i544c-me / buicha-social

ぶいちゃ.social のインフラのすべて
https://buicha.social/
GNU Affero General Public License v3.0
4 stars 0 forks source link

chore(deps): update dependency aquaproj/aqua to v2.31.0 #227

Closed renovate-on-actions[bot] closed 2 months ago

renovate-on-actions[bot] commented 2 months ago

This PR contains the following updates:

Package Update Change
aquaproj/aqua minor v2.30.0 -> v2.31.0

Release Notes

aquaproj/aqua (aquaproj/aqua) ### [`v2.31.0`](https://redirect.github.com/aquaproj/aqua/releases/tag/v2.31.0) [Compare Source](https://redirect.github.com/aquaproj/aqua/compare/v2.30.0...v2.31.0) [Pull Requests](https://redirect.github.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.31.0) | [Issues](https://redirect.github.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.31.0) | https://github.com/aquaproj/aqua/compare/v2.30.0...v2.31.0 ##### Overview ##### Featuers [#​2978](https://redirect.github.com/aquaproj/aqua/issues/2978) [#​2994](https://redirect.github.com/aquaproj/aqua/issues/2994) Support verifying packages with minisign [#​3052](https://redirect.github.com/aquaproj/aqua/issues/3052) Support passing variables ##### Fixes [#​3012](https://redirect.github.com/aquaproj/aqua/issues/3012) Fix typo `temporal`. Replace them with `temporary` [#​3017](https://redirect.github.com/aquaproj/aqua/issues/3017) [#​3024](https://redirect.github.com/aquaproj/aqua/issues/3024) Stop using `replace` directive ##### Others Update Go 1.22.5 to 1.22.6 ##### Feature - Support verifying packages with minisign [#​2978](https://redirect.github.com/aquaproj/aqua/issues/2978) [#​2994](https://redirect.github.com/aquaproj/aqua/issues/2994) Support verifying packages with [minisign](https://redirect.github.com/jedisct1/minisign). ##### Why is the feature needed? To install some packages securely. For example, [zig](https://ziglang.org/download/) is signed by minisign. ##### Example Code This feature is similar to Cosign and slsa-verifier. https://aquaproj.github.io/docs/reference/registry-config/cosign/ This feature depends on minisign. So aqua should install minisign transparently same as Cosign and slsa-verifier. registry.yaml ```yaml minisign: enabled: true public_key: "RWSGOq2NVecA2UPNdBUZykf1CCb147pkmdtYxgb3Ti+JO/wCYvhbAb/U" ##### public_key_url: https://example/signature.pub ``` ##### Feature - Support passing variables [#​3052](https://redirect.github.com/aquaproj/aqua/issues/3052) Add the optional field `vars` in aqua.yaml and Registry. ##### `vars` in Registry e.g. ```yaml packages: - type: github_release repo_owner: indygreg repo_name: python-build-standalone asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}} # .Vars.python_version vars: - name: python_version required: true ##### ... ``` `vars` is a list of variables. Fields of a variable - name: string (Required): A variable name - required: boolean (Optional): If true, the variable is required. To use the package, users need to set the variable in aqua.yaml - default: any (Optional): The default value of the variable Variables are passed to template strings as `.Vars.