chore(deps): update ⬆️ aqua-packages by renovate[bot] · Pull Request #645 · scottames/dots

renovate · 2025-12-31T03:07:20Z

This PR contains the following updates:

Package	Update	Change
aquaproj/aqua	patch	`v2.56.0` → `v2.56.1`
aquaproj/aqua-registry	minor	`v4.448.0` → `v4.450.0`
charmbracelet/crush	minor	`v0.29.1` → `v0.30.0`
gohugoio/hugo	patch	`v0.153.2` → `v0.153.5`
sst/opencode	patch	`v1.0.209` → `v1.0.218`
starship/starship	patch	`v1.24.1` → `v1.24.2`
suzuki-shunsuke/pinact	minor	`v3.6.0` → `v3.8.0`
sxyazi/yazi	minor	`v25.5.31` → `v25.12.29`

Release Notes

aquaproj/aqua (aquaproj/aqua)

`v2.56.1`

Compare Source

Fixes

#4436 gr: Exclude eabihf

aquaproj/aqua-registry (aquaproj/aqua-registry)

`v4.450.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.449.0...v4.450.0

🎉 New Packages

#46393 github/copilot-cli - GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal @0x5341

Fixes

BoringDystopiaDevelopment/tmuxai: Transfer the repository to alvinunreal/tmuxai #46354

`v4.449.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.448.1...v4.449.0

🎉 New Packages

#46345 pranshuparmar/witr: Why is this running

Security

biomejs/biome: GitHub artifact attestations config #46335 @scop
txn2/kubefwd: cosign config #46334 @scop

Fixes

aristocratos/btop: Support btop v1.4.6 or later #46347
Re-scaffold FiloSottile/age #46346
alvinunreal/tmuxai: transfer the repository to BoringDystopiaDevelopment/tmuxai #46331

`v4.448.1`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.448.0...v4.448.1

Security

go-acme/lego: GitHub artifact attestations config #46307 @scop
borgbackup/borg: GitHub artifact attestations config #46305 @scop
fission/fission: GitHub artifact attestations config #46303 @scop

Fixes

Re-scaffold biomejs/biome #46310
bootandy/dust: Fixed bootandy/dust to support new platforms added in v0.4.5.0 and later #46282 @0x5341

charmbracelet/crush (charmbracelet/crush)

`v0.30.0`

Compare Source

Skills (to pay the bills?)

This release adds support for the Agent Skills open format. Skills are a great, simple way to give the agent new capabilities, and they're automatically loaded on demand so they won't clutter up the context. Anyway, it's a pretty cool feature and we recommend giving it a try! For more info, and some instructions getting started, see the Agent Skills section in the README.

See you soon,
Charm 💘

Changelog

New!

1fbe7d4: feat: agent skills (#1690) (@kujtimiihoxha)

Fixed

63a3d83: fix(tui): guard model selection when list is empty (#1715) (@jamestrew)

Verifying the artifacts

First, download the checksums.txt file and the checksums.txt.sigstore.json file files, for example, with wget:

wget 'https://github.com/charmbracelet/crush/releases/download/v0.30.0/checksums.txt'
wget 'https://github.com/charmbracelet/crush/releases/download/v0.30.0/checksums.txt.sigstore.json'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle 'checksums.txt.sigstore.json' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

gohugoio/hugo (gohugoio/hugo)

`v0.153.5`

Compare Source

What's Changed

images: Add compression option to image config and clean up some of the options handling c6ae33c @bep
config: Fix cascade per language in hugo.toml regression edeebf0 @bep #14321
images: Fix WebP quality and hint parameters being ignored ea9675f @simonheimlicher #14316

`v0.153.4`

Compare Source

What's Changed

Set cascade target to the content matrix if not set in the cascade itself 96777d9 @bep #14310

`v0.153.3`

Compare Source

What's Changed

build(deps): bump github.com/bep/imagemeta from 0.12.0 to 0.12.1 96ac146 @dependabot[bot]
Fix error with _content.gotmpl file with index.md siblings d4c0e44 @bep #14299

sst/opencode (sst/opencode)

`v1.0.218`

Compare Source

Core

Add CORS exception for Tauri desktop application
Add Prisma language server (@ravshansbox)
Add extract reasoning middleware (@snipeship)

Thank you to 2 community contributors:

@snipeship:
- feat: add extract reasoning middleware (#6463)
@ravshansbox:
- Add prisma language server (#6462)

`v1.0.217`

Compare Source

Core

Allow CORS requests from Tauri localhost origin

TUI

Move variant toggle to command bar

`v1.0.216`

Compare Source

Core

Allow CORS requests from *.opencode.ai subdomains

Thank you to 1 community contributor:

@anntnzrb:
- style(nix): use idiomatic inherit syntax (#6457)

`v1.0.215`

Compare Source

TUI

Fixed high CPU usage and memory leak when filtering model list to empty results (@d3vr)

Desktop

More defensive agent access in desktop application

Thank you to 1 community contributor:

@d3vr:
- Fix: High CPU / memory leak when filtering model list window to empty results (#6435)

`v1.0.214`

Compare Source

Core

Fix Cloudflare provider information (@roerohan)

Desktop

Sort desktop servers by health status
Don't persist fallback server URLs in desktop app
Improved text selection behavior in the app
Share projects across all local servers in desktop app

Thank you to 1 community contributor:

@roerohan:
- fix: cloudflare provider information (#6426)

`v1.0.213`

Compare Source

Core

Upgrade OpenTUI to v0.1.67, fixing split diff alignment and markdown jitter

Desktop

Don't hang on to dead server in desktop app

`v1.0.212`

Compare Source

Desktop

Change server configuration in app

`v1.0.211`

Compare Source

Core

Revert OpenTUI to 0.1.63 to fix streaming jitter regression (@ryanwyler)

Thank you to 2 community contributors:

@connorads:
- docs: global claude skills (#6436)
@ryanwyler:
- fix: revert opentui to 0.1.63 to fix streaming jitter regression (#6439)

`v1.0.210`

Compare Source

Core

Add ability to open projects in web interface
Read global Claude skills in addition to project-specific skills
Use named import for bonjour-service to fix module resolution (@Jkker)
Add variants toggle
Expose server URL to plugins (@EduSantosBrito)
Upgrade OpenTUI to v0.1.66 fixing split diff alignment

TUI

Prevent model list corruption from SolidJS reactivity (@joachim-isaksson)

Desktop

Add readline shortcuts to desktop app
Disable sourcemap generation in desktop build
Add system notifications support for desktop application

Thank you to 4 community contributors:

@sneycampos:
- fix: Correct theme command in tui.mdx (#6410)
@EduSantosBrito:
- feat(plugin): expose server URL to plugins (#6373)
@Jkker:
- fix(mdns): use named import for bonjour-service (resolves #6422) (#6423)
@joachim-isaksson:
- fix: prevent model list corruption from SolidJS reactivity (#6359)

starship/starship (starship/starship)

`v1.24.2`

Compare Source

Bug Fixes

cmd_duration: avoid freezing on notify on macOS 26 (#7187) (0daa8d3)
fish: restore job counting compability with older versions (#7173) (a261b48)
fish: use native transient prompt if available (#7015) (cc65e0c)
git: Basic Reftable compatibility and future-proofing (#7154) (6d9c8ea)
mise: align documentation and implementation (#7131) (08824d7)
Revert "feat(install.sh): handle installation directory prompt case-insensitively (#7138) (d11bc8d)
zsh: fix job counting (#7124) (46ab862)

suzuki-shunsuke/pinact (suzuki-shunsuke/pinact)

`v3.8.0`

Compare Source

Features

#1315 Support ghtkn integration

You can create a GitHub App User Access Token by ghtkn integration.
About ghtkn, please see the document of ghtkn.
You need to set up ghtkn first.

export PINACT_GHTKN=true

`v3.7.4`

Compare Source

Bug Fixes

Ignore tags associated with releases #1313

`v3.7.3`

Compare Source

#1309 Fix some bugs

-verify is ignored if -u is used
versions aren't pinned and verified if version comments are semver

number	code	command	before	after
1	`uses: actions/checkout@v6.0.1 # v6.0.1`	`pinact run -u`	Not pinned	Pinned
2	`uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.1`	`pinact run -u -verify`	success	failure `action_version must be equal to commit_hash_of_version_annotation`
3	`uses: actions/checkout@v6.0.1 # v6.0.1`	`pinact run`, `pinact run -verify`	Not pinned	Pinned
4	`uses: actions/checkout@main # v6.0.1`	`pinact run`, `pinact run -verify`	success	failure `action can't be pinned`

`v3.7.2`

Compare Source

Fixes

sarif: Add fixes field for reviewdog suggestion support

`v3.7.1`

Compare Source

There is no change between v3.7.0 and v3.7.1.
There was an issue during the release of v3.7.0, so we released v3.7.1.
Please see the release note of v3.7.0.

https://github.com/suzuki-shunsuke/pinact/releases/tag/v3.7.0

`v3.7.0`

Compare Source

[!WARNING]
There was a trouble in the release of this version.
Please use v3.7.1 or later.

