chore(deps): update ⬆️ aqua-packages

[renovate]

This PR contains the following updates:

Package	Update	Change
aquaproj/aqua	patch	v2.36.1 -> v2.36.2
aquaproj/aqua-registry	minor	v4.236.0 -> v4.239.1
cli/cli	minor	v2.59.0 -> v2.60.1
cue-lang/cue	patch	v0.10.0 -> v0.10.1
dprint/dprint	patch	0.47.2 -> 0.47.4
eza-community/eza	patch	v0.20.4 -> v0.20.5
fastfetch-cli/fastfetch	minor	2.27.1 -> 2.28.0
marcosnils/bin	minor	v0.18.0 -> v0.19.0
mvdan/sh	minor	v3.9.0 -> v3.10.0
snyk/cli	minor	v1.1293.1 -> v1.1294.0
starship/starship	patch	v1.21.0 -> v1.21.1
tofuutils/tenv	patch	v3.2.4 -> v3.2.8
weaveworks/eksctl	minor	v0.192.0 -> v0.194.0
withgraphite/homebrew-tap	patch	v1.4.6 -> v1.4.7

---

Release Notes

aquaproj/aqua (aquaproj/aqua)

v2.36.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.36.1...v2.36.2

Bug Fixes

#​3193 #​3194 Fix a bug that vars are not replaced in files[].src

aquaproj/aqua-registry (aquaproj/aqua-registry)

v4.239.1

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.239.0...v4.239.1

Features

#​28098 ziglang/zig: Support dev versions

v4.239.0

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.238.0...v4.239.0

🎉 New Packages

#​27951 AlexanderGrooff/mermaid-ascii: Render Mermaid graphs inside your terminal @​ponkio-o
#​27950 ikawaha/kagome: Self-contained Japanese Morphological Analyzer written in pure Go @​ponkio-o
#​27939 #​27947 sudorandom/protoc-gen-connect-openapi: Plugin for generating OpenAPIv3 from protobufs matching the Connect RPC interface @​frozenbonito

v4.238.0

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.237.0...v4.238.0

🎉 New Packages

#​27936 datadog/managed-kubernetes-auditing-toolkit: All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS @​naka-gawa

v4.237.0

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.236.0...v4.237.0

🎉 New Packages

#​27877 projectdiscovery/proxify: A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go @​borissmidt
#​27876 rcoh/angle-grinder: Slice and dice logs on the command line @​borissmidt

cli/cli (cli/cli)

v2.60.1: GitHub CLI 2.60.1

Compare Source

What's Changed

• Update testscript to use hard fork by @​williammartin in https://github.com/cli/cli/pull/9821

Full Changelog: cli/cli@v2.60.0...v2.60.1

v2.60.0: GitHub CLI 2.60.0

Compare Source

What's Changed

• Rewrite a sentence in CONTRIBUTING.md by @​muzimuzhi in https://github.com/cli/cli/pull/9772
• Add acceptance tests for workflow, run, and cache commands by @​BagToad in https://github.com/cli/cli/pull/9766
• Add basic api acceptance tests by @​BagToad in https://github.com/cli/cli/pull/9770
• Add acceptance tests for release commands by @​BagToad in https://github.com/cli/cli/pull/9771
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6 by @​dependabot in https://github.com/cli/cli/pull/9752
• Include startedAt, completedAt in run steps data by @​andyfeller in https://github.com/cli/cli/pull/9774
• Add handling of empty titles for Issues and PRs by @​jtmcg in https://github.com/cli/cli/pull/9701
• Add acceptance tests for repo commands by @​jtmcg in https://github.com/cli/cli/pull/9783
• Add acceptance tests for search command by @​BagToad in https://github.com/cli/cli/pull/9786
• LiveSigstoreVerifier.Verify should error if no attestations are present by @​phillmv in https://github.com/cli/cli/pull/9742
• Add acceptance tests for secret commands by @​andyfeller in https://github.com/cli/cli/pull/9782
• Prevent local extension installations with invalid names and conflicts with core commands and other extensions by @​BagToad in https://github.com/cli/cli/pull/9794
• Add ArchivedAt field by @​tsukasaI in https://github.com/cli/cli/pull/9790
• Add acceptance tests for variable commands by @​andyfeller in https://github.com/cli/cli/pull/9784
• Use new GitHub preview terms in working-with-us.md by @​BagToad in https://github.com/cli/cli/pull/9800
• Use new GitHub previews terminology in attestation commands' help docs by @​BagToad in https://github.com/cli/cli/pull/9799
• gh at verify retries fetching attestations if it receives a 5xx by @​phillmv in https://github.com/cli/cli/pull/9797
• Clarify in README that gh is supported on GitHub Enterprise Cloud by @​BagToad in https://github.com/cli/cli/pull/9805
• Use forked testscript for token redaction by @​williammartin in https://github.com/cli/cli/pull/9804
• Add testscripts for gpg-key and label commands by @​williammartin in https://github.com/cli/cli/pull/9811
• Adjust environment help for host and tokens by @​williammartin in https://github.com/cli/cli/pull/9809
• Add acceptance tests for org and ssh-key commands by @​BagToad in https://github.com/cli/cli/pull/9812
• Add acceptance tests for gh auth commands by @​jtmcg in https://github.com/cli/cli/pull/9787
• Note token redaction in Acceptance test README by @​williammartin in https://github.com/cli/cli/pull/9813

New Contributors

• @​tsukasaI made their first contribution in https://github.com/cli/cli/pull/9790

Full Changelog: cli/cli@v2.59.0...v2.60.0

cue-lang/cue (cue-lang/cue)

v0.10.1

Compare Source

This release includes fixes for two bugs which were uncovered and resolved in the last few weeks.

cmd/cue

CL 1202646 fixes a panic for users of the cmd/cue/cmd Go API.

CL 1202738 fixes a bug when using @if attributes in files specified directly as command line arguments.

dprint/dprint (dprint/dprint)

v0.47.4

Compare Source

Changes

• fix: improve automated config file editing and respect trailing commas (#​926)

The automated editing of the config file that dprint does like dprint config add ... should be a lot more intelligent.

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact	SHA-256 Checksum
dprint-x86_64-apple-darwin.zip	16f360c526c14c070ab618cf6c36ff9c8bf5b32c7e07a0c0c9b58d91697b4a40
dprint-aarch64-apple-darwin.zip	522783119d1ab52164ff2aaea2072c1578a7b8988156a0add06d370eb58d439e
dprint-x86_64-pc-windows-msvc.zip	d91d0a6e607f06ee06fe2b01a6f602e2ace14d44e1d6f11ec6b3f1e0887a6fd6
dprint-x86_64-pc-windows-msvc-installer.exe	871e668d67acfed5db215328d3589a57196881dcebbda286640188f6fcb9519b
dprint-x86_64-unknown-linux-gnu.zip	6017a25b83dc76e2c3676657b538d1b4862101cd4d13b26d2a3755811234ead6
dprint-x86_64-unknown-linux-musl.zip	f43c768656e8024812222a238391601ad8db8e095fa87068e0d5c9c6176cb96a
dprint-aarch64-unknown-linux-gnu.zip	68f7a0072612ab5b4bee3d7609d47c896050ed54844f8794d871965cb480aa70
dprint-aarch64-unknown-linux-musl.zip	3b009c51c85336058672b4be54d4bdb044b7f9bbd570d51802449c1eac18ef6c

eza-community/eza (eza-community/eza)

v0.20.5: eza v0.20.5

Compare Source

Changelog

Bug Fixes

• Ensure nested tree parts align under item name
• Remove depricated chrono from_timestamp_opt

Miscellaneous Tasks

• Update generated test files
• Eza v0.20.5 changelogs, version bump

Build

• Bump libc from 0.2.159 to 0.2.161
• Chrono v0.4.34 -> v0.4.38

Checksums

sha256sum

fca94011fda11dba3eccfa400ad983af6874925ef14bc480534864eb499511ca  ./target/bin-0.20.5/eza_aarch64-unknown-linux-gnu.tar.gz
0469aec58e7ddfd4dadee975cf388bef4501df0d2756fa2316cbf5f7a542d12f  ./target/bin-0.20.5/eza_aarch64-unknown-linux-gnu.zip
488b8cedc1de65d7f6c2687900c8bd1c25b0e80d227e570609e1368f15224732  ./target/bin-0.20.5/eza_arm-unknown-linux-gnueabihf.tar.gz
7f1103edf96bf9484bcf3ab3277fd2417e57c1c8d69aa51dd0ea3f2ecc98a1e7  ./target/bin-0.20.5/eza_arm-unknown-linux-gnueabihf.zip
f83892009ae946956668f97181176cb91bda5f51b35d041dbdbd2b1ef19bf664  ./target/bin-0.20.5/eza.exe_x86_64-pc-windows-gnu.tar.gz
be7c4542b28ce3999f48c6a90470475c492aa6dab05c2dbc6ce2034f7633cb0b  ./target/bin-0.20.5/eza.exe_x86_64-pc-windows-gnu.zip
1b2c4b6419034230f6427aa862e6bcaee718de8100ce5c2348ee5d14904e6585  ./target/bin-0.20.5/eza_x86_64-unknown-linux-gnu.tar.gz
22e87356256f053a536120667c93cba1fc69a25dc9cc0ebd7f1ad602d2a5dad3  ./target/bin-0.20.5/eza_x86_64-unknown-linux-gnu.zip
18995e9b384c6cba3b807478d9a886ee18a416d6f5a4b0d646b6bc87750f2c6a  ./target/bin-0.20.5/eza_x86_64-unknown-linux-musl.tar.gz
4624fd0dd3f2f47c335ee13edea20a5bc8c27c85a92a5fe962952dbf16abe57f  ./target/bin-0.20.5/eza_x86_64-unknown-linux-musl.zip

md5sum

8a8322ab5b949d10b0c0261c3bb20f34  ./target/bin-0.20.5/eza_aarch64-unknown-linux-gnu.tar.gz
5629765438d2a06f985556756349c08f  ./target/bin-0.20.5/eza_aarch64-unknown-linux-gnu.zip
d60738d1e10235e1404d76f45292e5f1  ./target/bin-0.20.5/eza_arm-unknown-linux-gnueabihf.tar.gz
7a459dad8b5bd80f712a09ed01b7cbb8  ./target/bin-0.20.5/eza_arm-unknown-linux-gnueabihf.zip
2052a2ae55ab952ed08a925a6da872ab  ./target/bin-0.20.5/eza.exe_x86_64-pc-windows-gnu.tar.gz
22ac1b517f7b3c35d394411ed0a08b0b  ./target/bin-0.20.5/eza.exe_x86_64-pc-windows-gnu.zip
9a06b49aa99cff1b152bc316f71eaaca  ./target/bin-0.20.5/eza_x86_64-unknown-linux-gnu.tar.gz
2175c29056d84d671330f7efc75fc661  ./target/bin-0.20.5/eza_x86_64-unknown-linux-gnu.zip
460aa0e5d49b12f0c84e00541f186287  ./target/bin-0.20.5/eza_x86_64-unknown-linux-musl.tar.gz
3d2b1cd4d06a8c16dd492d32995fffc4  ./target/bin-0.20.5/eza_x86_64-unknown-linux-musl.zip

blake3sum

73e9a221a1f8432054240cbb9315c9fff93e26870735b377b3c15108f105b72a  ./target/bin-0.20.5/eza_aarch64-unknown-linux-gnu.tar.gz
125abd9d2c0584ea6f73cb7c6e0051764d427fc028c53b8aea6a7f47bb88e55f  ./target/bin-0.20.5/eza_aarch64-unknown-linux-gnu.zip
21c0681fbb9b4fcae12653afaa3cce4d8b91b997a1d7e3696cc3208e5486d553  ./target/bin-0.20.5/eza_arm-unknown-linux-gnueabihf.tar.gz
b0fbdb95ab446e3b2b45b9a96f91638c616762a941ec819bde9c15b6f38e118f  ./target/bin-0.20.5/eza_arm-unknown-linux-gnueabihf.zip
a3e74324bfaf7e2aee76869bd74a0f49228ff2cdc1e97bf9987361ba3b79e3ad  ./target/bin-0.20.5/eza.exe_x86_64-pc-windows-gnu.tar.gz
29542392bd8b961190434a7b4bd72a5f632ce5d01a196c69df45940d22814f80  ./target/bin-0.20.5/eza.exe_x86_64-pc-windows-gnu.zip
d771889fd3a254a7014661a925dd6706d14768d4d2541a08f633ea84a205159b  ./target/bin-0.20.5/eza_x86_64-unknown-linux-gnu.tar.gz
640cc2cefb141376ad9321ac2ed654a9e904465f1a8db7f068b1a0d710042051  ./target/bin-0.20.5/eza_x86_64-unknown-linux-gnu.zip
02086c91725f7ff38896269f5da4682c7b00f923cbfaee35fcc94a431876c9a1  ./target/bin-0.20.5/eza_x86_64-unknown-linux-musl.tar.gz
37a13d668cdf0c32408be103dee6a344287e0dfc594b6fb3c5086daceb864ab7  ./target/bin-0.20.5/eza_x86_64-unknown-linux-musl.zip

fastfetch-cli/fastfetch (fastfetch-cli/fastfetch)

v2.28.0

Compare Source

Features:

• Add new module Mouse and Keyboard which display connected mice and keyboards
• Support remaining time detection (Battery)
• Report if AC is connected (Battery, Linux)
• Report platform API used for display detection for debugging (Display)
• Report Wine version when running in Wine (Kernel, Windows)
• Add option waitTime in modules CPUUsage, DiskIO and NetIO

Bugfixes:

• Fix used memory size detection (Memory, OpenBSD)
• Don't report invalid fragmentation percentage when fails to detect it (Zpool)
• Fix unexpected errors when running fastfetch in parallel (#​1346, Windows)
• Don't report obviously invalid temperature values (PhysicalDisk, Linux)

Logos:

• Add eweOS
• Add MidOS
• Update XeroArch

marcosnils/bin (marcosnils/bin)

v0.19.0

Compare Source

Changelog

• 94bbdca add pin/unpin command (#​180)

mvdan/sh (mvdan/sh)

v3.10.0

Compare Source

• cmd/shfmt
  • Report the correct language variant in parser error messages - #​1102
  • Move --filename out of the parser options category - #​1079
• syntax
  • Parse all CRLF line endings as LF, including inside heredocs - #​1088
  • Count skipped backslashes inside backticks in position column numbers - #​1098
  • Count skipped null bytes in position column numbers for consistency
• interp
  • Fix a regression in v3.9.0 which broke redirecting files to stdin - #​1099
  • Fix a regression in v3.9.0 where HandlerContext.Stdin was never nil
  • Add an Interactive option to be used by interactive shells - #​1100
  • Support closing stdin, stdout, and stderr via redirections like <&-

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.23.2 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v3.10.0"

snyk/cli (snyk/cli)

v1.1294.0

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

• CycloneDX 1.6 SBOM support This new version now supports generating CycloneDX 1.6 SBOMs using the snyk sbom command, providing you with more comprehensive and detailed information about your software components and their dependencies. Read more about the CycloneDX version announcement here.
• Improved CLI monitoring of large Cocoapods projects When doing a snyk monitor on very large Cocoapods applications, the CLI sometimes returned an Invalid String OOM error and the operation would fail. Although this error was rare, we have fixed it so large Cocoapods applications can now be monitored successfully.
• Fix for security issue The Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted (PHP|Gradle) project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk always recommends not scanning untrusted projects.

Features

• sbom: add CycloneDX 1.6 SBOM support (1330fc2)
• deployment: Deploy alpine arm64 binaries (9daace4)
• monitor: enable cocoapods to send graphs for cli monitor (ca56c69)
• iac: pass allow analytics flag to snyk-iac-test [IAC-3017] (b12d3ac)

Bug Fixes

• all: restore cert file if it was externally removed (ef1547f)
• auth: missing auth issue with oauth (57ae95c)
• iac: upgrade iac custom rules ext to address vulns [IAC-3065] (d6cc509)
• iac: upgrade snyk-iac-test to v0.55.1 [IAC-2940] (0dadc90)
• monitor: add normalize help for deriving target files [CLI-448] (82efb50)
• sbom: include CVE in JSON output of sbom test command (a543179)
• sbom: add missing option --gradle-normalize-deps to SBOM command (151f63d)
• test: default limit to max vulnerable paths per vuln, add override option --max-vulnerable-paths (302d7ac)
• test: do not show test deps for Dverbose mvn with dependencyManagement (67e0de9)
• test: fixed support for pnpm alias packages (d506de1)
• test: point snyk policy out urls to snyk.io (28509a3)
• test: scan non publishable projects on improved net (a6c0e67)
• test: scan nuget with PublishSingleFile turned on (2c74298)
• dependencies: update snyk-nodejs-plugin to fix micromatch vuln (baef934)
• dependencies: address security vulnerability in snyk-php-plugin CVE-2024-48963 (7798d13)
• dependencies: address security vulnerability in snyk-gradle-plugin CVE-2024-48964 (c614284)
• dependencies: upgrade go-getter to 1.7.5 (970de96)
• dependencies: upgrade iac extension and snyk-iac-test (9134c05)
• dependencies: upgrade slack/webhook to 7.0.3 (8ab4433)

starship/starship (starship/starship)

v1.21.1

Compare Source

Reverts

• "perf(fish): Skip unnecessary indirection in starship init fish" (#​6326) (00d927b)

tofuutils/tenv (tofuutils/tenv)

v3.2.8

Compare Source

What's Changed

• Fix : specialize build to avoid missing pgid error on windows by @​dvaumoron in https://github.com/tofuutils/tenv/pull/272

Full Changelog: tofuutils/tenv@v3.2.7...v3.2.8

weaveworks/eksctl (weaveworks/eksctl)

v0.194.0: eksctl 0.194.0

Compare Source

Release v0.194.0

🚀 Features

• Support EKS zonal shift config (#​8005)

🎯 Improvements

• Fix missing ELB listener attribute actions required for AWS Load Balancer Controller v2.9.0 (#​7988)

Acknowledgments

The eksctl maintainers would like to sincerely thank @​jonathanfoster.

v0.193.0: eksctl 0.193.0

Compare Source

Release v0.193.0

🚀 Features

• Add support for M8g instance types (#​8001)

📝 Documentation

• Documentation: correct version drift limits in cluster-upgrade.md (#​7994)

Acknowledgments

The eksctl maintainers would like to sincerely thank @​larvacea.

withgraphite/homebrew-tap (withgraphite/homebrew-tap)

v1.4.7

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.