Update dependency aquaproj/aqua-installer to v4

[renovate]

This PR contains the following updates:

Package	Update	Change
aquaproj/aqua-installer	major	v3.0.0 → v4.0.5

---

Release Notes

aquaproj/aqua-installer (aquaproj/aqua-installer)

v4.0.5

Compare Source

Fixes

#​932 Add --force flag @​ianlewis

Others

#​935 Update the bootstrap version to v2.60.1

v4.0.4

Compare Source

Pull Requests aquaproj/aqua-installer@v4.0.3...v4.0.4

SHA256 Checksum

acd21cbb06609dd9a701b0032ba4c21fa37b0e3b5cc4c9d721cc02f25ea33a28  aqua-installer

---

#​886 Configure export-ignore in .gitattributes
#​887 Update the bootstrap version of aqua to v2.55.1

v4.0.3

Compare Source

🛡️ Starting from this release, Immutable Release is enabled!

SHA256 Checksum

d76bb5c3a23025e9d344aeba04c0a4d4ed6c9fb05e85530c8c3be2ef8e8f3a6a  aqua-installer

#​867 Update the bootstrap aqua version to v2.53.10

v4.0.2

Compare Source

SHA256 Checksum

98b883756cdd0a6807a8c7623404bfc3bc169275ad9064dc23a6e24ad398f43d  aqua-installer

Improvement

#​839 Use curl's --retry option: curl --retry 5

v4.0.1

Compare Source

SHA256 Checksum

42d5b4496020dc97856f5694cfb592ba80949d4918661fd062a5b0bb05d570ce  aqua-installer

Improvement

#​835 Update the bootstrap version of aqua to v2.53.3

As of aqua v2.53.0, aqua supported retrying download of assets.
This update enables aqua-installer to retry download of aqua.

v4.0.0

Compare Source

SHA256 Checksum

f7fa69dacb234ce9648f3008cef9120a1e59d96c37971e747668c0fada7bec68  aqua-installer

⚠️ Breaking Changes

#​822 If you pass a GitHub Access token via environment variable env, it would be overridden by the input github_token.

uses: aquaproj/aqua-installer@v2.0.0
env:
  GITHUB_TOKEN: ${{secrets.PAT}} # This is overridden by ${{github.token}}

How to migrate

Pass a GitHub access token by the input github_token.

uses: aquaproj/aqua-installer@v2.0.0
with:
  github_token: ${{secrets.PAT}}

Why is this breaking change required?

Recently, GitHub updated rate limits for unauthenticated requests.

https://github.blog/changelog/2025-05-08-updated-rate-limits-for-unauthenticated-requests/

As a result, aqua-installer often hits the API rate limit if a GitHub access token isn't passed via environment variable.

e.g. https://github.com/szksh-lab/.github/actions/runs/15082243052/job/42400373723

time="2025-05-17T05:48:24Z" level=error msg="install the registry" aqua_version=2.51.2 env=linux/amd64 error="get a file by Get GitHub Content API: status code 429" program=aqua registry_name=standard
time="2025-05-17T05:48:24Z" level=fatal msg="aqua failed" aqua_version=2.51.2 env=linux/amd64 error="it failed to install some registries" program=aqua

It failed to download the standard registry by GitHub content API.

To resolve the issue, we pass a GitHub actions token by default.
And we add the input github_token to allow you to change the access token.

Features

#​822 The input github_token is added.
You can pass a GitHub access token by input.
By default, GitHub Actions token ${{github.token}} is passed.

Others

#​823 chore: update the bootstrap version to v2.51.2

v3.1.2

Compare Source

SHA256 Checksum

9a5afb16da7191fbbc0c0240a67e79eecb0f765697ace74c70421377c99f0423  aqua-installer

Fixes

#​801 Update the bootstrap version of aqua to v2.48.1

aquaproj/aqua#3744

[!CAUTION]
To install aqua v2.48.2-0 or later, please aqua-installer v3.1.2 or later

v3.1.1

Compare Source

SHA256 Checksum

e9d4c99577c6b2ce0b62edf61f089e9b9891af1708e88c6592907d2de66e3714  aqua-installer

🐛 Bug Fixes

#​750 Fix a bug that aqua-installer doesn't work using Darwin's built-in sha256sum @​Takashi-kun

aqua-installer worked well using GNU sha256sum, but it didn't work using Darwin's built-in sha256sum.

$ ./aqua-installer
[INFO] Installing aqua v2.37.2 for bootstrapping...
[INFO] Downloading https://github.com/aquaproj/aqua/releases/download/v2.37.2/aqua_darwin_arm64.tar.gz ...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 6716k  100 6716k    0     0  1227k      0  0:00:05  0:00:05 --:--:-- 1706k
[INFO] Verifying checksum of aqua v2.37.2 ...
usage: sha256sum [-bctwz] [files ...]
$ echo $?
1

v3.1.0

Compare Source

SHA256 checksum

62fecc49c98bdec0bba1ff1e5c2719f116e235769e0998090a7397473ef631e9  aqua-installer

Features

#​709 action: Add an input skip_install_aqua

If this true and aqua is already installed, installing aqua is skipped.
This input is useful when you want to ensure aqua is installed.

Fixes

#​708 action: stop adding bat to $PATH on Windows

v3.0.2

Compare Source

SHA256 checksum

62fecc49c98bdec0bba1ff1e5c2719f116e235769e0998090a7397473ef631e9  aqua-installer

Bug Fixes

#​703 Fix the feature of the input enable_aqua_install.

1. Update $PATH even if enable_aqua_install is false
2. Stop running aqua i if enable_aqua_install isn't true

Others

#​704 Update the bootstrap aqua version to v2.37.2
#​666 refactor: Use $GITHUB_ACTION_PATH

We ever stopped using ${{ github.action_path }} and copied aqua-installer in action.yaml due to the bug of GitHub Actions. #​463
But we noticed that $GITHUB_ACTION_PATH worked well in containers as well, so we use it instead of coping aqua-installer in action.yaml.

v3.0.1

Compare Source

SHA256 checksum

fb4b3b7d026e5aba1fc478c268e8fbd653e01404c8a8c6284fdba88ae62eda6a  aqua-installer

Bug Fixes

#​634 #​636 Fix a bug that it fails to install aqua v2.27.4

Updated the bootstrap version of aqua from v2.25.1 to v2.27.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.