v2.42.2

Pull Requests | Issues | v2.42.1...v2.42.2

🐛 Bug Fixes

#3436 Fix a bug that aqua update command fails if version_expr or go_version_file is used

As of this release, aqua update command ignores packages with version_expr or go_version_file.

v2.42.1

Pull Requests | Issues | v2.42.0...v2.42.1

🐞 Bug Fixes

#3433 Create symlinks if unarchived files are symlinks

This fixes a bug of aqua v2.42.0. #3432

v2.42.1-0

v2.42.0...v2.42.1-0

v2.42.0

Pull Requests | Issues | v2.41.0...v2.42.0

Caution

This version has a known bug.
#3432
This bug was fixed at v2.42.1. https://github.com/aquaproj/aqua/releases/tag/v2.42.1

Features

#3422 Support 7 zip

Others

#3422 Replace mholt/archiver/v3 with mholt/archives

mholt/archiver/v3 was deprecated and it's encourage to migrate to mholt/archives.

v2.41.1-2

Pull Requests | Issues | v2.41.1-1...v2.41.1-2

Changelog

• 7911b87 refactor: ignore a lint error
• 12907f5 fix(unarchive): add 0o700 permission to directories
• 6e3bc79 fix(unarchive): continue the process even if it fails to unarchive some files

v2.41.1-1

Pull Requests | Issues | v2.41.1-0...v2.41.1-1

Changelog

• 81d6d5b refactor: fix a lint error
• 99ec76d Merge branch 'main' into fix-migrate-mholt-archiver-v3
• f248789 fix(deps): update module golang.org/x/oauth2 to v0.25.0 (#3423)
• 6efae23 chore(deps): update dependency aquaproj/aqua-registry to v4.291.0 (#3426)
• d33ebfb fix(unarchive): detect file path separator automatically
• 70e64cd chore(deps): update dependency rhysd/actionlint to v1.7.6 (#3425)
• e8707fa fix(deps): update module golang.org/x/sys to v0.29.0 (#3424)
• b367353 chore(deps): update dependency aquaproj/aqua-registry to v4.290.0 (#3421)

v2.41.1-0

v2.41.0...v2.41.1-0

#3422

v2.41.0

Pull Requests | Issues | v2.40.0...v2.41.0

Features

#3407 Support cargo install's --locked option

https://aquaproj.github.io/docs/reference/registry-config/cargo-package

e.g. registry.yaml:

            type: cargo
            crate: rhit
            cargo:
              locked: true

      --locked               Assert that `Cargo.lock` will remain unchanged

#3399 update: Support filtering updated packages using package tags

https://aquaproj.github.io/docs/guides/package-tag

e.g.

aqua up -t bootstrap # Update only packages with a tag `bootstrap`
aqua up --exclude-tags bootstrap # Exclude packages with a tag `bootstrap`

v2.41.0-0

v2.40.0...v2.41.0-0

v2.40.0

Pull Requests | Issues | v2.39.1...v2.40.0

Features

#3363 Support getting package versions from external files

This release enables you to get package versions from external files.
This feature is useful when:

• Migrate any tool to aqua gradually
• Support aqua and other tools

This release adds some fields to aqua.yaml's packages.

• version_expr: An expr expression to read external files
• version_expr_prefix: A prefix of version

e.g.

packages:
- name: hashicorp/terraform
  version_expr: |
    "v" + readFile('.terraform-version')

  version_expr: |
    readJSON('version.json').version
  version_expr_prefix: cli-

  version_expr: |
    readYAML('version.yaml').version

version_expr is evaluated using expr.
The following custom functions are available.

• readFile("file path"): reads a file and returns a file content
• readJSON("file path"): read and unmarshal a JSON file and returns an object
• readYAML("file path"): read and unmarshal a YAML file and returns an object

⚠️ Constraint of version_expr

Allowing to read external files is potentially risky in terms of security.
Malicious users can try to read secret files and expose secrets via log using version_expr.
To prevent such a threat, we restrict the evaluation result of version_expr.
It must match with the regular expression ^v?\d+\.\d+(\.\d+)*[.-]?((alpha|beta|dev|rc)[.-]?)?\d*.