[renovate]

This PR contains the following updates:

Package	Update	Change
farcloser/limen	minor	v0.15.0 → v0.26.0

---

Release Notes

farcloser/limen

v0.26.0

Compare Source

What's Changed

Changes

• book: the bot creates main on a new repository, the bootstrap is its first PR by @​closer-claudio in #​631
• checksum workflow: a failed approval is tried again, not the end of the step by @​closer-claudio in #​634
• A fork's rebuild tag (vX.Y.Z.N) releases through goreleaser, is proposed by Renovate and pins a registry by @​closer-claudio in #​635

Full Changelog: farcloser/limen@v0.25.0...v0.26.0

v0.25.0

Compare Source

What's Changed

Changes

• apple: stapling is retried when Apple's ticket service drops the connection by @​closer-claudio in #​623
• release: notarization and the keyless signature are retried on a dropped connection by @​closer-claudio in #​625
• rules: the signs section of .release-go.yaml is limen's (the keyless signature through release-sign) by @​closer-claudio in #​626

Full Changelog: farcloser/limen@v0.24.0...v0.25.0

v0.24.0

Compare Source

What's Changed

Changes

• apple: stapler validate is a network call, retried; staple is not followed by one by @​closer-claudio in #​620
• github: the release environment admits no administrator bypass by @​closer-claudio in #​619

Full Changelog: farcloser/limen@v0.23.1...v0.24.0

v0.23.1

Compare Source

What's Changed

Changes

• test go: the race lane builds gotestsum only in a Go module by @​closer-claudio in #​615

Full Changelog: farcloser/limen@v0.23.0...v0.23.1

v0.23.0

Compare Source

What's Changed

Changes

• rust: a host-triple cross build links its build scripts with the host's linker by @​closer-claudio in #​611
• gotestsum and yamlfmt are built by the pinned toolchain, not prebuilt by @​closer-claudio in #​613
• release: the Apple lane's caller passes its secrets by name by @​closer-claudio in #​614

Full Changelog: farcloser/limen@v0.22.0...v0.23.0

v0.22.0

Compare Source

What's Changed

Changes

• Book: a pull request that only bumps dependencies goes to the project manager by @​closer-claudio in #​605
• checksum workflow: every run the push creates is approved, not the first seen by @​closer-claudio in #​608
• github: the API is called in-process; gh keeps the identity and the attestations by @​closer-claudio in #​606
• Revert the per-checkout GOCACHE by @​closer-claudio in #​610

Full Changelog: farcloser/limen@v0.21.0...v0.22.0

v0.21.0

Compare Source

What's Changed

Changes

• book: the pins table's cms row is one line, its detail a paragraph below by @​closer-claudio in #​597
• renovate: lock file maintenance, weekly, one pull request per repository by @​closer-claudio in #​599
• rust: the Windows host triple is the GNU one on both legs, linked by pinned tools by @​closer-claudio in #​601
• ci seed: the header says the lanes are called at a commit of limen, one line Renovate moves by @​closer-claudio in #​602
• apple lane: no secret of the call is required; the environment's resolve in the sign job by @​closer-claudio in #​604
• apple: the signed verdict demands Developer ID on a release run, not whenever it runs in Actions by @​closer-claudio in #​603

Full Changelog: farcloser/limen@v0.20.0...v0.21.0

v0.20.0

Compare Source

What's Changed

Changes

• book: Intel SDE loses AVX-512 state under Go on a host that has AVX-512, as a known upstream bug by @​closer-claudio in #​594
• pins: a cms verify method for a vendor's detached signature, and renovate: manual for a pin no datasource serves by @​closer-claudio in #​592
• test go: a project's _test-prepare recipe runs before every shared Go test recipe by @​closer-claudio in #​596

Full Changelog: farcloser/limen@v0.19.0...v0.20.0

v0.19.0

Compare Source

What's Changed

Changes

• fix: the migration bump writes the callers; only a drifted caller waits for a hand push by @​closer-claudio in #​589
• book: the Windows floor is Windows 11 and Windows Server 2025 by @​closer-claudio in #​591

Full Changelog: farcloser/limen@v0.18.0...v0.19.0

v0.18.0

Compare Source

What's Changed

Changes

• release: the signing and provenance policy, written once and carried by the lane (SBOMs in, key-based lane out) by @​closer-claudio in #​547
• design: retire LIMEN-LIMA and LIMEN-VIRT, feasibility studies nobody adopted by @​closer-claudio in #​548
• book: coverage is measured, never managed by @​closer-claudio in #​549
• rust lanes: the fix lane finds the repository under the sandbox, and the bootstrap says nothing by @​closer-claudio in #​553
• doctrine: git is plain git; the git c alias is retired from the agreement, skill and book by @​closer-claudio in #​556
• Review: a trivial documentation-only change goes to the project manager by @​closer-claudio in #​561
• book: the sandbox exclusion list has a second entry, stapler validate by @​closer-claudio in #​560
• Book: the worktree registry's closure, per command and minus one entry by @​closer-claudio in #​563
• release notes say what changed for a consumer, and nothing else by @​closer-claudio in #​562
• release.yml: the comment says what the file does by @​closer-claudio in #​565
• Book: a writing chapter; every line beside the code states what is true by @​closer-claudio in #​564
• Book: the registry bullet states its two rules, not the run that found them by @​closer-claudio in #​566
• pins: a commit pin, the branch as the version and the commit as the digest by @​closer-claudio in #​567
• recipes: the Go build cache is the checkout's own, under .build by @​closer-claudio in #​568
• book: knowledge flows from a provider to its consumers, never back by @​closer-claudio in #​569
• book: the third sandbox exclusion, farclauder worktree remove by @​closer-claudio in #​570
• github tests: the writes a test lists are the plan, performed exactly once by @​closer-claudio in #​571
• book: a signing credential is an environment secret, held by one job by @​closer-claudio in #​575
• license: GPL-2.0-only and AGPL-3.0-only, the identifiers SPDX kept by @​closer-claudio in #​577
• test: the gh stub is its own program, and the race lane joins the shared lanes by @​closer-claudio in #​576
• design: LINT-GO.md retired, LIMEN-GITHUB.md trimmed to its catalog, GIT.md headed by @​closer-claudio in #​578
• agents: a merged worktree is removed with farclauder by @​closer-claudio in #​582
• book: three Graphviz bugs forkcloser/go-graphviz patches, as known upstream bugs by @​closer-claudio in #​583
• release: the Apple lane is a reusable workflow, with the shared Apple recipes under just do by @​closer-claudio in #​588
• github: the checksum workflow approves its own pull request runs; the App goes by @​closer-claudio in #​586
• A workflow secret stays behind an environment, in the tree and on GitHub; limen github fix builds the release environment by @​closer-claudio in #​587
• rules: the sboms section of .release-go.yaml is limen's, one SBOM per archive by @​closer-claudio in #​584
• workflows: the canonical lanes are reusable workflows in limen, called at a commit by @​closer-claudio in #​585

Full Changelog: farcloser/limen@v0.17.0...v0.18.0

v0.17.0

Compare Source

What's Changed

Changes

• lint go: the Unlicense is an allowed dependency license by @​closer-claudio in #​522
• gitattributes: third-party licence texts are exempt from the whitespace check by @​closer-claudio in #​529
• Correct first; the human is not asked for preferences by @​closer-claudio in #​528
• build: a repository with no main package says so instead of building nothing by @​closer-claudio in #​531
• setup-hermetic: a checksum mismatch names the computed digest by @​closer-claudio in #​532
• book: say what CodeQL default setup analyses by @​closer-claudio in #​533
• just: the release and tools recipes take their arguments as data, never interpolated into their scripts by @​closer-claudio in #​534
• skill: a network git command is plain git c, and the force push names its branch by @​closer-claudio in #​535
• A network command is plain git c; the force-push allow rule is a prefix match by @​closer-claudio in #​536
• book: Go's (*os.File).Stat after Close answers "The handle is invalid." on Windows by @​closer-claudio in #​537
• gotools: the project's go.mod is the project's; the rule stops moving its tool directives by @​closer-claudio in #​541
• Book: a limit of the rig is never an architectural input by @​closer-claudio in #​542
• rust: first-class lanes, the toolchain pinned under .build through rustup, cross builds through cargo-zigbuild by @​closer-claudio in #​543
• lint homebrew: the audit trusts the tap for the run, as Homebrew 6 requires by @​closer-claudio in #​545
• ci: cache what the Rust lanes install under .build, in a repository that pins a toolchain by @​closer-claudio in #​546

Dependencies

• chore(deps): update dependency farcloser/limen to v0.16.0 by @​renovate[bot] in #​520
• chore(deps): update dependency cli/cli to v2.103.2 by @​renovate[bot] in #​523
• chore(deps): update dependency aquaproj/aqua-registry to v4.576.0 by @​renovate[bot] in #​524
• chore(deps): update dependency aquaproj/aqua-registry to v4.578.0 by @​renovate[bot] in #​525
• chore(deps): update dependency git-for-windows/git to v2.56.0.windows.4 by @​renovate[bot] in #​526
• chore(deps): update dependency cli/cli to v2.103.3 by @​renovate[bot] in #​527
• chore(deps): update dependency aquaproj/aqua-registry to v4.579.0 by @​renovate[bot] in #​544

Full Changelog: farcloser/limen@v0.16.0...v0.17.0

v0.16.0

Compare Source

What's Changed

Changes

• recipes: lint homebrew audit may run from the project's own brew, as style does by @​closer-claudio in #​477
• build: netgo and osusergo on Linux only by @​closer-claudio in #​479
• recipes: perf profile no longer pre-creates dot's output by @​closer-claudio in #​490
• agents: a locked screen does not stop the bot's key by @​closer-claudio in #​491
• Book: source-blind contracts, model-based tests for stateful code, fault seams by @​closer-claudio in #​512
• ci: the verify workflow takes a submodules input for tests that read fixtures from one by @​closer-claudio in #​513
• Book: a submodule's content is out of a session's reach; a refused worktree removal by @​closer-claudio in #​514
• skill: every git command in the contribute procedure is git c by @​closer-claudio in #​518
• Every git command is git c; a follow-up is a GitHub issue by @​closer-claudio in #​519
• license: the Unlicense is recognized for inherited code by @​closer-claudio in #​517

Dependencies

• chore(deps): update dependency farcloser/limen to v0.15.1 by @​renovate[bot] in #​478

Full Changelog: farcloser/limen@v0.15.1...v0.16.0

v0.15.1

Compare Source

What's Changed

Changes

• tooling: Go toolchain go1.27.3, the crypto/x509 fix for GO-2026-6809 by @​closer-claudio in #​464
• renovate: a Go toolchain patch is proposed, by regex versioning of the go-prefixed tags by @​closer-claudio in #​466
• github: the manifest callback server drains the redirect's response before it goes by @​closer-claudio in #​471
• book: no CI job installs from the runner's package manager by @​closer-claudio in #​472
• tooling: ossein v0.3.4 in the canonical tool set by @​closer-claudio in #​475

Dependencies

• chore(deps): update dependency farcloser/limen to v0.15.0 by @​renovate[bot] in #​465
• chore(deps): update module github.com/forkcloser/git-validation to v0.1.1 by @​renovate[bot] in #​468
• chore(deps): update dependency forkcloser/yamlfmt to v0.2.1 by @​renovate[bot] in #​467
• chore(deps): update module github.com/forkcloser/godolint to v0.5.1 by @​renovate[bot] in #​469
• chore(deps): update dependency forkcloser/curl to v8.23.0 by @​renovate[bot] in #​470
• chore(deps): update module github.com/forkcloser/go-licenses to v0.1.1 by @​renovate[bot] in #​474
• chore(deps): update dependency forkcloser/hermetic to v0.2.3 by @​renovate[bot] in #​473
• chore(deps): update aqua tools by @​renovate[bot] in #​476

Full Changelog: farcloser/limen@v0.15.0...v0.15.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.