From 09624995ee661d42e42e5618b41ef7dd0cbfba23 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 00:01:26 +0000 Subject: [PATCH 1/2] Update dependency casey/just to v1.58.0 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- aqua.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aqua.yaml b/aqua.yaml index 18a6640..266842e 100644 --- a/aqua.yaml +++ b/aqua.yaml @@ -24,7 +24,7 @@ packages: registry: local # --- toolchain + binary-release tools (standard registry, aqua-verified) --- - name: golang/go@go1.26.4 - - name: casey/just@1.55.1 + - name: casey/just@1.58.0 - name: koalaman/shellcheck@v0.11.0 - name: golangci/golangci-lint@v2.12.2 - name: google/yamlfmt@v0.21.0 From 8eb1cf9db67c87eb7e49a2f06a3f1569c4f743a8 Mon Sep 17 00:00:00 2001 From: "limen-ci-forkcloser[bot]" <317468017+limen-ci-forkcloser[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 00:01:39 +0000 Subject: [PATCH 2/2] chore: update aqua checksums and converge the limen baseline Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- aqua-checksums.json | 16 ++++++++-------- renovate.json | 46 ++++++++++++++++++++++----------------------- 2 files changed, 31 insertions(+), 31 deletions(-) diff --git a/aqua-checksums.json b/aqua-checksums.json index c5dd60c..10d7f9e 100644 --- a/aqua-checksums.json +++ b/aqua-checksums.json @@ -1,23 +1,23 @@ { "checksums": [ { - "id": "github_release/github.com/casey/just/1.55.1/just-1.55.1-aarch64-apple-darwin.tar.gz", - "checksum": "0225E3899B1B555BC3F4122D0402BA931A6EE697D188C68E4D971468064C78F4", + "id": "github_release/github.com/casey/just/1.58.0/just-1.58.0-aarch64-apple-darwin.tar.gz", + "checksum": "50AE3E996C974A0BF32EA7D10F495070DF33F1B43E0616B2769E3D4821ED8F48", "algorithm": "sha256" }, { - "id": "github_release/github.com/casey/just/1.55.1/just-1.55.1-aarch64-unknown-linux-musl.tar.gz", - "checksum": "B0EE814C9656427408E339893541E30D9027828686839499B2A2A34DD61AD173", + "id": "github_release/github.com/casey/just/1.58.0/just-1.58.0-aarch64-unknown-linux-musl.tar.gz", + "checksum": "748237128C4C40CBDABC65E841D05CEBA13CC23A91EABA395495894C1D9764DF", "algorithm": "sha256" }, { - "id": "github_release/github.com/casey/just/1.55.1/just-1.55.1-x86_64-pc-windows-msvc.zip", - "checksum": "8106E6C036AEA52DD1D5109BDF9357C37BA87A0E0EF1013D7327103942550C79", + "id": "github_release/github.com/casey/just/1.58.0/just-1.58.0-x86_64-pc-windows-msvc.zip", + "checksum": "759F16FB7AA17C5C8B9594B6D4A8C1A6630DFD042CF2B3FF84841454D3D188DC", "algorithm": "sha256" }, { - "id": "github_release/github.com/casey/just/1.55.1/just-1.55.1-x86_64-unknown-linux-musl.tar.gz", - "checksum": "B0EF600F0DF20D5AE91AE931627C499FC52B477FFE5F5EA7B7B3EC616B16C778", + "id": "github_release/github.com/casey/just/1.58.0/just-1.58.0-x86_64-unknown-linux-musl.tar.gz", + "checksum": "4A5CC2F53E6F0F8C59092A6CC38291EB729D46A7DD95D3AE582008881B84931D", "algorithm": "sha256" }, { diff --git a/renovate.json b/renovate.json index f93d94c..9597aee 100644 --- a/renovate.json +++ b/renovate.json @@ -1,8 +1,27 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "customDatasources": { + "curl-for-win": { + "defaultRegistryUrlTemplate": "https://curl.se/windows/", + "format": "html" + } + }, + "customManagers": [ + { + "customType": "regex", + "datasourceTemplate": "custom.curl-for-win", + "managerFilePatterns": [ + "/^versions\\.env$/" + ], + "matchStrings": [ + "# renovate: depName=(?[^\\s]+)\\nCFW_PACKAGE=(?[^\\s]+)" + ], + "versioningTemplate": "regex:^(?\\d+)\\.(?\\d+)\\.(?\\d+)_(?\\d+)$" + } + ], "description": [ - "The canonical Renovate configuration is a shared preset \u2014 default.json in the limen repository \u2014 so every repository inherits it by reference and a fix there reaches all of them without a file being re-seeded. The ref is pinned: the `renovate` rule keeps it at the repository's own limen version (the farcloser/limen pin in aqua.yaml), so the preset moves with the release like every other canonical file. limen itself, the preset's author, reads it from its own default branch. Everything below is the project's own \u2014 overrides and additions go here, next to the ref.", - "forkProcessing: Renovate skips forked repositories by default under an all-repositories App installation, and it skips them before reading any config beyond this file \u2014 so the setting cannot live in the shared preset, and cannot live in a renovate.json5 either: only the onboarding config file name, renovate.json, is read through the platform API at that point. Every repository that is a GitHub fork is silently never processed without it.", + "The canonical Renovate configuration is a shared preset — default.json in the limen repository — so every repository inherits it by reference and a fix there reaches all of them without a file being re-seeded. The ref is pinned: the `renovate` rule keeps it at the repository's own limen version (the farcloser/limen pin in aqua.yaml), so the preset moves with the release like every other canonical file. limen itself, the preset's author, reads it from its own default branch. Everything below is the project's own — overrides and additions go here, next to the ref.", + "forkProcessing: Renovate skips forked repositories by default under an all-repositories App installation, and it skips them before reading any config beyond this file — so the setting cannot live in the shared preset, and cannot live in a renovate.json5 either: only the onboarding config file name, renovate.json, is read through the platform API at that point. Every repository that is a GitHub fork is silently never processed without it.", "gitIgnoredAuthors: the update-aqua-checksum workflow pushes a fix-up commit onto Renovate's branches; without this, Renovate treats the branch as human-modified and stops rebasing it. The org's App identity is the org's, so the array stays here (the `renovate` rule maintains it) rather than in the preset.", "customManagers: CFW_PACKAGE in versions.env is the curl-for-win package this repository tracks, in curl.se's own _ form, watched straight off the curl.se download index (an HTML page whose hrefs carry the token), so a bump can only propose something actually downloadable. CFW_COMMIT is deliberately not managed: bumping it means re-auditing the build scripts and re-cross-checking the vendored key, human work (see versions.env).", "packageRules/extractVersion: index hrefs look like dl-8.21.0_2/curl-8.21.0_2-win64-mingw.zip; the leading directory component carries the package token." @@ -16,31 +35,12 @@ "300983632+limen-ci-farcloser[bot]@users.noreply.github.com", "41898282+github-actions[bot]@users.noreply.github.com" ], - "customManagers": [ - { - "customType": "regex", - "managerFilePatterns": [ - "/^versions\\.env$/" - ], - "matchStrings": [ - "# renovate: depName=(?[^\\s]+)\\nCFW_PACKAGE=(?[^\\s]+)" - ], - "datasourceTemplate": "custom.curl-for-win", - "versioningTemplate": "regex:^(?\\d+)\\.(?\\d+)\\.(?\\d+)_(?\\d+)$" - } - ], - "customDatasources": { - "curl-for-win": { - "defaultRegistryUrlTemplate": "https://curl.se/windows/", - "format": "html" - } - }, "packageRules": [ { + "extractVersion": "^dl-(?\\d+\\.\\d+\\.\\d+_\\d+)/", "matchDatasources": [ "custom.curl-for-win" - ], - "extractVersion": "^dl-(?\\d+\\.\\d+\\.\\d+_\\d+)/" + ] } ] }