Remove goreleaser #60
Assignees
Labels
Comments
Merged
1 task
mend-for-jackfan.us.kg bot
added a commit
to DelineaXPM/dsv-k8s
that referenced
this issue
Apr 6, 2023
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [aquaproj/aqua](https://togithub.com/aquaproj/aqua) | minor | `v1.34.0` -> `v1.38.0` | | [aquaproj/aqua](https://togithub.com/aquaproj/aqua) | minor | `v1.36.0` -> `v1.38.0` | --- ### Release Notes <details> <summary>aquaproj/aqua</summary> ### [`v1.38.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.38.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.37.2...v1.38.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.38.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.38.0) | aquaproj/aqua@v1.37.2...v1.38.0 ##### Features [#​1781](https://togithub.com/aquaproj/aqua/issues/1781) [#​1783](https://togithub.com/aquaproj/aqua/issues/1783) Support configuring `require_checksum` by the environment variable ```sh export AQUA_REQUIRE_CHECKSUM=true # false ``` If `require_checksum` is configured in a configuration file, the environment variable is ignored. If `checksum` isn't enabled in a configuration file, the environment variable is ignored. ##### Why is the feature needed? To combine security and convenience. In CI we would like to enable `require_checksum` for security. On the other hand, we don't want to enable `require_checksum` in your laptops for convenience. If `require_checksum` is enabled, you have to run `aqua update-checksum` when you change the package version. Otherwise, it fails to run the package. This is a bad experience. ### [`v1.37.2`](https://togithub.com/aquaproj/aqua/releases/tag/v1.37.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.37.1...v1.37.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.37.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.37.2) | aquaproj/aqua@v1.37.1...v1.37.2 #### Fixes [#​1777](https://togithub.com/aquaproj/aqua/issues/1777) init, init-policy: remove broken links `aqua.yaml` and `aqua-policy.yaml` generated by `aqua init` and `aqua init-policy` commands contained broken links. So we removed them. ### [`v1.37.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.37.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.37.0...v1.37.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.37.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.37.1) | aquaproj/aqua@v1.37.0...v1.37.1 #### Bug Fixes [#​1771](https://togithub.com/aquaproj/aqua/issues/1771) [#​1772](https://togithub.com/aquaproj/aqua/issues/1772) Fixed a bug that `update-checksum --deep` command fails if `go_install` package is used ### [`v1.37.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.37.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.36.1...v1.37.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.37.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.37.0) | aquaproj/aqua@v1.36.1...v1.37.0 #### Features [#​1762](https://togithub.com/aquaproj/aqua/issues/1762) Support default checksum parser aqua supported two checksum file format `raw` and `regexp` and the file format is mandatory. This pull request supports a default file format and the file format becomes optional. If a checksum file contains only one line and doesn't contain a space ` `, a file content is treated as checksum. e.g. 0549CBAA2DF451CF3A2011A9D73A9CB127784D26749D9CD14C9F4818AF104D44 Each line is split by a space ` `. The first element is treated as a checksum The second element is treated as a file path, and the base name is treated as the asset name. e.g. 944fdfebfdf1026d318609cc706bad454196f0b1d76e557b56c829b0e6165a9f ./kapp-linux-arm64 9aaa735985efbe240af0ca1d80adf3b43be6cf4ec6620a053082e31bea25dae7 ./kapp-linux-amd64 dcbf6dd9b4cecfc6316391029a6e9a5f3863e6a1f7848eb5fb78bfdbdc06faf8 ./kapp-darwin-amd64 e802044c2676455464675e290ea5b5eed7da9741eae1260af8d8d15355495db3 ./kapp-windows-amd64.exe f059d708fc550c516d1f04ee4c82efd8bc346c480156c03a3445825c73d827a6 ./kapp-darwin-arm64 ##### Why this feature is needed This feature works well flexibly and we don't have to fix checksum configuration when the checksum file format is changed. We don't have to write complicated regular expressions. This feature improves the maintainability of checksum configuration. #### Others [#​1764](https://togithub.com/aquaproj/aqua/issues/1764) Update Go from v1.20.1 to v1.20.2 ### [`v1.36.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.36.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.36.0...v1.36.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.36.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.36.1) | aquaproj/aqua@v1.36.0...v1.36.1 #### Bug Fixes [#​1742](https://togithub.com/aquaproj/aqua/issues/1742) [#​1752](https://togithub.com/aquaproj/aqua/issues/1752) install: install command succeeded unexpectedly even if unknown packages are included This bug was caused by aquaproj/aqua@40154d3 [v1.19.5](https://togithub.com/aquaproj/aqua/releases/tag/v1.19.5) (2022-10-01). [#​1746](https://togithub.com/aquaproj/aqua/issues/1746) [#​1757](https://togithub.com/aquaproj/aqua/issues/1757) Clear unrelated fields if package type is changed by `overrides` or `version_overrides` #### Others [#​1718](https://togithub.com/aquaproj/aqua/issues/1718) [#​1721](https://togithub.com/aquaproj/aqua/issues/1721) [#​1755](https://togithub.com/aquaproj/aqua/issues/1755) [#​1756](https://togithub.com/aquaproj/aqua/issues/1756) Use [slsa-verifier](https://togithub.com/slsa-framework/slsa-verifier) as CLI instead of Go library to separate slsa-verifier from aqua itself [#​1753](https://togithub.com/aquaproj/aqua/issues/1753) update google/go-github from v45 to v50 ##### Use slsa-verifier as CLI instead of Go library to separate slsa-verifier from aqua itself [#​1718](https://togithub.com/aquaproj/aqua/issues/1718) [#​1721](https://togithub.com/aquaproj/aqua/issues/1721) From aqua [v1.26.0](https://togithub.com/aquaproj/aqua/releases/tag/v1.26.0), aqua has supported verifing packages by slsa-verifier. aqua used slsa-verifier as a Go library, but then some issues occured because slsa-verifier is so large. - aqua binary becomes so large 5 MB => 15 MB - It takes a long time to build aqua - [#​1717](https://togithub.com/aquaproj/aqua/issues/1717) Renovate fails to run `go mod tidy` and `go get` Especially, [#​1717](https://togithub.com/aquaproj/aqua/issues/1717) was critical. To solve these issues, we decided to use slsa-verifer as CLI instead of Go library. ### [`v1.36.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.36.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.35.0...v1.36.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.36.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.36.0) | aquaproj/aqua@v1.35.0...v1.36.0 #### Features [#​1668](https://togithub.com/aquaproj/aqua/issues/1668) [#​1710](https://togithub.com/aquaproj/aqua/issues/1710) Show files in a package if an executable file isn't found [#​1704](https://togithub.com/aquaproj/aqua/issues/1704) [#​1705](https://togithub.com/aquaproj/aqua/issues/1705) Output HTTP status code when it fails to install a `http` package ##### Show files in a package if an executable file isn't found [#​1668](https://togithub.com/aquaproj/aqua/issues/1668) [#​1710](https://togithub.com/aquaproj/aqua/issues/1710) e.g. ```console $ aqua i --test ERRO[0000] check file_src is correct aqua_version= env=darwin/arm64 error="check file_src is correct: exe_path isn't found: stat /Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/Azure/aks-engine/v0.76.0/aks-engine-v0.76.0-darwin-amd64.tar.gz/aks-engine: no such file or directory" file_name=aks-engine package_name=Azure/aks-engine package_version=v0.76.0 program=aqua registry=standard ERRO[0000] executable files aren't found Files in the unarchived package: aks-engine-v0.76.0-darwin-amd64/aks-engine aqua_version= env=darwin/arm64 package_name=Azure/aks-engine package_version=v0.76.0 program=aqua registry=standard ERRO[0000] install the package aqua_version= env=darwin/arm64 error="check file_src is correct" package_name=Azure/aks-engine package_version=v0.76.0 program=aqua registry=standard FATA[0000] aqua failed aqua_version= env=darwin/arm64 error="it failed to install some packages" program=aqua ``` ### [`v1.35.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.35.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.34.2...v1.35.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.35.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.35.0) | aquaproj/aqua@v1.34.2...v1.35.0 #### Features [#​1692](https://togithub.com/aquaproj/aqua/issues/1692) [#​1699](https://togithub.com/aquaproj/aqua/issues/1699) Output the content of a checksum file when it fails to parse a checksum file [#​1684](https://togithub.com/aquaproj/aqua/issues/1684) [#​1687](https://togithub.com/aquaproj/aqua/issues/1687) Support outputting error messages when a package is installed [#​1693](https://togithub.com/aquaproj/aqua/issues/1693) [#​1695](https://togithub.com/aquaproj/aqua/issues/1695) Add a field `no_asset` to package configuration for returing an error because there is no asset ##### Output the content of a checksum file when it fails to parse a checksum file [#​1692](https://togithub.com/aquaproj/aqua/issues/1692) [#​1699](https://togithub.com/aquaproj/aqua/issues/1699) This is useful to fix the package's checksum configuration. e.g. ERRO[0005] Checksum isn't found in a checksum file. Checksum file content: 237db2e5a4fa7525362c012e94c8a76b36a73d138ac7950cc1c07d862a7cc74a github-comment_5.0.3_windows_amd64.tar.gz 48e49e0b5f1b3af4b5be13b7031bfb38d856259f09f3582e4f67bcae4b357429 github-comment_5.0.3_linux_arm64.tar.gz 58a32e01623ea00fc3650ffb149f724d3e76a06b2aa5237bb128da138ee79359 github-comment_5.0.3_linux_amd64.tar.gz 621a03cd09ee7eb57d9a00cdfb8c2fe70232b64db070c74122df5a0d7f26ae02 github-comment_5.0.3_darwin_arm64.tar.gz b893acb1bef079724017590a115bc1447208ea92b0c1fdf8563c6dfc1ef19ff0 github-comment_5.0.3_darwin_amd64.tar.gz c1a3e184957850e333e24ee437a14b55c8ea78d2e190be71c0f72b0eac0e09d7 github-comment_5.0.3_windows_arm64.tar.gz aqua_version= checksum_file_format=regexp checksum_pattern_checksum="^(\\b[A-Fa-f0-9]{128}\\b)" checksum_pattern_file="^\\b[A-Fa-f0-9]{128}\\b\\s+(\\S+)$" env=darwin/arm64 exe_name=github-comment exe_path=/Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/suzuki-shunsuke/github-comment/v5.0.3/github-comment_5.0.3_darwin_arm64.tar.gz/github-comment package=suzuki-shunsuke/github-comment package_name=suzuki-shunsuke/github-comment package_version=v5.0.3 program=aqua registry=standard ##### Support outputting error messages when a package is installed [#​1684](https://togithub.com/aquaproj/aqua/issues/1684) [#​1687](https://togithub.com/aquaproj/aqua/issues/1687) e.g. registry.yaml ```yaml packages: - type: github_release repo_owner: grafana repo_name: xk6 version_constraint: semver("< 0.9.0") version_overrides: - version_constraint: semver(">= 0.9.0") error_message: | From version xk6 v0.9.0 there are no more binaries published. grafana/xk6#60 ``` ```console $ xk6 --help ERRO[0000] failed to install a package grafana/xk6@​v0.9.0. From version xk6 v0.9.0 there are no more binaries published. grafana/xk6#60 aqua_version= env=darwin/arm64 exe_name=xk6 exe_path=/Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/grafana/xk6/v0.9.0/xk6_0.9.0_mac_arm64.tar.gz/xk6 package=grafana/xk6 package_name=grafana/xk6 package_version=v0.9.0 program=aqua registry=standard FATA[0000] aqua failed aqua_version= env=darwin/arm64 error= exe_name=xk6 package=grafana/xk6 package_version=v0.9.0 program=aqua ``` ##### Add a field `no_asset` to package configuration for returing an error because there is no asset [#​1693](https://togithub.com/aquaproj/aqua/issues/1693) [#​1695](https://togithub.com/aquaproj/aqua/issues/1695) e.g. registry.yaml ```yaml packages: - type: github_release repo_owner: grafana repo_name: xk6 version_constraint: semver("< 0.9.0") version_overrides: - version_constraint: semver(">= 0.9.0") no_asset: true ``` ```console $ xk6 --help ERRO[0000] failed to install a package grafana/xk6@​v0.9.0. No asset is released in this version aqua_version= env=darwin/arm64 exe_name=xk6 exe_path=/Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/grafana/xk6/v0.9.0/xk6_0.9.0_mac_arm64.tar.gz/xk6 package=grafana/xk6 package_name=grafana/xk6 package_version=v0.9.0 program=aqua registry=standard FATA[0000] aqua failed aqua_version= env=darwin/arm64 error= exe_name=xk6 package=grafana/xk6 package_version=v0.9.0 program=aqua ``` #### Fixes [#​1700](https://togithub.com/aquaproj/aqua/issues/1700) [#​1701](https://togithub.com/aquaproj/aqua/issues/1701) Remove `exe_path` from log `exe_path` isn't helpful in many cases. `exe_path` is long, so this is a bit noisy. ### [`v1.34.2`](https://togithub.com/aquaproj/aqua/releases/tag/v1.34.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.34.1...v1.34.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.34.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.34.2) | aquaproj/aqua@v1.34.1...v1.34.2 #### Bug Fixes [#​1682](https://togithub.com/aquaproj/aqua/issues/1682) [#​1685](https://togithub.com/aquaproj/aqua/issues/1685) generate-registry: Fix `--deep` option to handle GitHub Releases not conforming to semantic versioning ### [`v1.34.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.34.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.34.0...v1.34.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.34.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.34.1) | aquaproj/aqua@v1.34.0...v1.34.1 #### Bug Fixes [#​1092](https://togithub.com/aquaproj/aqua/issues/1092) [#​1675](https://togithub.com/aquaproj/aqua/issues/1675) [#​1677](https://togithub.com/aquaproj/aqua/issues/1677) [#​1678](https://togithub.com/aquaproj/aqua/issues/1678) generate-registry: Refactoring and fix some bugs </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNy4wIiwidXBkYXRlZEluVmVyIjoiMzUuMTcuMCJ9--> Co-authored-by: mend-for-jackfan.us.kg[bot] <50673670+mend-for-jackfan.us.kg[bot]@users.noreply.github.com>
sheldonhull
pushed a commit
to DelineaXPM/github-workflows
that referenced
this issue
Jun 26, 2023
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [aquaproj/aqua](https://togithub.com/aquaproj/aqua) | major | `v1.32.0` -> `v2.9.0` | --- ### ⚠ Dependency Lookup Warnings ⚠ Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>aquaproj/aqua</summary> ### [`v2.9.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.9.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.8.0...v2.9.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.9.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.9.0) | https://github.com/aquaproj/aqua/compare/v2.8.0...v2.9.0 ##### Features [#​2058](https://togithub.com/orgs/aquaproj/discussions/2058) [#​2063](https://togithub.com/aquaproj/aqua/issues/2063) Support disabling Lazy Install [#​2027](https://togithub.com/orgs/aquaproj/discussions/2027) [#​2062](https://togithub.com/aquaproj/aqua/issues/2062) Add `-detail` option to "generate" command ##### Support disabling Lazy Install [#​2058](https://togithub.com/orgs/aquaproj/discussions/2058) [#​2063](https://togithub.com/aquaproj/aqua/issues/2063) Lazy Install is enabled by default, but you can disable it with the environment variable `AQUA_DISABLE_LAZY_INSTALL`. e.g. ```sh export AQUA_DISABLE_LAZY_INSTALL=true ``` If Lazy Install is disabled, the command would fail if the package isn't installed in advance. e.g. ```console $ tfcmt -v FATA[0000] aqua failed aqua_version= doc="https://aquaproj.github.io/docs/reference/codes/006" env=darwin/arm64 error="the executable file isn't installed yet. Lazy Install is disabled" exe_name=tfcmt package=suzuki-shunsuke/tfcmt package_version=v1.0.0 program=aqua ``` Disabling Lazy Install is useful to improve the security and keep the governance. You can prevent malicious commands from being installed and executed via Lazy Install. And you can also prevent aqua.yaml from being overwritten. This is especially useful for CI of Monorepo. The purpose is same with aqua's Policy, but disabling Lazy Install is simpler than Policy. ##### Add `-detail` option to "generate" command [#​2027](https://togithub.com/orgs/aquaproj/discussions/2027) [#​2062](https://togithub.com/aquaproj/aqua/issues/2062) With -detail (-d) option, aqua outputs additional information such as description and link. ```console $ aqua g -detail cli/cli - name: cli/[email protected] description: GitHub’s official command line tool link: https://github.com/cli/cli ``` The environment variable `AQUA_GENERATE_WITH_DETAIL` is also available. ```sh export AQUA_GENERATE_WITH_DETAIL=true ``` ##### Others [#​2046](https://togithub.com/aquaproj/aqua/issues/2046) Update Go 1.20.4 to 1.20.5 ### [`v2.8.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.8.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.7.1...v2.8.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.8.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.8.0) | https://github.com/aquaproj/aqua/compare/v2.7.1...v2.8.0 #### Features [#​2016](https://togithub.com/orgs/aquaproj/discussions/2016) [#​2019](https://togithub.com/aquaproj/aqua/issues/2019) Support a new package type `cargo`, installing packages by `cargo install` [#​2023](https://togithub.com/aquaproj/aqua/issues/2023) Support a new command `root-dir`, outputting the aqua-root directory `AQUA_ROOT_DIR` to the standard output ##### Support a new package type `cargo` [#​2016](https://togithub.com/aquaproj/aqua/issues/2016) [#​2019](https://togithub.com/aquaproj/aqua/issues/2019) [Document](https://aquaproj.github.io/docs/reference/registry-config/cargo-package) The package is installed by [cargo install](https://doc.rust-lang.org/cargo/commands/cargo-install.html) command. You can manage tools written in Rust with aqua, which means you can manage them and their versions declaratively in the consistent way. You can switch tool versions per project and update them continuously by Renovate! For details, please see [Document](https://aquaproj.github.io/docs/reference/registry-config/cargo-package) ##### Support a new command `root-dir` [#​2023](https://togithub.com/aquaproj/aqua/issues/2023) ```console $ aqua help root-dir NAME: aqua root-dir - Output the aqua root directory (AQUA_ROOT_DIR) USAGE: aqua root-dir [command options] [arguments...] DESCRIPTION: Output the aqua root directory (AQUA_ROOT_DIR) e.g. $ aqua root-dir /home/foo/.local/share/aquaproj-aqua $ export "PATH=$(aqua root-dir)/bin:PATH" OPTIONS: --help, -h show help ``` ### [`v2.7.1`](https://togithub.com/aquaproj/aqua/releases/tag/v2.7.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.7.0...v2.7.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.7.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.7.1) | https://github.com/aquaproj/aqua/compare/v2.7.0...v2.7.1 ##### Bug Fixes [#​2003](https://togithub.com/aquaproj/aqua/issues/2003) [#​2006](https://togithub.com/aquaproj/aqua/issues/2006) Fix a bug that [the progress bar](https://aquaproj.github.io/docs/reference/config/progress-bar/) doesn't work well if some verification such as checksum, SLSA, and Cosign are enabled [#​2013](https://togithub.com/aquaproj/aqua/issues/2013) [#​2015](https://togithub.com/aquaproj/aqua/issues/2015) Convert `files[].src` with [filepath.FromSlash](https://pkg.go.dev/path/filepath#FromSlash) for Windows ##### Others [#​2014](https://togithub.com/aquaproj/aqua/issues/2014) Support the character `tab` as a separator of the default checksum parser ### [`v2.7.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.7.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.6.0...v2.7.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.7.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.7.0) | https://github.com/aquaproj/aqua/compare/v2.6.0...v2.7.0 ##### Features [#​1803](https://togithub.com/aquaproj/aqua/issues/1803) [#​2002](https://togithub.com/aquaproj/aqua/issues/2002) Support unarchiving `PKG` format on macOS ##### Others [#​1996](https://togithub.com/aquaproj/aqua/issues/1996) Update slsa-verifier to v2.3.0 [#​1997](https://togithub.com/aquaproj/aqua/issues/1997) [#​2001](https://togithub.com/aquaproj/aqua/issues/2001) Refactoring ### [`v2.6.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.6.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.5.2...v2.6.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.6.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.6.0) | https://github.com/aquaproj/aqua/compare/v2.5.2...v2.6.0 #### Features [#​1984](https://togithub.com/aquaproj/aqua/issues/1984) generate-registry: Enable to parse tags not conforming to semver *If you don't develop Registry or don't contribute to Standard Registry, you can ignore this release.* generate-registry command couldn't parse tags not conforming to semver. This release enables aqua to parse those tags and extract prefixes and versions. For example, this release enables aqua to parse the tag [version\_112](https://togithub.com/WebAssembly/binaryen/releases/tag/version\_112) and extracts the prefix `version_` and the version `112`. ### [`v2.5.2`](https://togithub.com/aquaproj/aqua/releases/tag/v2.5.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.5.1...v2.5.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.5.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.5.2) | https://github.com/aquaproj/aqua/compare/v2.5.1...v2.5.2 #### Fixes [#​1983](https://togithub.com/aquaproj/aqua/issues/1983) generate-registry: Use the default checksum parser ### [`v2.5.1`](https://togithub.com/aquaproj/aqua/releases/tag/v2.5.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.5.0...v2.5.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.5.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.5.1) | https://github.com/aquaproj/aqua/compare/v2.5.0...v2.5.1 #### Fixes [#​1979](https://togithub.com/aquaproj/aqua/issues/1979) generate-registry: Add `unknown-linux` and `pc-windows` to patterns of `replacements` [#​1872](https://togithub.com/aquaproj/aqua/issues/1872) [#​1976](https://togithub.com/aquaproj/aqua/issues/1976) Move the symbolic link of `aqua-proxy` from `$AQUA_ROOT_DIR/bin/aqua-proxy` to `$AQUA_ROOT_DIR/aqua-proxy` ### [`v2.5.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.5.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.4.3...v2.5.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.5.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.5.0) | https://github.com/aquaproj/aqua/compare/v2.4.3...v2.5.0 #### Features [#​1925](https://togithub.com/aquaproj/aqua/issues/1925) [#​1926](https://togithub.com/aquaproj/aqua/issues/1926) Execute commands by `execve(2)` by default https://aquaproj.github.io/docs/reference/execve-2 [#​710](https://togithub.com/aquaproj/aqua/issues/710) [#​729](https://togithub.com/aquaproj/aqua/issues/729) [#​1597](https://togithub.com/aquaproj/aqua/issues/1597) [#​1925](https://togithub.com/aquaproj/aqua/issues/1925) ⚠️ In Windows this feature doesn't work. In Windows, aqua creates small shell scripts and bat scripts instead of `aqua-proxy` and symbolic links. And Windows doesn't support `execve(2)`, so the environment variable `AQUA_X_SYS_EXEC` is ignored. When a command `x` is executed via aqua, the command is executed as the following. 1. $AQUA_ROOT_DIR/bin/x: symbolic link to aqua-proxy 2. aqua-proxy executes the command `aqua exec -- x` 3. aqua executes `x` So the command `x` is executed via `aqua-proxy` and `aqua`. Until aqua v2.5.0, `aqua-proxy` and `aqua` executed commands as subprocess. You can confirm it by checking the process tree by `pstree` command. e.g. ```console $ nvim # nvim is managed by aqua $ pstree -s nvim ``` \-+= 00719 shunsukesuzuki -zsh \-+= 09955 shunsukesuzuki nvim # aqua-proxy \-+- 09956 shunsukesuzuki aqua exec -- nvim \--- 09957 shunsukesuzuki /Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/neovim/neovim/v0.7.0/nvim-macos.tar.gz/nvim-osx64/bin/nvim <!----> aqua-proxy -> aqua -> x Sometimes this behaviour caused trouble. [#​710](https://togithub.com/aquaproj/aqua/issues/710) [#​1597](https://togithub.com/aquaproj/aqua/issues/1597) From aqua v2.5.0, `aqua-proxy` and `aqua` execute commands by [execve(2)](https://pkg.go.dev/golang.org/x/sys/unix#Exec) in Linux and macOS by default. So extra subprocess isn't raised. \-+= 82315 shunsukesuzuki -zsh \-+= 82630 shunsukesuzuki nvim If you feel aqua becomes unstable due to this feature, you can disable this feature by the environment variable `AQUA_X_SYS_EXEC`. ```sh export AQUA_X_SYS_EXEC=false ``` #### Others [#​1926](https://togithub.com/aquaproj/aqua/issues/1926) Update aqua-proxy to [v1.2.0](https://togithub.com/aquaproj/aqua-proxy/releases/tag/v1.2.0) [#​1964](https://togithub.com/aquaproj/aqua/issues/1964) Improve error messages when it failed to install aqua-proxy, cosign, and slsa-verifier ### [`v2.4.3`](https://togithub.com/aquaproj/aqua/releases/tag/v2.4.3) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.4.2...v2.4.3) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.4.3) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.4.3) | https://github.com/aquaproj/aqua/compare/v2.4.2...v2.4.3 ##### Bug Fixes [#​1961](https://togithub.com/aquaproj/aqua/issues/1961) [#​1963](https://togithub.com/aquaproj/aqua/issues/1963) Fix the hardcoded checksum of slsa-verifier windows/amd64 The checksum of slsa-verifier v2.2.0 windows/amd64 was wrong. So it failed to install slsa-verifier internally. This bug affects only windows/amd64. This bug affects aqua >= 2.3.7, aqua <= 2.4.2 - [https://github.com/aquaproj/aqua/issues/1961#issuecomment-1536897000](https://togithub.com/aquaproj/aqua/issues/1961#issuecomment-1536897000) ### [`v2.4.2`](https://togithub.com/aquaproj/aqua/releases/tag/v2.4.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.4.1...v2.4.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.4.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.4.2) | https://github.com/aquaproj/aqua/compare/v2.4.1...v2.4.2 #### Bug Fixes [#​1956](https://togithub.com/aquaproj/aqua/issues/1956) [#​1957](https://togithub.com/aquaproj/aqua/issues/1957) checksum verification: Fix a bug the default checksum parser can't extract the checksum if the checksum has a prefix "\*" If you don't enable the checksum verification, you can ignore this bug. ##### ⚠️ For aqua-registry v4 If you enable the checksum verification and use aqua-registry v4, please update aqua to v2.4.2 or later. ### [`v2.4.1`](https://togithub.com/aquaproj/aqua/releases/tag/v2.4.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.4.0...v2.4.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.4.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.4.1) | https://github.com/aquaproj/aqua/compare/v2.4.0...v2.4.1 #### Features [#​1947](https://togithub.com/aquaproj/aqua/issues/1947) generate-registry: Remove emojis from description [@​ponkio-o](https://togithub.com/ponkio-o) 🎉 First contribution ### [`v2.4.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.4.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.7...v2.4.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.4.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.4.0) | https://github.com/aquaproj/aqua/compare/v2.3.7...v2.4.0 ##### Fixes [#​1904](https://togithub.com/aquaproj/aqua/issues/1904) [#​1919](https://togithub.com/aquaproj/aqua/issues/1919) List a package contents if the executable file isn't found in Windows ##### aqua -c aqua-global.yaml exec -- kustomize version ERRO[0000] check file_src is correct aqua_version= env=windows/amd64 error="check file_src is correct: get file_src: CreateFile C:\\Users\\runneradmin\\AppData\\Local\\aquaproj-aqua\\pkgs\\github_release\\github.com\\kubernetes-sigs\\kustomize\\kustomize\\v4.5.7\\kustomize_v4.5.7_windows_amd64.tar.gz\\hoge: The system cannot find the file specified." exe_name=kustomize file_name=kustomize package=kubernetes-sigs/kustomize/version_prefix package_name=kubernetes-sigs/kustomize/version_prefix package_version=kustomize/v4.5.7 program=aqua registry=local ERRO[0000] executable files aren't found Files in the unarchived package: kustomize.exe aqua_version= env=windows/amd64 exe_name=kustomize package=kubernetes-sigs/kustomize/version_prefix package_name=kubernetes-sigs/kustomize/version_prefix package_version=kustomize/v4.5.7 program=aqua registry=local FATA[0000] aqua failed aqua_version= env=windows/amd64 error="check file_src is correct" exe_name=kustomize package=kubernetes-sigs/kustomize/version_prefix package_version=kustomize/v4.5.7 program=aqua ##### Others [#​1914](https://togithub.com/aquaproj/aqua/issues/1914) generate-registry: Use the default checksum parser ⚠️ Default checksum parser requires aqua >= v1.37.0 ### [`v2.3.7`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.7) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.6...v2.3.7) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.7) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.7) | https://github.com/aquaproj/aqua/compare/v2.3.6...v2.3.7 #### Fixes [#​1905](https://togithub.com/aquaproj/aqua/issues/1905) Retry slsa-verifier and cosign regardless command outputs #### Others [#​1912](https://togithub.com/aquaproj/aqua/issues/1912) update slsa-verifier v2.1.0 to v2.2.0 [#​1910](https://togithub.com/aquaproj/aqua/issues/1910) Update google/go-github v51 to v52 ### [`v2.3.6`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.6) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.5...v2.3.6) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.6) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.6) | https://github.com/aquaproj/aqua/compare/v2.3.5...v2.3.6 #### Bug Fixes [#​1889](https://togithub.com/aquaproj/aqua/issues/1889) [#​1890](https://togithub.com/aquaproj/aqua/issues/1890) Fix a bug that the log is outputted to not stderr but stdout on Windows Thank you for reporting this