v2.25.1-5

Pull Requests | Issues | v2.25.1-3...v2.25.1-5

Changelog

• 9388a32 ci: update go-mod-tidy-workflow
• 1861db5 chore(aqua): update aqua/aqua-checksums.json
• e75edba ci: update update-checksum-workflow
• 1da49d4 ci: update actionlint-workflow
• f197f11 ci: update aqua-installer and go-release-workflow

v2.25.1-4

Pull Requests | Issues | v2.25.0...v2.25.1-4

Changelog

• 691be58 ci: disable cosign and slsa
• 84bd2d6 chore: update cosign
• f3711f7 ci: disable cosign
• ed24b02 fix: disable slsa-verifier
• 03e4e6e ci: disable cosign
• 09efad7 chore: exclude some workflows
• c120ea5 ci: disable cosign
• 7b6ee46 ci: disable cosign
• ac20e3c fix: disable cosign temporarily
• 74a0c86 fix(yaml): Fix spaces before comments (#2756)
• 5ffde49 chore(deps): update dependency aquaproj/aqua to v2.25.0

v2.25.1-3

Pull Requests | Issues | v2.25.1-2...v2.25.1-3

Changelog

• 089640f style: remove a comment
• 5cd4e75 fix: remove options

v2.25.1-2

Pull Requests | Issues | v2.25.1-1...v2.25.1-2

Changelog

• d95b30f chore(goreleaser): update cosign setting

v2.25.0

Pull Requests | Issues | v2.24.1...v2.25.0

Features

#2749 #2752 Support excluding some packages from the target of aqua update

e.g. aqua.yaml

packages:
  - name: golang/vuln/govulncheck@v1.0.3
    update:
      # If enabled is false, aqua up command ignores the package.
      # If the package name is passed to aqua up command explicitly, enabled is ignored.
      # By default, enabled is true.
      enabled: false

Fixes

#2747 #2354 #2750 #2751 Improve the logic to get the latest version

We've changed the logic to get the latest version in some commands such as aqua update and aqua generate.
The original logic was to call GitHub API Get a latest release, but a latest release wan't necessarily a latest version.
So we changed the logic to list the recent releases and get a latest version by semver.

v2.24.1

Pull Requests | Issues | v2.24.0...v2.24.1

Bug Fixes

#2742 #2744 fix a bug that aqua g and aqua gr commands don't work for cargo package

This bug was due to crates.io crawler policy.

We are unable to process your request at this time.
This usually means that you are in violation of our crawler policy.

We could resolve the issue by setting the User-Agent header.

v2.24.0

Pull Requests | Issues | v2.23.2...v2.24.0

Features

#2709 #2733 Support listing installed packages

Command line options -installed and -all [-a] were added to aqua list command.

aqua list -installed [-a]

If -installed is set, installed packages are outputted.

e.g.

$ aqua list -installed   
rhysd/actionlint	v1.6.27	standard
suzuki-shunsuke/cmdx	v1.7.4	standard
sigstore/cosign	v1.13.2	standard
suzuki-shunsuke/ghalint	v0.2.9	standard
int128/ghcp	v1.13.2	standard
golangci/golangci-lint	v1.56.2	standard
goreleaser/goreleaser	v1.24.0	standard
reviewdog/reviewdog	v0.17.1	standard

By default, global configuration files are ignored.
To output packages in global configuration files too, please set the option -all [-a].

$ aqua list -a -installed

v2.24.0-2

Pull Requests | Issues | v2.24.0-1...v2.24.0-2

Changelog

• cb2e0c5 feat(list): change the order and separator

v2.24.0-1

v2.23.2...v2.24.0-1

Features

#2733 Support listing installed packages

v2.23.2

Pull Requests | Issues | v2.23.1...v2.23.2

Fixes

#2714 Fix a bug that it fails to download large files from GitHub repositories

Use the API RepositoriesService.DownloadContents instead of RepositoriesService.GetContents to download large files from GitHub.

https://pkg.go.dev/github.com/google/go-github/v60/github#RepositoriesService.DownloadContents

DownloadContents returns an io.ReadCloser that reads the contents of the specified file.
This function will work with files of any size, as opposed to GetContents which is limited to 1 Mb files. It is the caller's responsibility to close the ReadCloser.

If you use old aqua and face the following error, please update aqua to v2.23.2 or newer.

unsupported content encoding: none, this may occur when file size > 1 MB, if that is the case consider using DownloadContents

Others

Update Go 1.21.6 to 1.22.0