Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pinact for openSUSE:Factory checked in at 2026-10-27 17:00:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pinact (Old) and /work/SRC/openSUSE:Factory/.pinact.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pinact" Tue Oct 27 17:00:53 2026 rev:16 rq:1392950 version:5.0.2 Changes: -------- --- /work/SRC/openSUSE:Factory/pinact/pinact.changes 2026-09-19 22:23:05.616486999 +0200 +++ /work/SRC/openSUSE:Factory/.pinact.new.2252680/pinact.changes 2026-10-27 17:01:50.907859802 +0100 @@ -1,0 +2,165 @@ +Tue Oct 27 06:31:11 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 5.0.2: + * chore(deps): update dependency aquaproj/aqua-renovate-config to + v2.14.0 (#1814) + * chore(deps): update suzuki-shunsuke/download-go-module-action + action to v0.0.10 (#1812) + * chore: update go-test-workflow to v3.2.4 (#1807) + * chore: update go-autofix-action to v0.2.2 (#1806) + * chore: update go-release-workflow to v10.1.3 (#1808) + * chore(deps): update suzuki-shunsuke/go-release-workflow action + to v10.1.3 (#1810) + * chore(deps): update suzuki-shunsuke/go-test-workflow action to + v3.2.4 (#1811) + * chore: update download-go-module-action to v0.0.9 (#1805) + * chore: update goreleaser to v2.19.0 and migrate cask hook to + install_steps (#1803) + * chore(deps): update dependency aquaproj/aqua-registry to + v4.576.0 (#1801) + * chore(deps): update suzuki-shunsuke/go-release-workflow action + to v10.1.2 (#1800) + * chore(deps): update dependency sigstore/cosign to v3.1.4 + (#1799) + * chore(deps): update dependency anchore/syft to v1.55.0 (#1798) + * chore(deps): update dependency aquaproj/aqua to v2.65.0 (#1796) + * chore(deps): update aquaproj/aqua-installer action to v4.1.1 + (#1797) + * chore(deps): update dependency aqua to v2.65.0 (#1795) + * chore(deps): update dependency suzuki-shunsuke/pinact to v5.0.1 + (#1794) + +------------------------------------------------------------------- +Fri Oct 23 15:56:56 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 5.0.1: + * Security + - #1792 Update Go to v1.27.3 + This release is built with Go 1.27.3, which fixes + CVE-2026-111943 in crypto/x509. Go now refuses trust in a + small set of intermediate certificates of a specific + Certificate Authority, after its CA keys were reported + compromised. Verify filters out chains containing those + intermediates. The Go team highly recommends upgrading + immediately. + pinact relies on crypto/x509 to verify the TLS certificate of + GitHub when it calls the GitHub API, with your access token + if one is set, to resolve the commit SHAs that workflows are + pinned to. We recommend upgrading. + - https://go.dev/doc/devel/release#go1.27.3 + - https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html + This release also includes Go 1.27.2 (#1764), which has + security fixes to the go command and the crypto/tls, + html/template, net/http, net/textproto, and os packages. + - https://go.dev/doc/devel/release#go1.27.2 + * Others + - fix(deps): update module github.com/google/go-github/v92 to + v93 (#1789) + - chore(deps): update suzuki-shunsuke/go-release-workflow + action to v10.1.1 (#1788) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.575.0 (#1786) + - chore(deps): update + suzuki-shunsuke/download-go-module-action action to v0.0.8 + (#1784) + - chore(deps): update suzuki-shunsuke/go-test-workflow action + to v3.2.3 (#1785) + - chore(deps): update + suzuki-shunsuke/download-go-module-action action to v0.0.7 + (#1783) + - chore(deps): update dependency goreleaser/goreleaser to + v2.18.3 (#1777) + - chore(deps): update suzuki-shunsuke/actionlint-action action + to v0.2.2 (#1778) + - chore(deps): update + suzuki-shunsuke/download-go-module-action action to v0.0.6 + (#1775) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.574.1 (#1772) + - chore(deps): update suzuki-shunsuke/go-release-workflow + action to v10.1.0 (#1773) + - chore(deps): update suzuki-shunsuke/go-release-workflow + action to v10.0.2 (#1771) + - chore(deps): update suzuki-shunsuke/go-test-full-workflow + action to v6.2.0 (#1770) + - chore(deps): update + suzuki-shunsuke/download-go-module-action action to v0.0.4 + (#1769) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.574.0 (#1765) + - chore(deps): update dependency crate-ci/typos to v1.51.1 + (#1762) + - chore(deps): update dependency crate-ci/typos to v1.51.0 + (#1761) + - chore(deps): update dependency anchore/syft to v1.54.1 + (#1760) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.573.1 (#1759) + - chore(deps): update suzuki-shunsuke/go-test-full-workflow + action to v6.1.0 (#1758) + - chore(deps): update suzuki-shunsuke/go-release-workflow + action to v10 (#1753) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.573.0 (#1757) + - chore(deps): update dependency aquaproj/aqua to v2.64.0 + (#1756) + - chore(deps): update dependency aqua to v2.64.0 (#1755) + - chore(deps): update aquaproj/aqua-installer action to v4.1.0 + (#1754) + - chore(deps): update dependency anchore/syft to v1.54.0 + (#1750) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.572.0 (#1751) + - chore(deps): update suzuki-shunsuke/actionlint-action action + to v0.2.1 (#1746) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.571.0 (#1747) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.570.0 (#1744) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.569.0 (#1743) + - chore(deps): update dependency crate-ci/typos to v1.50.3 + (#1742) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.568.0 (#1740) + - chore(deps): update dependency golangci/golangci-lint to + v2.14.0 (#1741) + - fix(deps): update module + github.com/suzuki-shunsuke/cobra-util to v0.0.5 (#1739) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.567.0 (#1738) + - chore(deps): update suzuki-shunsuke/go-release-workflow + action to v9.0.2 (#1737) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.566.0 (#1736) + - chore(deps): update dependency reviewdog/reviewdog to + v0.21.2 (#1735) + - chore(deps): update dependency anchore/syft to v1.52.0 + (#1734) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.565.0 (#1733) + - chore(deps): update dependency goreleaser/goreleaser to + v2.18.2 (#1732) + - chore(deps): update dependency crate-ci/typos to v1.50.2 + (#1731) + - fix(deps): update module github.com/google/go-github/v91 to + v92 (#1730) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.564.0 (#1729) + - chore(deps): update dependency reviewdog/reviewdog to + v0.21.1 (#1728) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.563.0 (#1727) + - chore(deps): update dependency aquaproj/aqua to v2.63.0 + (#1726) + - chore(deps): update dependency aqua to v2.63.0 (#1725) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.562.0 (#1724) + - fix(deps): update module github.com/sourcegraph/go-diff to + v0.9.0 (#1723) + - chore(deps): update dependency suzuki-shunsuke/pinact to v5 + (#1720) + - chore(deps): update dependency aquaproj/aqua-registry to + v4.561.0 (#1722) + +------------------------------------------------------------------- Old: ---- pinact-5.0.0.obscpio New: ---- pinact-5.0.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pinact.spec ++++++ --- /var/tmp/diff_new_pack.OQZiEG/_old 2026-10-27 17:01:55.917069576 +0100 +++ /var/tmp/diff_new_pack.OQZiEG/_new 2026-10-27 17:01:55.920069702 +0100 @@ -17,7 +17,7 @@ Name: pinact -Version: 5.0.0 +Version: 5.0.2 Release: 0 Summary: CLI to edit GitHub Workflows and pin versions of Actions and Reusable Workflows License: MIT @@ -26,7 +26,7 @@ Source1: vendor.tar.gz BuildRequires: bash-completion BuildRequires: fish -BuildRequires: go1.27 >= 1.27.1 +BuildRequires: go1.27 >= 1.27.3 BuildRequires: zsh %description ++++++ _service ++++++ --- /var/tmp/diff_new_pack.OQZiEG/_old 2026-10-27 17:01:55.962071461 +0100 +++ /var/tmp/diff_new_pack.OQZiEG/_new 2026-10-27 17:01:55.966071629 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/suzuki-shunsuke/pinact.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/v5.0.0</param> + <param name="revision">refs/tags/v5.0.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.OQZiEG/_old 2026-10-27 17:01:55.991072675 +0100 +++ /var/tmp/diff_new_pack.OQZiEG/_new 2026-10-27 17:01:55.996072885 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/suzuki-shunsuke/pinact.git</param> - <param name="changesrevision">a4f45e095b184794ac1f82b6b07cc35b0b8cfe7b</param></service></servicedata> + <param name="changesrevision">916099054848d14535ac3c20366361b6e98aa268</param></service></servicedata> (No newline at EOF) ++++++ pinact-5.0.0.obscpio -> pinact-5.0.2.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/.goreleaser.yml new/pinact-5.0.2/.goreleaser.yml --- old/pinact-5.0.0/.goreleaser.yml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/.goreleaser.yml 2026-10-25 14:27:22.000000000 +0100 @@ -48,9 +48,9 @@ skip_upload: true hooks: post: - install: | - if OS.mac? - system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/pinact"] + install_steps: | + on_macos do + run "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "{{ .StagedPath }}/pinact"] end scoops: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/USAGE.md new/pinact-5.0.2/USAGE.md --- old/pinact-5.0.0/USAGE.md 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/USAGE.md 2026-10-25 14:27:22.000000000 +0100 @@ -4,302 +4,438 @@ ```console $ pinact --help -NAME: - pinact - Pin GitHub Actions versions. https://github.com/suzuki-shunsuke/pinact +Pin GitHub Actions and Reusable Workflows. -USAGE: - pinact [global options] [command [command options]] +pinact pins the actions and reusable workflows a workflow uses to full commit +SHAs with a version comment, updates them, and verifies that a comment names the +version its SHA actually is. + +See each subcommand's help with 'pinact help <command>'. +See https://github.com/suzuki-shunsuke/pinact for details. + +If you are a coding agent, run 'pinact docs list' to list the documentation and +'pinact docs show <name>' to read it before answering questions about pinact or +troubleshooting its errors. + +Usage: + pinact [flags] + pinact [command] + +Available Commands: + completion Generate the autocompletion script for the specified shell + docs Output documents for coding agents + help Help about any command + init Create a pinact configuration file if it doesn't exist + json-schema Output JSON Schema for the configuration file + migrate Migrate .pinact.yaml + run Pin GitHub Actions versions + token Manage GitHub Access token + version Show version + +Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + -h, --help help for pinact + --log-level string log level [$PINACT_LOG_LEVEL] + -v, --version print the version -VERSION: - 4.1.1 +Use "pinact [command] --help" for more information about a command. +``` + +## pinact completion + +```console +$ pinact completion --help +Generate the autocompletion script for pinact for the specified shell. +See each sub-command's help for details on how to use the generated script. + +Usage: + pinact completion [command] + +Available Commands: + bash Generate the autocompletion script for bash + fish Generate the autocompletion script for fish + powershell Generate the autocompletion script for powershell + zsh Generate the autocompletion script for zsh + +Flags: + -h, --help help for completion + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] -COMMANDS: - init Create a pinact configuration file if it doesn't exist - run Pin GitHub Actions versions - migrate Migrate .pinact.yaml - token Manage GitHub Access token - version Show version - help, h Shows a list of commands or help for one command - completion Output shell completion script for bash, zsh, fish, or Powershell - -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] - --help, -h show help - --version, -v print the version +Use "pinact completion [command] --help" for more information about a command. ``` -## pinact init +### pinact completion bash ```console -$ pinact init --help -NAME: - pinact init - Create a pinact configuration file if it doesn't exist +$ pinact completion bash --help +Generate the autocompletion script for the bash shell. + +This script depends on the 'bash-completion' package. +If it is not installed already, you can install it via your OS's package manager. + +To load completions in your current shell session: + + source <(pinact completion bash) -USAGE: - pinact init [options] +To load completions for every new session, execute once: -DESCRIPTION: - Create a pinact configuration file if it doesn't exist. The resolved path is printed to stdout. +#### Linux: - $ pinact init # creates .pinact.yaml in the current directory - $ pinact init .github/pinact.yaml # explicit path - $ pinact init -g # creates the user-wide global config + pinact completion bash > /etc/bash_completion.d/pinact +#### macOS: -OPTIONS: - --global, -g Create the user-wide global config file (~/.config/pinact/pinact.yaml on Unix, %APPDATA%\pinact\pinact.yaml on Windows). The parent directory is created if it does not exist. - --help, -h show help + pinact completion bash > $(brew --prefix)/etc/bash_completion.d/pinact -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +You will need to start a new shell for this setup to take effect. + +Usage: + pinact completion bash + +Flags: + -h, --help help for bash + --no-descriptions disable completion descriptions + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -## pinact run +### pinact completion fish ```console -$ pinact run --help -NAME: - pinact run - Pin GitHub Actions versions +$ pinact completion fish --help +Generate the autocompletion script for the fish shell. -USAGE: - pinact run [options] [files ...] +To load completions in your current shell session: -DESCRIPTION: - If no argument is passed, pinact searches GitHub Actions workflow files from .github/workflows. + pinact completion fish | source - $ pinact run - - You can also pass workflow file paths as arguments. - - e.g. - - $ pinact run .github/actions/foo/action.yaml .github/actions/bar/action.yaml - - -OPTIONS: - --verify-comment, --verify, -v Verify that the version comment matches the pinned SHA - --verify-min-age Audit every pinned action against the min-age threshold (calls the GitHub API). Auto-enabled when -min-age is set on the CLI - --no-api Skip GitHub API calls. Only the syntactic pin check (40-character SHA) is performed - --check Alias for -fix=false. For offline check use -fix=false -no-api - --update, -u Update actions to latest versions - --fix Fix code. By default, this is true. If -check or -diff is true, this is false by default - --diff Alias for -fix=false. Note: -diff=false is ignored because detail output is always printed in v4 - --format string Output format. Currently only 'sarif' is supported. If sarif is specified, results are output in SARIF format to stdout - --include string, -i string [ --include string, -i string ] A regular expression to fix actions - --exclude string, -e string [ --exclude string, -e string ] A regular expression to exclude actions - --branch-to-tag string [ --branch-to-tag string ] A regular expression to convert non-semver versions (e.g. branch names) to the latest stable tag. Anchor with ^$ for exact match - --min-age int, -m int Minimum release age threshold in days. Setting this (either via CLI or PINACT_MIN_AGE) implicitly enables -verify-min-age (default: 0) [$PINACT_MIN_AGE] - --separator string, --sep string Separator between version and tag comment - --diff-file + Path to a unified diff. Only the + lines of the diff are processed (use `-` to read the diff from stdin). Useful in PR CI to limit pinact to lines changed by the PR - --help, -h show help - -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +To load completions for every new session, execute once: + + pinact completion fish > ~/.config/fish/completions/pinact.fish + +You will need to start a new shell for this setup to take effect. + +Usage: + pinact completion fish [flags] + +Flags: + -h, --help help for fish + --no-descriptions disable completion descriptions + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -## pinact migrate +### pinact completion powershell ```console -$ pinact migrate --help -NAME: - pinact migrate - Migrate .pinact.yaml +$ pinact completion powershell --help +Generate the autocompletion script for powershell. -USAGE: - pinact migrate [options] +To load completions in your current shell session: -DESCRIPTION: - Migrate the version of .pinact.yaml + pinact completion powershell | Out-String | Invoke-Expression - $ pinact migrate +To load completions for every new session, add the output of the above command +to your powershell profile. +Usage: + pinact completion powershell [flags] -OPTIONS: - --help, -h show help +Flags: + -h, --help help for powershell + --no-descriptions disable completion descriptions -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -## pinact token +### pinact completion zsh ```console -$ pinact token --help -NAME: - pinact token - Manage GitHub Access token +$ pinact completion zsh --help +Generate the autocompletion script for the zsh shell. + +If shell completion is not already enabled in your environment you will need +to enable it. You can execute the following once: + + echo "autoload -U compinit; compinit" >> ~/.zshrc + +To load completions in your current shell session: + + source <(pinact completion zsh) + +To load completions for every new session, execute once: + +#### Linux: + + pinact completion zsh > "${fpath[1]}/_pinact" + +#### macOS: + + pinact completion zsh > $(brew --prefix)/share/zsh/site-functions/_pinact + +You will need to start a new shell for this setup to take effect. -USAGE: - pinact token [command [command options]] +Usage: + pinact completion zsh [flags] -DESCRIPTION: - Manage GitHub Access token by keyring. +Flags: + -h, --help help for zsh + --no-descriptions disable completion descriptions -COMMANDS: - set Set GitHub Access token - remove, rm Remove GitHub Access token +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] +``` + +## pinact docs + +```console +$ pinact docs --help +List and output the documents embedded in the binary. +This command is for coding agents to read the documents and solve problems. + +Usage: + pinact docs [command] -OPTIONS: - --help, -h show help +Available Commands: + list List the name and the description of every document + show Output the content of a given document -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +Flags: + -h, --help help for docs + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] + +Use "pinact docs [command] --help" for more information about a command. ``` -### token set +### pinact docs list ```console -$ token set --help -NAME: - pinact token set - Set GitHub Access token +$ pinact docs list --help +List the name and the description of every document as JSON. +The name is what "pinact docs show" takes, and the description says what the document +covers, so that only the documents worth reading are read. + +Usage: + pinact docs list [flags] + +Flags: + -h, --help help for list + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] +``` + +### pinact docs show -USAGE: - pinact token set [options] +```console +$ pinact docs show --help +Output the content of a given document. +This command needs a document name. +To see the names, list the documents with "pinact docs list". -DESCRIPTION: - Set GitHub Access token to keyring. +Usage: + pinact docs show [<doc>] [flags] -OPTIONS: - --stdin Read GitHub Access token from stdin - --help, -h show help +Flags: + -h, --help help for show -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -### token remove +## pinact init ```console -$ token remove --help -NAME: - pinact token remove - Remove GitHub Access token +$ pinact init --help +Create a pinact configuration file if it doesn't exist. The resolved path is printed to stdout. -USAGE: - pinact token remove [options] +$ pinact init # creates .pinact.yaml in the current directory +$ pinact init .github/pinact.yaml # explicit path +$ pinact init -g # creates the user-wide global config -DESCRIPTION: - Remove GitHub Access token from keyring. +Usage: + pinact init [<config file path>] [flags] -OPTIONS: - --help, -h show help +Flags: + -g, --global Create the user-wide global config file (~/.config/pinact/pinact.yaml on Unix, %APPDATA%\pinact\pinact.yaml on Windows). The parent directory is created if it does not exist. + -h, --help help for init -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -## pinact version +## pinact json-schema ```console -$ pinact version --help -NAME: - pinact version - Show version +$ pinact json-schema --help +Output JSON Schema for the configuration file. + +The schema is embedded in the binary, so it always describes the configuration +this version of pinact accepts. Editors such as VSCode use it to complete the +configuration file and to warn about invalid settings. + +$ pinact json-schema > pinact.json + +Usage: + pinact json-schema [flags] -USAGE: - pinact version [options] +Flags: + -h, --help help for json-schema -OPTIONS: - --json, -j Output version in JSON format - --help, -h show help - -GLOBAL OPTIONS: - --log-level string log level [$PINACT_LOG_LEVEL] - --config string, -c string configuration file path [$PINACT_CONFIG] +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -## pinact completion +## pinact migrate ```console -$ pinact completion --help -NAME: - pinact completion - Output shell completion script for bash, zsh, fish, or Powershell +$ pinact migrate --help +Migrate the version of .pinact.yaml + +$ pinact migrate -USAGE: - pinact completion [command [command options]] +Usage: + pinact migrate [flags] -DESCRIPTION: - Output shell completion script for bash, zsh, fish, or Powershell. - Source the output to enable completion. +Flags: + -h, --help help for migrate - # .bashrc - source <(pinact completion bash) +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] +``` - # .zshrc - source <(pinact completion zsh) +## pinact run - # fish - pinact completion fish > ~/.config/fish/completions/pinact.fish +```console +$ pinact run --help +If no argument is passed, pinact searches GitHub Actions workflow files from .github/workflows. - # Powershell - Output the script to path/to/autocomplete/pinact.ps1 an run it. +$ pinact run +You can also pass workflow file paths as arguments. -COMMANDS: - bash Output bash completion script - zsh Output zsh completion script - fish Output fish completion script - pwsh Output pwsh completion script +e.g. -OPTIONS: - --help, -h show help +$ pinact run .github/actions/foo/action.yaml .github/actions/bar/action.yaml + +Usage: + pinact run [<workflow file>...] [flags] + +Flags: + --branch-to-tag strings A regular expression to convert non-semver versions (e.g. branch names) to the latest stable tag. Anchor with ^$ for exact match + --check Alias for --fix=false. For offline check use --fix=false --no-api + --diff Alias for --fix=false. Note: --diff=false is ignored because detail output is always printed in v4 + --diff-file string Path to a unified diff. Only the '+' lines of the diff are processed (use '-' to read the diff from stdin). Useful in PR CI to limit pinact to lines changed by the PR + -e, --exclude strings A regular expression to exclude actions + --fix Fix code. By default, this is true. If --check or --diff is true, this is false by default + --format string Output format. Currently only 'sarif' is supported. If sarif is specified, results are output in SARIF format to stdout + -h, --help help for run + -i, --include strings A regular expression to fix actions + -m, --min-age int Minimum release age threshold in days. Setting this (either via CLI or PINACT_MIN_AGE) implicitly enables --verify-min-age [$PINACT_MIN_AGE] + --no-api Skip GitHub API calls. Only the syntactic pin check (40-character SHA) is performed + --separator string Separator between version and tag comment + -u, --update Update actions to latest versions + -v, --verify-comment Verify that the version comment matches the pinned SHA + --verify-min-age Audit every pinned action against the min-age threshold (calls the GitHub API). Auto-enabled when --min-age is set on the CLI + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -### completion bash +## pinact token ```console -$ completion bash --help -NAME: - pinact completion bash - Output bash completion script +$ pinact token --help +Manage GitHub Access token by keyring. + +Usage: + pinact token [command] + +Available Commands: + remove Remove GitHub Access token + set Set GitHub Access token -USAGE: - pinact completion bash [options] +Flags: + -h, --help help for token -OPTIONS: - --help, -h show help +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] + +Use "pinact token [command] --help" for more information about a command. ``` -### completion zsh +### pinact token remove ```console -$ completion zsh --help -NAME: - pinact completion zsh - Output zsh completion script +$ pinact token remove --help +Remove GitHub Access token from keyring. + +Usage: + pinact token remove [flags] -USAGE: - pinact completion zsh [options] +Aliases: + remove, rm -OPTIONS: - --help, -h show help +Flags: + -h, --help help for remove + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -### completion fish +### pinact token set ```console -$ completion fish --help -NAME: - pinact completion fish - Output fish completion script +$ pinact token set --help +Set GitHub Access token to keyring. + +Usage: + pinact token set [flags] -USAGE: - pinact completion fish [options] +Flags: + -h, --help help for set + --stdin Read GitHub Access token from stdin -OPTIONS: - --help, -h show help +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` -### completion pwsh +## pinact version ```console -$ completion pwsh --help -NAME: - pinact completion pwsh - Output pwsh completion script +$ pinact version --help +Show version -USAGE: - pinact completion pwsh [options] +Usage: + pinact version [flags] -OPTIONS: - --help, -h show help +Flags: + -h, --help help for version + -j, --json Output version in JSON format + +Global Flags: + -c, --config string configuration file path [$PINACT_CONFIG] + --log-level string log level [$PINACT_LOG_LEVEL] ``` diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/aqua-checksums.json new/pinact-5.0.2/aqua/aqua-checksums.json --- old/pinact-5.0.0/aqua/aqua-checksums.json 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/aqua-checksums.json 2026-10-25 14:27:22.000000000 +0100 @@ -1,108 +1,108 @@ { "checksums": [ { - "id": "github_release/github.com/anchore/syft/v1.51.1/syft_1.51.1_darwin_amd64.tar.gz", - "checksum": "0E186CE1D4351EC276126851CA3FF258ED070E93E73574ED64858D4FC2339867", + "id": "github_release/github.com/anchore/syft/v1.55.0/syft_1.55.0_darwin_amd64.tar.gz", + "checksum": "E2E5831CBABAEC9A36FE65C34755C1113982C842A685EDCE3CE0B54A0DED8003", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.51.1/syft_1.51.1_darwin_arm64.tar.gz", - "checksum": "AC063AF3B9874769DEB7EA1E6D76841E68F9E3BB50CD654226FC977DE65532C1", + "id": "github_release/github.com/anchore/syft/v1.55.0/syft_1.55.0_darwin_arm64.tar.gz", + "checksum": "1217C258BD5EB91EF3189CF22A82E02F9CAC07E4CE934350F428E93AFF674625", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.51.1/syft_1.51.1_linux_amd64.tar.gz", - "checksum": "8FCB33017A0DC1058298C923C436D19DFA68AE93968E0B423248542E3AFB9FC3", + "id": "github_release/github.com/anchore/syft/v1.55.0/syft_1.55.0_linux_amd64.tar.gz", + "checksum": "BB65249542DB5FEDEEB4D3F9B018B75E7264DBFBBB10486F044581A92F90490D", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.51.1/syft_1.51.1_linux_arm64.tar.gz", - "checksum": "A7FD2B784E6664ACD44719270574F6CD8C6864FC2B1700BF9099BD1CCCDA7D7F", + "id": "github_release/github.com/anchore/syft/v1.55.0/syft_1.55.0_linux_arm64.tar.gz", + "checksum": "929BD163DB2D7CD2255D3BCB8967208079813D7B46B0C952F7B794D8E2C7D304", "algorithm": "sha256" }, { - "id": "github_release/github.com/anchore/syft/v1.51.1/syft_1.51.1_windows_amd64.zip", - "checksum": "5E4BC3E6B6344B4625DE0F7AA5351AAA72856D11D78462972DE0A101EE2C1C8F", + "id": "github_release/github.com/anchore/syft/v1.55.0/syft_1.55.0_windows_amd64.zip", + "checksum": "ADA4C9B93AF575F479CE80FCE6629897272A2D41F300A14BC49BACE020767CA2", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.50.1/typos-v1.50.1-aarch64-apple-darwin.tar.gz", - "checksum": "2C940734B44B6E199E165278B662B7E17C68F068471A2A8A5E491CE635414AE6", + "id": "github_release/github.com/crate-ci/typos/v1.51.1/typos-v1.51.1-aarch64-apple-darwin.tar.gz", + "checksum": "316D50A32C3726A80AB39C6D12141B70080498973C5E8A9B068B12CDE78B10C1", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.50.1/typos-v1.50.1-aarch64-unknown-linux-musl.tar.gz", - "checksum": "A48FEB58C517977CA953E634507C72819D64DF8717C33CED3E43868D174FD39E", + "id": "github_release/github.com/crate-ci/typos/v1.51.1/typos-v1.51.1-aarch64-unknown-linux-musl.tar.gz", + "checksum": "2AC5E37B3236B3C07DEC5CDF1527ACF143AEC4674A6089B0BF424D021B35E099", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.50.1/typos-v1.50.1-x86_64-apple-darwin.tar.gz", - "checksum": "B31CCF2F21154B2BC8D2A84F395F746106EDDA0FEEC4817FBECDB12216DF53BD", + "id": "github_release/github.com/crate-ci/typos/v1.51.1/typos-v1.51.1-x86_64-apple-darwin.tar.gz", + "checksum": "F3451079971633A7F769FB958FE06B0D64B5F1DC46DF0854AA1DDB9A6F4031D6", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.50.1/typos-v1.50.1-x86_64-pc-windows-msvc.zip", - "checksum": "8740867A0D9E44A62F0803E37A669EC3C6CD17AB63CD49D00E14A96D3E03CCC3", + "id": "github_release/github.com/crate-ci/typos/v1.51.1/typos-v1.51.1-x86_64-pc-windows-msvc.zip", + "checksum": "518F759FBA43205F17A717656054C1D25BC883455A6296989E9D021C6EDB7C59", "algorithm": "sha256" }, { - "id": "github_release/github.com/crate-ci/typos/v1.50.1/typos-v1.50.1-x86_64-unknown-linux-musl.tar.gz", - "checksum": "EDF0545109AEE6A22751D04DDECB97C45BE47D3AA0409564FB895EEEACE91B1E", + "id": "github_release/github.com/crate-ci/typos/v1.51.1/typos-v1.51.1-x86_64-unknown-linux-musl.tar.gz", + "checksum": "93C301FD4120FF076E2CC2A6D6A61CAB4A4BDB81899287C0938B452E56D1F454", "algorithm": "sha256" }, { - "id": "github_release/github.com/golangci/golangci-lint/v2.13.2/golangci-lint-2.13.2-darwin-amd64.tar.gz", - "checksum": "8A13AAF9CBBB1DEE52824E862CF0D0720E5BB97C1F4260D1E51623A09492B57B", + "id": "github_release/github.com/golangci/golangci-lint/v2.15.0/golangci-lint-2.15.0-darwin-amd64.tar.gz", + "checksum": "767B899A28285E88DED2823D5DCC4BC5EF681173EB2D80F029A7B17EE4ECE3B8", "algorithm": "sha256" }, { - "id": "github_release/github.com/golangci/golangci-lint/v2.13.2/golangci-lint-2.13.2-darwin-arm64.tar.gz", - "checksum": "F4BF83F0B64F055C42B28FC9A38861839F69C096E61C788E72DFAAE412011789", + "id": "github_release/github.com/golangci/golangci-lint/v2.15.0/golangci-lint-2.15.0-darwin-arm64.tar.gz", + "checksum": "D1E409481A8CA846C4BC97E781EB5CB1BD5C23353A0B3977A1CBDA1B1B6447D5", "algorithm": "sha256" }, { - "id": "github_release/github.com/golangci/golangci-lint/v2.13.2/golangci-lint-2.13.2-linux-amd64.tar.gz", - "checksum": "2277D43B98EC0054280F2AC26B53268BAE97682444678A59A657DD565DA021D6", + "id": "github_release/github.com/golangci/golangci-lint/v2.15.0/golangci-lint-2.15.0-linux-amd64.tar.gz", + "checksum": "9B7FE6A6BF6334B98DECF8D86B11415EA7889AFDABDD1959FDCE23AF2A9EBCEA", "algorithm": "sha256" }, { - "id": "github_release/github.com/golangci/golangci-lint/v2.13.2/golangci-lint-2.13.2-linux-arm64.tar.gz", - "checksum": "A2A4E0065AA41BE71F7C5AC90F271B61751331E5D04314E62AFE4027855F0893", + "id": "github_release/github.com/golangci/golangci-lint/v2.15.0/golangci-lint-2.15.0-linux-arm64.tar.gz", + "checksum": "B4D8F17068B35EE6060CC2F69A16FB48740D706FBBA81661C318649C114A6998", "algorithm": "sha256" }, { - "id": "github_release/github.com/golangci/golangci-lint/v2.13.2/golangci-lint-2.13.2-windows-amd64.zip", - "checksum": "4735FDC8E84A0CFB7A15A1C364A650942F88215E0D36C674EBC4024F7B554524", + "id": "github_release/github.com/golangci/golangci-lint/v2.15.0/golangci-lint-2.15.0-windows-amd64.zip", + "checksum": "CD7EA6063C95DE245E17E5246E42BDC14BB221792C429DBD239AB3A6ADE6CA6A", "algorithm": "sha256" }, { - "id": "github_release/github.com/golangci/golangci-lint/v2.13.2/golangci-lint-2.13.2-windows-arm64.zip", - "checksum": "2DBFFBD1225D41AC5740F0B478A43B6517F3E3F702FE0AB3AEC470BD6EC8E263", + "id": "github_release/github.com/golangci/golangci-lint/v2.15.0/golangci-lint-2.15.0-windows-arm64.zip", + "checksum": "4FB8988ABF186158E30AF1B8A0FB3671CF2CB02BC91D7E6CE6996F4C1E922E9A", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.18.1/goreleaser_Darwin_all.tar.gz", - "checksum": "D0AF1F86C439A59AB06C54C505F66FEA1A166093DC91A7C0C8AEBE3DA1CC13B7", + "id": "github_release/github.com/goreleaser/goreleaser/v2.19.0/goreleaser_Darwin_all.tar.gz", + "checksum": "21ADCEFF6E676EF63497FC129983F8C454E5A46EC0125B905CBA0F83E7879722", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.18.1/goreleaser_Linux_arm64.tar.gz", - "checksum": "93DBA7614308E167158BD26978E8275971FD4B9147E7F3C687A64F5939D42D27", + "id": "github_release/github.com/goreleaser/goreleaser/v2.19.0/goreleaser_Linux_arm64.tar.gz", + "checksum": "EF33741B684C9F62D6A21E7A3C8B051F139EA7B1D301693B67CC819C46226D53", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.18.1/goreleaser_Linux_x86_64.tar.gz", - "checksum": "0C6122AF0AD8FD65638889BF7D3757148B2F80EEFF9F079682F0655DF66EC8E8", + "id": "github_release/github.com/goreleaser/goreleaser/v2.19.0/goreleaser_Linux_x86_64.tar.gz", + "checksum": "EBC3194AD1D1B1787614405285A0039665CD4C5BD3305215A1B201600F90630B", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.18.1/goreleaser_Windows_arm64.zip", - "checksum": "E1D1D8FC468EC8EE182B9489FEC15A5E6D5C5991F1694039D4B0089ECE944C23", + "id": "github_release/github.com/goreleaser/goreleaser/v2.19.0/goreleaser_Windows_arm64.zip", + "checksum": "FF7A728EBDF86770D45C522F88B901E7FB3C06692B0D0C6A8A3A2C9BCF01B682", "algorithm": "sha256" }, { - "id": "github_release/github.com/goreleaser/goreleaser/v2.18.1/goreleaser_Windows_x86_64.zip", - "checksum": "DBB3112F619C4827311B726B3C98047BCE69AF1ECEE99984D55D450C04C471FC", + "id": "github_release/github.com/goreleaser/goreleaser/v2.19.0/goreleaser_Windows_x86_64.zip", + "checksum": "67807490E909A37F58EF40B67601896D8D4DA2411C9839221DAE55732C243FE9", "algorithm": "sha256" }, { @@ -156,88 +156,58 @@ "algorithm": "sha256" }, { - "id": "github_release/github.com/reviewdog/reviewdog/v0.21.0/reviewdog_0.21.0_Darwin_arm64.tar.gz", - "checksum": "C28DEF83AF6C5AA8728D6D18160546AFD3E5A219117715A2C6C023BD16F14D10", + "id": "github_release/github.com/reviewdog/reviewdog/v0.21.2/reviewdog_0.21.2_Darwin_arm64.tar.gz", + "checksum": "54497B0F3378936CAA22A3A11D796ACEFE4D5F35D86F5CC84C622F941C3C0C68", "algorithm": "sha256" }, { - "id": "github_release/github.com/reviewdog/reviewdog/v0.21.0/reviewdog_0.21.0_Darwin_x86_64.tar.gz", - "checksum": "9BAADB110C87F22C55688CF4A966ACCE3006C7A4A962732D6C8B45234C454C6E", + "id": "github_release/github.com/reviewdog/reviewdog/v0.21.2/reviewdog_0.21.2_Darwin_x86_64.tar.gz", + "checksum": "3002AD37EE7D344DE25E3C630A293AA322FC10D7B9C3FC6D4E836B616D084AE5", "algorithm": "sha256" }, { - "id": "github_release/github.com/reviewdog/reviewdog/v0.21.0/reviewdog_0.21.0_Linux_arm64.tar.gz", - "checksum": "B6AFF657B39E9267A258E8FA66D616F7221AEC5975D0251DAC76043BAD0FA177", + "id": "github_release/github.com/reviewdog/reviewdog/v0.21.2/reviewdog_0.21.2_Linux_arm64.tar.gz", + "checksum": "56854C078853EA53C73E1E4D627E6A90D6B68185C46EDD46AAD8BEB94564B948", "algorithm": "sha256" }, { - "id": "github_release/github.com/reviewdog/reviewdog/v0.21.0/reviewdog_0.21.0_Linux_x86_64.tar.gz", - "checksum": "AD5CE7D5FFA52AAA7EC8710A8FA764181B6CECAAB843CC791E1CCE1680381569", + "id": "github_release/github.com/reviewdog/reviewdog/v0.21.2/reviewdog_0.21.2_Linux_x86_64.tar.gz", + "checksum": "30413AA3C7443E9C3C157FE5766CAD40E3BB39A32E210EE69B710A8D5C4B8E51", "algorithm": "sha256" }, { - "id": "github_release/github.com/reviewdog/reviewdog/v0.21.0/reviewdog_0.21.0_Windows_arm64.tar.gz", - "checksum": "72ABE9907454C5697777CFFF1D0D03DB8F5A9FD6950C609CA397A90D41AB65D7", + "id": "github_release/github.com/reviewdog/reviewdog/v0.21.2/reviewdog_0.21.2_Windows_arm64.tar.gz", + "checksum": "A7161951E19E329620CABF568E50D2431E3BF0531E8E7A2F22C6B77EE4547925", "algorithm": "sha256" }, { - "id": "github_release/github.com/reviewdog/reviewdog/v0.21.0/reviewdog_0.21.0_Windows_x86_64.tar.gz", - "checksum": "97C733E492DEC1FD83B9342C25A384D5AB6EBFA72B6978346E9A436CAD1853F6", + "id": "github_release/github.com/reviewdog/reviewdog/v0.21.2/reviewdog_0.21.2_Windows_x86_64.tar.gz", + "checksum": "397959E250BFC6BC801FBA34B7D4922F2EAA4763DEACF7D32EF11BFFB284A315", "algorithm": "sha256" }, { - "id": "github_release/github.com/rhysd/actionlint/v1.7.12/actionlint_1.7.12_darwin_amd64.tar.gz", - "checksum": "5B44C3BC2255115C9B69E30EFC0FECDF498FDB63C5D58E17084FD5F16324C644", + "id": "github_release/github.com/sigstore/cosign/v3.1.4/cosign-darwin-amd64", + "checksum": "9D1E4ABE2B6BE279ED0D2FF706FDE1CCD738747C834E3E6D44039C238867334F", "algorithm": "sha256" }, { - "id": "github_release/github.com/rhysd/actionlint/v1.7.12/actionlint_1.7.12_darwin_arm64.tar.gz", - "checksum": "ABA9CED2DEE8D27FECCA3DC7FEB1A7F9A52CAEFA1EB46F3271EA66B6E0E6953F", + "id": "github_release/github.com/sigstore/cosign/v3.1.4/cosign-darwin-arm64", + "checksum": "9F9B8CD557CF2E5B3DF3373A00BAA005A86B02391E3E06DD0CE37B3A1533D3A4", "algorithm": "sha256" }, { - "id": "github_release/github.com/rhysd/actionlint/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz", - "checksum": "8ACA8DB96F1B94770F1B0D72B6DDDCB1EBB8123CB3712530B08CC387B349A3D8", + "id": "github_release/github.com/sigstore/cosign/v3.1.4/cosign-linux-amd64", + "checksum": "424E2C97D0B45FD7A6B608A87F090F35633F4C23ECE5F092D48BBA11AAF4BBFA", "algorithm": "sha256" }, { - "id": "github_release/github.com/rhysd/actionlint/v1.7.12/actionlint_1.7.12_linux_arm64.tar.gz", - "checksum": "325E971B6BA9BFA504672E29BE93C24981EEB1C07576D730E9F7C8805AFFF0C6", + "id": "github_release/github.com/sigstore/cosign/v3.1.4/cosign-linux-arm64", + "checksum": "ADE83B7AAC62E131CACFE96D958948B2150CC9EFEC46A570A2649B8E27DEDAD2", "algorithm": "sha256" }, { - "id": "github_release/github.com/rhysd/actionlint/v1.7.12/actionlint_1.7.12_windows_amd64.zip", - "checksum": "6E7241B51E6817EA6A047693D8E6FED13B31819C9A0DD6C5A726E1592D22F6E9", - "algorithm": "sha256" - }, - { - "id": "github_release/github.com/rhysd/actionlint/v1.7.12/actionlint_1.7.12_windows_arm64.zip", - "checksum": "CADCF7EA4EFE3A68728893813643CEBE1185E5B1D4BE5B96245F65C9A4D5EA41", - "algorithm": "sha256" - }, - { - "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-darwin-amd64", - "checksum": "2347488E5D5B25336644024DFECA5601B190E91197A71A917BDA44744AFF106C", - "algorithm": "sha256" - }, - { - "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-darwin-arm64", - "checksum": "5CF948C2F4DFE59687BDD0B8523709067383E03982CC543475C8A7DC70E92A76", - "algorithm": "sha256" - }, - { - "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-linux-amd64", - "checksum": "4629C757B7618056F8DDD7E2625AE9FDD94C0372A65049520BC7D9DF9EFC7F71", - "algorithm": "sha256" - }, - { - "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-linux-arm64", - "checksum": "C5D324E091826B0D7A78EB16FEF316450B4EB9AAEC045611C08BA06F5E73220A", - "algorithm": "sha256" - }, - { - "id": "github_release/github.com/sigstore/cosign/v3.1.3/cosign-windows-amd64.exe", - "checksum": "9FE59BE0ECA1271873CE019061335EB1AC419B7059202E797828467DDABE33BE", + "id": "github_release/github.com/sigstore/cosign/v3.1.4/cosign-windows-amd64.exe", + "checksum": "CBE953787074611F1334CBF37DC1CF953995BB8C45398EB4FC7BB781D29C1F2A", "algorithm": "sha256" }, { @@ -361,38 +331,38 @@ "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.1.1/pinact_darwin_amd64.tar.gz", - "checksum": "513678FDB0BB59B2742DD06D28F0EE851496A83BA939954009AA6BE53F5AEC9C", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v5.0.1/pinact_darwin_amd64.tar.gz", + "checksum": "A8EB8DD4DAECB7EEFA660E1920FF65302714173BE9C2F335A0AE77F053FD975A", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.1.1/pinact_darwin_arm64.tar.gz", - "checksum": "C13998C9F0DD09D8973700938AA5F6AC52A1DB4E94D4F578D8CC976CDA478614", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v5.0.1/pinact_darwin_arm64.tar.gz", + "checksum": "58390AC843B7A14414DF79762E2F64051158D00549762B1C49DED3D2F1746007", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.1.1/pinact_linux_amd64.tar.gz", - "checksum": "D1CFFEBE5704B74E2E5F8A864EFB9F7E54768972DC686188C008033FB1797841", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v5.0.1/pinact_linux_amd64.tar.gz", + "checksum": "12500C0FFF5DB94A0155E2E76ED959D1DC0E899056EE168D8FB7B4840E7C04F0", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.1.1/pinact_linux_arm64.tar.gz", - "checksum": "DD1F29908319ED3E59F9FE6B39196EFBB76936357F3BD741CD759A96306AE8D8", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v5.0.1/pinact_linux_arm64.tar.gz", + "checksum": "FC1432004F378AE51D549A356195B4D2E3EE05935DBD20E3BBCA66DB1CDF6590", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.1.1/pinact_windows_amd64.zip", - "checksum": "88DB480A3F8833D7233B482A72C97308DF558EBCEB0D3214775889239901F6A9", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v5.0.1/pinact_windows_amd64.zip", + "checksum": "D679BFD3ECB489F3D4242E54016F57181948980BF0CA7B98C6003C8D256C27F2", "algorithm": "sha256" }, { - "id": "github_release/github.com/suzuki-shunsuke/pinact/v4.1.1/pinact_windows_arm64.zip", - "checksum": "98E99A7E13472FA5D1DC1298EEA736FA5267BFA4A06DD5BA83A8BF42D3F02F67", + "id": "github_release/github.com/suzuki-shunsuke/pinact/v5.0.1/pinact_windows_arm64.zip", + "checksum": "B69657B798CD2AE714B993658754B63E6BCE967D4018F083A813EE228F967D91", "algorithm": "sha256" }, { - "id": "registries/github_content/github.com/aquaproj/aqua-registry/v4.560.0/registry.yaml", - "checksum": "4B6495DF77F391437E80574D3B270A32DBFAD4AAFC5EFABE944A1BDC0E064AF2", + "id": "registries/github_content/github.com/aquaproj/aqua-registry/v4.576.0/registry.yaml", + "checksum": "3260408752E819B1BF04A4D0D624E0475FB99C67DD5CEABDAD0BADDDFD1D788E", "algorithm": "sha256" } ] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/aqua.yaml new/pinact-5.0.2/aqua/aqua.yaml --- old/pinact-5.0.0/aqua/aqua.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/aqua.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,5 +1,5 @@ --- -# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/v2.62.3/json-schema/aqua-yaml.json +# yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/v2.65.2/json-schema/aqua-yaml.json # aqua - Declarative CLI Version Manager # https://aquaproj.github.io/ checksum: @@ -7,5 +7,5 @@ require_checksum: true registries: - type: standard - ref: v4.560.0 # renovate: depName=aquaproj/aqua-registry + ref: v4.576.0 # renovate: depName=aquaproj/aqua-registry import_dir: imports diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/actionlint.yaml new/pinact-5.0.2/aqua/imports/actionlint.yaml --- old/pinact-5.0.0/aqua/imports/actionlint.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/actionlint.yaml 1970-01-01 01:00:00.000000000 +0100 @@ -1,2 +0,0 @@ -packages: - - name: rhysd/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/cosign.yaml new/pinact-5.0.2/aqua/imports/cosign.yaml --- old/pinact-5.0.0/aqua/imports/cosign.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/cosign.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: sigstore/[email protected] + - name: sigstore/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/golangci-lint.yaml new/pinact-5.0.2/aqua/imports/golangci-lint.yaml --- old/pinact-5.0.0/aqua/imports/golangci-lint.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/golangci-lint.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: golangci/[email protected] + - name: golangci/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/goreleser.yaml new/pinact-5.0.2/aqua/imports/goreleser.yaml --- old/pinact-5.0.0/aqua/imports/goreleser.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/goreleser.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: goreleaser/[email protected] + - name: goreleaser/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/pinact.yaml new/pinact-5.0.2/aqua/imports/pinact.yaml --- old/pinact-5.0.0/aqua/imports/pinact.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/pinact.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: suzuki-shunsuke/[email protected] + - name: suzuki-shunsuke/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/reviewdog.yaml new/pinact-5.0.2/aqua/imports/reviewdog.yaml --- old/pinact-5.0.0/aqua/imports/reviewdog.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/reviewdog.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: reviewdog/[email protected] + - name: reviewdog/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/syft.yaml new/pinact-5.0.2/aqua/imports/syft.yaml --- old/pinact-5.0.0/aqua/imports/syft.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/syft.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: anchore/[email protected] + - name: anchore/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/aqua/imports/typos.yaml new/pinact-5.0.2/aqua/imports/typos.yaml --- old/pinact-5.0.0/aqua/imports/typos.yaml 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/aqua/imports/typos.yaml 2026-10-25 14:27:22.000000000 +0100 @@ -1,2 +1,2 @@ packages: - - name: crate-ci/[email protected] + - name: crate-ci/[email protected] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/go.mod new/pinact-5.0.2/go.mod --- old/pinact-5.0.0/go.mod 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/go.mod 2026-10-25 14:27:22.000000000 +0100 @@ -1,19 +1,19 @@ module github.com/suzuki-shunsuke/pinact/v5 -go 1.27.1 +go 1.27.3 require ( github.com/expr-lang/expr v1.17.8 github.com/fatih/color v1.19.0 github.com/goccy/go-yaml v1.19.2 github.com/google/go-cmp v0.7.0 - github.com/google/go-github/v91 v91.0.0 + github.com/google/go-github/v93 v93.0.0 github.com/hashicorp/go-version v1.9.0 - github.com/sourcegraph/go-diff v0.8.0 + github.com/sourcegraph/go-diff v0.9.0 github.com/spf13/afero v1.15.0 github.com/spf13/cobra v1.10.2 github.com/spf13/pflag v1.0.10 - github.com/suzuki-shunsuke/cobra-util v0.0.4 + github.com/suzuki-shunsuke/cobra-util v0.0.5 github.com/suzuki-shunsuke/gen-go-jsonschema v0.1.0 github.com/suzuki-shunsuke/ghtkn-go-sdk v0.6.1 github.com/suzuki-shunsuke/go-error-with-exit-code v1.0.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/go.sum new/pinact-5.0.2/go.sum --- old/pinact-5.0.0/go.sum 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/go.sum 2026-10-25 14:27:22.000000000 +0100 @@ -21,8 +21,8 @@ github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= -github.com/google/go-github/v91 v91.0.0 h1:fpulREh37uBvOj4kF0vLuzjwJ1HHmFcAfquNjJfmpYs= -github.com/google/go-github/v91 v91.0.0/go.mod h1:rHtn7haKvmkTLhUK/aCQypiIj/suWSB3rnS+a1FdH6M= +github.com/google/go-github/v93 v93.0.0 h1:qElXPLv+XbSz1qrLdWyb0t3gSYGsWBTzr9T4/PZTCfk= +github.com/google/go-github/v93 v93.0.0/go.mod h1:l8I3rt4/mdjANKpg4Y84LEy9HJQCetUkZ8WTl2bPU8M= github.com/google/go-querystring v1.2.0 h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0= github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJZD5A0egEOmkqU= github.com/hashicorp/go-version v1.9.0 h1:CeOIz6k+LoN3qX9Z0tyQrPtiB1DFYRPfCIBtaXPSCnA= @@ -53,8 +53,8 @@ github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8= github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= -github.com/sourcegraph/go-diff v0.8.0 h1:ipIyu4cTsLbIrln4l0qtHA3r0a7gyK4ntKjtQytHhvY= -github.com/sourcegraph/go-diff v0.8.0/go.mod h1:hWlcO7Al+UZStZAP8rBumHpCK5ZHQ5BXsMls8p4+F5E= +github.com/sourcegraph/go-diff v0.9.0 h1:7xcVsayWHhvxZGrqt1o89vvBApCa4nyCgO7tNxDHJ+Q= +github.com/sourcegraph/go-diff v0.9.0/go.mod h1:hWlcO7Al+UZStZAP8rBumHpCK5ZHQ5BXsMls8p4+F5E= github.com/spf13/afero v1.15.0 h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I= github.com/spf13/afero v1.15.0/go.mod h1:NC2ByUVxtQs4b3sIUphxK0NioZnmxgyCrfzeuq8lxMg= github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU= @@ -66,8 +66,8 @@ github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U= github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= -github.com/suzuki-shunsuke/cobra-util v0.0.4 h1:wjHCQNDNXvZCfw1V1fY++Q3NubiagbOkS0/azBF//YE= -github.com/suzuki-shunsuke/cobra-util v0.0.4/go.mod h1:L5YbE333knVy60BdR1MxePKzsglMuiJgR6R0hb3PQ8Y= +github.com/suzuki-shunsuke/cobra-util v0.0.5 h1:/zJiPce7KnGZkfxFad2lXYS4Z2mQb14Aua8Q6u2eyJo= +github.com/suzuki-shunsuke/cobra-util v0.0.5/go.mod h1:L5YbE333knVy60BdR1MxePKzsglMuiJgR6R0hb3PQ8Y= github.com/suzuki-shunsuke/gen-go-jsonschema v0.1.0 h1:g7askc+nskCkKRWTVOdsAT8nMhwiaVT6Dmlnh6uvITM= github.com/suzuki-shunsuke/gen-go-jsonschema v0.1.0/go.mod h1:yFO7h5wwFejxi6jbtazqmk7b/JSBxHcit8DGwb1bhg0= github.com/suzuki-shunsuke/ghtkn-go-sdk v0.6.1 h1:IDvTocqxIfZVMK8Km/5Zk4/bMjDKKY9Z1bPK0mqX71s= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/pkg/github/github.go new/pinact-5.0.2/pkg/github/github.go --- old/pinact-5.0.0/pkg/github/github.go 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/pkg/github/github.go 2026-10-25 14:27:22.000000000 +0100 @@ -13,7 +13,7 @@ "log/slog" "net/http" - "github.com/google/go-github/v91/github" + "github.com/google/go-github/v93/github" "github.com/suzuki-shunsuke/cobra-util/keyring/ghtoken" "github.com/suzuki-shunsuke/ghtkn-go-sdk/ghtkn" "golang.org/x/oauth2" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pinact-5.0.0/renovate.json5 new/pinact-5.0.2/renovate.json5 --- old/pinact-5.0.0/renovate.json5 2026-09-12 06:50:03.000000000 +0200 +++ new/pinact-5.0.2/renovate.json5 2026-10-25 14:27:22.000000000 +0100 @@ -3,8 +3,8 @@ "github>suzuki-shunsuke/renovate-config#4.0.0", "github>suzuki-shunsuke/renovate-config:nolimit#4.0.0", "github>suzuki-shunsuke/renovate-config:go-directive#4.0.0", - "github>aquaproj/aqua-renovate-config#2.13.0", - "github>aquaproj/aqua-renovate-config:file#2.13.0(aqua/imports/.*\\.ya?ml)", + "github>aquaproj/aqua-renovate-config#2.14.0", + "github>aquaproj/aqua-renovate-config:file#2.14.0(aqua/imports/.*\\.ya?ml)", ], ignorePaths: ["testdata/**"], } ++++++ pinact.obsinfo ++++++ --- /var/tmp/diff_new_pack.OQZiEG/_old 2026-10-27 17:01:56.219082224 +0100 +++ /var/tmp/diff_new_pack.OQZiEG/_new 2026-10-27 17:01:56.227082559 +0100 @@ -1,5 +1,5 @@ name: pinact -version: 5.0.0 -mtime: 1789188603 -commit: a4f45e095b184794ac1f82b6b07cc35b0b8cfe7b +version: 5.0.2 +mtime: 1792934842 +commit: 916099054848d14535ac3c20366361b6e98aa268 ++++++ vendor.tar.gz ++++++ ++++ 223141 lines of diff (skipped)