Features

#1294 SARIF Output Support
#1297 Support evironment variables PINACT_GITHUB_TOKEN and PINACT_GHES_TOKEN

SARIF Output Support

#1294

pinact can output the result in the SARIF format.

pinact run --format sarif

This format is useful to integration tools like reviewdog and GitHub SARIF Code Scanning.

Reviewdog:

pinact run --diff --format sarif |
  reviewdog -f sarif -name pinact -reporter github-pr-review

GitHub SARIF Code Scanning:

- run: pinact run --diff --format sarif > sarif.json || true
- name: Upload SARIF file
  uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
  with:
    sarif_file: sarif.json
    category: pinact

Support evironment variables `PINACT_GITHUB_TOKEN` and `PINACT_GHES_TOKEN`

#1297 You can use different access tokens for pinact and other tools.

sxyazi/yazi (sxyazi/yazi)

`v25.12.29`

Compare Source

Added

Remote file management ([#3396])
Virtual file system ([#3034], [#3035], [#3094], [#3108], [#3187], [#3203])
Shell formatting ([#3232])
Multi-entry support for plugin system ([#3154])
Zoom in or out of the preview image ([#2864])
Improve the UX of the pick and input components ([#2906], [#2935])
Show progress of each task in task manager ([#3121], [#3131], [#3134])
New fs.copy() and fs.rename() APIs ([#3467])
New experimental ya.async() API ([#3422])
New overall option to set the overall background color ([#3317])
Rounded corners for indicator bar ([#3419])
New bulk_rename command always renames files with the editor ([#2984])
key-* DDS events to allow changing or canceling user key events ([#3005], [#3037])
New --bg specifying image background color in the preset SVG and ImageMagick previewers ([#3189])
filter by full path (prefix + filename) in search view instead of just filename ([#2915])
New casefy command for case conversion of the input content ([#3235])
Allow dynamic adjustment of layout ratio via rt.mgr.ratio ([#2964])
Support .deb packages ([#2807], [#3128], [#3209])
Port several widespread GUI keys to the input component ([#2849])
Support invalid UTF-8 paths throughout the codebase ([#2884], [#2889], [#2890], [#2895], [#3023], [#3290], [#3369])
Allow upgrading only specific packages with ya pkg ([#2841])
Respect the user's image_filter setting in the preset ImageMagick previewer ([#3286])
New duplicate DDS event for copying files ([#3456])
New ind-sort and key-sort DDS events to change sorting in Lua ([#3391])
Allow custom mouse click behavior for individual files ([#2925])
Display newlines in input as spaces to improve readability ([#2932])
Fill in error messages if preview fails ([#2917], [#3383], [#3387])
Search view shares file selection and yank state ([#2855])
Offload mimetype fetching on opening files to the task scheduler ([#3141])
Increase terminal response timeout to better tolerate slow SSH network environments ([#2843])

Changed

Rename name to url for open, fetchers, spotters, preloaders, previewers, filetype, and globs icon rules to support virtual file system ([#3034])
Rename mime fetcher to mime.local, and introduce mime.dir fetcher to support folder MIME types ([#3222])
Reclassify hovered and preview_hovered under [mgr] of theme.toml into [indicator] as current and preview, respectively ([#3419])
Remove $0 parameter in opener rules to make the open command work under empty directories ([#3226])
Return Path instead of Url from Url:strip_prefix() and File.link_to to enforce type safety ([#3361], [#3385])
Use body instead of the term content in confirmations ([#2921])
Use u16 instead of u32 as the type of max_width and max_height options to avoid memory exhaustion ([#3313])
Implement __pairs metamethod instead of __index for the callback argument of the @yank DDS event ([#2997])

