chore(deps): update dependency aquaproj/aqua to v2.25.2

[renovate]

This PR contains the following updates:

Package	Update	Change
aquaproj/aqua	minor	v2.23.1 -> v2.25.2

---

Release Notes

aquaproj/aqua (aquaproj/aqua)

v2.25.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.25.1...v2.25.2

Bug Fixes

#​2781 #​2786 list: Fix a bug that packages in that same aqua.yaml is outputted by aqua list --installed

Others

#​2779 #​2788 Update slsa-verifier to v2.5.1
#​2787 Update go directive to 1.22 and refactor codes with Go new features

v2.25.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.25.0...v2.25.1

Bug Fixes

#​1665 #​2757 Fix the verification error of Cosign
#​2764 #​2765 Fix SIGSEGV: segmentation violation of aqua update and aqua generate commands

Others

#​2756 Update the template of aqua.yaml generated by aqua init to follow a yamllint comment rule @​bhundven

v2.25.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.24.1...v2.25.0

Features

#​2749 #​2752 Support excluding some packages from the target of aqua update

e.g. aqua.yaml

packages:
  - name: golang/vuln/[email protected]
    update:

##### If enabled is false, aqua up command ignores the package.
##### If the package name is passed to aqua up command explicitly, enabled is ignored.

##### By default, enabled is true.
      enabled: false

Fixes

#​2747 #​2354 #​2750 #​2751 Improve the logic to get the latest version

We've changed the logic to get the latest version in some commands such as aqua update and aqua generate.
The original logic was to call GitHub API Get a latest release, but a latest release wan't necessarily a latest version.
So we changed the logic to list the recent releases and get a latest version by semver.

v2.24.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.24.0...v2.24.1

Bug Fixes

#​2742 #​2744 fix a bug that aqua g and aqua gr commands don't work for cargo package

This bug was due to crates.io crawler policy.

We are unable to process your request at this time.
This usually means that you are in violation of our crawler policy.

We could resolve the issue by setting the User-Agent header.

v2.24.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.23.2...v2.24.0

Features

#​2709 #​2733 Support listing installed packages

Command line options -installed and -all [-a] were added to aqua list command.

aqua list -installed [-a]

If -installed is set, installed packages are outputted.

e.g.

$ aqua list -installed   
rhysd/actionlint	v1.6.27	standard
suzuki-shunsuke/cmdx	v1.7.4	standard
sigstore/cosign	v1.13.2	standard
suzuki-shunsuke/ghalint	v0.2.9	standard
int128/ghcp	v1.13.2	standard
golangci/golangci-lint	v1.56.2	standard
goreleaser/goreleaser	v1.24.0	standard
reviewdog/reviewdog	v0.17.1	standard

By default, global configuration files are ignored.
To output packages in global configuration files too, please set the option -all [-a].

$ aqua list -a -installed

v2.23.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.23.1...v2.23.2

Fixes

#​2714 Fix a bug that it fails to download large files from GitHub repositories

Use the API RepositoriesService.DownloadContents instead of RepositoriesService.GetContents to download large files from GitHub.

https://pkg.go.dev/github.com/google/go-github/v60/github#RepositoriesService.DownloadContents

DownloadContents returns an io.ReadCloser that reads the contents of the specified file.
This function will work with files of any size, as opposed to GetContents which is limited to 1 Mb files. It is the caller's responsibility to close the ReadCloser.

If you use old aqua and face the following error, please update aqua to v2.23.2 or newer.

unsupported content encoding: none, this may occur when file size > 1 MB, if that is the case consider using DownloadContents

Others

Update Go 1.21.6 to 1.22.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.