1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-04 03:11:55 +02:00
Commit Graph

5854 Commits

Author SHA1 Message Date
dependabot[bot]
1f5b7ee814
chore(deps): bump github.com/slack-go/slack from 0.13.1 to 0.14.0 (#5085)
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.13.1 to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.0</h2>
<h2>What's Changed</h2>
<p>v0.14.0 is now available. It contains <strong>no breaking
changes</strong> but does include several pieces of new functionality
and long-standing bug fixes.</p>
<h3>Enhancements</h3>
<ul>
<li>Added Support for receiving <code>metadata</code> when receiving a
<code>MessageEvent</code> over WebSocket by <a
href="https://github.com/rfratto"><code>@​rfratto</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1307">slack-go/slack#1307</a></li>
<li>Added a new field to expose file data when receiving a
<code>File</code> event from a Slack Connect Channel by <a
href="https://github.com/zFlabmonsta"><code>@​zFlabmonsta</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1312">slack-go/slack#1312</a></li>
<li>Added support for the <code>slack_file</code> in the image block by
<a href="https://github.com/rhysm"><code>@​rhysm</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1311">slack-go/slack#1311</a></li>
<li>Added 35 missing Websocket event types by <a
href="https://github.com/Aryakoste"><code>@​Aryakoste</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1306">slack-go/slack#1306</a></li>
<li>Added support for parsing <code>AppRateLimited</code> events in the
<code>ParseEvent</code> function by <a
href="https://github.com/nemuvski"><code>@​nemuvski</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1308">slack-go/slack#1308</a></li>
<li>Added newly documented Channel Canvas properties to the
<code>conversations.info</code> Web API method by <a
href="https://github.com/ku"><code>@​ku</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1228">slack-go/slack#1228</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Fixed an edge case when using <code>UpdateRemoteFileContext</code>
and <code>UpdateRemoteFile</code> and Image Previews would return an
<code>invalid_auth</code> error by <a
href="https://github.com/EkeMinusYou"><code>@​EkeMinusYou</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1117">slack-go/slack#1117</a></li>
</ul>
<h3>Chores / Code Cleanup</h3>
<ul>
<li>Replaced deprecated <code>ioutil</code> with <code>io</code> and
<code>os</code> packages by <a
href="https://github.com/nakamasato"><code>@​nakamasato</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1310">slack-go/slack#1310</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/rfratto"><code>@​rfratto</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1307">slack-go/slack#1307</a></li>
<li><a
href="https://github.com/nakamasato"><code>@​nakamasato</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1310">slack-go/slack#1310</a></li>
<li><a href="https://github.com/rhysm"><code>@​rhysm</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1311">slack-go/slack#1311</a></li>
<li><a href="https://github.com/Aryakoste"><code>@​Aryakoste</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1306">slack-go/slack#1306</a></li>
<li><a href="https://github.com/nemuvski"><code>@​nemuvski</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1308">slack-go/slack#1308</a></li>
<li><a href="https://github.com/ku"><code>@​ku</code></a> made their
first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1228">slack-go/slack#1228</a></li>
<li><a
href="https://github.com/EkeMinusYou"><code>@​EkeMinusYou</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1117">slack-go/slack#1117</a></li>
<li><a
href="https://github.com/jjjjeeffff"><code>@​jjjjeeffff</code></a> was
instrumental in the successful resolution of <a
href="https://redirect.github.com/slack-go/slack/pull/1117">slack-go/slack#1117</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.13.1...v0.14.0">https://github.com/slack-go/slack/compare/v0.13.1...v0.14.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="242df4614e"><code>242df46</code></a>
fix: create multipart form when multipart request (<a
href="https://redirect.github.com/slack-go/slack/issues/1117">#1117</a>)</li>
<li><a
href="5345c06b76"><code>5345c06</code></a>
feat: Add Properties.Canvas to Channel (<a
href="https://redirect.github.com/slack-go/slack/issues/1228">#1228</a>)</li>
<li><a
href="50e7414b58"><code>50e7414</code></a>
feat: Add support for parsing AppRateLimited events (<a
href="https://redirect.github.com/slack-go/slack/issues/1308">#1308</a>)</li>
<li><a
href="e947079302"><code>e947079</code></a>
feat: Events api reconcilation (<a
href="https://redirect.github.com/slack-go/slack/issues/1306">#1306</a>)</li>
<li><a
href="99b3ebefe7"><code>99b3ebe</code></a>
Add slack_file to image block (<a
href="https://redirect.github.com/slack-go/slack/issues/1311">#1311</a>)</li>
<li><a
href="75103a9661"><code>75103a9</code></a>
add file access field to file struct for slackevents (<a
href="https://redirect.github.com/slack-go/slack/issues/1312">#1312</a>)</li>
<li><a
href="25fefc8d6f"><code>25fefc8</code></a>
chore: replace ioutil with io or os package (<a
href="https://redirect.github.com/slack-go/slack/issues/1310">#1310</a>)</li>
<li><a
href="b9d4317540"><code>b9d4317</code></a>
slackevents: support metadata in MessageEvent (<a
href="https://redirect.github.com/slack-go/slack/issues/1307">#1307</a>)</li>
<li>See full diff in <a
href="https://github.com/slack-go/slack/compare/v0.13.1...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.13.1&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-16 16:49:03 -03:00
Carlos Alexandro Becker
64e8ff1716
chore: issue template config 2024-08-15 15:36:18 -03:00
Carlos Alexandro Becker
d8c179352d
build(nix): improve flake.nix 2024-08-15 14:35:52 -03:00
dependabot[bot]
a1b88757b3
chore(deps): bump github/codeql-action from 3.26.1 to 3.26.2 (#5081)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.1 to 3.26.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="429e197704"><code>429e197</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2425">#2425</a>
from github/update-v3.26.2-a93f8c2fd</li>
<li><a
href="9eec338902"><code>9eec338</code></a>
Update changelog for v3.26.2</li>
<li><a
href="a93f8c2fd1"><code>a93f8c2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2423">#2423</a>
from github/mergeback/v3.26.1-to-main-29d86d22</li>
<li><a
href="af1f2e89e3"><code>af1f2e8</code></a>
Address incorrect CHANGELOG.md</li>
<li><a
href="2bc3b8381e"><code>2bc3b83</code></a>
Update checked-in dependencies</li>
<li><a
href="dd9700c166"><code>dd9700c</code></a>
Reapply &quot;Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2417">#2417</a>
from github/update-bundle/codeql-bundle-v2....</li>
<li><a
href="ece28a826b"><code>ece28a8</code></a>
Update changelog and version after v3.26.1</li>
<li>See full diff in <a
href="29d86d22a3...429e197704">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.1&new-version=3.26.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-15 10:31:01 -03:00
Carlos Alexandro Becker
81c5a206a5
test: make test pass on go 1.23 (#5079)
not sure if this is the right solution though

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-15 09:38:36 -03:00
Carlos Alexandro Becker
06e37acae7
docs: announce v2.2 2024-08-14 23:45:12 -03:00
actions-user
e50b72b4a8 chore: auto-update generated files 2024-08-15 02:43:54 +00:00
Carlos Alexandro Becker
111121bbd9
chore(deps): update nfpm
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-14 22:56:53 -03:00
dependabot[bot]
242021e912
chore(deps): bump golang from 1.22.6-alpine to 1.23.0-alpine (#5076)
Bumps golang from 1.22.6-alpine to 1.23.0-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.22.6-alpine&new-version=1.23.0-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-14 09:44:19 -03:00
dependabot[bot]
58838fd1d3
chore(deps): bump github/codeql-action from 3.26.0 to 3.26.1 (#5077)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.0 to 3.26.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="29d86d22a3"><code>29d86d2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2422">#2422</a>
from github/update-v3.26.1-0d5982aa3</li>
<li><a
href="5b15b9edeb"><code>5b15b9e</code></a>
Revert &quot;Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2417">#2417</a>
from github/update-bundle/codeql-bundle-v2.1...</li>
<li><a
href="18ac79e766"><code>18ac79e</code></a>
Update changelog for v3.26.1</li>
<li><a
href="0d5982aa33"><code>0d5982a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2416">#2416</a>
from github/henrymercer/ghes-3.14-compat-info</li>
<li><a
href="da9ecb0f40"><code>da9ecb0</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2421">#2421</a>
from github/henrymercer/log-job-run-uuid</li>
<li><a
href="c4c3c4421f"><code>c4c3c44</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2417">#2417</a>
from github/update-bundle/codeql-bundle-v2.18.2</li>
<li><a
href="41833c77c6"><code>41833c7</code></a>
Log job run UUID</li>
<li><a
href="d620faa0b4"><code>d620faa</code></a>
Bump the npm group with 4 updates (<a
href="https://redirect.github.com/github/codeql-action/issues/2419">#2419</a>)</li>
<li><a
href="25ad3c8e40"><code>25ad3c8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2418">#2418</a>
from github/henrymercer/extraction-time-telemetry</li>
<li><a
href="44ecae4896"><code>44ecae4</code></a>
Fix matrixing of &quot;submit SARIF after failure&quot; check</li>
<li>Additional commits viewable in <a
href="eb055d739a...29d86d22a3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.0&new-version=3.26.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-14 09:44:02 -03:00
dependabot[bot]
1fc1a45e9e
chore(deps): bump anchore/sbom-action from 0.17.0 to 0.17.1 (#5078)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.0 to 0.17.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.1</h2>
<h2>Changes in v0.17.1</h2>
<ul>
<li>chore(deps): update Syft to v1.11.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/483">#483</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ab9d16d4b4"><code>ab9d16d</code></a>
chore(deps): update Syft to v1.11.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/483">#483</a>)</li>
<li><a
href="fe5e7c313d"><code>fe5e7c3</code></a>
doc: Updates for the Slack to Discourse migration (<a
href="https://redirect.github.com/anchore/sbom-action/issues/484">#484</a>)</li>
<li><a
href="f2d02cbcc3"><code>f2d02cb</code></a>
chore: Create issue template (<a
href="https://redirect.github.com/anchore/sbom-action/issues/481">#481</a>)</li>
<li><a
href="ca15f999af"><code>ca15f99</code></a>
docs: CODE_OF_CONDUCT.md (<a
href="https://redirect.github.com/anchore/sbom-action/issues/480">#480</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.0...v0.17.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-14 09:43:45 -03:00
dependabot[bot]
76d3047763
chore(deps): bump dependabot/fetch-metadata from 1.6.0 to 2.2.0 (#5072)
Bumps
[dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata)
from 1.6.0 to 2.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dependabot/fetch-metadata/releases">dependabot/fetch-metadata's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump actions/create-github-app-token from 1.9.0 to 1.10.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/523">dependabot/fetch-metadata#523</a></li>
<li>Bump actions/create-github-app-token from 1.10.0 to 1.10.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/534">dependabot/fetch-metadata#534</a></li>
<li>Bump braces from 3.0.2 to 3.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/532">dependabot/fetch-metadata#532</a></li>
<li>v2.2.0 by <a
href="https://github.com/fetch-metadata-action-automation"><code>@​fetch-metadata-action-automation</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/520">dependabot/fetch-metadata#520</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dependabot/fetch-metadata/compare/v2...v2.2.0">https://github.com/dependabot/fetch-metadata/compare/v2...v2.2.0</a></p>
<h2>v2.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Relax <code>engine-strict=true</code> by <a
href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/510">dependabot/fetch-metadata#510</a></li>
<li>Handle branch names containing hyphen separators by <a
href="https://github.com/tspencer244"><code>@​tspencer244</code></a> in
<a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/450">dependabot/fetch-metadata#450</a></li>
<li>Switch to monthly release cadence by <a
href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/509">dependabot/fetch-metadata#509</a></li>
<li>v2.1.0 by <a
href="https://github.com/fetch-metadata-action-automation"><code>@​fetch-metadata-action-automation</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/518">dependabot/fetch-metadata#518</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/tspencer244"><code>@​tspencer244</code></a>
made their first contribution in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/450">dependabot/fetch-metadata#450</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dependabot/fetch-metadata/compare/v2.0.0...v2.1.0">https://github.com/dependabot/fetch-metadata/compare/v2.0.0...v2.1.0</a></p>
<h2>v2.0.0 - Switch to <code>node20</code></h2>
<h2>What's Changed</h2>
<ul>
<li>Upgrade from node16 to node20 by <a
href="https://github.com/Nishnha"><code>@​Nishnha</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/443">dependabot/fetch-metadata#443</a>
👈 this is a potentially breaking change for some workflows</li>
<li><code>v2</code> is the new tracking tag by <a
href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/506">dependabot/fetch-metadata#506</a></li>
<li>v2.0.0 by <a
href="https://github.com/fetch-metadata-action-automation"><code>@​fetch-metadata-action-automation</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/508">dependabot/fetch-metadata#508</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dependabot/fetch-metadata/compare/v1.7.0...v2.0.0">https://github.com/dependabot/fetch-metadata/compare/v1.7.0...v2.0.0</a></p>
<h2>v1.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump dotenv from 16.0.3 to 16.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/404">dependabot/fetch-metadata#404</a></li>
<li>Bump <code>@​types/node</code> from 20.2.3 to 20.3.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/407">dependabot/fetch-metadata#407</a></li>
<li>Bump the eslint-dependencies group with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/409">dependabot/fetch-metadata#409</a></li>
<li>Update dependabot.yml by <a
href="https://github.com/bdragon"><code>@​bdragon</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/410">dependabot/fetch-metadata#410</a></li>
<li>Bump <code>@​types/node</code> from 20.3.3 to 20.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/411">dependabot/fetch-metadata#411</a></li>
<li>Bump yaml from 2.2.1 to 2.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/390">dependabot/fetch-metadata#390</a></li>
<li>Bump tough-cookie from 4.0.0 to 4.1.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/412">dependabot/fetch-metadata#412</a></li>
<li>Bump <code>@​types/node</code> from 20.4.0 to 20.4.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/413">dependabot/fetch-metadata#413</a></li>
<li>Generate Dependabot PRs on Sundays weekly by <a
href="https://github.com/abdulapopoola"><code>@​abdulapopoola</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/417">dependabot/fetch-metadata#417</a></li>
<li>Aggressively group prod and dev dependencies for NPM by <a
href="https://github.com/abdulapopoola"><code>@​abdulapopoola</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/420">dependabot/fetch-metadata#420</a></li>
<li>Update .nvmrc to latest node 16 LTS version by <a
href="https://github.com/abdulapopoola"><code>@​abdulapopoola</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/422">dependabot/fetch-metadata#422</a></li>
<li>Bump the dev-dependencies group with 9 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/421">dependabot/fetch-metadata#421</a></li>
<li>Bump the dev-dependencies group with 1 update by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/423">dependabot/fetch-metadata#423</a></li>
<li>Check for uncommitted files beyond the <code>diff</code> directory
by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a>
in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/278">dependabot/fetch-metadata#278</a></li>
<li>Bump the dev-dependencies group with 6 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/424">dependabot/fetch-metadata#424</a></li>
<li>Bump the dev-dependencies group with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/425">dependabot/fetch-metadata#425</a></li>
<li>Bump the dev-dependencies group with 6 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/dependabot/fetch-metadata/pull/428">dependabot/fetch-metadata#428</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dbb049abf0"><code>dbb049a</code></a>
v2.2.0 (<a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/520">#520</a>)</li>
<li><a
href="36bf1f955e"><code>36bf1f9</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/532">#532</a>
from dependabot/dependabot/npm_and_yarn/braces-3.0.3</li>
<li><a
href="a3420b5aac"><code>a3420b5</code></a>
Bump braces from 3.0.2 to 3.0.3</li>
<li><a
href="006e43f8a3"><code>006e43f</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/534">#534</a>
from dependabot/dependabot/github_actions/actions/cre...</li>
<li><a
href="9c55ebe618"><code>9c55ebe</code></a>
Bump actions/create-github-app-token from 1.10.0 to 1.10.2</li>
<li><a
href="325b863556"><code>325b863</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/523">#523</a>
from dependabot/dependabot/github_actions/actions/cre...</li>
<li><a
href="aec2f3e196"><code>aec2f3e</code></a>
Bump actions/create-github-app-token from 1.9.0 to 1.10.0</li>
<li><a
href="5e5f99653a"><code>5e5f996</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/518">#518</a>
from dependabot/bump-to-v2.1.0</li>
<li><a
href="63415e5037"><code>63415e5</code></a>
v2.1.0</li>
<li><a
href="76b7fe974e"><code>76b7fe9</code></a>
Merge pull request <a
href="https://redirect.github.com/dependabot/fetch-metadata/issues/509">#509</a>
from dependabot/switch-to-monthly-release-cadence</li>
<li>Additional commits viewable in <a
href="c9c4182bf1...dbb049abf0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dependabot/fetch-metadata&package-manager=github_actions&previous-version=1.6.0&new-version=2.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-13 13:15:58 -03:00
dependabot[bot]
32e676fbe8
chore(deps): bump github.com/ory/dockertest/v3 from 3.10.0 to 3.11.0 (#5070)
Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest)
from 3.10.0 to 3.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ory/dockertest/releases">github.com/ory/dockertest/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.11.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.6
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/ory/dockertest/pull/435">ory/dockertest#435</a></li>
