go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2024-12-29 01:44:39 +02:00
Code Issues Releases Activity
6,058 Commits 12 Branches 557 Tags 40 MiB
2793f365ab
Commit Graph

6058 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Carlos Alexandro Becker
e0a21a1f5d
fix(nfpm): bad filename for 386 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-11-02 15:08:58 -03:00
Carlos Alexandro Becker
1455d462f1
test(nfpm): goppc64, goriscv64, etc 2024-11-02 13:58:05 -03:00
Carlos Alexandro Becker
f65c757073
fix(nfpm): wrong filename for arm64 
refs #5186
closes #5238
 2024-11-02 13:50:41 -03:00
Carlos Alexandro Becker
3cf2556a26
ci: auto-merge dependabot PRs 2024-11-01 09:59:48 -03:00
dependabot[bot]
c92ffb4298
chore(deps): bump github.com/charmbracelet/lipgloss from 0.13.1 to 1.0.0 (#5237) 
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.13.1 to 1.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.0</h2>
<h1>At last: v1.0.0</h1>
<!-- raw HTML omitted -->
<p>This is an honorary release indicating that Lip Gloss is now stable.
Thank you, open source community, for all your love, support,
contributions, and great style.</p>
<p>Stay tuned for a v2 alpha!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="761d265f76"><code>761d265</code></a>
feat(deps): bump github.com/charmbracelet/x/ansi from 0.4.0 to
0.4.2</li>
<li><a
href="342e7b051b"><code>342e7b0</code></a>
chore(ci): sync golangci-lint config</li>
<li><a
href="da324b123d"><code>da324b1</code></a>
feat(deps): bump github.com/charmbracelet/x/ansi from 0.3.2 to
0.4.0</li>
<li><a
href="78fd6fd42f"><code>78fd6fd</code></a>
chore(ci): sync golangci-lint config</li>
<li><a
href="407dc3d2cf"><code>407dc3d</code></a>
feat(ci): add lint-sync workflow</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.13.1...v1.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.13.1&new-version=1.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-01 09:16:39 -03:00
Oleksandr Redko
12155a336b
refactor: remove empty lines, fix //nolint (#5235) 
The PR formats code by removing redundant empty lines and fixes
`//nolint` directives. Additionally, this PR adds two more rules to the
`revive` configuration: `empty-lines` and `comment-spacings`.

Removing unnecessary empty lines helps to keep the codebase clean and
concise. This issue is identified by the `revive.empty-lines` rule.

In the `//nolint` directive, there must be no spaces between `:` and the
linter name: `//nolint:gosec`. See ["Nolint
Directive"](https://golangci-lint.run/usage/false-positives/#nolint-directive).
This issue is identified by the `revive.comment-spacings` rule.

Note that it's not possible to add just a few additional rules to the
`revive.enable` list. We need to specify all: default rules plus
additional rules. See the detailed explanation
[here](https://github.com/prometheus/prometheus/pull/13068).
 2024-10-31 13:51:54 -03:00
Oleksandr Redko
b269cc9229
feat: use context for HTTP request in discord (#5232) 
The PR adds using `context.Context` in the `POST` request.

Context is a request scoped paradigm according to [the
doc](https://pkg.go.dev/context).

The PR adds `API` field into the `Config` for utilizing it in tests.
 2024-10-31 08:57:46 -03:00
Oleksandr Redko
57365c1630
refactor: rename archive.Copying to archive.Copy (#5233) 
This PR renames `Copying` functions in the `archive` package to `Copy`
because it is a more common method name.
