v0.5.0

Changelog

• 01e633f Merge pull request #101 from farcloser/renovate/aquaproj-aqua-registry-4.x
• 02e6a99 Merge pull request #107 from farcloser/claudio/20260912-renovate-processing
• f6386ba Merge pull request #108 from farcloser/renovate/farcloser-limen-0.x
• f947503 Merge pull request #109 from farcloser/claudio/20260913-ci-caches
• 2c88619 Merge pull request #110 from farcloser/claudio/20260913-windows-defender
• cb053c1 Merge pull request #111 from farcloser/claudio/20260913-lint-shell-forks
• 1bfe95b Merge pull request #112 from farcloser/claudio/20260913-setup-aqua-revoke
• 8d5a73f Merge pull request #113 from farcloser/claudio/20260913-drop-measurement
• 144e412 Merge pull request #114 from farcloser/claudio/20260913-toolchain-check-stderr
• 44a319e Merge pull request #115 from farcloser/claudio/20260913-drop-defender
• aa7dd93 Merge pull request #116 from farcloser/claudio/20260913-renovate-first-run
• b1aea32 Merge pull request #117 from farcloser/claudio/20260913-dot-forkcloser
• 26b6b55 Merge pull request #118 from farcloser/claudio/20260913-tooling-split
• 9d03c75 Merge pull request #120 from farcloser/claudio/20260913-gomod-major-tidy
• 2b0d412 Merge pull request #121 from farcloser/claudio/20260913-contribute-grep
• 7db0c7d Merge pull request #122 from farcloser/claudio/20260913-one-commit-per-thing
• 1a77778 Merge pull request #123 from farcloser/claudio/20260913-curl-repo-name
• 7775a16 Merge pull request #124 from farcloser/claudio/20260913-new-repository
• 2c37d11 Merge pull request #125 from farcloser/claudio/20260913-no-issues
• b964b4c Merge pull request #126 from farcloser/claudio/20260913-contract-tests
• 075306b Merge pull request #127 from farcloser/claudio/20260913-gate-create
• c145927 Merge pull request #128 from farcloser/renovate/cli-cli-2.x
• 857d848 Merge pull request #129 from farcloser/claudio/20260918-renovate-idempotent
• 3d4a613 Merge pull request #130 from farcloser/claudio/20260918-automerge-plan
• 03d05be Merge pull request #131 from farcloser/claudio/20260918-retired-table
• 334aa11 Merge pull request #132 from farcloser/claudio/20260918-identity-gh
• 1257eb9 Merge pull request #133 from farcloser/claudio/20260918-app-context
• 9abd4e2 Merge pull request #134 from farcloser/claudio/20260918-cli-package
• 609be1a Merge pull request #135 from farcloser/claudio/20260919-rules-blackbox
• 7b8eac9 Merge pull request #136 from farcloser/claudio/20260919-github-blackbox
• 3464b68 Merge pull request #137 from farcloser/claudio/20260919-runner-images
• c6bac11 Merge pull request #138 from farcloser/claudio/20260919-gitattributes-patches
• 12d75dc Merge pull request #139 from farcloser/renovate/aquaproj-aqua-registry-4.x
• aa25bca Merge pull request #140 from farcloser/claudio/20260919-owner-handle
• 9399d6a Merge pull request #141 from farcloser/claudio/20260919-pins
• ede10cf Merge pull request #142 from farcloser/claudio/20260919-github-context
• c6f4c93 Merge pull request #143 from farcloser/claudio/20260920-dockerfile-lane-trap
• 9332dfa Merge pull request #144 from farcloser/claudio/20260919-verify-clearsign
• efe8983 Merge pull request #145 from farcloser/claudio/20260920-deps
• ecdd723 agents: no GitHub issues unless the human asks; the owning session gets the message
• 66f2695 agents: on GitHub, the human is @apostasie
• b98be18 agents: one commit per thing, iteration squashed into the commit it amends
• 79f0ac6 book: the aqua / tools/go.mod line, and golangci-lint as the exception
• 3bcf569 book: the fleet's curl packages repository is forkcloser/curl
• 6a365c6 book: the order of creating a repository, and the two traps in it
• 57adf16 book: the red first run on a Renovate bump is expected, and why
• 29aa3c3 book: what the CI matrix proves, and why a lane is never skipped
• 3337da0 chore(deps): update dependency aquaproj/aqua-registry to v4.563.0
• 6d22580 chore(deps): update dependency aquaproj/aqua-registry to v4.564.0
• eb923b0 chore(deps): update dependency cli/cli to v2.101.0
• 0a260be chore(deps): update dependency farcloser/limen to v0.4.0
• 51559b4 chore: update aqua checksums and converge the limen baseline
• 8530bc4 chore: update aqua checksums and converge the limen baseline
• f778c53 chore: update aqua checksums and converge the limen baseline
• 4822379 chore: update aqua checksums and converge the limen baseline
• f79d2b5 ci: cache the Go build and aqua's store on the verify legs
• 074fcb1 ci: drop the Defender step, measured neutral
• ce9d706 ci: drop the cache-size measurement step
• efa6eb9 ci: turn Defender's real-time scan off on the windows legs
• 8d3a53b cli: move the command into internal/cli, tested from outside through Run
• 3c31688 contribute: the tooling-link grep must not match the trailer it mandates
• 103d930 doctrine: consumers get the contract only; tests are black-box, no indirection
• 4c1be1b gitattributes: vendored diffs are exempt from the whitespace check
• 102a964 github: assert Renovate is processing the repository, not merely installed
• ae2df28 github: black-box tests, and the gh seam goes
• 47a9ff5 github: do not plan auto-merge on a private repository in a Free organization
• 879fac6 github: never create limen:main on a repository whose ci.yaml has no gate job
• 8757ba1 github: one context for the run, from the CLI down to every gh call
• 44de074 github: the App registration takes a context; its test seams go
• 4151767 github: the users lookup honors GITHUB_API_URL instead of a test seam
• 223d4d7 gotools: dot is forkcloser/dot, and a retired directive is removed
• 3d817ac lint: let the golangci toolchain probe fail loudly, or not at all
• e54c138 lint: name the line when the dockerfile lane dies silently
• 9407f25 lint: shellcheck with a handful of processes, not one per file
• 35267c0 pins: artifacts a build fetches by hand, pinned by digest in one file
• 1e8c61d pins: verify PGP-clearsigned sums in-process, with limen's own OpenPGP reader
• 568461f renovate: keep go mod tidy running on major Go bumps, with the rewrite tool pinned
• 39c9323 renovate: runner images are targets, not dependencies to bump
• eee07fc rules: black-box tests, and the go and aqua seams go
• 7d4309f rules: derive the retired aqua packages from the gotools tables
• 99675a6 rules: leave a value-identical renovate.json untouched
• fc87595 setup-aqua: guard the installer's own download against schannel revocation
• a804818 tools: update every pin to the latest release before the release