[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
aquaproj/aqua-installer	action	minor	v4.0.5 → v4.1.0	v4.1.1

---

Release Notes

aquaproj/aqua-installer

v4.1.0

Compare Source

SHA256 Checksum

4d3e513d42f425609c1ead6ecd40b9c62492011979dfe23d7012428a59efbe82  aqua-installer

Features

#​951 Add the packages input to install only specified packages

aqua >= v2.64.0 is required.

- uses: aquaproj/aqua-installer@82d0e83878a8657c4a6f2ff1755d3bfbfc67f329 # v4.1.0
  with:
    aqua_version: v2.64.0
    packages: |
      ghalint # Command names
      suzuki-shunsuke/tfcmt # Package names
- run: ghalint run

By default, aqua-installer runs aqua i -l, so tools are installed by lazy install when they are first run.
This has some problems:

1. Without a GitHub access token, lazy install can fail because of the GitHub API rate limit
2. Lazy install logs are mixed into the command output and become noise. This is confusing especially when a tool such as github-comment posts the output of a failed command to the pull request
3. If a GitHub access token is passed to avoid the rate limit, the token is also passed to commands that don't need it, which increases the risk of leaking it

A common workaround is to run each command with --version first to trigger lazy install, but the token is still passed to the command, it's hard to understand why the command is run, and you have to add a step for every command.

With the packages input, only the specified packages are installed up front rather than by lazy install, so you don't need to pass a GitHub access token when running them.

• Names are separated by whitespace or newlines
• Empty lines and text after # are ignored
• If packages is set and aqua_opts is the default value -l, -l isn't passed to aqua i, because -l skips installing packages

Others

#​954 Update the bootstrap version to v2.64.0

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "before 8am on Saturday,before 8am on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.