<li>chore(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/ory/dockertest/pull/437">ory/dockertest#437</a></li>
<li>chore(deps): bump github.com/lib/pq from
0.0.0-20180327071824-d34b9ff171c2 to 1.10.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/438">ory/dockertest#438</a></li>
<li>chore(deps): bump github.com/docker/docker from 20.10.7+incompatible
to 20.10.24+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/426">ory/dockertest#426</a></li>
<li>chore(deps): bump actions/checkout from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/427">ory/dockertest#427</a></li>
<li>chore(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/ory/dockertest/pull/450">ory/dockertest#450</a></li>
<li>chore(deps): bump github.com/containerd/continuity from 0.3.0 to
0.4.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/451">ory/dockertest#451</a></li>
<li>chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.3 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/ory/dockertest/pull/449">ory/dockertest#449</a></li>
<li>chore(deps): bump github.com/opencontainers/runc from 1.1.6 to 1.1.7
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/ory/dockertest/pull/442">ory/dockertest#442</a></li>
<li>chore(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/445">ory/dockertest#445</a></li>
<li>chore(deps): bump github.com/moby/term from
0.0.0-20201216013528-df9cb8a40635 to 0.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/446">ory/dockertest#446</a></li>
<li>chore(deps): bump github.com/docker/cli from 20.10.17+incompatible
to 24.0.1+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/448">ory/dockertest#448</a></li>
<li>chore: bump dependencies and fix some lint by <a
href="https://github.com/alnr"><code>@​alnr</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/499">ory/dockertest#499</a></li>
<li>chore(deps): bump golang.org/x/sys from 0.19.0 to 0.21.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/501">ory/dockertest#501</a></li>
<li>chore(deps): bump actions/checkout from 2 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/475">ory/dockertest#475</a></li>
<li>feat: fall back to podman if available by <a
href="https://github.com/SoMuchForSubtlety"><code>@​SoMuchForSubtlety</code></a>
in <a
href="https://redirect.github.com/ory/dockertest/pull/452">ory/dockertest#452</a></li>
<li>test: refactor asserts by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/497">ory/dockertest#497</a></li>
<li>use defer instead of os.Exit(m.Run()) by <a
href="https://github.com/pmenglund"><code>@​pmenglund</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/493">ory/dockertest#493</a></li>
<li>docs: remove outdated dep install instruction by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/505">ory/dockertest#505</a></li>
<li>chore: remove direct dependency on gotest.tools/v3 by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/504">ory/dockertest#504</a></li>
<li>chore: replace deprecated ioutil.TempDir with os.MkdirTemp by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/506">ory/dockertest#506</a></li>
<li>chore(deps): bump github.com/opencontainers/runc from 1.1.12 to
1.1.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/509">ory/dockertest#509</a></li>
<li>move tests to dockertest_test package by <a
href="https://github.com/siraj-mx51"><code>@​siraj-mx51</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/490">ory/dockertest#490</a></li>
<li>chore(deps): bump github.com/opencontainers/image-spec from 1.0.2 to
1.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/510">ory/dockertest#510</a></li>
<li>chore(deps): bump actions/setup-node from 2.pre.beta to 4.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/503">ory/dockertest#503</a></li>
<li>chore(deps): bump actions/setup-go from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/508">ory/dockertest#508</a></li>
<li>chore(deps): bump actions/stale from 4 to 9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/507">ory/dockertest#507</a></li>
<li>feat: introduce cve scanners by <a
href="https://github.com/Demonsthere"><code>@​Demonsthere</code></a> in
<a
href="https://redirect.github.com/ory/dockertest/pull/500">ory/dockertest#500</a></li>
<li>chore: update docker to v27.1.1 by <a
href="https://github.com/adamwalach"><code>@​adamwalach</code></a> in <a
href="https://redirect.github.com/ory/dockertest/pull/522">ory/dockertest#522</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/alnr"><code>@​alnr</code></a> made their
first contribution in <a
href="https://redirect.github.com/ory/dockertest/pull/499">ory/dockertest#499</a></li>
<li><a
href="https://github.com/SoMuchForSubtlety"><code>@​SoMuchForSubtlety</code></a>
made their first contribution in <a
href="https://redirect.github.com/ory/dockertest/pull/452">ory/dockertest#452</a></li>
<li><a
href="https://github.com/siraj-mx51"><code>@​siraj-mx51</code></a> made
their first contribution in <a
href="https://redirect.github.com/ory/dockertest/pull/490">ory/dockertest#490</a></li>
<li><a
href="https://github.com/Demonsthere"><code>@​Demonsthere</code></a>
made their first contribution in <a
href="https://redirect.github.com/ory/dockertest/pull/500">ory/dockertest#500</a></li>
<li><a
href="https://github.com/adamwalach"><code>@​adamwalach</code></a> made
their first contribution in <a
href="https://redirect.github.com/ory/dockertest/pull/522">ory/dockertest#522</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ory/dockertest/compare/v3.10.0...v3.11.0">https://github.com/ory/dockertest/compare/v3.10.0...v3.11.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6110e9a38f"><code>6110e9a</code></a>
chore: update docker to v27.1.1 (<a
href="https://redirect.github.com/ory/dockertest/issues/522">#522</a>)</li>
<li><a
href="d229e74b74"><code>d229e74</code></a>
feat: introduce cve scanners (<a
href="https://redirect.github.com/ory/dockertest/issues/500">#500</a>)</li>
<li><a
href="1b46b2915a"><code>1b46b29</code></a>
chore(deps): bump actions/stale from 4 to 9 (<a
href="https://redirect.github.com/ory/dockertest/issues/507">#507</a>)</li>
<li><a
href="44496a38aa"><code>44496a3</code></a>
chore(deps): bump actions/setup-go from 4 to 5 (<a
href="https://redirect.github.com/ory/dockertest/issues/508">#508</a>)</li>
<li><a
href="1aa8cd7bf8"><code>1aa8cd7</code></a>
chore(deps): bump actions/setup-node from 2.pre.beta to 4.0.2 (<a
