From fbe38ba26ebf552b50eb2211351a414de2e3b88f Mon Sep 17 00:00:00 2001 From: closer-claudio Date: Sun, 6 Sep 2026 19:38:18 -0700 Subject: [PATCH 1/3] import-windows: retries on the two downloads Plain GETs, safe to repeat, and the network is the usual reason they fail: --retry 5 --retry-delay 3 --retry-all-errors. Signed-off-by: closer-claudio Co-Authored-By: Claude Fable 5.1 --- import-windows.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/import-windows.sh b/import-windows.sh index f8db061..96c9e17 100755 --- a/import-windows.sh +++ b/import-windows.sh @@ -34,8 +34,8 @@ for arch in amd64 arm64; do mkdir -p "$work" echo "› fetching ${pkg}" - curl --proto '=https' --tlsv1.2 -fsSL -o "${work}/${pkg}" "$url" - curl --proto '=https' --tlsv1.2 -fsSL -o "${work}/${pkg}.sigstore" "${url}.sigstore" + curl --proto '=https' --tlsv1.2 -fsSL --retry 5 --retry-delay 3 --retry-all-errors -o "${work}/${pkg}" "$url" + curl --proto '=https' --tlsv1.2 -fsSL --retry 5 --retry-delay 3 --retry-all-errors -o "${work}/${pkg}.sigstore" "${url}.sigstore" echo "› verifying sigstore bundle against the vendored key" cosign verify-blob --key cosign.pub.asc --bundle "${work}/${pkg}.sigstore" "${work}/${pkg}" From 4f7e37baed95a02ebd8016a245fae53106977b62 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 18:02:49 +0000 Subject: [PATCH 2/3] Update dependency sigstore/cosign to v3.1.3 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- aqua.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aqua.yaml b/aqua.yaml index f9ee589..a95716e 100644 --- a/aqua.yaml +++ b/aqua.yaml @@ -42,7 +42,7 @@ packages: - name: google/yamlfmt@v0.21.0 - name: lycheeverse/lychee@lychee-v0.24.2 - name: goreleaser/goreleaser@v2.16.0 - - name: sigstore/cosign@v3.1.1 + - name: sigstore/cosign@v3.1.3 - name: gotestyourself/gotestsum@v1.13.0 - name: jqlang/jq@jq-1.8.2 - name: cli/cli@v2.96.0 From 6422db5103c112fa507840b6534d8a9fe82549fe Mon Sep 17 00:00:00 2001 From: "limen-ci-forkcloser[bot]" <317468017+limen-ci-forkcloser[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 18:03:02 +0000 Subject: [PATCH 3/3] chore: update aqua checksums and converge the limen baseline Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- aqua-checksums.json | 16 ++++++++-------- renovate.json5 | 5 ++++- 2 files changed, 12 insertions(+), 9 deletions(-) diff --git a/aqua-checksums.json b/aqua-checksums.json index 295bad8..42783d9 100644 --- a/aqua-checksums.json +++ b/aqua-checksums.json @@ -231,23 +231,23 @@ "algorithm": "sha256" }, { - "id": "github_release/github.com/sigstore/cosign/v3.1.1/cosign-darwin-arm64", - "checksum": "94B42A9E697BE95675F6160AB031A9A5F1EC1E646D6F648D7B2F5CD59ECECBC5", + "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-darwin-arm64", + "checksum": "5CF948C2F4DFE59687BDD0B8523709067383E03982CC543475C8A7DC70E92A76", "algorithm": "sha256" }, { - "id": "github_release/github.com/sigstore/cosign/v3.1.1/cosign-linux-amd64", - "checksum": "AE1ECD212663F3693AD9EDF8B1A183900C9A52D3155BA6E354237F9A0F6463FC", + "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-linux-amd64", + "checksum": "4629C757B7618056F8DDD7E2625AE9FDD94C0372A65049520BC7D9DF9EFC7F71", "algorithm": "sha256" }, { - "id": "github_release/github.com/sigstore/cosign/v3.1.1/cosign-linux-arm64", - "checksum": "2EC865872E331C32FD12B08DAE15332D3F92C0AA029219589684A4903CA85D11", + "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-linux-arm64", + "checksum": "C5D324E091826B0D7A78EB16FEF316450B4EB9AAEC045611C08BA06F5E73220A", "algorithm": "sha256" }, { - "id": "github_release/github.com/sigstore/cosign/v3.1.1/cosign-windows-amd64.exe", - "checksum": "9D2C026E667BFD979FA7BA1CAB8C4B24D2E73F336EC2D57F7FC72C7E73E5B4B6", + "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-windows-amd64.exe", + "checksum": "9FE59BE0ECA1271873CE019061335EB1AC419B7059202E797828467DDABE33BE", "algorithm": "sha256" }, { diff --git a/renovate.json5 b/renovate.json5 index a6907d8..9579d0b 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -14,7 +14,10 @@ // The update-aqua-checksum workflow pushes a fix-up commit onto Renovate's // branches; without this, Renovate treats the branch as human-modified and // stops rebasing it. - gitIgnoredAuthors: ["41898282+github-actions[bot]@users.noreply.github.com"], + gitIgnoredAuthors: [ + "317468017+limen-ci-forkcloser[bot]@users.noreply.github.com", + "41898282+github-actions[bot]@users.noreply.github.com", + ], customManagers: [ // CFW_PACKAGE in versions.env: the curl-for-win package this repo tracks, // in curl.se's own _ form. Watched straight off