issue, [@​knqyf263](https://togithub.com/knqyf263) [https://github.com/aquasecurity/trivy/pull/4058#issuecomment-1511250055](https://togithub.com/aquasecurity/trivy/pull/4058#issuecomment-1511250055) ### [`v2.3.5`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.5) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.4...v2.3.5) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.5) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.5) | https://github.com/aquaproj/aqua/compare/v2.3.4...v2.3.5 ##### Fixes [#​1883](https://togithub.com/aquaproj/aqua/issues/1883) Change the function semver to return false against commit hash e.g. version_constraint ```yaml version_constraint: semver(">= 4.0.1") ``` version: `a209843d8ea9db383ce1a1976e43c8e95f831c61` The evaluation result: - AS IS: `true` - TO BE: `false` ### [`v2.3.4`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.4) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.3...v2.3.4) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.4) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.4) | https://github.com/aquaproj/aqua/compare/v2.3.3...v2.3.4 #### Bug Fixes [#​1875](https://togithub.com/aquaproj/aqua/issues/1875) Fix a panic `fatal error: concurrent map writes` ### [`v2.3.3`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.3) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.2...v2.3.3) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.3) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.3) | https://github.com/aquaproj/aqua/compare/v2.3.2...v2.3.3 #### Others [#​1873](https://togithub.com/aquaproj/aqua/issues/1873) Change the install path of aqua and aqua-proxy This is an internal change, so you don't have to care of this basically. aqua and aqua-proxy are installed in `$AQUA_ROOT_DIR/internal` instead of `$AQUA_ROOT_DIR/pkgs`. By this change aqua and aqua-proxy are kept even if you [remove `$AQUA_ROOT_DIR/pkgs` for cleaning up](https://aquaproj.github.io/docs/guides/uninstall-packages/). [#​1868](https://togithub.com/aquaproj/aqua/issues/1868) Update [JSONSchema](https://togithub.com/aquaproj/aqua/tree/main/json-schema) ### [`v2.3.2`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.1...v2.3.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.2) | https://github.com/aquaproj/aqua/compare/v2.3.1...v2.3.2 #### Bug Fixes [#​1864](https://togithub.com/aquaproj/aqua/issues/1864) Fix the bug that it fails to install a package if a version_constraint can't be evaluated WARN[0000] version constraint is invalid aqua_version=2.3.1 env=darwin/arm64 error="evaluate the expression: Malformed version: edge (1:1)\n | semver(\">= 0.0.6\")\n | ^" exe_name=starship package_name=mvisonneau/vac program=aqua registry_name=local From this release, if a version_constraint can't be evaluated, aqua treats as the version doesn't match with the version_constraint. [#​1863](https://togithub.com/aquaproj/aqua/issues/1863) generate-registry: Fix typo of the file format `.tbz2` ### [`v2.3.1`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.3.0...v2.3.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.1) | https://github.com/aquaproj/aqua/compare/v2.3.0...v2.3.1 #### Bug Fixes [#​1844](https://togithub.com/aquaproj/aqua/issues/1844) Fix a bug that `aqua i -a` and `aqua cp -a` don't read policy files properly This bug was caused by aqua v2.3.0. This bug affected the following versions. - aqua v2.3.0 ### [`v2.3.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.3.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.2.3...v2.3.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.3.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.3.0) | https://github.com/aquaproj/aqua/compare/v2.2.3...v2.3.0 #### Features [#​1789](https://togithub.com/aquaproj/aqua/issues/1789) [#​1808](https://togithub.com/aquaproj/aqua/issues/1808) Support policy commands and `Git Repository root's Policy file` :bulb: If you use only Standard Registry, you don't have to care of Policy. The following commands have been added. - aqua policy init: Create a Policy file - aqua policy allow: Allow a Policy file - aqua policy deny: Deny a Policy file And `Git Repository root's Policy file` has been introduced. Please see the document too. ##### See also - [Tutorial](https://aquaproj.github.io/docs/guides/policy-as-code) - [Reference](https://aquaproj.github.io/docs/reference/security/policy-as-code) - [Reference - Git Repository root's policy file and policy commands](https://aquaproj.github.io/docs/reference/security/policy-as-code/git-policy) ##### Why is this feature needed? To improve the user experience of non Standard Registries. To set up Policy easily keeping the security. To use non Standard Registries, you had to set the environment variable `AQUA_POLICY_CONFIG`. But it is bothersome, especially in the team development because all members have to set the environment variable `AQUA_POLICY_CONFIG`. Some tools such as `direnv` are useful to set environment variables, but it is undesirable to ask users to install additional tools for aqua. By policy commands and `Git Repository root's Policy file`, you don't have to set the environment variable `AQUA_POLICY_CONFIG`. Instead of setting `AQUA_POLICY_CONFIG`, you can allow Policy files by running `aqua policy allow` command according to the guide. This change improves the user experience keeping the security. ### [`v2.2.3`](https://togithub.com/aquaproj/aqua/releases/tag/v2.2.3) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.2.2...v2.2.3) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.2.3) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.2.3) | https://github.com/aquaproj/aqua/compare/v2.2.2...v2.2.3 #### Others [#​1818](https://togithub.com/aquaproj/aqua/issues/1818) [#​1840](https://togithub.com/aquaproj/aqua/issues/1840) Add a link to the document "command is not found" https://aquaproj.github.io/docs/reference/codes/004 ```console $ ci-info --version FATA[0000] aqua failed aqua_version=2.2.3 doc="https://aquaproj.github.io/docs/reference/codes/004" env=linux/arm64 error="command is not found" exe_name=ci-info program=aqua ``` ### [`v2.2.2`](https://togithub.com/aquaproj/aqua/releases/tag/v2.2.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.2.1...v2.2.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.2.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.2.2) | https://github.com/aquaproj/aqua/compare/v2.2.1...v2.2.2 #### Bug Fixes [#​1813](https://togithub.com/aquaproj/aqua/issues/1813) Fix a bug that aqua.yaml in the directory `\.?aqua` isn't read on Windows #### Others [#​1822](https://togithub.com/aquaproj/aqua/issues/1822) Update Go 1.20.2 to 1.20.3 ### [`v2.2.1`](https://togithub.com/aquaproj/aqua/releases/tag/v2.2.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.2.0...v2.2.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.2.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.2.1) | https://github.com/aquaproj/aqua/compare/v2.2.0...v2.2.1 #### Others [#​1809](https://togithub.com/aquaproj/aqua/issues/1809) Fix aqua's Go Module Path. We forgot to fix Go Module Path when we released aqua v2. [#​1801](https://togithub.com/aquaproj/aqua/issues/1801) [#​1806](https://togithub.com/aquaproj/aqua/issues/1806) Remove code regarding go type package. We abandoned `go` type package since aqua v2 ### [`v2.2.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.2.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.1.0...v2.2.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.2.