Commit Graph
3657 Commits
Author SHA1 Message Date
Carlos A Becker 16f7e0d172 docs: clarify release.skip behavior
It skips the entire SCM release, not  only the artifact upload.

Closes #3051

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-19 09:06:12 -03:00
dependabot[bot] 8dc34370d3 chore(deps): bump anchore/sbom-action from 0.10.0 to 0.11.0 (#3050)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/407a3ec314b07e326eff3ba171091cbc150460a8...bb716408e75840bbb01e839347cd213767269d4a)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-18 10:22:05 -03:00
Carlos A Becker a53afde02a docs: update
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
v1.8.2
2022-04-16 15:37:42 -03:00
Albert Salim 50fb252272 test: change test docker registry port numbers (#3046)
Port 5000 is used by MacOS Monterey for
Airplay Receiver by default.
2022-04-16 15:33:17 -03:00
Carlos A Becker 0ba753c496 fix: man pages
closes #3048

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-16 15:31:43 -03:00
Carlos A Becker dbf2d0e293 fix: brew formula default goamd64
Was defaulting to v2 instead of v1.

closes #3049

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-16 15:26:14 -03:00
Carlos A Becker 3663ec1b13 test: goamd64 tests
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
v1.8.1
2022-04-15 23:26:25 -03:00
Carlos A Becker d513b708d0 docs: improve goamd64 docs
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-15 23:26:15 -03:00
Carlos A Becker 21df724a1e fix: snapcraft and GOAMD64
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-15 23:25:32 -03:00
Carlos A Becker 3e8b848e44 docs: nightlies
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
v1.8.0
2022-04-14 14:57:13 -03:00
Carlos A Becker ed5e20ae0a docs: organize menu a bit
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-14 14:23:59 -03:00
Carlos A Becker d8a283ab87 docs: pluralize
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-14 14:23:09 -03:00
Carlos A Becker bac1ce288b feat(deps): update docker image cosign version
Update to v1.7.2

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 23:59:15 -03:00
Carlos A Becker e3a50e7b9d docs: note goamd64 and nfpm conventional file names
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 23:44:17 -03:00
Carlos A Becker 2d6e83cf3f fix: nfpm conventional file names with GOAMD64
Fixes conventional file names when using GOAMD64

refs #3016

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 23:38:39 -03:00
Carlos A Becker c30339070e fix(snap): incorrect skip due go GOAMD64
the valid arch check was not considering GOAMD64

refs #3016

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 23:12:58 -03:00
Carlos Alexandro Becker bdef306b79 fix(ci): dont use krew fork (#3040)
* fix(ci): use setup-krew action instead of go install

also switch back to main krew as my PR was recently released.

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* fix: use go install

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* fix: use go install

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 23:00:29 -03:00
Carlos Alexandro Becker 0e149698af fix(ci): misspell action (#3041)
the misspell action is failing, but we can run it through golangci-lint, so, just doing that now.

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 22:39:59 -03:00
Carlos Alexandro Becker 1c2a1b56d8 fix: nfpm lintian concurrency issue (#3039)
* fix: nfpm lintian concurrency issue

Several goroutines might touch the lintian file inside dist at the same
time, which might cause weird errors, namely `archive/tar: write too long`.

This PR fixes it by namespacing the file to the package name + arch,
so one goroutine won't touch the work of the other.

It also improves some logs and tests.

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* fix: linter issues

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 22:26:58 -03:00
Carlos A Becker 53bbc6546f fix: goamd64 should allow the only range from v1 to v4
It was just allowing v2 and v3 due to some misreading on my side.
This commit fixes it to allow v1, v2, v3 and v4.

refs #3016

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-13 21:30:08 -03:00
Naveen 09c622c226 feat: pin base docker image by sha (#3038)
Pinned dependencies reduce several security risks:

They ensure that checking and deployment are all done with the same software, reducing deployment risks, simplifying debugging, and enabling reproducibility.
They can help mitigate compromised dependencies from undermining the security of the project (in the case where you've evaluated
2022-04-13 15:38:11 -03:00
actions-user 11b4bf1bbc docs: update 2022-04-13 17:43:46 +00:00
Naveen 38ea40c442 fix: set permissions for GitHub actions (#3036)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-13 14:42:11 -03:00
dependabot[bot] 4ab2fbfa22 feat(deps): bump golang from 1.18-alpine to 1.18.1-alpine (#3035)
Bumps golang from 1.18-alpine to 1.18.1-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-13 09:38:07 -03:00
dependabot[bot] b0d00f2cff chore(deps): bump stefanzweifel/git-auto-commit-action (#3034)
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.14.0 to 4.14.1.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/c4b132ec2c77a21fcab564bd3c92610cee84b894...49620cd3ed21ee620a48530e81dba0d139c9cb80)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-13 09:37:34 -03:00
dependabot[bot] ada44d87af feat(deps): bump github.com/xanzy/go-gitlab from 0.62.0 to 0.63.0 (#3033)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.62.0 to 0.63.0.
- [Release notes](https://github.com/xanzy/go-gitlab/releases)
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.62.0...v0.63.0)

---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-12 09:11:14 -03:00
Carlos Alexandro Becker ce9058ac8c refactor: use context on git exec calls (#3032) 2022-04-12 08:35:19 -03:00
Carlos A Becker 9fc502c18a chore: update jsonschema 2022-04-12 01:09:20 -03:00
Carlos A Becker 700c8a682f fix: nfpm id filter 2022-04-12 01:08:49 -03:00
Carlos A Becker 9dfade2558 fix: nfpm default build ids to empty 2022-04-11 23:59:52 -03:00
Carlos A Becker cd7edb7a2e chore: fix typo 2022-04-11 23:58:39 -03:00
Carlos A Becker 9c773d6d6b fix: remove some deprecated brew todos 2022-04-11 23:58:18 -03:00
Carlos A Becker de825aab35 fix: remove deprecated todo 2022-04-11 23:57:17 -03:00
Carlos Alexandro Becker 6c9a97f2af docs: remove analytics (#3017)
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-11 22:44:04 -03:00
Carlos Alexandro Becker b0583c700b feat: support GOAMD64 (#3016)
* feat: support GOAMD64

* fix: test

* wip

* wip: docker et al

* fix: archive format name

* test: added new test

* feat: nfpm amd4, mips et al

* chore: rm unused file

* fix: brew for multiple goamd64

* fix: krew

* feat: aur

* feat: krew

* docs: brew

* feat: gofis

* feat: scoop

* fix: docker filters

* fix: snapcraft

* fix: improve diff a bit

* fix: snapcraft name template
2022-04-11 22:43:22 -03:00
Carlos Alexandro Becker acfffe1c98 refactor: improve scoop tests (#3031)
* refactor: improve scoop tests

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* fix: improve diff a bit
2022-04-11 20:19:58 -03:00
Carlos A Becker 7082217206 fix: improve github cli log 2022-04-11 09:47:14 -03:00
Carlos A Becker e60965ecd3 docs: update actions doc 2022-04-11 09:35:03 -03:00
dependabot[bot] 0edd69a47e chore(deps): bump github/codeql-action from 2.1.7 to 2.1.8 (#3029)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.7 to 2.1.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/0182a2c78c8a55b763909348834ed54d735ab3e2...1ed1437484560351c5be56cf73a48a279d116b78)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-11 08:39:43 -03:00
Carlos Alexandro Becker 02595554de fix: use universal binary id (#3028)
Ensure the new ID is set, and add a test to prevent the bug from
happening again.

closes #3027
2022-04-08 21:15:07 -03:00
Carlos A Becker 610a99f6c1 fix: downgrade gocloud.dev
v0.25.0 breaks the build on darwin.

reverts #3018
refs https://github.com/google/go-cloud/issues/3114

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-08 13:32:55 -03:00
dependabot[bot]andCarlos A Becker c50dbc5bd5 feat(deps): bump github.com/charmbracelet/keygen from 0.2.1 to 0.3.0 (#3024)
* feat(deps): bump github.com/charmbracelet/keygen from 0.2.1 to 0.3.0

Bumps [github.com/charmbracelet/keygen](https://github.com/charmbracelet/keygen) from 0.2.1 to 0.3.0.
- [Release notes](https://github.com/charmbracelet/keygen/releases)
- [Commits](https://github.com/charmbracelet/keygen/compare/v0.2.1...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/keygen
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: dep update

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-08 13:30:11 -03:00
dependabot[bot]andCarlos Alexandro Becker dd0de9db07 chore(deps): bump anchore/sbom-action from 0.9.0 to 0.10.0 (#3026)
* chore(deps): bump anchore/sbom-action from 0.9.0 to 0.10.0

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.9.0 to 0.10.0.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/f6c3d0fe42c3cf876e3462574e4c9416b5e0f07a...407a3ec314b07e326eff3ba171091cbc150460a8)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update .github/workflows/build.yml

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2022-04-08 12:18:20 -03:00
dependabot[bot] 07ebdfd05e chore(deps): bump github/codeql-action from 2.1.6 to 2.1.7 (#3021)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/28eead240834b314f7def40f6fcba65d100d99b1...0182a2c78c8a55b763909348834ed54d735ab3e2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-06 09:41:08 -03:00
dependabot[bot]andCarlos Alexandro Becker 796c4f209e chore(deps): bump codecov/codecov-action from 2.1.0 to 3 (#3022)
* chore(deps): bump codecov/codecov-action from 2.1.0 to 3

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.1.0 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/f32b3a3741e1053eb607407145bc9619351dc93b...e3c560433a6cc60aec8812599b7844a7b4fa0d71)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update .github/workflows/build.yml

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2022-04-06 09:40:50 -03:00
dependabot[bot] cb11951dcc feat(deps): bump github.com/xanzy/go-gitlab from 0.61.0 to 0.62.0 (#3025)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.61.0 to 0.62.0.
- [Release notes](https://github.com/xanzy/go-gitlab/releases)
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.61.0...v0.62.0)

---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-06 09:40:19 -03:00
dependabot[bot] 0402dd371a chore(deps): bump anchore/sbom-action from 0.8.0 to 0.9.0 (#3023)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/2ad78246293830258e98b4e707b1fb02d0242828...f6c3d0fe42c3cf876e3462574e4c9416b5e0f07a)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-06 09:40:06 -03:00
dependabot[bot] 33b255c07f feat(deps): bump github.com/xanzy/go-gitlab from 0.60.0 to 0.61.0 (#3019)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.60.0 to 0.61.0.
- [Release notes](https://github.com/xanzy/go-gitlab/releases)
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.60.0...v0.61.0)

---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-04 09:18:58 -03:00
dependabot[bot] 995014ce54 feat(deps): bump gocloud.dev from 0.24.0 to 0.25.0 (#3018)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-04 09:10:39 -03:00
Carlos Alexandro Becker 37f0f37bc0 feat: tmpl snap fields (#3003)
* feat: tmpl snap fields

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* added tests

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* fix: broken test

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2022-04-02 22:58:33 -03:00