href="https://redirect.github.com/ory/dockertest/issues/503">#503</a>)</li>
<li><a
href="0c91bda2b4"><code>0c91bda</code></a>
chore(deps): bump github.com/opencontainers/image-spec (<a
href="https://redirect.github.com/ory/dockertest/issues/510">#510</a>)</li>
<li><a
href="3328cf9343"><code>3328cf9</code></a>
move tests to dockertest_test package (<a
href="https://redirect.github.com/ory/dockertest/issues/490">#490</a>)</li>
<li><a
href="05f634764e"><code>05f6347</code></a>
chore(deps): bump github.com/opencontainers/runc from 1.1.12 to 1.1.13
(<a
href="https://redirect.github.com/ory/dockertest/issues/509">#509</a>)</li>
<li><a
href="6539ccd9aa"><code>6539ccd</code></a>
chore: replace deprecated ioutil.TempDir with os.MkdirTemp (<a
href="https://redirect.github.com/ory/dockertest/issues/506">#506</a>)</li>
<li><a
href="84015fd57c"><code>84015fd</code></a>
chore: remove direct dependency on gotest.tools/v3 (<a
href="https://redirect.github.com/ory/dockertest/issues/504">#504</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ory/dockertest/compare/v3.10.0...v3.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ory/dockertest/v3&package-manager=go_modules&previous-version=3.10.0&new-version=3.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-13 09:31:51 -03:00
Carlos Alexandro Becker
a624fd3e73
ci: auto approve dependency prs
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-12 23:22:21 -03:00
idebeijer
f924466a81
docs: use "~> v2" in GitHub actions docs (#5067) 2024-08-11 13:39:44 -03:00
Carlos Alexandro Becker
f65ff027ae
chore(deps): update env and lipgloss (#5066)
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-10 21:52:55 -03:00
Carlos Alexandro Becker
65195c06ec
sec(deps): update docker/docker and google/go-containerregistry (#5065)
CVE-2024-41110

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-09 23:42:51 -03:00
Carlos Alexandro Becker
47ff67b252
feat(deps): update ko and gocloud.dev (#5063)
cyclonedx and go.version-m were removed from latest ko version

https://github.com/ko-build/ko/pull/1333

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-09 19:51:02 -03:00
dependabot[bot]
0a6405b34d
chore(deps): bump github.com/docker/docker from 26.1.4+incompatible to 26.1.5+incompatible (#5064)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from
26.1.4+incompatible to 26.1.5+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/docker/releases">github.com/docker/docker's
releases</a>.</em></p>
<blockquote>
<h2>v26.1.5</h2>
<h2>26.1.5</h2>
<h3>Security</h3>
<p>This release contains a fix for <a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110">CVE-2024-41110</a>
/ <a
href="https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq">GHSA-v23v-6jw2-98fq</a>
that impacted setups using <a
href="https://docs.docker.com/engine/extend/plugins_authorization/">authorization
plugins (AuthZ)</a>
for access control. No other changes are included in this release, and
this
release is otherwise identical for users not using AuthZ plugins.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/moby/moby/compare/v26.1.4...v26.1.5">https://github.com/moby/moby/compare/v26.1.4...v26.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="411e817ddf"><code>411e817</code></a>
Merge commit from fork</li>
<li><a
href="9cc85eaef1"><code>9cc85ea</code></a>
If url includes scheme, urlPath will drop hostname, which would not
match the...</li>
<li><a
href="820cab90bc"><code>820cab9</code></a>
Authz plugin security fixes for 0-length content and path
validation</li>
<li><a
href="6bc49067a6"><code>6bc4906</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/48123">#48123</a>
from vvoland/v26.1-48120</li>
<li><a
href="6fbdce4b94"><code>6fbdce4</code></a>
update to go1.21.12</li>
<li><a
href="f5334644ec"><code>f533464</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/47986">#47986</a>
from vvoland/v26.1-47985</li>
<li><a
href="c1d4587d76"><code>c1d4587</code></a>
builder/mobyexporter: Add missing nil check</li>
<li><a
href="d6428049a5"><code>d642804</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/47940">#47940</a>
from thaJeztah/26.1_backport_api_remove_container_c...</li>
<li><a
href="daba2462f5"><code>daba246</code></a>
docs: api: image inspect: remove Container and ContainerConfig</li>
<li>See full diff in <a
href="https://github.com/docker/docker/compare/v26.1.4...v26.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=26.1.4+incompatible&new-version=26.1.5+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-09 16:32:01 -03:00
Carlos Alexandro Becker
9e169e47a5
ci: split test and check jobs (#5062)
just to make the status a bit better...

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-09 10:17:15 -03:00
dependabot[bot]
35f75cefab
chore(deps): bump golang.org/x/tools from 0.23.0 to 0.24.0 (#5060)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.23.0
to 0.24.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3057be8f63"><code>3057be8</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="4653e48eb8"><code>4653e48</code></a>
gopls/internal/analysis: add skipped analysis simplify on generated
code</li>
<li><a
href="f855a53930"><code>f855a53</code></a>
gopls/internal/telemetry/cmd/stacks: use authentication token</li>
<li><a
href="3ffd605b1e"><code>3ffd605</code></a>
gopls/doc/features: fix prominent typo</li>
<li><a
href="a5df6ad55c"><code>a5df6ad</code></a>
go/analysis/passes/printf: report non-constant format, no args</li>
<li><a
href="c03e5c28b0"><code>c03e5c2</code></a>
go/packages: do not nullify Fset when NeedSyntax is set</li>
<li><a
href="6a6fd991e9"><code>6a6fd99</code></a>
go/ssa: substitute type parameterized aliases</li>
<li><a
href="f6a239054f"><code>f6a2390</code></a>
gopls/doc: delete commands.md</li>
<li><a
href="2154cbf88d"><code>2154cbf</code></a>
gopls/internal/golang: add &quot;Browse gopls features&quot; code
action</li>
<li><a
href="ead76ab5e9"><code>ead76ab</code></a>
go/analysis: Add modules to Pass</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.23.0...v0.24.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.23.0&new-version=0.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-09 09:38:04 -03:00
Carlos Alexandro Becker
3ae3a098e7
fix: isEnvSet and envOrDefault not working sometimes
closes #5059
2024-08-08 10:50:37 -03:00
Carlos Alexandro Becker
5e4893234d
test: fix ko tests
the chainguard static image (used in tests) now have a bunch of labels.

this adds them to the tests.
2024-08-08 10:31:38 -03:00
Carlos Alexandro Becker
e4cfcf5446
ci: htmltest config update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-08 10:22:47 -03:00
dependabot[bot]
282ae599d8
chore(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 (#5055)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.16.0 to
0.17.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b2bec85eb9"><code>b2bec85</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="ae0cf96bbc"><code>ae0cf96</code></a>
LICENSE: update per Google Legal</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.16.0...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-08 10:15:40 -03:00
dependabot[bot]
c1d2d61f4a
chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 (#5058)
Bumps
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
from 3.5.0 to 3.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v3.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump actions/checkout from 4.1.2 to 4.1.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/161">sigstore/cosign-installer#161</a></li>
<li>Bump actions/checkout from 4.1.3 to 4.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/162">sigstore/cosign-installer#162</a></li>
<li>Bump actions/setup-go from 5.0.0 to 5.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/163">sigstore/cosign-installer#163</a></li>
<li>Bump actions/checkout from 4.1.4 to 4.1.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/164">sigstore/cosign-installer#164</a></li>
<li>Bump actions/checkout from 4.1.5 to 4.1.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/165">sigstore/cosign-installer#165</a></li>
<li>Bump actions/checkout from 4.1.6 to 4.1.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/166">sigstore/cosign-installer#166</a></li>
<li>Bump actions/setup-go from 5.0.1 to 5.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/167">sigstore/cosign-installer#167</a></li>
<li>pin public key used for verification by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/169">sigstore/cosign-installer#169</a></li>
<li>bump default version to v2.4.0 release by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/168">sigstore/cosign-installer#168</a></li>
<li>update readme for new release by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/170">sigstore/cosign-installer#170</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v3...v3.6.0">https://github.com/sigstore/cosign-installer/compare/v3...v3.6.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4959ce089c"><code>4959ce0</code></a>
update readme for new release (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/170">#170</a>)</li>
<li><a
href="45ffe83c0b"><code>45ffe83</code></a>
bump default version to v2.4.0 release (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/168">#168</a>)</li>
<li><a
href="7e1d9c1319"><code>7e1d9c1</code></a>
pin public key used for verification (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/169">#169</a>)</li>
<li><a
href="cc23fe1cf0"><code>cc23fe1</code></a>
Bump actions/setup-go from 5.0.1 to 5.0.2 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/167">#167</a>)</li>
<li><a
href="b235ed95be"><code>b235ed9</code></a>
Bump actions/checkout from 4.1.6 to 4.1.7 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/166">#166</a>)</li>
<li><a
href="b49ef6b125"><code>b49ef6b</code></a>
Bump actions/checkout from 4.1.5 to 4.1.6 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/165">#165</a>)</li>
<li><a
href="7a59e5acc8"><code>7a59e5a</code></a>
Bump actions/checkout from 4.1.4 to 4.1.5 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/164">#164</a>)</li>
<li><a
href="8d927bd1a9"><code>8d927bd</code></a>
Bump actions/setup-go from 5.0.0 to 5.0.1 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/163">#163</a>)</li>
<li><a
href="8c9caa0770"><code>8c9caa0</code></a>
Bump actions/checkout from 4.1.3 to 4.1.4 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/162">#162</a>)</li>
<li><a
href="19351d009d"><code>19351d0</code></a>
Bump actions/checkout from 4.1.2 to 4.1.3 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/161">#161</a>)</li>
<li>See full diff in <a
href="https://github.com/sigstore/cosign-installer/compare/v3.5.0...v3.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/cosign-installer&package-manager=github_actions&previous-version=3.5.0&new-version=3.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-08 10:15:12 -03:00
Carlos Alexandro Becker
b6f9c8b9ca
feat: when --clean, remove dist before checking git state (#5057)
closes #5023
closes #5046

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-08 10:14:29 -03:00
Carlos Alexandro Becker
607ccc4b84
chore: improv msg
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-07 23:45:39 -03:00
Carlos Alexandro Becker
3baffa7296
ci: notify nightly builds on discord
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-07 23:43:29 -03:00
dependabot[bot]
ff2daa45d3
chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 (#5053)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.25.15 to 3.26.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
<li>Update default CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2352">#2352</a></li>
</ul>
<h2>3.25.10 - 13 Jun 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.17.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2327">#2327</a></li>
</ul>
<h2>3.25.9 - 12 Jun 2024</h2>
<ul>
<li>Avoid failing database creation if the database folder already
exists and contains some unexpected files. Requires CodeQL 2.18.0 or
higher. <a
href="https://redirect.github.com/github/codeql-action/pull/2330">#2330</a></li>
<li>The init Action will attempt to clean up the database cluster
directory before creating a new database and at the end of the job. This
will help to avoid issues where the database cluster directory is left
in an inconsistent state. <a
href="https://redirect.github.com/github/codeql-action/pull/2332">#2332</a></li>
</ul>
<h2>3.25.8 - 04 Jun 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="eb055d739a"><code>eb055d7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2410">#2410</a>
from github/update-v3.26.0-c24926b73</li>
<li><a
href="3884d04c11"><code>3884d04</code></a>
Update changelog for v3.26.0</li>
<li><a
href="c24926b734"><code>c24926b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2407">#2407</a>
from github/dependabot/npm_and_yarn/npm-7954a73ad2</li>
<li><a
href="68ba39bacf"><code>68ba39b</code></a>
Merge branch 'main' into dependabot/npm_and_yarn/npm-7954a73ad2</li>
<li><a
href="8dd1773467"><code>8dd1773</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2408">#2408</a>
from github/henrymercer/deprecate-codeql-2.13.4</li>
<li><a
href="441c9d90e4"><code>441c9d9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2409">#2409</a>
from github/henrymercer/fix-required-checks</li>
<li><a
href="f03da13454"><code>f03da13</code></a>
Exclude push-only unit tests job from required PR checks script</li>
<li><a
href="29a5cfc75d"><code>29a5cfc</code></a>
Bump version to 3.26.0</li>
<li><a
href="9e440ad4c7"><code>9e440ad</code></a>
Add changelog note</li>
<li><a
href="136f5a589b"><code>136f5a5</code></a>
Add CodeQL v2.17.6 to default test versions</li>
<li>Additional commits viewable in <a
href="afb54ba388...eb055d739a">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.25.15&new-version=3.26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-07 13:20:31 -03:00
dependabot[bot]
79ad2afb2d
chore(deps): bump golang from 1.22.5-alpine to 1.22.6-alpine (#5054)
Bumps golang from 1.22.5-alpine to 1.22.6-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.22.5-alpine&new-version=1.22.6-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-07 13:19:38 -03:00
Carlos Alexandro Becker
e728c9df78
build: name template 2024-08-07 10:07:34 -03:00
dependabot[bot]
e1f1843c01
chore(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#5052)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.21.0 to 0.22.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6d8340f1c5"><code>6d8340f</code></a>
LICENSE: update per Google Legal</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.21.0...v0.22.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.21.0&new-version=0.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-06 16:17:45 -03:00
Carlos Alexandro Becker
e059beb777
docs: users update 2024-08-06 00:04:11 -03:00
Carlos Alexandro Becker
5ac0498125
docs: update 2024-08-05 23:41:28 -03:00
Carlos Alexandro Becker
f9fc0b8e9c
docs: improve menus 2024-08-05 23:39:04 -03:00
Carlos Alexandro Becker
033f1d3616
docs: update 2024-08-05 23:35:20 -03:00
Carlos Alexandro Becker
2e88163095
docs: fix 2024-08-05 23:28:48 -03:00
dependabot[bot]
b89d872ef6
chore(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.10.0 to 2.11.0 (#5049)
Bumps
[github.com/atc0005/go-teams-notify/v2](https://github.com/atc0005/go-teams-notify)
from 2.10.0 to 2.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/releases">github.com/atc0005/go-teams-notify/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.11.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Add initial support for Workflow connectors by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/275">atc0005/go-teams-notify#275</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>Remove inactive maligned linter by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/261">atc0005/go-teams-notify#261</a></li>
<li>Fix validation for <code>Action.Type</code> field by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/274">atc0005/go-teams-notify#274</a></li>
<li>Update CodeQL workflow to run on dev branch PRs by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/283">atc0005/go-teams-notify#283</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Go Dependency: Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/259">atc0005/go-teams-notify#259</a></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Documentation refresh for O365 &amp; Workflow connectors by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/272">atc0005/go-teams-notify#272</a></li>
<li>Update CHANGELOG for v2.11.0 release by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/286">atc0005/go-teams-notify#286</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.10.0...v2.11.0">https://github.com/atc0005/go-teams-notify/compare/v2.10.0...v2.11.0</a></p>
<h2>v2.11.0-rc.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Add initial support for Workflow connectors by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/275">atc0005/go-teams-notify#275</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>Remove inactive maligned linter by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/261">atc0005/go-teams-notify#261</a></li>
<li>Fix validation for <code>Action.Type</code> field by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/274">atc0005/go-teams-notify#274</a></li>
<li>Update CodeQL workflow to run on dev branch PRs by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/283">atc0005/go-teams-notify#283</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Go Dependency: Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/259">atc0005/go-teams-notify#259</a></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Documentation refresh for O365 &amp; Workflow connectors by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/272">atc0005/go-teams-notify#272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.10.0...v2.11.0-rc.1">https://github.com/atc0005/go-teams-notify/compare/v2.10.0...v2.11.0-rc.1</a></p>
<h2>v2.11.0-alpha.5</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>Refactor regex for default Workflow URLs (redux) by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/280">atc0005/go-teams-notify#280</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.11.0-alpha.4...v2.11.0-alpha.5">https://github.com/atc0005/go-teams-notify/compare/v2.11.0-alpha.4...v2.11.0-alpha.5</a></p>
<h2>v2.11.0-alpha.4</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">github.com/atc0005/go-teams-notify/v2's
changelog</a>.</em></p>
<blockquote>
<h2>[v2.11.0] - 2024-08-02</h2>
<h3>Added</h3>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/275">GH-275</a>)
Add initial support for Workflow connectors</li>
</ul>
<h3>Changed</h3>
<h4>Dependency Updates</h4>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/259">GH-259</a>)
Go Dependency: Bump github.com/stretchr/testify from 1.8.4 to 1.9.0</li>
</ul>
<h4>Other</h4>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/272">GH-272</a>)
Documentation refresh for O365 &amp; Workflow connectors</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/261">GH-261</a>)
Remove inactive maligned linter</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/274">GH-274</a>)
Fix validation for <code>Action.Type</code> field</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/283">GH-283</a>)
Update CodeQL workflow to run on dev branch PRs</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="14d0f675d0"><code>14d0f67</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/286">#286</a>
from atc0005/update-changelog-for-v2.11.0-release</li>
<li><a
href="e25e33674f"><code>e25e336</code></a>
Update CHANGELOG for v2.11.0 release</li>
<li><a
href="542a5591c3"><code>542a559</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/283">#283</a>
from atc0005/i276-run-codeql-on-dev-branch-prs-also</li>
<li><a
href="e8a96fecc4"><code>e8a96fe</code></a>
Update CodeQL workflow to run on dev branch PRs</li>
<li><a
href="673653baa6"><code>673653b</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/275">#275</a>
from atc0005/i262-add-support-for-workflow-connectors</li>
<li><a
href="7cdd311cb3"><code>7cdd311</code></a>
Refactor regex for default Workflow URLs</li>
<li><a
href="245024b2ca"><code>245024b</code></a>
Add initial support for Workflow connectors</li>
<li><a
href="56c6bcfa33"><code>56c6bcf</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/274">#274</a>
from atc0005/i268-fix-action-showcard-validation</li>
<li><a
href="2b05ba8df4"><code>2b05ba8</code></a>
Fix validation for <code>Action.Type</code> field</li>
<li><a
href="c114fb5b16"><code>c114fb5</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/272">#272</a>
from atc0005/i262-doc-updates-for-workflow-connectors</li>
<li>Additional commits viewable in <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.10.0...v2.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/atc0005/go-teams-notify/v2&package-manager=go_modules&previous-version=2.10.0&new-version=2.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-05 12:05:09 -03:00
dependabot[bot]
3aee244efe
chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 (#5048)
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.7.0 to
0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="411f99ef12"><code>411f99e</code></a>
LICENSE: update per Google Legal</li>
<li>See full diff in <a
href="https://github.com/golang/sync/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/sync&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-05 12:04:47 -03:00
dependabot[bot]
15f1f42db2
chore(deps): bump benc-uk/workflow-dispatch from 1.2.3 to 1.2.4 (#5047)
Bumps
[benc-uk/workflow-dispatch](https://github.com/benc-uk/workflow-dispatch)
from 1.2.3 to 1.2.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benc-uk/workflow-dispatch/releases">benc-uk/workflow-dispatch's
releases</a>.</em></p>
<blockquote>
<h2>v1.2.4 - Summer 2024</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix issue when a wrong workflowRef is used by <a
href="https://github.com/fffonion"><code>@​fffonion</code></a> in <a
href="https://redirect.github.com/benc-uk/workflow-dispatch/pull/77">benc-uk/workflow-dispatch#77</a>
👍</li>
<li>Internal changes &amp; chores: eslint updated to v9, linting,
prettier etc 🥱</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/fffonion"><code>@​fffonion</code></a>
made their first contribution in <a
href="https://redirect.github.com/benc-uk/workflow-dispatch/pull/77">benc-uk/workflow-dispatch#77</a>
🥳</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/benc-uk/workflow-dispatch/compare/v1.2.3...v1.2.4">https://github.com/benc-uk/workflow-dispatch/compare/v1.2.3...v1.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e2e5e9a103"><code>e2e5e9a</code></a>
Missing patch version in package.json</li>
<li><a
href="35e3108f51"><code>35e3108</code></a>
Bunch of internal chores, linting etc</li>
<li><a
href="ff8b017b2e"><code>ff8b017</code></a>
Fix issue when a wrong workflowRef is used (<a
href="https://redirect.github.com/benc-uk/workflow-dispatch/issues/77">#77</a>)</li>
<li>See full diff in <a
href="https://github.com/benc-uk/workflow-dispatch/compare/v1.2.3...v1.2.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=benc-uk/workflow-dispatch&package-manager=github_actions&previous-version=1.2.3&new-version=1.2.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-05 12:04:30 -03:00
dependabot[bot]
d96001c8d0
chore(deps): bump github.com/caarlos0/env/v11 from 11.1.0 to 11.2.0 (#5050)
Bumps [github.com/caarlos0/env/v11](https://github.com/caarlos0/env)
from 11.1.0 to 11.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v11's
releases</a>.</em></p>
<blockquote>
<h2>v11.2.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>68793c0696699b75cad4f91badb0ada6685bf6c3: feat: mapping slice of
complex struct (<a
href="https://redirect.github.com/caarlos0/env/issues/312">#312</a>) (<a
href="https://github.com/Rancbar"><code>@​Rancbar</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>33920afdec0ddeac41393d4214398d311a008754: docs: added a logo (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>0de93839a29573a65842d404746f270c434e522a: docs: update (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="68793c0696"><code>68793c0</code></a>
feat: mapping slice of complex struct (<a
href="https://redirect.github.com/caarlos0/env/issues/312">#312</a>)</li>
<li><a
href="0de93839a2"><code>0de9383</code></a>
docs: update</li>
<li><a
href="33920afdec"><code>33920af</code></a>
docs: added a logo</li>
<li>See full diff in <a
href="https://github.com/caarlos0/env/compare/v11.1.0...v11.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/env/v11&package-manager=go_modules&previous-version=11.1.0&new-version=11.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-05 11:38:36 -03:00
Carlos Alexandro Becker
f291f55785
docs: update sponsors page 2024-08-05 09:38:49 -03:00
Carlos Alexandro Becker
9bddf2bb50
docs: improvements 2024-08-03 16:11:59 -03:00
Carlos Alexandro Becker
b06a33a392
docs: updates 2024-08-03 15:04:49 -03:00
Carlos Alexandro Becker
e9453ac3c0
docs: clean 2024-08-03 14:54:14 -03:00
Carlos Alexandro Becker
519ce53ecb
docs: update 2024-08-03 14:49:51 -03:00
Carlos Alexandro Becker
d38e7939d8
docs: update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-03 14:42:13 -03:00
Carlos Alexandro Becker
a8916c080e
feat: binary signs (#5018)
this is different from the default signs, in the sense that this will
sign the binaries even if archive mode is not set to binary.

refs https://github.com/orgs/goreleaser/discussions/4989

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-03 14:36:54 -03:00
Carlos Alexandro Becker
50ee54ac6e
docs: update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-03 14:30:10 -03:00