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.2.0) | https://github.com/aquaproj/aqua/compare/v2.1.0...v2.2.0 #### Features [#​1706](https://togithub.com/aquaproj/aqua/issues/1706) [#​1798](https://togithub.com/aquaproj/aqua/issues/1798) Support [Apple Disk Image (.dmg) format](https://en.wikipedia.org/wiki/Apple_Disk_Image) [@​u-yas](https://togithub.com/u-yas) aqua has supported installing tools from Apple Disk Image. `hdiutil` is required. #### Fixes [#​1794](https://togithub.com/aquaproj/aqua/issues/1794) [#​1795](https://togithub.com/aquaproj/aqua/issues/1795) Fix a bug that a checksum file content isn't outputted even if the checksum isn't found in the checksum file ### [`v2.1.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.1.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v2.0.0...v2.1.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.1.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.1.0) | https://github.com/aquaproj/aqua/compare/v2.0.0...v2.1.0 #### Features [#​1790](https://togithub.com/aquaproj/aqua/issues/1790) [#​1791](https://togithub.com/aquaproj/aqua/issues/1791) Support disabling Policy by environment variable `AQUA_DISABLE_POLICY` ```console $ export AQUA_DISABLE_POLICY=true ``` If the environment variable `AQUA_DISABLE_POLICY` is true, `AQUA_POLICY_CONFIG` is ignored and Policy is disabled, which means every Registry and Package are available. About Policy, please see the following documents too. - https://aquaproj.github.io/docs/reference/upgrade-guide/v2/only-standard-registry-is-allowed-by-default/ - https://aquaproj.github.io/docs/reference/security/policy-as-code/ ##### Why this feature is needed This feature is introduced to enable users using non Standard Registries to upgrade aqua to v2 easily. ##### ⚠️ We don't recommend this feature We don't recommend this feature basically because Policy is important in terms of security. You shouldn't use this feature in CI. ### [`v2.0.0`](https://togithub.com/aquaproj/aqua/releases/tag/v2.0.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.38.0...v2.0.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.0.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.0.0) | https://github.com/aquaproj/aqua/compare/v1.38.0...v2.0.0 #### 🎉 aqua v2 has been released 🎉 ⚠️ **This release is a major update and includes several breaking changes.** ⚠️ Please see [the document](https://aquaproj.github.io/docs/reference/upgrade-guide/v2/). ### [`v1.38.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.38.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.37.2...v1.38.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.38.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.38.0) | https://github.com/aquaproj/aqua/compare/v1.37.2...v1.38.0 #### Features [#​1781](https://togithub.com/aquaproj/aqua/issues/1781) [#​1783](https://togithub.com/aquaproj/aqua/issues/1783) Support configuring `require_checksum` by the environment variable ```sh export AQUA_REQUIRE_CHECKSUM=true # false ``` If `require_checksum` is configured in a configuration file, the environment variable is ignored. If `checksum` isn't enabled in a configuration file, the environment variable is ignored. ##### Why is the feature needed? To combine security and convenience. In CI we would like to enable `require_checksum` for security. On the other hand, we don't want to enable `require_checksum` in your laptops for convenience. If `require_checksum` is enabled, you have to run `aqua update-checksum` when you change the package version. Otherwise, it fails to run the package. This is a bad experience. ### [`v1.37.2`](https://togithub.com/aquaproj/aqua/releases/tag/v1.37.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.37.1...v1.37.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.37.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.37.2) | https://github.com/aquaproj/aqua/compare/v1.37.1...v1.37.2 #### Fixes [#​1777](https://togithub.com/aquaproj/aqua/issues/1777) init, init-policy: remove broken links `aqua.yaml` and `aqua-policy.yaml` generated by `aqua init` and `aqua init-policy` commands contained broken links. So we removed them. ### [`v1.37.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.37.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.37.0...v1.37.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.37.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.37.1) | https://github.com/aquaproj/aqua/compare/v1.37.0...v1.37.1 #### Bug Fixes [#​1771](https://togithub.com/aquaproj/aqua/issues/1771) [#​1772](https://togithub.com/aquaproj/aqua/issues/1772) Fixed a bug that `update-checksum --deep` command fails if `go_install` package is used ### [`v1.37.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.37.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.36.1...v1.37.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.37.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.37.0) | https://github.com/aquaproj/aqua/compare/v1.36.1...v1.37.0 #### Features [#​1762](https://togithub.com/aquaproj/aqua/issues/1762) Support default checksum parser aqua supported two checksum file format `raw` and `regexp` and the file format is mandatory. This pull request supports a default file format and the file format becomes optional. If a checksum file contains only one line and doesn't contain a space ` `, a file content is treated as checksum. e.g. 0549CBAA2DF451CF3A2011A9D73A9CB127784D26749D9CD14C9F4818AF104D44 Each line is split by a space ` `. The first element is treated as a checksum The second element is treated as a file path, and the base name is treated as the asset name. e.g. 944fdfebfdf1026d318609cc706bad454196f0b1d76e557b56c829b0e6165a9f ./kapp-linux-arm64 9aaa735985efbe240af0ca1d80adf3b43be6cf4ec6620a053082e31bea25dae7 ./kapp-linux-amd64 dcbf6dd9b4cecfc6316391029a6e9a5f3863e6a1f7848eb5fb78bfdbdc06faf8 ./kapp-darwin-amd64 e802044c2676455464675e290ea5b5eed7da9741eae1260af8d8d15355495db3 ./kapp-windows-amd64.exe f059d708fc550c516d1f04ee4c82efd8bc346c480156c03a3445825c73d827a6 ./kapp-darwin-arm64 ##### Why this feature is needed This feature works well flexibly and we don't have to fix checksum configuration when the checksum file format is changed. We don't have to write complicated regular expressions. This feature improves the maintainability of checksum configuration. #### Others [#​1764](https://togithub.com/aquaproj/aqua/issues/1764) Update Go from v1.20.1 to v1.20.2 ### [`v1.36.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.36.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.36.0...v1.36.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.36.