feat(cli-tools): update aquaproj/aqua (v2.45.0 -> v2.51.1)

[ppat-self-hosted-renovate-bot]

This PR contains the following updates:

Package	Update	Change	Pending
aquaproj/aqua	minor	2.45.0 -> 2.51.1	v2.51.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aquaproj/aqua (aquaproj/aqua)

v2.51.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.51.0...v2.51.1

Features

#​3852 #​3853 Support managing a GitHub access token using Keyring

You can now manage a GitHub Access token using secret store such as Windows Credential Manager, macOS Keychain, and GNOME Keyring.

1. Configure a GitHub Access token by aqua token set command:

$ aqua token set
Enter a GitHub access token: # Input GitHub Access token

or you can also pass a GitHub Access token via standard input:

echo "<github access token>" | aqua tokn set -stdin

2. Enable the feature by setting the environment variable AQUA_KEYRING_ENABLED:

export AQUA_KEYRING_ENABLED=true

Note that if the environment variable GITHUB_TOKEN is set, this feature gets disabled.

You can remove a GitHub Access token from keyring by aqua token rm command:

aqua token rm

v2.51.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.50.1...v2.51.0

[!WARNING]
We intended to add a new command token in this release, but we forgot it.
Please use v2.51.1 or newer.

v2.50.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.50.0...v2.50.1

Improve the performance of command execution

#​3826

This release improves the performance of aqua which and aqua exec command.

aqua which read registries, but the standard registry is very large (about 2MB) so it makes the performance worse.
Furthermore, the standard registry gets larger every time we improve the standard registry.

To solve the problem, this pull request introduces the cache mechanism of packages by aqua.yaml.
aqua creates a cache file per aqua.yaml into $(aqua root-dir)/registry-cache/<base64 encoded aqua.yaml absolute path>.json.

The structure of cache files is:

{
  "absolute path of registry.yaml": {
    "package name": {
      "type": "github_release",
      // ...
    }
  }
}

If a registry type is local, a cache file isn't created.
Cache files are much smaller than the standard registry, so aqua can read them much faster.
If packages aren't found in cache files, aqua reads the original registries and updates cache files.
aqua removes unused records from cache.

Bench mark

$ hyperfine --warmup 3 "/Users/shunsukesuzuki/go/bin/aqua which golangci-lint" "/Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.1-1/aqua_darwin_arm64.tar.gz/aqua which golangci-lint" "/Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.0/aqua_darwin_arm64.tar.gz/aqua which golangci-lint"
Benchmark 1: /Users/shunsukesuzuki/go/bin/aqua which golangci-lint
  Time (mean ± σ):      25.0 ms ±   3.5 ms    [User: 21.4 ms, System: 3.7 ms]
  Range (min … max):    21.6 ms …  45.4 ms    77 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 2: /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.1-1/aqua_darwin_arm64.tar.gz/aqua which golangci-lint
  Time (mean ± σ):      41.7 ms ±   4.5 ms    [User: 41.1 ms, System: 5.3 ms]
  Range (min … max):    37.2 ms …  62.3 ms    55 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 3: /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.0/aqua_darwin_arm64.tar.gz/aqua which golangci-lint
  Time (mean ± σ):      42.8 ms ±   4.0 ms    [User: 41.9 ms, System: 5.6 ms]
  Range (min … max):    39.4 ms …  55.4 ms    43 runs
 
  Warning: The first benchmarking run for this command was significantly slower than the rest (54.4 ms). This could be caused by (filesystem) caches that were not filled until after the first run. You are already using the '--warmup' option which helps to fill these caches before the actual benchmark. You can either try to increase the warmup count further or re-run this benchmark on a quiet system in case it was a random outlier. Alternatively, consider using the '--prepare' option to clear the caches before each timing run.
 
Summary
  /Users/shunsukesuzuki/go/bin/aqua which golangci-lint ran
    1.67 ± 0.29 times faster than /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.1-1/aqua_darwin_arm64.tar.gz/aqua which golangci-lint
    1.71 ± 0.29 times faster than /Users/shunsukesuzuki/.local/share/aquaproj-aqua/internal/pkgs/github_release/github.com/aquaproj/aqua/v2.50.0/aqua_darwin_arm64.tar.gz/aqua which golangci-lint

Others

#​3840 chore: update aqua-proxy to v1.2.9
#​3839 chore: update urfave-cli-v3-util to v0.0.4

v2.50.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.49.0...v2.50.0

Features

#​3794 GitHub Artifact Attestations: Non-default predicate type support @​scop

v2.49.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.3...v2.49.0

Features

#​3780 Support creating hardlinks

v2.48.3

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.2...v2.48.3

🐛 Bug Fixes

#​3774 Fix aqua version command

v2.48.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.1...v2.48.2

🐛 Bug Fixes

#​3771 Fix fish completion
#​3750 generate-registry: Fix panic if version isn't semver

Improvement

#​3772 Improve -v option and version command
#​3740 checksum: don't treat *.bundle as checksum @​scop

v2.48.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.48.0...v2.48.1

🐛 Bug Fixes

#​3729 Fix bash and zsh completion command generation @​takumin

v2.48.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.47.2...v2.48.0

Features

#​3725 support disabling slsa-verifier's --source-tag

v2.47.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.47.1...v2.47.2

Bug Fixes

#​3721 Fix a bug that a panic occurs if aqua tries to verify assets using Minisign on linux/arm64

Improvement

#​3718 generate-registry: Add os patterns

• macosx
• linux-gnu

v2.47.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.47.0...v2.47.1

🐛 Bug Fixes

#​3717 Fix the output of the version command

v2.47.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.46.0...v2.47.0

Features

#​3711 Support cosign veryf-blob's --bundle option
#​3710 generate-registry: Use cosign cert if sig is keyless, not pubkey even if available @​scop

Fixes

#​3689 generate-registry: Exclude the last element of version_overrides from sort

Others

#​3703 Update module github.com/urfave/cli/v2 to v3

v2.46.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.45.1...v2.46.0

Features

Improved aqua generate-registry command:

#​3649 Generate Cosign configuration of checksum @​scop
#​3663 Include version in generated cert id regexp @​scop
#​3664 Generate cosign config for releases with a pubkey @​scop
#​3653 Fix a panic
#​3657 Convert versions to {{.SemVer}}
#​3675 Fix a bug that a template variable AssetWithoutExt misses

v2.45.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.45.0...v2.45.1

Fixes

#​3641 Fix typo @​scop
#​3643 Fix typo using typos

Refactoring

#​3642 gopls modernize @​scop
#​3644 Fix typo

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[ppat]

🎉 This PR is included in version 2.8.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