 2024-10-31 08:53:27 -03:00
dependabot[bot]
7e48917d1a
chore(deps): bump anchore/sbom-action from 0.17.5 to 0.17.6 (#5231) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.5 to 0.17.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.6</h2>
<h2>Changes in v0.17.6</h2>
<ul>
<li>chore(deps): update Syft to v1.15.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/505">#505</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/504">#504</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="251a468eed"><code>251a468</code></a>
chore(deps): update Syft to v1.15.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/505">#505</a>)</li>
<li><a
href="6bb446c6c5"><code>6bb446c</code></a>
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/504">#504</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.5...v0.17.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.5&new-version=0.17.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-30 22:21:02 -03:00
dependabot[bot]
f92937b2a9
chore(deps): bump dagger/dagger-for-github from 6.13.0 to 6.14.0 (#5228) 
Bumps
[dagger/dagger-for-github](https://github.com/dagger/dagger-for-github)
from 6.13.0 to 6.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dagger/dagger-for-github/releases">dagger/dagger-for-github's
releases</a>.</em></p>
<blockquote>
<h2>v6.14.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: allow specifying nightly builds by <a
href="https://github.com/jedevc"><code>@​jedevc</code></a> in <a
href="https://redirect.github.com/dagger/dagger-for-github/pull/151">dagger/dagger-for-github#151</a></li>
<li>chore: bump default dagger version to v0.13.6 by <a
href="https://github.com/jedevc"><code>@​jedevc</code></a> in <a
href="https://redirect.github.com/dagger/dagger-for-github/pull/154">dagger/dagger-for-github#154</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dagger/dagger-for-github/compare/v6.13.0...v6.14.0">https://github.com/dagger/dagger-for-github/compare/v6.13.0...v6.14.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ad6a4e308a"><code>ad6a4e3</code></a>
chore: bump default dagger version to v0.13.6</li>
<li><a
href="49dd901156"><code>49dd901</code></a>
feat: allow specifying nightly builds (<a
href="https://redirect.github.com/dagger/dagger-for-github/issues/151">#151</a>)</li>
<li>See full diff in <a
href="https://github.com/dagger/dagger-for-github/compare/v6.13.0...v6.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dagger/dagger-for-github&package-manager=github_actions&previous-version=6.13.0&new-version=6.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-28 08:01:16 -03:00
Maxime Brunet
d722aac36b
feat(ko): support annotations and user (#5227) 
Add support for the newly added annotations and user options in [ko
v0.17.0](https://github.com/ko-build/ko/releases/tag/v0.17.0)
 2024-10-27 16:01:09 -03:00
Carlos Alexandro Becker
ca5ad8c5ed
docs: update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-26 14:06:55 -03:00
Carlos Alexandro Becker
244bbf0afe
fix: quill dependency conflics 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-26 14:05:40 -03:00
Carlos Alexandro Becker
d7b2554312
test(ko): fix chainguard/static labels 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-26 13:58:18 -03:00
Carlos Alexandro Becker
636a14721b
docs: update schema 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-26 11:03:02 -03:00
Carlos Alexandro Becker
2d0d9d9066
chore(deps): update nfpm 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-26 11:02:53 -03:00
Oleksandr Redko
0f48a6dd40
refactor: use std maps,slices instead of golang.org/exp (#5221) 
The PR refactors code by replacing usage of
`golang.org/exp/slices`/`golang.org/exp/maps` package with the standard
`slices`/`maps`. Additionally, replace the function `keys(someMap)` with
`slices.Compact(maps.Keys(someMap))`

Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-25 11:38:55 -03:00
dependabot[bot]
542e5a0723
chore(deps): bump actions/cache from 4.1.1 to 4.1.2 (#5217) 
Bumps [actions/cache](https://github.com/actions/cache) from 4.1.1 to
4.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add Bun example by <a
href="https://github.com/idleberg"><code>@​idleberg</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1456">actions/cache#1456</a></li>
<li>Revise <code>isGhes</code> logic by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1474">actions/cache#1474</a></li>
<li>Bump braces from 3.0.2 to 3.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1475">actions/cache#1475</a></li>
<li>Add dependabot.yml to enable automatic dependency upgrades by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1476">actions/cache#1476</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1478">actions/cache#1478</a></li>
