Skip to content

chore(deps): weekly safe aqua updates · 1 package - #7

Open
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-aqua-20260713
Open

chore(deps): weekly safe aqua updates · 1 package#7
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-aqua-20260713

Conversation

@mendral-app

@mendral-app mendral-app Bot commented Jul 13, 2026

Copy link
Copy Markdown

Packages bumped

Package Old New Released
goreleaser/goreleaser v2.16.0 v2.17.0 2026-07-04
📋 goreleaser/goreleaser changelog highlights

New features:

  • Default pull request branch name configuration for brew, cask, krew, nix, scoop, and winget
  • Docker v2 build retry functionality
  • NFPM support for MSIX packages
  • Allow custom token on the release repository
  • Winget manifest locale configuration
  • GOARM softfloat and hardfloat support

Security:

  • Bumped go-pkcs12 to v0.7.2 (addressing GO-2026-5052)
  • Updated golang.org/x/net

Bug fixes:

  • Reject empty target strings in builders
  • Skip merge-upstream when target repo is not a fork
  • Drop dependency on docker/docker
  • Clean subfolder path in MCP
  • Produce valid arch for Termux packages in NFPM
  • Winget default head branch versioned template
  • Return error when go.mod is unreadable in CheckGoModPipe

Impact on this codebase: goreleaser is used as a release tool. None of the new features or fixes change existing behavior — all additive. No code changes required.

Files modified

  • aqua.yaml — version bump
  • aqua-checksums.json — regenerated checksums
⏭️ Skipped this ecosystem
Package Current Latest Reason
aquaproj/aqua-registry v4.530.0 v4.531.0 Open PR #5
aquaproj/aqua-installer v4.0.2 v4.0.5 Open PR #4
aquaproj/aqua v2.60.1 v2.60.2 Cooldown (released 2026-07-09, 4 days ago)
golang/go go1.26.4 go1.26.5 Cooldown (released 2026-07-07, 6 days ago)
golang.org/x/vuln/cmd/govulncheck v1.5.0 v1.6.0 Cooldown (released 2026-07-09, 4 days ago)
golang.org/x/tools/cmd/deadcode v0.47.0 v0.48.0 Cooldown (released 2026-07-08, 5 days ago)
farcloser/limen v0.0.1 v0.0.4 Cooldown (released 2026-07-08, 5 days ago)
casey/just 1.55.1 Already latest
koalaman/shellcheck v0.11.0 Already latest
golangci/golangci-lint v2.12.2 Already latest
google/yamlfmt v0.21.0 Already latest
lycheeverse/lychee lychee-v0.24.2 Already latest
sigstore/cosign v3.1.1 Already latest
cli/cli v2.96.0 Already latest
gotestyourself/gotestsum v1.13.0 Already latest
jqlang/jq jq-1.8.2 Already latest
actions/checkout v7.0.0 Already latest

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@mendral-app
mendral-app Bot marked this pull request as ready for review July 13, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants