chore(deps): bump aquaproj/aqua-installer from 3.1.1 to 4.0.0

[dependabot]

Bumps aquaproj/aqua-installer from 3.1.1 to 4.0.0.

Release notes

Sourced from aquaproj/aqua-installer's releases.

v4.0.0

aquaproj/aqua-installer@v3.1.2...v4.0.0

SHA256 Checksum

f7fa69dacb234ce9648f3008cef9120a1e59d96c37971e747668c0fada7bec68  aqua-installer

⚠️ Breaking Changes

#822 If you pass a GitHub Access token via environment variable env, it would be overridden by the input github_token.

uses: aquaproj/aqua-installer@v2.0.0
env:
  GITHUB_TOKEN: ${{secrets.PAT}} # This is overridden by ${{github.token}}

How to migrate

Pass a GitHub access token by the input github_token.

uses: aquaproj/aqua-installer@v2.0.0
with:
  github_token: ${{secrets.PAT}}

Why is this breaking change required?

Recently, GitHub updated rate limits for unauthenticated requests.

https://github.blog/changelog/2025-05-08-updated-rate-limits-for-unauthenticated-requests/

As a result, aqua-installer often hits the API rate limit if a GitHub access token isn't passed via environment variable.

e.g. https://github.com/szksh-lab/.github/actions/runs/15082243052/job/42400373723

time="2025-05-17T05:48:24Z" level=error msg="install the registry" aqua_version=2.51.2 env=linux/amd64 error="get a file by Get GitHub Content API: status code 429" program=aqua registry_name=standard
time="2025-05-17T05:48:24Z" level=fatal msg="aqua failed" aqua_version=2.51.2 env=linux/amd64 error="it failed to install some registries" program=aqua

It failed to download the standard registry by GitHub content API.

To resolve the issue, we pass a GitHub actions token by default. And we add the input github_token to allow you to change the access token.

Features

... (truncated)

Commits

• 9ebf656 chore: update the bootstrap version to v2.51.2 (#823)
• fec970d feat: pass github_token (#822)
• bd1bc11 chore(deps): update aquaproj/aqua-renovate-config to v2.8.0 (#821)
• 0f0af46 chore(deps): update dependency suzuki-shunsuke/ghalint to v1.4.0 (#820)
• d039800 chore(deps): update dependency aquaproj/aqua to v2.51.2 (#819)
• a8b6619 chore(config): migrate renovate config (#817)
• acb94aa chore(deps): update dependency golangci/golangci-lint to v2.1.6 (#818)
• 4068879 chore(deps): update mirror.gcr.io/golang docker tag to v1.24.3 (#816)
• 07088fe chore(deps): update dependency aquaproj/aqua to v2.51.1 (#815)
• 4f488eb chore(deps): update dependency aquaproj/aqua to v2.50.1 (#814)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)