<li>Bump actions/stale from 3 to 9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1479">actions/cache#1479</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1483">actions/cache#1483</a></li>
<li>Bump actions/setup-node from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1481">actions/cache#1481</a></li>
<li>Prepare <code>4.1.2</code> release by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1477">actions/cache#1477</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/idleberg"><code>@​idleberg</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1456">actions/cache#1456</a></li>
<li><a href="https://github.com/jww3"><code>@​jww3</code></a> made their
first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1474">actions/cache#1474</a></li>
<li><a href="https://github.com/Link"><code>@​Link</code></a>- made
their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1476">actions/cache#1476</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v4...v4.1.2">https://github.com/actions/cache/compare/v4...v4.1.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h3>4.1.2</h3>
<ul>
<li>Add GitHub Enterprise Cloud instances hostname filters to inform API
endpoint choices - <a
href="https://redirect.github.com/actions/cache/pull/1474">#1474</a></li>
<li>Security fix: Bump braces from 3.0.2 to 3.0.3 - <a
href="https://redirect.github.com/actions/cache/pull/1475">#1475</a></li>
</ul>
<h3>4.1.1</h3>
<ul>
<li>Restore original behavior of <code>cache-hit</code> output - <a
href="https://redirect.github.com/actions/cache/pull/1467">#1467</a></li>
</ul>
<h3>4.1.0</h3>
<ul>
<li>Ensure <code>cache-hit</code> output is set when a cache is missed -
<a
href="https://redirect.github.com/actions/cache/pull/1404">#1404</a></li>
<li>Deprecate <code>save-always</code> input - <a
href="https://redirect.github.com/actions/cache/pull/1452">#1452</a></li>
</ul>
<h3>4.0.2</h3>
<ul>
<li>Fixed restore <code>fail-on-cache-miss</code> not working.</li>
</ul>
<h3>4.0.1</h3>
<ul>
<li>Updated <code>isGhes</code> check</li>
</ul>
<h3>4.0.0</h3>
<ul>
<li>Updated minimum runner version support from node 12 -&gt; node
20</li>
</ul>
<h3>3.3.3</h3>
<ul>
<li>Updates <code>@​actions/cache</code> to v3.2.3 to fix accidental
mutated path arguments to <code>getCacheVersion</code> <a
href="https://redirect.github.com/actions/toolkit/pull/1378">actions/toolkit#1378</a></li>
<li>Additional audit fixes of npm package(s)</li>
</ul>
<h3>3.3.2</h3>
<ul>
<li>Fixes bug with Azure SDK causing blob downloads to get stuck.</li>
</ul>
<h3>3.3.1</h3>
<ul>
<li>Reduced segment size to 128MB and segment timeout to 10 minutes to
fail fast in case the cache download is stuck.</li>
</ul>
<h3>3.3.0</h3>
<ul>
<li>Added option to lookup cache without downloading it.</li>
</ul>
<h3>3.2.6</h3>
<ul>
<li>Fix zstd not being used after zstd version upgrade to 1.5.4 on
hosted runners.</li>
</ul>
<h3>3.2.5</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6849a64899"><code>6849a64</code></a>
Release 4.1.2 <a
href="https://redirect.github.com/actions/cache/issues/1477">#1477</a></li>
<li><a
href="5a1720c49e"><code>5a1720c</code></a>
Merge branch 'Link-/prep-4.1.2' of <a
href="https://github.com/actions/cache">https://github.com/actions/cache</a>
into Link...</li>
<li><a
href="d9fef48d24"><code>d9fef48</code></a>
Merge branch 'main' into Link-/prep-4.1.2</li>
<li><a
href="a50e8d027b"><code>a50e8d0</code></a>
Merge branch 'main' into Link-/prep-4.1.2</li>
<li><a
href="acc9ae5c14"><code>acc9ae5</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1481">#1481</a>
from actions/dependabot/github_actions/actions/setup...</li>
<li><a
href="1ea5f18c31"><code>1ea5f18</code></a>
Merge branch 'main' into Link-/prep-4.1.2</li>
<li><a
href="cc679ff3ba"><code>cc679ff</code></a>
Merge branch 'main' into
dependabot/github_actions/actions/setup-node-4</li>
<li><a
href="366d43d6f8"><code>366d43d</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1483">#1483</a>
from actions/dependabot/github_actions/github/codeql...</li>
<li><a
href="02bf31969b"><code>02bf319</code></a>
Bump github/codeql-action from 2 to 3</li>
<li><a
href="6f6220be5a"><code>6f6220b</code></a>
Merge branch 'main' into
dependabot/github_actions/actions/setup-node-4</li>
<li>Additional commits viewable in <a
href="3624ceb22c...6849a64899">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=4.1.1&new-version=4.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:19:02 -03:00
dependabot[bot]
e52b71ed44
chore(deps): bump github/codeql-action from 3.26.13 to 3.27.0 (#5216) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.13 to 3.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.0/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="662472033e"><code>6624720</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2561">#2561</a>
from github/update-v3.27.0-b35b023d9</li>
<li><a
href="ce7c2b560d"><code>ce7c2b5</code></a>
