Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 14, 2025

This PR contains the following updates:

Package Update Change
aquaproj/aqua minor v2.53.11 -> v2.55.0

Release Notes

aquaproj/aqua (aquaproj/aqua)

v2.55.0

Compare Source

Features

#​4195 #​4213 Support verifying the integrity of GitHub Releases

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/verifying-the-integrity-of-a-release
https://aquaproj.github.io/docs/reference/security/github-immutable-release

v2.54.1

Compare Source

🐛 Bug Fixes

#​4182 Fix a bug of generate-registry command that arm64 is replaced to arm incorrectly

v2.54.0

Compare Source

Features

#​4173 ghtkn integration

https://aquaproj.github.io/docs/reference/security/ghtkn/

Now aqua can get a GitHub App User Access Token by ghtkn integration.
Stop risking token leaks - Use secure, short-lived GitHub tokens for local development.

Requirements

The ghtkn integration requires:

  • Keyring

This feature doesn't depend on ghtkn CLI.

Limitation

The integration requires the user interaction when creating an access token via Device Flow, so it's unavailable in CI.

Set up

For more details, please see https://github.com/suzuki-shunsuke/ghtkn .

  1. Create a GitHub App
  2. Create a configuration file of ghtkn
  3. Set the environment variable AQUA_GHTKN_ENABLED=true
export AQUA_GHTKN_ENABLED=true

Then aqua gets a user access token using ghtkn Go SDK when aqua calls GitHub APIs.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update dependency aquaproj/aqua to v2.54.0 chore(deps): update dependency aquaproj/aqua to v2.54.1 Sep 15, 2025
@renovate renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from ecd810d to 93890d5 Compare September 15, 2025 01:48
@renovate renovate bot changed the title chore(deps): update dependency aquaproj/aqua to v2.54.1 chore(deps): update dependency aquaproj/aqua to v2.55.0 Sep 21, 2025
@renovate renovate bot force-pushed the renovate/aquaproj-aqua-2.x branch from 93890d5 to 85345f3 Compare September 21, 2025 08:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants