fix: update aqua registry: aquaproj/aqua-registry (v4.397.0 -> v4.399.0) (#616)

* fix: update aqua registry: aquaproj/aqua-registry (v4.397.0 -> v4.399.0)

* chore(dev-tools): update aqua checksums

---------

Co-authored-by: ppat-self-hosted-renovate-bot[bot] <175373406+ppat-self-hosted-renovate-bot[bot]@users.noreply.github.com>
Co-authored-by: homelab-workflows-bot[bot] <182250461+homelab-workflows-bot[bot]@users.noreply.github.com>

Author: ppat-self-hosted-renovate-bot[bot]

.github/renovate/aqua-registry.json

@@ -16,7 +16,7 @@
       "matchPackageNames": [
         "aquaproj/aqua-registry"
       ],
-      "semanticCommitScope": "aqua-registry",
+      "semanticCommitScope": "cli-tools",
       "separateMajorMinor": true,
       "separateMinorPatch": false,
       "separateMultipleMajor": true,

.github/workflows/update-aqua-checksum.yaml

@@ -23,6 +23,7 @@ jobs:
       git_ref: ${{ github.head_ref || github.ref_name }}
       aqua_dirs: |
         images/homelab-workspace
+      prune: true
     secrets:
       app_id: ${{ secrets.HOMELAB_BOT_APP_ID }}
       app_private_key: ${{ secrets.HOMELAB_BOT_APP_PRIVATE_KEY }}

images/homelab-workspace/Dockerfile

@@ -120,43 +120,26 @@ WORKDIR /tmp
 
 ENV AQUA_ROOT_DIR=$HOME/.local/share/aquaproj-aqua
 ENV PATH=$AQUA_ROOT_DIR/bin:$PATH
-
-# renovate: datasource=github-releases depName=aquaproj/aqua
-ARG AQUA_VERSION="2.53.8"
-RUN --mount=type=tmpfs,target=/tmp \
-    --mount=type=cache,target=$AQUA_ROOT_DIR,id=cache-aqua-${TARGETARCH},sharing=locked \
-    mkdir -p $AQUA_ROOT_DIR/bin && \
-    # Check if aqua exists and version matches
-    if [ -f "$AQUA_ROOT_DIR/bin/aqua" ]; then \
-        CURRENT_VERSION=$($AQUA_ROOT_DIR/bin/aqua --version 2>/dev/null | grep -o '[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*' || echo "unknown"); \
-        if [ "$CURRENT_VERSION" = "$AQUA_VERSION" ]; then \
-            echo "aqua v$AQUA_VERSION already cached, skipping download"; \
-        else \
-            echo "aqua version mismatch: current=$CURRENT_VERSION, required=$AQUA_VERSION" && \
-            NEED_DOWNLOAD=true; \
-        fi; \
-    else \
-        echo "aqua not found in cache, downloading..." && \
-        NEED_DOWNLOAD=true; \
-    fi && \
-    # Download and install aqua if needed
-    if [ "$NEED_DOWNLOAD" = "true" ]; then \
-        curl -fsSL -O "https://github.com/aquaproj/aqua/releases/download/v${AQUA_VERSION}/aqua_linux_${TARGETARCH}.tar.gz" && \
-        curl -fsSL -o checksums.txt "https://github.com/aquaproj/aqua/releases/download/v${AQUA_VERSION}/aqua_${AQUA_VERSION}_checksums.txt" && \
-        grep -E "aqua_linux_${TARGETARCH}.tar.gz$" checksums.txt > aqua_artifact_checksum.txt && \
-        sha256sum -c aqua_artifact_checksum.txt && \
-        tar xzf "aqua_linux_${TARGETARCH}.tar.gz" aqua && \
-        mv ./aqua $AQUA_ROOT_DIR/bin/aqua && \
-        chmod +x $AQUA_ROOT_DIR/bin/aqua && \
-        echo "aqua v$AQUA_VERSION installed successfully"; \
-    fi
-
 ENV AQUA_GLOBAL_CONFIG=/etc/aqua/aqua.yaml
 COPY aqua.yaml aqua-checksums.json /etc/aqua/
 
+# renovate: datasource=github-releases depName=aquaproj/aqua
+ARG AQUA_VERSION="2.53.8"
 # hadolint ignore=SC2046
 RUN --mount=type=cache,target=$AQUA_ROOT_DIR,id=cache-aqua-${TARGETARCH},sharing=locked \
+    --mount=type=tmpfs,target=/tmp \
+    mkdir -p $AQUA_ROOT_DIR/bin && \
     mkdir -p /dist && \
+    # Download and install aqua
+    curl -fsSL -O "https://github.com/aquaproj/aqua/releases/download/v${AQUA_VERSION}/aqua_linux_${TARGETARCH}.tar.gz" && \
+    curl -fsSL -o checksums.txt "https://github.com/aquaproj/aqua/releases/download/v${AQUA_VERSION}/aqua_${AQUA_VERSION}_checksums.txt" && \
+    grep -E "aqua_linux_${TARGETARCH}.tar.gz$" checksums.txt > aqua_artifact_checksum.txt && \
+    sha256sum -c aqua_artifact_checksum.txt && \
+    tar xzf "aqua_linux_${TARGETARCH}.tar.gz" aqua && \
+    mv ./aqua $AQUA_ROOT_DIR/bin/aqua && \
+    chmod +x $AQUA_ROOT_DIR/bin/aqua && \
+    echo "aqua v$AQUA_VERSION installed successfully" && \
+    # Install packages w/ aqua as defined in aqua.yaml
     aqua install --all && \
     aqua cp -o /dist $(find $AQUA_ROOT_DIR/bin -type l -not -name upx -exec basename {} \; | sort) && \
     cp $AQUA_ROOT_DIR/bin/aqua /dist/aqua && \

images/homelab-workspace/aqua-checksums.json

@@ -56,8 +56,8 @@
       "algorithm": "sha256"
     },
     {
-      "id": "registries/github_content/github.com/aquaproj/aqua-registry/v4.397.0/registry.yaml",
-      "checksum": "D1DF243740112760AA0F76C8EB71B124BB6E4D2BF75F352322252E8A53C8ED2CC4A6A9A533C9281A42CF019046EF7BE91932C9590AD765FF997A258F1A8DA222",
+      "id": "registries/github_content/github.com/aquaproj/aqua-registry/v4.399.0/registry.yaml",
+      "checksum": "DFBC63D519DB05196B401F933FDE8BF71722BACEDA3647601C0E0418DF6D7E6C12F49608D0ACBE53D2F50DA34CC68F2E1D722D8BA2257F72FECB6D0D53FECFDC",
       "algorithm": "sha512"
     }
   ]

images/homelab-workspace/aqua.yaml

@@ -8,7 +8,7 @@ checksum:
   - linux/arm64
 registries:
 - type: standard
-  ref: v4.397.0 # renovate: depName=aquaproj/aqua-registry
+  ref: v4.399.0 # renovate: depName=aquaproj/aqua-registry
 packages:
 - name: bitwarden/clients@cli-v2025.7.0
 - name: bitwarden/sdk-sm@bws-v1.0.0