Releases: aquaproj/aqua
v2.55.0
Features
#4195 #4213 Support verifying the integrity of GitHub Releases
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/verifying-the-integrity-of-a-release
https://aquaproj.github.io/docs/reference/security/github-immutable-release
v2.55.0-1
chore: release v2.55.0-1
v2.55.0-0
chore: release v2.55.0-0
v2.54.1
🐛 Bug Fixes
#4182 Fix a bug of generate-registry command that arm64 is replaced to arm incorrectly
v2.54.0
Features
https://aquaproj.github.io/docs/reference/security/ghtkn/
Now aqua can get a GitHub App User Access Token by ghtkn integration.
Stop risking token leaks - Use secure, short-lived GitHub tokens for local development.
Requirements
The ghtkn integration requires:
- Keyring
This feature doesn't depend on ghtkn CLI.
Limitation
The integration requires the user interaction when creating an access token via Device Flow, so it's unavailable in CI.
Set up
For more details, please see https://github.com/suzuki-shunsuke/ghtkn .
- Create a GitHub App
- Create a configuration file of ghtkn
- Set the environment variable
AQUA_GHTKN_ENABLED=true
export AQUA_GHTKN_ENABLED=trueThen aqua gets a user access token using ghtkn Go SDK when aqua calls GitHub APIs.
v2.53.11
Performance Improvement
#4159 Update github.com/gdamore/tcell/v2 to reduce startup time @refi64
Benchmark
$ git rev-parse HEAD
380a2334230ec9fd22adac3f4e137a4cf47d42b2
$ go version
go version go1.25.1 darwin/arm64
$ hyperfine --version
hyperfine 1.19.0
$ ls dist
aqua aqua-25310aqua.yaml
registries:
- type: standard
ref: v4.408.0 # renovate: depName=aquaproj/aqua-registry
packages:
- name: suzuki-shunsuke/mkghtag@v0.1.11
- name: suzuki-shunsuke/cmdx@v2.0.2$ hyperfine --warmup=20 -N 'dist/aqua'{-25310,}' exec -- mkghtag -version'
Benchmark 1: dist/aqua-25310 exec -- mkghtag -version
Time (mean ± σ): 24.7 ms ± 1.3 ms [User: 2.7 ms, System: 1.6 ms]
Range (min … max): 23.5 ms … 29.6 ms 125 runs
Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
Benchmark 2: dist/aqua exec -- mkghtag -version
Time (mean ± σ): 10.8 ms ± 1.4 ms [User: 2.4 ms, System: 1.6 ms]
Range (min … max): 9.2 ms … 17.1 ms 250 runs
Summary
dist/aqua exec -- mkghtag -version ran
2.30 ± 0.33 times faster than dist/aqua-25310 exec -- mkghtag -version$ hyperfine --warmup=20 -N 'dist/aqua'{-25310,}' exec -- cmdx -v'
Benchmark 1: dist/aqua-25310 exec -- cmdx -v
Time (mean ± σ): 25.7 ms ± 1.3 ms [User: 3.5 ms, System: 1.7 ms]
Range (min … max): 24.5 ms … 31.7 ms 120 runs
Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
Benchmark 2: dist/aqua exec -- cmdx -v
Time (mean ± σ): 11.2 ms ± 1.0 ms [User: 3.1 ms, System: 1.6 ms]
Range (min … max): 10.2 ms … 15.9 ms 253 runs
Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
Summary
dist/aqua exec -- cmdx -v ran
2.30 ± 0.24 times faster than dist/aqua-25310 exec -- cmdx -vContributors
Assets 18
v2.53.10
🛡️ Starting from this release, Immutable Release is enabled!
#4147 Update Go to v1.25.1
#4145 Update aqua-proxy to v1.2.12
🐛 Bug Fixes
#4140 Fix error messages
v2.53.10-0
22f438achore: release v2.53.10-0
v2.53.9
Pull Requests | Issues | v2.53.8...v2.53.9
🐛 Bug Fixes
#4064 Fix a bug that environment variables aren't passed to gh attestation verify
Others
#4065 Update Go to v1.24.6
#4065 Update aqua-proxy to v1.2.11
go1.24.6 (released 2025-08-06) includes security fixes to the database/sql and os/exec packages, as well as bug fixes to the runtime.
See the Go 1.24.6 milestone on our issue tracker for details.