From 03f39dbf36afde596518f8307e161b30a5faf7ba Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 19 Sep 2026 03:14:38 +0000 Subject: [PATCH 1/2] Update dependency cli/cli to v2.101.0 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- aqua.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aqua.yaml b/aqua.yaml index 18a6640..ed7a4d4 100644 --- a/aqua.yaml +++ b/aqua.yaml @@ -33,7 +33,7 @@ packages: - name: sigstore/cosign@v3.1.1 - name: gotestyourself/gotestsum@v1.13.0 - name: jqlang/jq@jq-1.8.2 - - name: cli/cli@v2.96.0 + - name: cli/cli@v2.101.0 - name: uutils/coreutils@0.11.0 registry: local - name: quint-co/quint@v0.32.0 # renovate: depName=quint-co/quint From 8f0bfdb3005f2e69debc60fda9d08f6f22c03386 Mon Sep 17 00:00:00 2001 From: "limen-ci-forkcloser[bot]" <317468017+limen-ci-forkcloser[bot]@users.noreply.github.com> Date: Sat, 19 Sep 2026 03:14:55 +0000 Subject: [PATCH 2/2] chore: update aqua checksums and converge the limen baseline Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- aqua-checksums.json | 20 ++++++++++---------- renovate.json | 46 ++++++++++++++++++++++----------------------- 2 files changed, 33 insertions(+), 33 deletions(-) diff --git a/aqua-checksums.json b/aqua-checksums.json index c5dd60c..a3689e0 100644 --- a/aqua-checksums.json +++ b/aqua-checksums.json @@ -21,28 +21,28 @@ "algorithm": "sha256" }, { - "id": "github_release/github.com/cli/cli/v2.96.0/gh_2.96.0_linux_amd64.tar.gz", - "checksum": "83D5C2CCAD5498F58BF6368ACB1AB32588CF43AB3A4B1C301BF36328B1C8BD60", + "id": "github_release/github.com/cli/cli/v2.101.0/gh_2.101.0_linux_amd64.tar.gz", + "checksum": "9BCA2D1C16825F109907A23307628A2F0698FBF99662B73A5CF0B020293072B8", "algorithm": "sha256" }, { - "id": "github_release/github.com/cli/cli/v2.96.0/gh_2.96.0_linux_arm64.tar.gz", - "checksum": "06F86EC7103D41993B76CD78072F43595C34AAA56506D971D9860E67140BF909", + "id": "github_release/github.com/cli/cli/v2.101.0/gh_2.101.0_linux_arm64.tar.gz", + "checksum": "B57E8063F18862647C9D22727C32E9DA1B963F8BF9DB648FE123A6975695640F", "algorithm": "sha256" }, { - "id": "github_release/github.com/cli/cli/v2.96.0/gh_2.96.0_macOS_arm64.zip", - "checksum": "F23A0C37D963AACC3BED703CCBD59B41C5CA22101FAB7F00EB2B7CAD23ABA463", + "id": "github_release/github.com/cli/cli/v2.101.0/gh_2.101.0_macOS_arm64.zip", + "checksum": "E4303E39D8F07141C4BAD4B99B01079F05029C59B27076E8FBC825C985ECDD8B", "algorithm": "sha256" }, { - "id": "github_release/github.com/cli/cli/v2.96.0/gh_2.96.0_windows_amd64.zip", - "checksum": "C2D6ACC935CD2F00E2144D7E036D5CD82E6B6BD5594E8C75AA75EF2A4ED6AAC3", + "id": "github_release/github.com/cli/cli/v2.101.0/gh_2.101.0_windows_amd64.zip", + "checksum": "BC6C814367B193CD8E713611D61E36013C0EF843B8F516458FE3EDA039192794", "algorithm": "sha256" }, { - "id": "github_release/github.com/cli/cli/v2.96.0/gh_2.96.0_windows_arm64.zip", - "checksum": "C517E0B32C98A4BA90AC95AF8D12CC3AC55781AB4AB72F9A91CE3DE0541D2B09", + "id": "github_release/github.com/cli/cli/v2.101.0/gh_2.101.0_windows_arm64.zip", + "checksum": "E6CBB2D4AFDAD3E70F3D38B8D1EBAA3A0870A897CFC0E4CF569826710B96B4FD", "algorithm": "sha256" }, { diff --git a/renovate.json b/renovate.json index f93d94c..9597aee 100644 --- a/renovate.json +++ b/renovate.json @@ -1,8 +1,27 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "customDatasources": { + "curl-for-win": { + "defaultRegistryUrlTemplate": "https://curl.se/windows/", + "format": "html" + } + }, + "customManagers": [ + { + "customType": "regex", + "datasourceTemplate": "custom.curl-for-win", + "managerFilePatterns": [ + "/^versions\\.env$/" + ], + "matchStrings": [ + "# renovate: depName=(?[^\\s]+)\\nCFW_PACKAGE=(?[^\\s]+)" + ], + "versioningTemplate": "regex:^(?\\d+)\\.(?\\d+)\\.(?\\d+)_(?