diff --git a/.agents/setup b/.agents/setup index 8907192..3b896e1 100755 --- a/.agents/setup +++ b/.agents/setup @@ -4,14 +4,25 @@ set -euo pipefail curl -fsSL https://mise.run/bash | sh +if [[ -n "${USER_ENV_SETUP_REPO:-}" ]]; then + if ! ( + user_env_dir="$(mktemp -d)" + trap 'rm -rf "$user_env_dir"' EXIT + + git clone --depth 1 --quiet -- \ + "$USER_ENV_SETUP_REPO" \ + "$user_env_dir" && + "$user_env_dir/setup.sh" + ); then + echo "warning: user environment could not be set up; continuing" >&2 + fi +fi + "$HOME/.local/bin/mise" trust "$HOME/.local/bin/mise" install --locked \ - actionlint \ - go \ - "go:golang.org/x/vuln/cmd/govulncheck" \ - gofumpt \ - golangci-lint \ - "github:dhth/terminal-control" \ - yamlfmt - -git config push.autoSetupRemote true + actionlint \ + go \ + gofumpt \ + golangci-lint \ + govulncheck \ + yamlfmt diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 4da4be6..e91e4ab 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -147,6 +147,6 @@ jobs: - name: Set up mise uses: jdx/mise-action@v4 with: - install_args: go go:golang.org/x/vuln/cmd/govulncheck + install_args: go govulncheck - name: Vulnerability check run: mise run vulncheck diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index b7cbda9..a41a3a2 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -145,6 +145,6 @@ jobs: - name: Set up mise uses: jdx/mise-action@v4 with: - install_args: go go:golang.org/x/vuln/cmd/govulncheck + install_args: go govulncheck - name: Vulnerability check run: mise run vulncheck diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2c2a7d3..45472dd 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,16 +5,17 @@ on: tags: - 'v*' -permissions: - id-token: write - jobs: release: + permissions: + contents: write + id-token: write runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 with: fetch-depth: 0 + persist-credentials: false - name: Set up mise uses: jdx/mise-action@v4 with: @@ -22,4 +23,4 @@ jobs: - name: Release binaries run: mise run release env: - GITHUB_TOKEN: ${{secrets.GH_PAT}} + GITHUB_TOKEN: ${{ github.token }} diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml index 3192435..f5b5875 100644 --- a/.github/workflows/vulncheck.yml +++ b/.github/workflows/vulncheck.yml @@ -13,6 +13,6 @@ jobs: - name: Set up mise uses: jdx/mise-action@v4 with: - install_args: go go:golang.org/x/vuln/cmd/govulncheck + install_args: go govulncheck - name: Vulnerability check run: mise run vulncheck diff --git a/.goreleaser.yml b/.goreleaser.yml index b817627..2f93ec2 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -6,7 +6,6 @@ release: before: hooks: - go mod tidy - - go generate ./... builds: - env: @@ -14,31 +13,20 @@ builds: goos: - linux - darwin - - windows + goarch: + - amd64 + - arm64 signs: - cmd: cosign - signature: "${artifact}.sig" - certificate: "${artifact}.pem" + signature: "${artifact}.sigstore.json" args: - "sign-blob" - - "--oidc-issuer=https://token.actions.githubusercontent.com" - - "--output-certificate=${certificate}" - - "--output-signature=${signature}" + - "--bundle=${signature}" - "${artifact}" - "--yes" artifacts: checksum -brews: - - name: mult - repository: - owner: dhth - name: homebrew-tap - directory: Formula - license: MIT - homepage: "https://github.com/dhth/mult" - description: "Run a command multiple times and glance at the outputs" - changelog: sort: asc filters: diff --git a/mise.lock b/mise.lock index 99860e1..23f82c2 100644 --- a/mise.lock +++ b/mise.lock @@ -1,8 +1,11 @@ # @generated - this file is auto-generated by `mise lock` https://mise.jdx.dev/dev-tools/mise-lock.html +lockfile_version = 1 + [[tools.actionlint]] version = "1.7.12" backend = "aqua:rhysd/actionlint" +specifiers = ["latest"] [tools.actionlint."platforms.linux-arm64"] checksum = "sha256:325e971b6ba9bfa504672e29be93c24981eeb1c07576d730e9f7c8805afff0c6" @@ -47,64 +50,56 @@ url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/3849249 provenance = "github-attestations" [[tools.cosign]] -version = "2.5.0" +version = "3.1.3" backend = "aqua:sigstore/cosign" +specifiers = ["3.1.3"] [tools.cosign."platforms.linux-arm64"] -checksum = "sha256:080a998f9878f22dafdb9ad54d5b2e2b8e7a38c53527250f9d89a6763a28d545" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-linux-arm64" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375255" +checksum = "sha256:c5d324e091826b0d7a78eb16fef316450b4eb9aaec045611c08ba06f5e73220a" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-linux-arm64" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286299" +provenance = "cosign" [tools.cosign."platforms.linux-arm64-musl"] -checksum = "sha256:080a998f9878f22dafdb9ad54d5b2e2b8e7a38c53527250f9d89a6763a28d545" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-linux-arm64" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375255" +checksum = "sha256:c5d324e091826b0d7a78eb16fef316450b4eb9aaec045611c08ba06f5e73220a" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-linux-arm64" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286299" +provenance = "cosign" [tools.cosign."platforms.linux-x64"] -checksum = "sha256:1f6c194dd0891eb345b436bb71ff9f996768355f5e0ce02dde88567029ac2188" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-linux-amd64" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375510" +checksum = "sha256:4629c757b7618056f8ddd7e2625ae9fdd94c0372a65049520bc7d9df9efc7f71" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-linux-amd64" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286005" +provenance = "cosign" [tools.cosign."platforms.linux-x64-musl"] -checksum = "sha256:1f6c194dd0891eb345b436bb71ff9f996768355f5e0ce02dde88567029ac2188" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-linux-amd64" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375510" +checksum = "sha256:4629c757b7618056f8ddd7e2625ae9fdd94c0372a65049520bc7d9df9efc7f71" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-linux-amd64" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286005" +provenance = "cosign" [tools.cosign."platforms.macos-arm64"] -checksum = "sha256:780da3654d9601367b0d54686ac65cb9716578610cabe292d725c7008de4db85" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-darwin-arm64" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375488" +checksum = "sha256:5cf948c2f4dfe59687bdd0b8523709067383e03982cc543475c8a7dc70e92a76" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-darwin-arm64" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286205" +provenance = "cosign" [tools.cosign."platforms.macos-x64"] -checksum = "sha256:d61cc50f6f32c2b63cb81cd8a935e5dd1be8520d639242031a1102092bee44d4" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-darwin-amd64" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375435" +checksum = "sha256:2347488e5d5b25336644024dfeca5601b190e91197a71a917bda44744aff106c" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-darwin-amd64" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286177" +provenance = "cosign" [tools.cosign."platforms.windows-x64"] -checksum = "sha256:2345667cbcf60767c1a6f678755cbb7465367761084e9d2cbb59ae0cc1a94437" -url = "https://github.com/sigstore/cosign/releases/download/v2.5.0/cosign-windows-amd64.exe" -url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/244375159" - -[[tools."github:dhth/terminal-control"]] -version = "0.6.0-r1" -backend = "github:dhth/terminal-control" - -[tools."github:dhth/terminal-control".options] -version_prefix = "musl-v" - -[tools."github:dhth/terminal-control"."platforms.linux-x64"] -checksum = "sha256:63ae2cc1e83ac4e79d0ae7d2c606d87215b9831612d7f97440283356c1c03388" -url = "https://github.com/dhth/terminal-control/releases/download/musl-v0.6.0-r1/termctrl-0.6.0-linux-x86_64-musl.tar.gz" -url_api = "https://api.github.com/repos/dhth/terminal-control/releases/assets/513997951" - -[tools."github:dhth/terminal-control"."platforms.linux-x64-musl"] -checksum = "sha256:63ae2cc1e83ac4e79d0ae7d2c606d87215b9831612d7f97440283356c1c03388" -url = "https://github.com/dhth/terminal-control/releases/download/musl-v0.6.0-r1/termctrl-0.6.0-linux-x86_64-musl.tar.gz" -url_api = "https://api.github.com/repos/dhth/terminal-control/releases/assets/513997951" +checksum = "sha256:9fe59be0eca1271873ce019061335eb1ac419b7059202e797828467ddabe33be" +url = "https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-windows-amd64.exe" +url_api = "https://api.github.com/repos/sigstore/cosign/releases/assets/503286236" +provenance = "cosign" [[tools.go]] version = "1.26.6" backend = "core:go" +specifiers = ["1.26.6"] [tools.go."platforms.linux-arm64"] checksum = "sha256:d0507e9e9d7fe012aae570108cbd76c15de879e17130ab8cb90d4d7445cb1f2e" @@ -134,13 +129,10 @@ url = "https://dl.google.com/go/go1.26.6.darwin-amd64.tar.gz" checksum = "sha256:5b6c5b556525810463b5c897b50dc7a82d6a3dc0bfaf55d990a7e9f31d6b2318" url = "https://dl.google.com/go/go1.26.6.windows-amd64.zip" -[[tools."go:golang.org/x/vuln/cmd/govulncheck"]] -version = "1.7.0" -backend = "go:golang.org/x/vuln/cmd/govulncheck" - [[tools.gofumpt]] version = "0.11.0" backend = "aqua:mvdan/gofumpt" +specifiers = ["latest"] [tools.gofumpt."platforms.linux-arm64"] checksum = "sha256:9272c2d1738acc1acae33793419e74c69653e70fe56bec4ad9044b12b54715e5" @@ -178,104 +170,108 @@ url = "https://github.com/mvdan/gofumpt/releases/download/v0.11.0/gofumpt_v0.11. url_api = "https://api.github.com/repos/mvdan/gofumpt/releases/assets/491232806" [[tools.golangci-lint]] -version = "2.12.2" +version = "2.13.2" backend = "aqua:golangci/golangci-lint" +specifiers = ["latest"] [tools.golangci-lint."platforms.linux-arm64"] -checksum = "sha256:44cd40a8c76c86755375adfeea52cfd3533cb43d7bd647771e0ae065e166df3a" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-linux-arm64.tar.gz" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413470996" +checksum = "sha256:a2a4e0065aa41be71f7c5ac90f271b61751331e5d04314e62afe4027855f0893" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-linux-arm64.tar.gz" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995442" provenance = "github-attestations" [tools.golangci-lint."platforms.linux-arm64-musl"] -checksum = "sha256:44cd40a8c76c86755375adfeea52cfd3533cb43d7bd647771e0ae065e166df3a" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-linux-arm64.tar.gz" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413470996" +checksum = "sha256:a2a4e0065aa41be71f7c5ac90f271b61751331e5d04314e62afe4027855f0893" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-linux-arm64.tar.gz" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995442" provenance = "github-attestations" [tools.golangci-lint."platforms.linux-x64"] -checksum = "sha256:8df580d2670fed8fa984aac0507099af8df275e665215f5c7a2ae3943893a553" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-linux-amd64.tar.gz" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413471054" +checksum = "sha256:2277d43b98ec0054280f2ac26b53268bae97682444678a59a657dd565da021d6" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-linux-amd64.tar.gz" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995333" provenance = "github-attestations" [tools.golangci-lint."platforms.linux-x64-musl"] -checksum = "sha256:8df580d2670fed8fa984aac0507099af8df275e665215f5c7a2ae3943893a553" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-linux-amd64.tar.gz" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413471054" +checksum = "sha256:2277d43b98ec0054280f2ac26b53268bae97682444678a59a657dd565da021d6" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-linux-amd64.tar.gz" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995333" provenance = "github-attestations" [tools.golangci-lint."platforms.macos-arm64"] -checksum = "sha256:a9c54498731b3128f79e090be6110f3e5fffccc617b08142ed244d4126c73f29" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-darwin-arm64.tar.gz" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413470950" +checksum = "sha256:f4bf83f0b64f055c42b28fc9a38861839f69c096e61c788e72dfaae412011789" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-darwin-arm64.tar.gz" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995398" provenance = "github-attestations" [tools.golangci-lint."platforms.macos-x64"] -checksum = "sha256:f6f06d94b6241521c53d15450c5209b028270bf966f842afb11c030c79f5bc16" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-darwin-amd64.tar.gz" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413470980" +checksum = "sha256:8a13aaf9cbbb1dee52824e862cf0d0720e5bb97c1f4260d1e51623a09492b57b" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-darwin-amd64.tar.gz" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995222" provenance = "github-attestations" [tools.golangci-lint."platforms.windows-x64"] -checksum = "sha256:bd42e3ebc8cb4ececb86941983baaf1dc221bbb04d838e94ce63b49cc91e02bb" -url = "https://github.com/golangci/golangci-lint/releases/download/v2.12.2/golangci-lint-2.12.2-windows-amd64.zip" -url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/413471017" +checksum = "sha256:4735fdc8e84a0cfb7a15a1c364a650942f88215e0d36c674ebc4024f7b554524" +url = "https://github.com/golangci/golangci-lint/releases/download/v2.13.2/golangci-lint-2.13.2-windows-amd64.zip" +url_api = "https://api.github.com/repos/golangci/golangci-lint/releases/assets/532995335" provenance = "github-attestations" [[tools.goreleaser]] -version = "2.14.1" +version = "2.18.0" backend = "aqua:goreleaser/goreleaser" +specifiers = ["2.18.0"] [tools.goreleaser."platforms.linux-arm64"] -checksum = "sha256:a84d3b27f052c12ad5c8342d7caf1450a7174a305730aed21d72db09301e49a5" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Linux_arm64.tar.gz" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259739" +checksum = "sha256:1975566c9668e6f4247e6bb57656f21da13635c24d948ef47b1232e5c864a35b" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Linux_arm64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873789" provenance = "github-attestations" [tools.goreleaser."platforms.linux-arm64-musl"] -checksum = "sha256:a84d3b27f052c12ad5c8342d7caf1450a7174a305730aed21d72db09301e49a5" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Linux_arm64.tar.gz" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259739" +checksum = "sha256:1975566c9668e6f4247e6bb57656f21da13635c24d948ef47b1232e5c864a35b" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Linux_arm64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873789" provenance = "github-attestations" [tools.goreleaser."platforms.linux-x64"] -checksum = "sha256:2df975a7acbfdeaf888d596cab0024d48ec7fb7d747e1d08b90948b791f40a5f" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Linux_x86_64.tar.gz" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259765" +checksum = "sha256:41cdf49b653784b03a08013dd99e382cd5d463049e915c2d818eaed182ae6197" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Linux_x86_64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873785" provenance = "github-attestations" [tools.goreleaser."platforms.linux-x64-musl"] -checksum = "sha256:2df975a7acbfdeaf888d596cab0024d48ec7fb7d747e1d08b90948b791f40a5f" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Linux_x86_64.tar.gz" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259765" +checksum = "sha256:41cdf49b653784b03a08013dd99e382cd5d463049e915c2d818eaed182ae6197" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Linux_x86_64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873785" provenance = "github-attestations" [tools.goreleaser."platforms.macos-arm64"] -checksum = "sha256:9f2e47f847b4f4177376fc6aa6914fbc7f673f59720076747e738b578c2e896e" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Darwin_all.tar.gz" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259772" +checksum = "sha256:285abb188274f3eebffb97fcd17a7d25f109fe33e234597c393e78e869386d5c" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Darwin_all.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873866" provenance = "github-attestations" [tools.goreleaser."platforms.macos-x64"] -checksum = "sha256:9f2e47f847b4f4177376fc6aa6914fbc7f673f59720076747e738b578c2e896e" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Darwin_all.tar.gz" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259772" +checksum = "sha256:285abb188274f3eebffb97fcd17a7d25f109fe33e234597c393e78e869386d5c" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Darwin_all.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873866" provenance = "github-attestations" [tools.goreleaser."platforms.windows-x64"] -checksum = "sha256:d7a3d8ba795e97ab8c4f8003630d300da164adf21fde5a4049440c20f15c3137" -url = "https://github.com/goreleaser/goreleaser/releases/download/v2.14.1/goreleaser_Windows_x86_64.zip" -url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/362259806" +checksum = "sha256:cbd0aeab833806b6c07e2d156c2c9baaffa6e3d1fb870071bf3efc9d9e5b4777" +url = "https://github.com/goreleaser/goreleaser/releases/download/v2.18.0/goreleaser_Windows_x86_64.zip" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/526873786" provenance = "github-attestations" -[[tools."npm:@kitlangton/terminal-control-darwin-arm64"]] -version = "0.6.0" -backend = "npm:@kitlangton/terminal-control-darwin-arm64" +[[tools.govulncheck]] +version = "1.7.0" +backend = "go:golang.org/x/vuln/cmd/govulncheck" +specifiers = ["latest"] [[tools.yamlfmt]] version = "0.21.0" backend = "aqua:google/yamlfmt" +specifiers = ["latest"] [tools.yamlfmt."platforms.linux-arm64"] checksum = "sha256:5b2689c963b177271330c5ce8ca7396751107e5a826be46f03d2cb9b6f0c7784" diff --git a/mise.toml b/mise.toml index d305149..a3813d9 100644 --- a/mise.toml +++ b/mise.toml @@ -2,20 +2,17 @@ task.run_auto_install = false [tools] -actionlint = "1.7.12" -cosign = "2.5.0" +actionlint = "latest" +cosign = "3.1.3" go = "1.26.6" -"go:golang.org/x/vuln/cmd/govulncheck" = "latest" -gofumpt = "0.11.0" -golangci-lint = "2.12.2" -goreleaser = "2.14.1" -"npm:@kitlangton/terminal-control-darwin-arm64" = { version = "0.6.0", os = ["macos/arm64"] } -yamlfmt = "0.21.0" - -[tools."github:dhth/terminal-control"] -version = "0.6.0-r1" -version_prefix = "musl-v" -os = ["linux/x64"] +gofumpt = "latest" +golangci-lint = "latest" +goreleaser = "2.18.0" +govulncheck = { version = "latest", depends = "go" } +yamlfmt = "latest" + +[tool_alias] +govulncheck = "go:golang.org/x/vuln/cmd/govulncheck" [tasks.all] alias = "a"