Update changelog for v3.27.0</li>
<li><a
href="b35b023d9b"><code>b35b023</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2552">#2552</a>
from github/update-bundle/codeql-bundle-v2.19.2</li>
<li><a
href="dafc762411"><code>dafc762</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2560">#2560</a>
from github/aeisenberg/fix-required-checks</li>
<li><a
href="0d1eb88b60"><code>0d1eb88</code></a>
Remove ESLint from required checks</li>
<li><a
href="0a30541440"><code>0a30541</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2558">#2558</a>
from github/dependabot/npm_and_yarn/npm-6515e6e328</li>
<li><a
href="2a6a6ad1c8"><code>2a6a6ad</code></a>
Update checked-in dependencies</li>
<li><a
href="26c18c2c1f"><code>26c18c2</code></a>
Bump the npm group with 3 updates</li>
<li><a
href="7080a68cbc"><code>7080a68</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.2</li>
<li><a
href="63eb7bbf1f"><code>63eb7bb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2551">#2551</a>
from github/cklin/diff-informed-queries-feature</li>
<li>Additional commits viewable in <a
href="f779452ac5...662472033e">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.13&new-version=3.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:54 -03:00
dependabot[bot]
562ca2eff8
chore(deps): bump anchore/sbom-action from 0.17.3 to 0.17.5 (#5214) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.3 to 0.17.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.5</h2>
<h2>Changes in v0.17.5</h2>
<ul>
<li>chore(deps): update Syft to v1.14.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/503">#503</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.4</h2>
<h2>Changes in v0.17.4</h2>
<ul>
<li>chore(deps): update Syft to v1.14.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/502">#502</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ca97d9028"><code>1ca97d9</code></a>
chore(deps): update Syft to v1.14.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/503">#503</a>)</li>
<li><a
href="8d0a6505bf"><code>8d0a650</code></a>
chore(deps): update Syft to v1.14.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/502">#502</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.3...v0.17.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.3&new-version=0.17.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:39 -03:00
dependabot[bot]
3f406df9a4
chore(deps): bump github.com/charmbracelet/lipgloss from 0.13.0 to 0.13.1 (#5215) 
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.13.0 to 0.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<h1>Table improvements, on stream</h1>
<p><a href="https://github.com/bashbunni"><code>@​bashbunni</code></a>
went to town in this release and fixed a bunch of bugs, mostly around
table. Best of all, she did most of it <a
href="https://www.twitch.tv/bashbunni">on stream</a>.</p>
<h2>Changelog</h2>
<h3>Table</h3>
<ul>
<li>fix(table): use table height by <a
href="https://github.com/Broderick-Westrope"><code>@​Broderick-Westrope</code></a>
in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/358">charmbracelet/lipgloss#358</a></li>
<li>fix(table): unset data rows without causing nil pointer err by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/372">charmbracelet/lipgloss#372</a></li>
<li>fix(table): shared indices for first row of data and headers
(StyleFunc bug) by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/377">charmbracelet/lipgloss#377</a></li>
<li>fix(table): do not shrink table with offset by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/373">charmbracelet/lipgloss#373</a></li>
<li>fix(table): include margins for cell width by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/401">charmbracelet/lipgloss#401</a></li>
</ul>
<h3>Other Stuff</h3>
<ul>
<li>fix(render): strip carriage returns from strings by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/386">charmbracelet/lipgloss#386</a></li>
</ul>
<h2>Bonus</h2>
<ul>
<li>docs(example): rainbow string by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/96">charmbracelet/lipgloss#96</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Broderick-Westrope"><code>@​Broderick-Westrope</code></a>
made their first contribution in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/358">charmbracelet/lipgloss#358</a></li>
<li><a href="https://github.com/swrenn"><code>@​swrenn</code></a> made
their first contribution in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/364">charmbracelet/lipgloss#364</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v0.13.1">https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v0.13.1</a></p>
<hr />
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<p>Thoughts? Questions? We love hearing from you. Feel free to reach out
on <a href="https://twitter.com/charmcli">Twitter</a>, <a