Deprecated

Deprecate $n, $@ (*nix) and %n, %* (Windows) in shell command and opener rules in favor of new shell formatting ([#3232])
Deprecate ya.hide, ya.render, and ya.truncate in favor of ui.hide, ui.render, and ui.truncate ([#2939])
Deprecate position property of ya.input() in favor of pos to align with ya.confirm() and its type ui.Pos ([#2921])
Deprecate cx.tasks.progress in favor of cx.tasks.summary ([#3131])
Deprecate frag properly of Url in favor of domain ([#3034])
Deprecate ui.Rect.default in favor of ui.Rect {} ([#2927])

Fixed

User-prepended open rules do not override presets ([#3360])
Respect user's system media opener instead of hardcoding mpv ([#2959])
Incorrect $0 and $@ parameters in shell command under empty directories ([#3225])
Avoid appending a newline when reading clipboard contents ([#3059])
Renew package rev only when it's empty ([#3200])
Suspend only when there is a parent process ([#3008])
Preserve open order for files with post-resolved MIME types ([#2931])
A race condition in concurrent directory loading on a slow device ([#3271])
Erase overlapping image portions when previewing errors ([#3067])
Force Git checkout for plugin cache repositories ([#3169])
Check compatibility when reusing previewer bytecode cache ([#3190])
Disable kitty keyboard protocol on Windows due to crossterm inability to handle it ([#3250])
Prevent quotes in file(1) arguments from being stripped under MSYS2 ([#3364])
Expose ya CLI in the Snap build ([#2904])
Fallback to PollWatcher for file changes watching on NetBSD ([#2941])
Generate unique image IDs for Kgp to tolerate tmux ([#3038])

Improved

Make copy, cut, delete, link, hardlink, download, and upload tasks immediately cancellable ([#3429])
Make preload tasks discardable ([#2875])
Reduce file change event frequency ([#2820])
Upload and download of a single file over SFTP in chunks concurrently ([#3393])
Do not listen for file changes in inactive tabs ([#2958])
Switch to a higher-performance hash algorithm ([#3083])
Sequence-based rendering merge strategy ([#2861])
Store only Urn instead of full Url in find results ([#2914])
Zero-copy UrlBuf to Url conversion ([#3117])
String interning to reduce memory usage of mimetype and URL domain ([#3084], [#3091])
Do not pre-allocate memory for Lua tables ([#2879])
Copy-on-write on command data, and avoid converting primitive types to strings thereby allocating memory ([#2862])
Use AnyUserData::type_id() to reduce stack pushes ([#2834])
App data instead of Lua registry to reduce stack pushes ([#2880])

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update ⬆️ aqua-packages

8121e1d

renovate Bot requested a review from scottames as a code owner December 31, 2025 03:07

renovate Bot added the dependencies label Dec 31, 2025

renovate Bot enabled auto-merge (squash) December 31, 2025 03:07

renovate-approve Bot approved these changes Dec 31, 2025

View reviewed changes

chore(aqua): update aqua/aqua-checksums.json

6977678

renovate Bot merged commit 26b3f65 into main Dec 31, 2025
5 checks passed

renovate Bot deleted the renovate/aqua-packages branch December 31, 2025 03:09

scottames-github-bot Bot mentioned this pull request Oct 2, 2026

chore(deps): update ⬆️ mise-packages #1088

Merged

1 task

Navigation Menu

Repository navigation

chore(deps): update ⬆️ aqua-packages - #645

chore(deps): update ⬆️ aqua-packages#645
renovate[bot] merged 2 commits into
mainfrom
renovate/aqua-packages

renovate Bot commented Dec 31, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Dec 31, 2025

Release Notes

Fixes

🎉 New Packages

Fixes

🎉 New Packages

Security

Fixes

Security

Fixes

Skills (to pay the bills?)

Changelog

New!

Fixed

What's Changed

What's Changed

What's Changed

Core

Core

TUI

Core

TUI

Desktop

Core

Desktop

Core

Desktop

Desktop

Core

Core

TUI

Desktop

Bug Fixes

Features

Bug Fixes

Fixes

Features

SARIF Output Support

Support evironment variables PINACT_GITHUB_TOKEN and PINACT_GHES_TOKEN

Added

Changed

Deprecated

Fixed

Improved

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Support evironment variables `PINACT_GITHUB_TOKEN` and `PINACT_GHES_TOKEN`