43422 goharbor/harbor-cli: [Sandbox] Official Harbor CLI
v4.431.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.430.1...v4.431.0
🎉 New Packages
#43362 suzuki-shunsuke/ghaperf: ghaperf is a CLI to analyze the performance of GitHub Actions using GitHub API and raw job logs
Fixes
#43356 Rename the package go-monk/checkip to jreisinger/checkip
v4.430.1Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.430.0...v4.430.1
Fixes
#43311 mvdan/gofumpt: Support gofumpt v0.9.2 or later. sha256sums.txt was removed
#43313 alvinunreal/tmuxai: Windows builds were removed at ttmuxai v2.0.1
Improvement
#43238 suzuki-shunsuke/ci-info: Use cosign bundle files
v4.430.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.429.0...v4.430.0
🎉 Reached 2,000 packages
Thank you all contributors!
🎉 New Packages
#43226 gittower/git-flow-next: A modern reimplementation of git-flow in Go that offers greater flexibility while maintaining backward compatibility with the original git-flow and git-flow-avh
v4.429.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.428.0...v4.429.0
🎉 New Packages
#43147 SUPERCILEX/fuc/cpz: Modern, performance focused unix cp command alternative
#43148 SUPERCILEX/fuc/rmz: Modern, performance focused unix rm command alternative
#43146 dinoDanic/diny: generate git commit messages
#43065 eth-p/bat-extras - Bash scripts that integrate bat with various command line tools @TyceHerrman
#43041 k1LoW/tailor-log: tailor-log is a tool for handling logs from a workspace on the Tailor Platform @k1LoW
#42990 mashiike/acrun is a deployment tool for Amazon Bedrock AgentCore Runtime @mashiike
#43044 opengrep/opengrep - Static code analysis engine to find security issues in code @vmeurisse
#42977 praetorian-inc/noseyparker - Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history @vmeurisse
Fixes
#43149 bufbuild/buf: Use zip files on windows
Security
#42945 bytecodealliance/wasm-tools: GitHub Artifact Attestation config @scop
v4.428.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.427.0...v4.428.0
🎉 New Packages
#42915 mas-cli/mas - 📦 Mac App Store command line interface @TyceHerrman
Fixes
#42939 microsoft/edit: Fix edit v1.2.1
#42938 nodejs/node: Remove corepack
ref. nodejs/node#59835
v4.427.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.426.0...v4.427.0
🎉 New Packages
#42675 defenseunicorns/uds-cli: The command-line interface for users to interact with various components within the UDS landscape @joonas
#42677 google/addlicense: A program which ensures source code files have copyright license headers by scanning directory patterns recursively @joonas
#42674 zarf-dev/zarf: The Airgap Native Packager Manager for Kubernetes @joonas
#42680 Deprecate golang/tools/godoc
Please use
go doc -httpinstead.golang/go#59056 (comment)
Fixes
#42681 Stop the support of darwin/amd64 from release-plz v0.3.148
v4.426.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.425.0...v4.426.0
🎉 New Packages
#42598 kachick/selfup: Versions should know how to update themselves
#42570 oxc-project/oxc/oxlint: Deprecate oxlint
aqua can't support oxlint 1.17.0 or later.
https://redirect.github.com/oxc-project/oxc/discussions/14452#discussioncomment-14631344
Fixes
#42546 sigstore/cosign: Support cosign v3.0.1 or later
#42548 dex4er/tf: Support old versions
#42550 benbjohnson/litestream: Support litestream v0.5.0
#42552 AGWA/git-crypt: Fix the support of git-crypt 0.8.0
#42564 Rename the package maddyblue/sqlfmt to madelynnblue/sqlfmt
#42572 Re-scaffold apache/maven-mvnd
v4.425.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.424.0...v4.425.0
🎉 New Packages
#42487 walles/moor - Moor is a pager. It's designed to just do the right thing without any configuration @TyceHerrman
#42501 yonaskolb/XcodeGen - A Swift command line tool for generating your Xcode project @yumafuu
Fixes
#42498 Append
.exetominio/mcon Windowsv4.424.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.423.0...v4.424.0
🎉 New Packages
#42431 flutter/flutter: Flutter SDK - Google's UI toolkit for building beautiful, natively compiled applications @yumafuu
Fixes
#42480 Re-scaffold linkerd/linkerd2
v4.423.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.422.0...v4.423.0
🎉 New Packages
#42387 NikitaCOEUR/dirvana - Reach directory nirvana - per-project aliases, functions, and env vars that auto-load when you cd. Zero friction, zero pollution @NikitaCOEUR
#42429 grafana/grafanactl: The Grafana CLI. Command-line tool designed to simplify interaction with Grafana resources @istone-you
Fixes
#42404 Re-scaffold borgbackup/borg @risu729
v4.422.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.421.0...v4.422.0
🎉 New Packages
#42362 grafana/alloy: OpenTelemetry Collector distribution with programmable pipelines
#42385 jackchuka/confluence-md - From Confluence to clean Markdown, images and all — just one command @jackchuka
v4.421.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.420.0...v4.421.0
🎉 New Packages
#42355 suzuki-shunsuke/ghir: ghir is a CLI making past GitHub Releases immutable
Rename packages
#42352 Rename oracle/truffleruby/community-native to truffleruby/truffleruby/community-native