href="https://mastodon.technology/@charm">The Fediverse</a>, or on <a
href="https://charm.sh/chat">Discord</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="284c0c5c55"><code>284c0c5</code></a>
docs(list): fix list examples in godoc (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/404">#404</a>)</li>
<li><a
href="d8581323b6"><code>d858132</code></a>
fix(table): include margins in cell width (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/401">#401</a>)</li>
<li><a
href="80b4221fc1"><code>80b4221</code></a>
chore(lint): update linter (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/405">#405</a>)</li>
<li><a
href="fa2f4b06ca"><code>fa2f4b0</code></a>
docs(readme): update example screenshot with blend</li>
<li><a
href="68ca8486fc"><code>68ca848</code></a>
docs: update contributing guidelines (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/396">#396</a>)</li>
<li><a
href="24258b8e1a"><code>24258b8</code></a>
fix(examples): draw nested structure in file tree example</li>
<li><a
href="a5618cb034"><code>a5618cb</code></a>
fix(table): do not shrink table with offset (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/373">#373</a>)</li>
<li><a
href="9b809dc7e5"><code>9b809dc</code></a>
fix(examples): fix out of range error (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/395">#395</a>)</li>
<li><a
href="199d3c8af8"><code>199d3c8</code></a>
fix(render): strip carriage returns from strings (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/386">#386</a>)</li>
<li><a
href="07d18419d3"><code>07d1841</code></a>
docs(example): rainbow string (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/96">#96</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v0.13.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.13.0&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:13 -03:00
dependabot[bot]
96609bd7d8
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#5219) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1
to 4.2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<h2>v4.1.5</h2>
<ul>
<li>Update NPM dependencies by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
<li>Bump actions/setup-node from 1 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
<li>Bump actions/upload-artifact from 2 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
<li>README: Suggest <code>user.email</code> to be
<code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
</ul>
<h2>v4.1.4</h2>
<ul>
<li>Disable <code>extensions.worktreeConfig</code> when disabling
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
<li>Add dependabot config by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
<li>Bump the minor-actions-dependencies group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
</ul>
<h2>v4.1.3</h2>
<ul>
<li>Check git version before attempting to disable
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1656">actions/checkout#1656</a></li>
<li>Add SSH user parameter by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1685">actions/checkout#1685</a></li>
<li>Update <code>actions/checkout</code> version in
<code>update-main-version.yml</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1650">actions/checkout#1650</a></li>
</ul>
<h2>v4.1.2</h2>
<ul>
<li>Fix: Disable sparse checkout whenever <code>sparse-checkout</code>
option is not present <a
href="https://github.com/dscho"><code>@​dscho</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1598">actions/checkout#1598</a></li>
</ul>
<h2>v4.1.1</h2>
<ul>
<li>Correct link to GitHub Docs by <a
href="https://github.com/peterbe"><code>@​peterbe</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li>
<li>Link to release page from what's new section by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1514">actions/checkout#1514</a></li>
</ul>
<h2>v4.1.0</h2>
<ul>
<li><a href="https://redirect.github.com/actions/checkout/pull/1396">Add
support for partial checkout filters</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="11bd71901b"><code>11bd719</code></a>
Prepare 4.2.2 Release (<a
href="https://redirect.github.com/actions/checkout/issues/1953">#1953</a>)</li>
<li><a
href="e3d2460bbb"><code>e3d2460</code></a>
Expand unit test coverage (<a
href="https://redirect.github.com/actions/checkout/issues/1946">#1946</a>)</li>
<li><a
href="163217dfcd"><code>163217d</code></a>
<code>url-helper.ts</code> now leverages well-known environment
variables. (<a
href="https://redirect.github.com/actions/checkout/issues/1941">#1941</a>)</li>
<li>See full diff in <a
href="eef61447b9...11bd71901b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4.2.1&new-version=4.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:00 -03:00
Oleksandr Redko
869ef71e66
fix: typo in testctx.WithConfig parameter (#5220) 
The PR corrects a typo in the parameter of the `testctxt.WithCommit`
function.
