Repository: aquaproj/aqua-registry
Pull request #32935: feat(a-h/templ): cosign config
Author: login: scop
Created: 2025-03-06T21:31:09Z | Merged: 2025-03-06T22:32:47Z

https://github.com/a-h/templ/releases

https://github.com/a-h/templ/blob/main/docs/docs/10-security/03-code-signing.md

I did not have luck verifying releases < 0.2.639, which was the first version where cosign.pub was in the repo.

## Check List

<!-- Please check the list. Please don't remove the check list. -->

- [x] Read [CONTRIBUTING.md](https://aquaproj.github.io/docs/products/aqua-registry/contributing)
  - [ ] Read [OSS Contribution Guide](https://github.com/suzuki-shunsuke/oss-contribution-guide/blob/main/README.md)
- [x] [All commits are signed](https://github.com/suzuki-shunsuke/oss-contribution-guide/blob/main/docs/commit-signing.md)
  - This repository enables `Require signed commits`, so all commits must be signed
- [x] [Avoid force push](https://github.com/suzuki-shunsuke/oss-contribution-guide?tab=readme-ov-file#dont-do-force-pushes-after-opening-pull-requests)
- [ ] Install and execute the package and confirm if the package works well
- [Execute `cmdx s` to scaffold code](https://aquaproj.github.io/docs/products/aqua-registry/contributing/#use-cmdx-s-definitely)

<!-- Please write the description here -->



Diff:
diff --git a/pkgs/a-h/templ/pkg.yaml b/pkgs/a-h/templ/pkg.yaml
index 983accbca7c..6b0f9ee334a 100644
--- a/pkgs/a-h/templ/pkg.yaml
+++ b/pkgs/a-h/templ/pkg.yaml
@@ -1,8 +1,10 @@
 packages:
   - name: a-h/templ@v0.3.833
   - name: a-h/templ
-    version: v0.0.153
+    version: v0.2.598
   - name: a-h/templ
-    version: v0.0.139
+    version: v0.2.194
   - name: a-h/templ
-    version: v0.0.80
+    version: v0.0.148
+  - name: a-h/templ
+    version: v0.0.126
diff --git a/pkgs/a-h/templ/registry.yaml b/pkgs/a-h/templ/registry.yaml
index 7b14a23bb0a..85f5dc707b3 100644
--- a/pkgs/a-h/templ/registry.yaml
+++ b/pkgs/a-h/templ/registry.yaml
@@ -4,31 +4,74 @@ packages:
     repo_owner: a-h
     repo_name: templ
     description: A language for writing HTML user interfaces in Go
-    asset: templ_{{.OS}}_{{.Arch}}.{{.Format}}
-    format: tar.gz
-    replacements:
-      amd64: x86_64
-      darwin: Darwin
-      linux: Linux
-      windows: Windows
-    checksum:
-      type: github_release
-      asset: checksums.txt
-      algorithm: sha256
-    version_constraint: semver(">= 0.2.202")
+    version_constraint: "false"
     version_overrides:
-      - version_constraint: semver(">= 0.0.153")
+      - version_constraint: semver("<= 0.0.126")
         asset: templ_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-      - version_constraint: semver(">= 0.0.139")
+        format: tar.gz
+        rosetta2: true
+        windows_arm_emulation: true
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("<= 0.0.148")
         asset: templ_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-        supported_envs:
-          - darwin
-          - linux
-          - amd64
-      - version_constraint: semver("< 0.0.139")
+        format: tar.gz
+        windows_arm_emulation: true
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("<= 0.2.194")
         asset: templ_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-        supported_envs:
-          - darwin
-          - linux
-          - amd64
-        rosetta2: true
+        format: tar.gz
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("< 0.2.639")
+        asset: templ_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: "true"
+        asset: templ_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+          cosign:
+            opts:
+              - --signature
+              - https://github.com/a-h/templ/releases/download/{{.Version}}/checksums.txt.sig
+              - --key
+              - https://raw.githubusercontent.com/a-h/templ/refs/tags/{{.Version}}/cosign.pub
diff --git a/registry.yaml b/registry.yaml
index 0f88b4232b4..6e6438c6f87 100644
--- a/registry.yaml
+++ b/registry.yaml
@@ -6121,34 +6121,77 @@ packages:
     repo_owner: a-h
     repo_name: templ
     description: A language for writing HTML user interfaces in Go
-    asset: templ_{{.OS}}_{{.Arch}}.{{.Format}}
-    format: tar.gz
-    replacements:
-      amd64: x86_64
-      darwin: Darwin
-      linux: Linux
-      windows: Windows
-    checksum:
-      type: github_release
-      asset: checksums.txt
-      algorithm: sha256
-    version_constraint: semver(">= 0.2.202")
+    version_constraint: "false"
     version_overrides:
-      - version_constraint: semver(">= 0.0.153")
+      - version_constraint: semver("<= 0.0.126")
         asset: templ_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-      - version_constraint: semver(">= 0.0.139")
+        format: tar.gz
+        rosetta2: true
+        windows_arm_emulation: true
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("<= 0.0.148")
         asset: templ_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-        supported_envs:
-          - darwin
-          - linux
-          - amd64
-      - version_constraint: semver("< 0.0.139")
+        format: tar.gz
+        windows_arm_emulation: true
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("<= 0.2.194")
         asset: templ_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
-        supported_envs:
-          - darwin
-          - linux
-          - amd64
-        rosetta2: true
+        format: tar.gz
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: semver("< 0.2.639")
+        asset: templ_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+      - version_constraint: "true"
+        asset: templ_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+          cosign:
+            opts:
+              - --signature
+              - https://github.com/a-h/templ/releases/download/{{.Version}}/checksums.txt.sig
+              - --key
+              - https://raw.githubusercontent.com/a-h/templ/refs/tags/{{.Version}}/cosign.pub
   - type: github_release
     repo_owner: a8m
     repo_name: envsubst


Reviews:
user: login: suzuki-shunsuke
state: COMMENTED
author_association: MEMBER
submitted_at: 2025-03-06T21:41:46Z
user: login: scop
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-03-06T22:26:19Z

Review comments:
diff_hunk: @@ -1,8 +1,10 @@
 packages:
   - name: a-h/templ@v0.3.833
   - name: a-h/templ
-    version: v0.0.153
+    version: v0.2.639
path: pkgs/a-h/templ/pkg.yaml
user: login: suzuki-shunsuke
body: This test data doesn't match with the version constraint.

```yaml
- version_constraint: semver("< 0.2.639")
```
created_at: 2025-03-06T21:41:46Z
author_association: MEMBER
diff_hunk: @@ -1,8 +1,10 @@
 packages:
   - name: a-h/templ@v0.3.833
   - name: a-h/templ
-    version: v0.0.153
+    version: v0.2.639
path: pkgs/a-h/templ/pkg.yaml
user: login: scop
body: Oops! Mistake when manually bisecting first working version. Fixed in bb1a822a33eb817788356317c6db1b8667d71f73
created_at: 2025-03-06T22:26:19Z
author_association: CONTRIBUTOR

PR comments:
user: login: suzuki-shunsuke
created_at: 2025-03-06T21:42:00Z
body: Thank you always!
author_association: MEMBER
user: login: suzuki-shunsuke
created_at: 2025-03-07T08:45:15Z
body: 🎉 https://github.com/aquaproj/aqua-registry/releases/tag/v4.324.2
author_association: MEMBER