v4.420.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.419.0...v4.420.0
🎉 New Packages
#42166 perses/perses - The CNCF sandbox for observability visualisation. Already supports Prometheus, Tempo, Loki and Pyroscope - more data sources to come @lachieh
Rename packages
#42167 Rename oracle/truffleruby/oracle-native to truffleruby/truffleruby/oracle-native
#42216 Rename jreisinger/checkip to go-monk/checkip
v4.419.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.418.0...v4.419.0
🎉 New Packages
#42096 hougesen/mdsf: Format markdown code blocks using your favorite tools
#42080 patterner is a tool to analyze and present best practices (patterns) for Tailor Platform applications @k1LoW
Fixes
#42053 CycloneDX/cyclonedx-cli: Stop using musl builds on Linux @risu729
v4.418.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.417.0...v4.418.0
🎉 New Packages
#41995 edoardottt/depsdev: CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions
#41994 just-every/code - Fast, effective, mind-blowing, coding CLI. Browser integration, multi-agents, theming, and reasoning control. Orchestrate agents from OpenAI, Claude, Gemini or any provider @TyceHerrman
#42000 takaishi/tftargets: A tool that analyzes Terraform configurations and identifies directories that need to be executed based on Git changes
v4.417.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.416.0...v4.417.0
🎉 New Packages
#40464 GitGuardian/ggshield - Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security @TyceHerrman
#41884 blopker/codebook: Spell Checker for Code
v4.416.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.415.0...v4.416.0
🎉 New Packages
#41832 Adembc/lazyssh: A terminal-based SSH manager inspired by lazydocker and k9s - Written in go
#41841 CyberAgent/reminder-lint: Code remind tool for any languages and any config files @ponkio-o
#41831 bmf-san/ggc: A modern Git CLI tool with both traditional command-line and interactive incremental-search UI
#41835 docker/cagent: Agent Builder and Runtime by Docker Engineering
#41867 sibprogrammer/xq - Command-line XML and HTML beautifier and content extractor @Ash258
#41849 wakatara/harsh: Habit tracking for geeks. A minimalist, command line tool for tracking and understanding your habits @hituzi-no-sippo
v4.415.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.414.0...v4.415.0
🎉 New Packages
#41795 amir20/dtop - Terminal dashboard for Docker monitoring across multiple hosts with Dozzle integration @Ash258
#41732 shinagawa-web/gomarklint - A fast and configurable Markdown linter written in Go @scop
v4.414.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.413.0...v4.414.0
🎉 New Packages
#41721 k1LoW/concrun: Run commands concurrently @k1LoW
Improvement
#41671 fish-shell/fish-shell: Support macOS and latest version
Fixes
#41674 Re-scaffold jpillora/chisel
#41672 Fix dyne/zenroom
v4.413.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.412.0...v4.413.0
🎉 New Packages
#41634 akiomik/mado - A fast Markdown linter written in Rust @scop
#41592 alebeck/boring - The
boringSSH tunnel manager @scop#41622 asciinema/asciinema: Terminal session recorder, streamer and player
#41614 muquit/mailsend-go - mailsend-go is a multi-platform command line tool to send mail via SMTP protocol @Ash258
#41621 relusc/hclconv: Simple tool to convert JSON files to HCL2 files and vice versa
#41635 rvben/rumdl - A Markdown Linter written in Rust @scop
Security
#41595 tldr-pages/tlrc: GitHub Artifact Attestation config @scop
v4.412.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.411.0...v4.412.0
🎉 New Packages
#41490 rmitchellscott/rm-version-switcher - A beginner-friendly application for switching between installed reMarkable OS versions with an interactive interface @TyceHerrman
v4.411.1Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.411.0...v4.411.1
Fixes
#41401 tree-sitter/tree-sitter: Re-scaffold to support Windows @ras0q
#41393 zizmorcore/zizmor: Use cargo for v1.13.0 @risu729
#41374 kubernetes-sigs/kubebuilder: Re-scaffold @risu729
v4.411.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.410.0...v4.411.0
🎉 New Packages
#41260 technicalpickles/envsense - Environment awareness utilities - detect runtime environments @technicalpickles
Fixes
#41227 sqldef/sqldef/psqldef: Re-scaffold settings and support windows @qianlongzt
v4.410.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.409.1...v4.410.0
🎉 New Packages
#41156 hashicorp/hcp: HCP Command-Line Interface
🐛 Bug Fixes
#41221 hashicorp/waypoint: Fix invalid version_constraint @tony-sol
v4.409.1Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.409.0...v4.409.1
Fixes
#41149 Re-scaffold muesli/duf
#41147 hashicorp/waypoint: Support linux/arm64 @tony-sol
v4.409.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.408.0...v4.409.0
🎉 New Packages
#41087 temporalio/cli - Command-line interface for running Temporal Server and interacting with Workflows, Activities, Namespaces, and other parts of Temporal @zetlen-dandy
v4.408.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.407.3...v4.408.0
🎉 New Packages
#40994 rubenv/sql-migrate - SQL schema migration tool for Go [@msh
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.