Update dependency aquaproj/aqua to v2.17.3

[renovate]

This PR contains the following updates:

Package	Update	Change
aquaproj/aqua	minor	v2.16.4 -> v2.17.3

---

Release Notes

aquaproj/aqua (aquaproj/aqua)

v2.17.3

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.2...v2.17.3

Bug Fixes 🐞

#​2476 #​2479 policy: fix a bug that the Git Repository root's policy file doesn't work well in working trees

Others

#​2470 #​2472 Replace the third party library github.com/codingsince1985/checksum with standard libraries

This library caused the bug #​2467 and we can replace the library with standard libraries easily.
We should use standard libraries as much as possible.

#​2473 Revert #​2469

#​2469 was required to resolve #​2467 , but #​2467 was resolved by #​2472 so #​2469 is unnecessary anymore.

https://github.com/aquaproj/aqua/pull/2472#issuecomment-1812023515

v2.17.2

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.1...v2.17.2

Bug Fixes

#​2457 #​2458 update: Fix a panic when trying to update commands unmanaged by aqua @​dreamjz
#​2468 policy init: Fix typo in CLI output @​ka2n
#​2467 #​2469 update-checksum: Copy an asset to a temporal file to calculate the checksum correctly

update-checksum: Copy an asset to a temporal file to calculate the checksum correctly

#​2467 #​2469

This fixes a bug that the checksum verification of aws/aws-cli fails because the expected checksum of aws/aws-cli is wrong.

If you face the issue already, please remove checksums of aws/aws-cli from aqua-checksums.json and run aqua update-checksum with aqua v2.17.2 or newer.

aqua-checksums.json

    // Delete this element
    {
      "id": "http/awscli.amazonaws.com/AWSCLIV2-2.13.35.pkg",
      "checksum": "520E1CB49004ECED7DB1CFE70E6FA73EFC6EDDF1CDB38AF535D126F1DB6574C8",
      "algorithm": "sha256"
    },

🎉 New Contributors

Thank you for your contribution!

@​ka2n #​2468

v2.17.1

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.17.0...v2.17.1

Bug Fixes 🐞

#​2456 generate-registry: Fix a bug that the order of versions in pkg.yaml is wrong

v2.17.0

Compare Source

Pull Requests | Issues | aquaproj/aqua@v2.16.4...v2.17.0

Features

#​2355 #​2447 Limit the number of versions retrieved by command generate and update @​dreamjz

With aqua v2.16.4 or earlier, aqua generate -s and aqua update -s retrieved all versions and these commands couldn't change the number of versions.
This release adds the command line option --limit/-l to these commands.
The value of this option is the number of versions.
The default value is 30.
If the value is less than zero, all versions are retrieved.

This change would reduced useless GitHub API calls and make these commands faster.

e.g.

aqua g -s # Retrieve 30 versions
aqua g -s -l 10 # Retrieve 10 versions
aqua g -s -l -1 # Retrieve all versions

#​2445 Change the default checksum algorithm from sha512 to sha256

sha256 is enough.
We don't need to use sha512.

#​2428 Add an alias of update-checksum command

aqua upc

#​2105 #​2425 #​2413 generate-registry: Improve the format of version_overrides and improve the logic to generate version_overrides

Bug Fixes 🐞

#​2444 generate-registry: Fix checksum filename for sha1

Others

#​2436 chore(deps): update dependency slsa-framework/slsa-verifier to v2.4.1
#​2395 change the format of prebuilt binaries for Windows to zip

Before:

aqua_windows_amd64.tar.gz
aqua_windows_arm64.tar.gz

After:

aqua_windows_amd64.zip
aqua_windows_arm64.zip

On Windows zip is more user friendly than tar.gz.
And to support Winget for Windows, it seems we need to change the format to zip.

• https://github.com/aquaproj/aqua/issues/2401

  • winget
  ⨯ release failed after 1m11s               error=no zip archives found matching goos=[windows] goarch=[amd64 386] goamd64=v1 ids=[]
Error: Process completed with exit code 1.

⚠️ To upgrade aqua to v2.17.0 or newer on Windows, you need to upgrade aqua to v2.16.1 ~ v2.16.4 once.

e.g.

aqua upa v2.16.4
aqua upa

New Contributors 🎉

Thank you for your contribution!

@​dreamjz #​2447

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.