aquaproj/aqua (aquaproj/aqua)
### [`v2.31.0`](https://redirect.github.com/aquaproj/aqua/releases/tag/v2.31.0)
[Compare Source](https://redirect.github.com/aquaproj/aqua/compare/v2.30.0...v2.31.0)
[Pull Requests](https://redirect.github.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.31.0) | [Issues](https://redirect.github.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.31.0) | https://github.com/aquaproj/aqua/compare/v2.30.0...v2.31.0
##### Overview
##### Featuers
[#2978](https://redirect.github.com/aquaproj/aqua/issues/2978) [#2994](https://redirect.github.com/aquaproj/aqua/issues/2994) Support verifying packages with minisign
[#3052](https://redirect.github.com/aquaproj/aqua/issues/3052) Support passing variables
##### Fixes
[#3012](https://redirect.github.com/aquaproj/aqua/issues/3012) Fix typo `temporal`. Replace them with `temporary`
[#3017](https://redirect.github.com/aquaproj/aqua/issues/3017) [#3024](https://redirect.github.com/aquaproj/aqua/issues/3024) Stop using `replace` directive
##### Others
Update Go 1.22.5 to 1.22.6
##### Feature - Support verifying packages with minisign
[#2978](https://redirect.github.com/aquaproj/aqua/issues/2978) [#2994](https://redirect.github.com/aquaproj/aqua/issues/2994)
Support verifying packages with [minisign](https://redirect.github.com/jedisct1/minisign).
##### Why is the feature needed?
To install some packages securely.
For example, [zig](https://ziglang.org/download/) is signed by minisign.
##### Example Code
This feature is similar to Cosign and slsa-verifier.
https://aquaproj.github.io/docs/reference/registry-config/cosign/
This feature depends on minisign.
So aqua should install minisign transparently same as Cosign and slsa-verifier.
registry.yaml
```yaml
minisign:
enabled: true
public_key: "RWSGOq2NVecA2UPNdBUZykf1CCb147pkmdtYxgb3Ti+JO/wCYvhbAb/U"
##### public_key_url: https://example/signature.pub
```
##### Feature - Support passing variables
[#3052](https://redirect.github.com/aquaproj/aqua/issues/3052)
Add the optional field `vars` in aqua.yaml and Registry.
##### `vars` in Registry
e.g.
```yaml
packages:
- type: github_release
repo_owner: indygreg
repo_name: python-build-standalone
asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}} # .Vars.python_version
vars:
- name: python_version
required: true
##### ...
```
`vars` is a list of variables.
Fields of a variable
- name: string (Required): A variable name
- required: boolean (Optional): If true, the variable is required. To use the package, users need to set the variable in aqua.yaml
- default: any (Optional): The default value of the variable
Variables are passed to template strings as `.Vars.`.
e.g.
asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}}
##### `vars` in aqua.yaml
e.g.
```yaml
packages:
- name: indygreg/python-build-standalone@20240726
vars:
python_version: 3.11.9
```
`vars` is a map of variables.
The key is a variable name and the value is a variable value.
Configuration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
v2.30.0
->v2.31.0
Release Notes
aquaproj/aqua (aquaproj/aqua)
### [`v2.31.0`](https://redirect.github.com/aquaproj/aqua/releases/tag/v2.31.0) [Compare Source](https://redirect.github.com/aquaproj/aqua/compare/v2.30.0...v2.31.0) [Pull Requests](https://redirect.github.com/aquaproj/aqua/pulls?q=is%3Apr+milestone%3Av2.31.0) | [Issues](https://redirect.github.com/aquaproj/aqua/issues?q=is%3Aissue+milestone%3Av2.31.0) | https://github.com/aquaproj/aqua/compare/v2.30.0...v2.31.0 ##### Overview ##### Featuers [#2978](https://redirect.github.com/aquaproj/aqua/issues/2978) [#2994](https://redirect.github.com/aquaproj/aqua/issues/2994) Support verifying packages with minisign [#3052](https://redirect.github.com/aquaproj/aqua/issues/3052) Support passing variables ##### Fixes [#3012](https://redirect.github.com/aquaproj/aqua/issues/3012) Fix typo `temporal`. Replace them with `temporary` [#3017](https://redirect.github.com/aquaproj/aqua/issues/3017) [#3024](https://redirect.github.com/aquaproj/aqua/issues/3024) Stop using `replace` directive ##### Others Update Go 1.22.5 to 1.22.6 ##### Feature - Support verifying packages with minisign [#2978](https://redirect.github.com/aquaproj/aqua/issues/2978) [#2994](https://redirect.github.com/aquaproj/aqua/issues/2994) Support verifying packages with [minisign](https://redirect.github.com/jedisct1/minisign). ##### Why is the feature needed? To install some packages securely. For example, [zig](https://ziglang.org/download/) is signed by minisign. ##### Example Code This feature is similar to Cosign and slsa-verifier. https://aquaproj.github.io/docs/reference/registry-config/cosign/ This feature depends on minisign. So aqua should install minisign transparently same as Cosign and slsa-verifier. registry.yaml ```yaml minisign: enabled: true public_key: "RWSGOq2NVecA2UPNdBUZykf1CCb147pkmdtYxgb3Ti+JO/wCYvhbAb/U" ##### public_key_url: https://example/signature.pub ``` ##### Feature - Support passing variables [#3052](https://redirect.github.com/aquaproj/aqua/issues/3052) Add the optional field `vars` in aqua.yaml and Registry. ##### `vars` in Registry e.g. ```yaml packages: - type: github_release repo_owner: indygreg repo_name: python-build-standalone asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}} # .Vars.python_version vars: - name: python_version required: true ##### ... ``` `vars` is a list of variables. Fields of a variable - name: string (Required): A variable name - required: boolean (Optional): If true, the variable is required. To use the package, users need to set the variable in aqua.yaml - default: any (Optional): The default value of the variable Variables are passed to template strings as `.Vars.`. e.g. asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}} ##### `vars` in aqua.yaml e.g. ```yaml packages: - name: indygreg/python-build-standalone@20240726 vars: python_version: 3.11.9 ``` `vars` is a map of variables. The key is a variable name and the value is a variable value.Configuration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.