\\d+)$" + } + ], "description": [ - "The canonical Renovate configuration is a shared preset \u2014 default.json in the limen repository \u2014 so every repository inherits it by reference and a fix there reaches all of them without a file being re-seeded. The ref is pinned: the `renovate` rule keeps it at the repository's own limen version (the farcloser/limen pin in aqua.yaml), so the preset moves with the release like every other canonical file. limen itself, the preset's author, reads it from its own default branch. Everything below is the project's own \u2014 overrides and additions go here, next to the ref.", - "forkProcessing: Renovate skips forked repositories by default under an all-repositories App installation, and it skips them before reading any config beyond this file \u2014 so the setting cannot live in the shared preset, and cannot live in a renovate.json5 either: only the onboarding config file name, renovate.json, is read through the platform API at that point. Every repository that is a GitHub fork is silently never processed without it.", + "The canonical Renovate configuration is a shared preset — default.json in the limen repository — so every repository inherits it by reference and a fix there reaches all of them without a file being re-seeded. The ref is pinned: the `renovate` rule keeps it at the repository's own limen version (the farcloser/limen pin in aqua.yaml), so the preset moves with the release like every other canonical file. limen itself, the preset's author, reads it from its own default branch. Everything below is the project's own — overrides and additions go here, next to the ref.", + "forkProcessing: Renovate skips forked repositories by default under an all-repositories App installation, and it skips them before reading any config beyond this file — so the setting cannot live in the shared preset, and cannot live in a renovate.json5 either: only the onboarding config file name, renovate.json, is read through the platform API at that point. Every repository that is a GitHub fork is silently never processed without it.", "gitIgnoredAuthors: the update-aqua-checksum workflow pushes a fix-up commit onto Renovate's branches; without this, Renovate treats the branch as human-modified and stops rebasing it. The org's App identity is the org's, so the array stays here (the `renovate` rule maintains it) rather than in the preset.", "customManagers: CFW_PACKAGE in versions.env is the curl-for-win package this repository tracks, in curl.se's own _ form, watched straight off the curl.se download index (an HTML page whose hrefs carry the token), so a bump can only propose something actually downloadable. CFW_COMMIT is deliberately not managed: bumping it means re-auditing the build scripts and re-cross-checking the vendored key, human work (see versions.env).", "packageRules/extractVersion: index hrefs look like dl-8.21.0_2/curl-8.21.0_2-win64-mingw.zip; the leading directory component carries the package token." @@ -16,31 +35,12 @@ "300983632+limen-ci-farcloser[bot]@users.noreply.github.com", "41898282+github-actions[bot]@users.noreply.github.com" ], - "customManagers": [ - { - "customType": "regex", - "managerFilePatterns": [ - "/^versions\\.env$/" - ], - "matchStrings": [ - "# renovate: depName=(?[^\\s]+)\\nCFW_PACKAGE=(?[^\\s]+)" - ], - "datasourceTemplate": "custom.curl-for-win", - "versioningTemplate": "regex:^(?\\d+)\\.(?\\d+)\\.(?\\d+)_(?\\d+)$" - } - ], - "customDatasources": { - "curl-for-win": { - "defaultRegistryUrlTemplate": "https://curl.se/windows/", - "format": "html" - } - }, "packageRules": [ { + "extractVersion": "^dl-(?\\d+\\.\\d+\\.\\d+_\\d+)/", "matchDatasources": [ "custom.curl-for-win" - ], - "extractVersion": "^dl-(?\\d+\\.\\d+\\.\\d+_\\d+)/" + ] } ] }