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.36.1) | https://github.com/aquaproj/aqua/compare/v1.36.0...v1.36.1 ##### Bug Fixes [#​1742](https://togithub.com/aquaproj/aqua/issues/1742) [#​1752](https://togithub.com/aquaproj/aqua/issues/1752) install: install command succeeded unexpectedly even if unknown packages are included This bug was caused by https://github.com/aquaproj/aqua/commit/40154d39c754df9d5bcf316a89e7b02b2d4e73fd [v1.19.5](https://togithub.com/aquaproj/aqua/releases/tag/v1.19.5) (2022-10-01). [#​1746](https://togithub.com/aquaproj/aqua/issues/1746) [#​1757](https://togithub.com/aquaproj/aqua/issues/1757) Clear unrelated fields if package type is changed by `overrides` or `version_overrides` ##### Others [#​1718](https://togithub.com/aquaproj/aqua/issues/1718) [#​1721](https://togithub.com/aquaproj/aqua/issues/1721) [#​1755](https://togithub.com/aquaproj/aqua/issues/1755) [#​1756](https://togithub.com/aquaproj/aqua/issues/1756) Use [slsa-verifier](https://togithub.com/slsa-framework/slsa-verifier) as CLI instead of Go library to separate slsa-verifier from aqua itself [#​1753](https://togithub.com/aquaproj/aqua/issues/1753) update google/go-github from v45 to v50 ##### Use slsa-verifier as CLI instead of Go library to separate slsa-verifier from aqua itself [#​1718](https://togithub.com/aquaproj/aqua/issues/1718) [#​1721](https://togithub.com/aquaproj/aqua/issues/1721) From aqua [v1.26.0](https://togithub.com/aquaproj/aqua/releases/tag/v1.26.0), aqua has supported verifing packages by slsa-verifier. aqua used slsa-verifier as a Go library, but then some issues occured because slsa-verifier is so large. - aqua binary becomes so large 5 MB => 15 MB - It takes a long time to build aqua - [#​1717](https://togithub.com/aquaproj/aqua/issues/1717) Renovate fails to run `go mod tidy` and `go get` Especially, [#​1717](https://togithub.com/aquaproj/aqua/issues/1717) was critical. To solve these issues, we decided to use slsa-verifer as CLI instead of Go library. ### [`v1.36.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.36.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.35.0...v1.36.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.36.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.36.0) | https://github.com/aquaproj/aqua/compare/v1.35.0...v1.36.0 #### Features [#​1668](https://togithub.com/aquaproj/aqua/issues/1668) [#​1710](https://togithub.com/aquaproj/aqua/issues/1710) Show files in a package if an executable file isn't found [#​1704](https://togithub.com/aquaproj/aqua/issues/1704) [#​1705](https://togithub.com/aquaproj/aqua/issues/1705) Output HTTP status code when it fails to install a `http` package ##### Show files in a package if an executable file isn't found [#​1668](https://togithub.com/aquaproj/aqua/issues/1668) [#​1710](https://togithub.com/aquaproj/aqua/issues/1710) e.g. ```console $ aqua i --test ERRO[0000] check file_src is correct aqua_version= env=darwin/arm64 error="check file_src is correct: exe_path isn't found: stat /Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/Azure/aks-engine/v0.76.0/aks-engine-v0.76.0-darwin-amd64.tar.gz/aks-engine: no such file or directory" file_name=aks-engine package_name=Azure/aks-engine package_version=v0.76.0 program=aqua registry=standard ERRO[0000] executable files aren't found Files in the unarchived package: aks-engine-v0.76.0-darwin-amd64/aks-engine aqua_version= env=darwin/arm64 package_name=Azure/aks-engine package_version=v0.76.0 program=aqua registry=standard ERRO[0000] install the package aqua_version= env=darwin/arm64 error="check file_src is correct" package_name=Azure/aks-engine package_version=v0.76.0 program=aqua registry=standard FATA[0000] aqua failed aqua_version= env=darwin/arm64 error="it failed to install some packages" program=aqua ``` ### [`v1.35.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.35.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.34.2...v1.35.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.35.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.35.0) | https://github.com/aquaproj/aqua/compare/v1.34.2...v1.35.0 ##### Features [#​1692](https://togithub.com/aquaproj/aqua/issues/1692) [#​1699](https://togithub.com/aquaproj/aqua/issues/1699) Output the content of a checksum file when it fails to parse a checksum file [#​1684](https://togithub.com/aquaproj/aqua/issues/1684) [#​1687](https://togithub.com/aquaproj/aqua/issues/1687) Support outputting error messages when a package is installed [#​1693](https://togithub.com/aquaproj/aqua/issues/1693) [#​1695](https://togithub.com/aquaproj/aqua/issues/1695) Add a field `no_asset` to package configuration for returing an error because there is no asset ##### Output the content of a checksum file when it fails to parse a checksum file [#​1692](https://togithub.com/aquaproj/aqua/issues/1692) [#​1699](https://togithub.com/aquaproj/aqua/issues/1699) This is useful to fix the package's checksum configuration. e.g. ERRO[0005] Checksum isn't found in a checksum file. Checksum file content: 237db2e5a4fa7525362c012e94c8a76b36a73d138ac7950cc1c07d862a7cc74a github-comment_5.0.3_windows_amd64.tar.gz 48e49e0b5f1b3af4b5be13b7031bfb38d856259f09f3582e4f67bcae4b357429 github-comment_5.0.3_linux_arm64.tar.gz 58a32e01623ea00fc3650ffb149f724d3e76a06b2aa5237bb128da138ee79359 github-comment_5.0.3_linux_amd64.tar.gz 621a03cd09ee7eb57d9a00cdfb8c2fe70232b64db070c74122df5a0d7f26ae02 github-comment_5.0.3_darwin_arm64.tar.gz b893acb1bef079724017590a115bc1447208ea92b0c1fdf8563c6dfc1ef19ff0 github-comment_5.0.3_darwin_amd64.tar.gz c1a3e184957850e333e24ee437a14b55c8ea78d2e190be71c0f72b0eac0e09d7 github-comment_5.0.3_windows_arm64.tar.gz aqua_version= checksum_file_format=regexp checksum_pattern_checksum="^(\\b[A-Fa-f0-9]{128}\\b)" checksum_pattern_file="^\\b[A-Fa-f0-9]{128}\\b\\s+(\\S+)$" env=darwin/arm64 exe_name=github-comment exe_path=/Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/suzuki-shunsuke/github-comment/v5.0.3/github-comment_5.0.3_darwin_arm64.tar.gz/github-comment package=suzuki-shunsuke/github-comment package_name=suzuki-shunsuke/github-comment package_version=v5.0.3 program=aqua registry=standard ##### Support outputting error messages when a package is installed [#​1684](https://togithub.com/aquaproj/aqua/issues/1684) [#​1687](https://togithub.com/aquaproj/aqua/issues/1687) e.g. registry.yaml ```yaml packages: - type: github_release repo_owner: grafana repo_name: xk6 version_constraint: semver("< 0.9.0") version_overrides: - version_constraint: semver(">= 0.9.0") error_message: | From version xk6 v0.9.0 there are no more binaries published. https://github.com/grafana/xk6/issues/60 ``` ```console $ xk6 --help ERRO[0000] failed to install a package grafana/xk6@​v0.9.0. From version xk6 v0.9.0 there are no more binaries published. https://github.com/grafana/xk6/issues/60 aqua_version= env=darwin/arm64 exe_name=xk6 exe_path=/Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/grafana/xk6/v0.9.0/xk6_0.9.0_mac_arm64.tar.gz/xk6 package=grafana/xk6 package_name=grafana/xk6 package_version=v0.9.0 program=aqua registry=standard FATA[0000] aqua failed aqua_version= env=darwin/arm64 error= exe_name=xk6 package=grafana/xk6 package_version=v0.9.0 program=aqua ``` ##### Add a field `no_asset` to package configuration for returing an error because there is no asset [#​1693](https://togithub.com/aquaproj/aqua/issues/1693) [#​1695](https://togithub.com/aquaproj/aqua/issues/1695) e.g. registry.yaml ```yaml packages: - type: github_release repo_owner: grafana repo_name: xk6 version_constraint: semver("< 0.9.0") version_overrides: - version_constraint: semver(">= 0.9.0") no_asset: true ``` ```console $ xk6 --help ERRO[0000] failed to install a package grafana/xk6@​v0.9.0. No asset is released in this version aqua_version= env=darwin/arm64 exe_name=xk6 exe_path=/Users/shunsukesuzuki/.local/share/aquaproj-aqua/pkgs/github_release/github.com/grafana/xk6/v0.9.0/xk6_0.9.0_mac_arm64.tar.gz/xk6 package=grafana/xk6 package_name=grafana/xk6 package_version=v0.9.0 program=aqua registry=standard FATA[0000] aqua failed aqua_version= env=darwin/arm64 error= exe_name=xk6 package=grafana/xk6 package_version=v0.9.0 program=aqua ``` ##### Fixes [#​1700](https://togithub.com/aquaproj/aqua/issues/1700) [#​1701](https://togithub.com/aquaproj/aqua/issues/1701) Remove `exe_path` from log `exe_path` isn't helpful in many cases. `exe_path` is long, so this is a bit noisy. ### [`v1.34.2`](https://togithub.com/aquaproj/aqua/releases/tag/v1.34.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.34.1...v1.34.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.34.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.34.2) | https://github.com/aquaproj/aqua/compare/v1.34.1...v1.34.2 #### Bug Fixes [#​1682](https://togithub.com/aquaproj/aqua/issues/1682) [#​1685](https://togithub.com/aquaproj/aqua/issues/1685) generate-registry: Fix `--deep` option to handle GitHub Releases not conforming to semantic versioning ### [`v1.34.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.34.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.34.0...v1.34.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.34.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.34.1) | https://github.com/aquaproj/aqua/compare/v1.34.0...v1.34.1 #### Bug Fixes [#​1092](https://togithub.com/aquaproj/aqua/issues/1092) [#​1675](https://togithub.com/aquaproj/aqua/issues/1675) [#​1677](https://togithub.com/aquaproj/aqua/issues/1677) [#​1678](https://togithub.com/aquaproj/aqua/issues/1678) generate-registry: Refactoring and fix some bugs ### [`v1.34.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.34.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.33.0...v1.34.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.34.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.34.0) | https://github.com/aquaproj/aqua/compare/v1.33.0...v1.34.0 #### Features [#​1655](https://togithub.com/aquaproj/aqua/issues/1655) [#​1662](https://togithub.com/aquaproj/aqua/issues/1662) generate-registry: Support generating `version_overrides` and testdata https://aquaproj.github.io/docs/reference/scaffold-registry/#generate-version_overrides-by---deep-option Add command line options `--deep` and `--out-testdata` to `aqua gr` command. - `--deep`: Generate `version_overrides` - `--out-testdata`: Output testdata to a file ⚠️ `--deep` option calls GitHub API per GitHub Release. So if there are a lot of GitHub Releases, many GitHub API are called and GitHub API rate limiting may occur. #### Fixes [#​1639](https://togithub.com/aquaproj/aqua/issues/1639) generate-registry: Support md5 and sha1 [#​1640](https://togithub.com/aquaproj/aqua/issues/1640) generate-registry: Fix checksum asset names [#​1611](https://togithub.com/aquaproj/aqua/issues/1611) Use the default configuration if the package version doesn't match any `version_constraint` #### Others [#​1638](https://togithub.com/aquaproj/aqua/issues/1638) generate-registry: Refactoring ### [`v1.33.0`](https://togithub.com/aquaproj/aqua/releases/tag/v1.33.0) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.32.3...v1.33.0) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.33.0) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.33.0) | https://github.com/aquaproj/aqua/compare/v1.32.3...v1.33.0 #### Features [#​1595](https://togithub.com/aquaproj/aqua/issues/1595) [#​1615](https://togithub.com/aquaproj/aqua/issues/1615) [#​1626](https://togithub.com/aquaproj/aqua/issues/1626) Support keeping configuration files in one directory https://aquaproj.github.io/docs/tutorial-extras/keep-in-one-dir aqua has several configuration files such as `aqua.yaml`, [aqua-checksums.json](checksum.md), [policy file](policy-as-code.md), and [imported files](split-config.md). e.g. aqua.yaml aqua-checksums.json aqua-policy.yaml # You can rename freely aqua/ # You can rename freely terraform.yaml ... From aqua v1.33.0, aqua supports keeping configuration files in one directory. e.g. aqua/ # or .aqua aqua.yaml aqua-checksums.json policy.yaml # You can rename freely imports/ # You can rename freely terraform.yaml ... This is useful to keep the working directory clean. ##### How to migrate - Update aqua to v1.33.0 or later - Update [update-checksum-action](https://togithub.com/aquaproj/update-checksum-action) to v0.2.0 or later - Update [update-checksum-workflow](https://togithub.com/aquaproj/update-checksum-workflow) to v0.1.1 or later - Move files - aqua.yaml => aqua/aqua.yaml - aqua-checksums.json => aqua/aqua-checksums.json - aqua-policy.yaml => aqua/policy.yaml # rename freely - [imported files](split-config.md) => aqua/imports/\*.yaml # change the filename freely - Fix [AQUA_POLICY_CONFIG](policy-as-code.md) - Fix GitHub Actions Path filters - Fix [aqua-renovate-config](https://togithub.com/aquaproj/aqua-renovate-config)'s file preset argument ### [`v1.32.3`](https://togithub.com/aquaproj/aqua/releases/tag/v1.32.3) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.32.2...v1.32.3) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.32.3) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.32.3) | https://github.com/aquaproj/aqua/compare/v1.32.2...v1.32.3 #### Bug Fixes [#​1610](https://togithub.com/aquaproj/aqua/issues/1610) fix a bug Registry's checksums are compared without normalization This bug occurs when a Registry is installed and the Registry's checksum in `aqua-checksums.json` is uppercase, because the calculated checksum is lowercase. This bug raised by https://github.com/aquaproj/aqua/releases/tag/v1.32.2 , because the release made checksums uppercase. e.g. time="2023-02-02T01:22:11Z" level=error msg="install the registry" actual_checksum=603942e90f42411891411460a1ff5ceac0e9ae9233cc828b7cab5d8bedd76d90bbe5476e6744c50de6827869da2641562990fe649dd5f872cb98397b2e2c30e6 aqua_version=1.32.2 env=linux/amd64 error="check a registry's checksum: checksum is invalid" expected_checksum=603942E90F42411891411460A1FF5CEAC0E9AE9233CC828B7CAB5D8BEDD76D90BBE5476E6744C50DE6827869DA2641562990FE649DD5F872CB98397B2E2C30E6 program=aqua registry_name=standard ### [`v1.32.2`](https://togithub.com/aquaproj/aqua/releases/tag/v1.32.2) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.32.1...v1.32.2) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.32.2) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.32.2) | https://github.com/aquaproj/aqua/compare/v1.32.1...v1.32.2 #### Bug Fixes [#​1599](https://togithub.com/aquaproj/aqua/issues/1599) [#​1600](https://togithub.com/aquaproj/aqua/issues/1600) Skip setting checksum if the key already exists #### Fixes [#​1601](https://togithub.com/aquaproj/aqua/issues/1601) Normalize checksum when a newly added ### [`v1.32.1`](https://togithub.com/aquaproj/aqua/releases/tag/v1.32.1) [Compare Source](https://togithub.com/aquaproj/aqua/compare/v1.32.0...v1.32.1) [Pull Requests](https://togithub.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av1.32.1) | [Issues](https://togithub.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av1.32.1) | https://github.com/aquaproj/aqua/compare/v1.32.0...v1.32.1 #### Fixes [#​1585](https://togithub.com/aquaproj/aqua/issues/1585) [#​1588](https://togithub.com/aquaproj/aqua/issues/1588) Retry slsa-verifier when slsa-verifier failed due to timeout </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xMTQuMiIsInVwZGF0ZWRJblZlciI6IjM1LjExNC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: mend-for-jackfan.us.kg[bot] <50673670+mend-for-jackfan.us.kg[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
As explained in #59 (comment), we decided to remove goreleaser and stop publishing pre-built binaries on each new release. We would still create releases as usual, it's just that the uploaded artifacts would only include the packaged source code.
The text was updated successfully, but these errors were encountered: