internal/rosa: release monitoring via Anitya

This is much more sustainable than manual package flagging.

Signed-off-by: Ophestra <cat@gensokyo.uk>

cmd/mbf/main.go

@@ -10,6 +10,7 @@ import (
 	"os/signal"
 	"path/filepath"
 	"runtime"
+	"strconv"
 	"syscall"
 	"time"
 	"unique"
@@ -129,6 +130,31 @@ func main() {
 		)
 	}
 
+	c.NewCommand("updates", command.UsageInternal, func([]string) error {
+		var n int
+		for i := range rosa.PresetEnd {
+			p := rosa.PArtifact(i)
+			meta := rosa.GetMetadata(p)
+			if meta.ID == 0 {
+				continue
+			}
+
+			if v, err := meta.GetVersions(ctx); err != nil {
+				return err
+			} else if current := rosa.Std.Version(p); v.Latest != current {
+				n++
+				log.Printf("%s %s < %s", meta.Name, current, v.Latest)
+			} else {
+				msg.Verbosef("%s is up to date", meta.Name)
+			}
+		}
+
+		if n > 0 {
+			return errors.New(strconv.Itoa(n) + " packages are out of date")
+		}
+		return nil
+	})
+
 	{
 		var (
 			flagGentoo   string