v2.33.0

Pull Requests | Issues | v2.32.0...v2.33.0

Features

#3101 Enable you to remove go_install and http packages

You can now uninstall go_install and http packages!
Furthermore, the uninstall can now handles version_overrides properly.

v2.32.0

Pull Requests | Issues | v2.31.0...v2.32.0

Features

#3075 #3094 Support removing links from the bin directory

By default, aqua remove command removes only packages from the pkgs directory and doesn't remove links from the bin directory.
This release has added the command line option -mode to the remove command.
The value of -mode is a string containing characters l and p.
The order of the characters doesn't matter.

aqua rm -m l cli/cli # Remove only links
aqua rm -m pl cli/cli # Remove links and packages

You can also configure the mode by the environment variable AQUA_REMOVE_MODE, so you can change the default behaviour of aqua remove command by setting AQUA_REMOVE_MODE in your shell setting such as .bashrc.

export AQUA_REMOVE_MODE=pl

v2.31.0

Pull Requests | Issues | v2.30.0...v2.31.0

Overview

Featuers

#2978 #2994 Support verifying packages with minisign
#3052 Support passing variables

Fixes

#3012 Fix typo temporal. Replace them with temporary
#3017 #3024 Stop using replace directive

Others

Update Go 1.22.5 to 1.22.6

Feature - Support verifying packages with minisign

#2978 #2994

Support verifying packages with minisign.

Why is the feature needed?

To install some packages securely.
For example, zig is signed by minisign.

Example Code

This feature is similar to Cosign and slsa-verifier.

https://aquaproj.github.io/docs/reference/registry-config/cosign/

This feature depends on minisign.
So aqua should install minisign transparently same as Cosign and slsa-verifier.

registry.yaml

minisign:
  enabled: true
  public_key: "RWSGOq2NVecA2UPNdBUZykf1CCb147pkmdtYxgb3Ti+JO/wCYvhbAb/U"
  # public_key_url: https://example/signature.pub

Feature - Support passing variables

#3052

Add the optional field vars in aqua.yaml and Registry.

vars in Registry

e.g.

packages:
  - type: github_release
    repo_owner: indygreg
    repo_name: python-build-standalone
    asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}} # .Vars.python_version
    vars:
      - name: python_version
        required: true
    # ...

vars is a list of variables.
Fields of a variable

• name: string (Required): A variable name
• required: boolean (Optional): If true, the variable is required. To use the package, users need to set the variable in aqua.yaml
• default: any (Optional): The default value of the variable

Variables are passed to template strings as .Vars.<template name>.

e.g.

asset: cpython-{{.Vars.python_version}}+{{.Version}}-{{.Arch}}-{{.OS}}-install_only.{{.Format}}

vars in aqua.yaml

e.g.

packages:
  - name: indygreg/python-build-standalone@20240726
    vars:
      python_version: 3.11.9

vars is a map of variables.
The key is a variable name and the value is a variable value.

v2.31.0-3

Pull Requests | Issues | v2.31.0-2...v2.31.0-3

Changelog

• a02bd1e Merge branch 'main' into feat-add-vars
• 5ae1844 ci: add testdata (#3067)
• 7fb0d9d Update README.md (#3066)
• ea71168 chore(deps): update dependency aquaproj/aqua-registry to v4.218.0 (#3065)
• 7217a02 chore(deps): update dependency aquaproj/aqua-registry to v4.217.0 (#3063)

v2.31.0-2

v2.30.0...v2.31.0-2

#3052

v2.31.0-1

v2.30.0...v2.31.0-1

v2.30.0

Pull Requests | Issues | v2.29.2...v2.30.0

Features

#2918 #3005 Use aqua-proxy and hard links instead of shell scripts and bat scripts on Windows

Document: aquaproj/aquaproj.github.io#1049 https://aquaproj.github.io/docs/reference/lazy-install#on-windows

aqua doesn't use symbolic links on Windows because symbolic links have several issues on Windows.

1. Non-administrators can't create symbolic links by default on Windows
2. PowerShell doesn't use the final target of a symbolic link when starting a process or running a native command on Windows

aqua v2.29.2 or older used shell scripts and bat scripts instead of symbolic links and aqua-proxy.

#885 #892 #893 aqua >= v1.12.0, aqua <= v2.29.2

But using shell scripts and bat scripts also had several issues.

1. Using both shell scripts and bat scripts is confusing
2. tools can't be executed on Nushell #2918 (comment)
3. bat scripts can't handle signals properly #2918 (comment)

So aqua v2.30.0 or later uses hard links and aqua-proxy instead of shell scripts and bat scripts. #2918
aqua installs aqua-proxy and creates hard links to aqua-proxy on $(aqua root-dir)/bin directory.
When aqua updates aqua-proxy, aqua recreates hard links.
From aqua v2.30.0, aqua doesn't use bat scripts so you can remove $(aqua root-dir)/bat directory and remove $(aqua root-dir)/bat from PATH.

Others

#3004 Update slsa-verifier to v2.6.0
#3008 Update module github.com/goccy/go-yaml to v1.12.0

v2.30.0-3

v2.30.0-2...v2.30.0-3

Changelog

• 67d116e fix: use runtime instead of fake runtime

v2.30.0-2

v2.30.0-1...v2.30.0-2

Changelog

• c90fb18 fix: fix a lint error
• c04056f fix: skip recreating aqua.exe when aqua-proxy is installed
• 94f3561 fix: use a hard link when updating aqua
• 3063ce7 fix: create a hard link instead of copy aqua

v2.30.0-1

v2.29.2...v2.30.0-1

Features

#2918 #3005 Use hard links instead of shell scripts and bat scripts on Windows