 2024-10-25 11:17:38 -03:00
dependabot[bot]
7d4671a1f2
chore(deps): bump github.com/mattn/go-mastodon from 0.0.8 to 0.0.9 (#5224) 
Bumps
[github.com/mattn/go-mastodon](https://github.com/mattn/go-mastodon)
from 0.0.8 to 0.0.9.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ef73e8196"><code>1ef73e8</code></a>
Fix ID type of report methods</li>
<li><a
href="b43f379b32"><code>b43f379</code></a>
add comment about accessing AccessToken</li>
<li><a
href="c4d23bb80b"><code>c4d23bb</code></a>
Best solution that's type-safe but also extensible</li>
<li><a
href="fa6f8ccee1"><code>fa6f8cc</code></a>
Revert to simple <code>io.Writer</code> with client-resetting</li>
<li><a
href="019b11d944"><code>019b11d</code></a>
Better handling of &quot;save the JSON&quot;</li>
<li><a
href="79bee3ed68"><code>79bee3e</code></a>
A simple test for retained JSON</li>
<li><a
href="2d49fbb883"><code>2d49fbb</code></a>
Gate the JSON saving behind a client flag</li>
<li><a
href="0f299f722f"><code>0f299f7</code></a>
Keep the API JSON around (briefly)</li>
<li><a
href="34bd0ff19f"><code>34bd0ff</code></a>
Obtain streaming url from Mastodon instance info</li>
<li><a
href="d74af49e64"><code>d74af49</code></a>
go mod tidy</li>
<li>See full diff in <a
href="https://github.com/mattn/go-mastodon/compare/v0.0.8...v0.0.9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/mattn/go-mastodon&package-manager=go_modules&previous-version=0.0.8&new-version=0.0.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:15:40 -03:00
dependabot[bot]
8ddb7b8508
chore(deps): bump github.com/google/ko from 0.16.0 to 0.17.1 (#5223) 
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.16.0
to 0.17.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove cycle in release process by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1435">ko-build/ko#1435</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.17.0...v0.17.1">https://github.com/ko-build/ko/compare/v0.17.0...v0.17.1</a></p>
<h2>v0.17.0</h2>
<h2>What's Changed</h2>
<ul>
<li>allow setting annotations by <a
href="https://github.com/seankhliao"><code>@​seankhliao</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1426">ko-build/ko#1426</a></li>
<li>Update recorder to lazy create file. by <a
href="https://github.com/jeffmendoza"><code>@​jeffmendoza</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1379">ko-build/ko#1379</a></li>
<li>Change OCI Layout publisher to lazy create layout after build. by <a
href="https://github.com/jeffmendoza"><code>@​jeffmendoza</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1385">ko-build/ko#1385</a></li>
<li>feat: add image user option by <a
href="https://github.com/maxbrunet"><code>@​maxbrunet</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1266">ko-build/ko#1266</a></li>
</ul>
<h4>Other changes</h4>
<ul>
<li>update k8s for kind e2e tests by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1352">ko-build/ko#1352</a></li>
<li>Bump github.com/docker/docker from 26.1.4+incompatible to
27.2.1+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1387">ko-build/ko#1387</a></li>
<li>Bump golang.org/x/tools from 0.21.0 to 0.25.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1386">ko-build/ko#1386</a></li>
<li>Bump reviewdog/action-misspell from 1.19.0 to 1.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1357">ko-build/ko#1357</a></li>
<li>Bump github/codeql-action from 3.25.7 to 3.26.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1383">ko-build/ko#1383</a></li>
<li>Bump imjasonh/setup-crane from 0.3 to 0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1335">ko-build/ko#1335</a></li>
<li>Bump actions/checkout from 4.1.6 to 4.1.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1336">ko-build/ko#1336</a></li>
<li>Bump github.com/google/go-containerregistry from 0.19.1 to 0.20.2 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1370">ko-build/ko#1370</a></li>
<li>Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1341">ko-build/ko#1341</a></li>
<li>Bump k8s.io/apimachinery from 0.30.1 to 0.31.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1374">ko-build/ko#1374</a></li>
<li>Bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1328">ko-build/ko#1328</a></li>
<li>Bump ko-build/setup-ko from 0.6 to 0.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1392">ko-build/ko#1392</a></li>
<li>Bump actions/setup-go from 5.0.1 to 5.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1390">ko-build/ko#1390</a></li>
<li>Bump actions/setup-python from 5.1.0 to 5.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1388">ko-build/ko#1388</a></li>
<li>Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1389">ko-build/ko#1389</a></li>
<li>Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1391">ko-build/ko#1391</a></li>
<li>docs: kamaji is a ko adopter by <a
href="https://github.com/prometherion"><code>@​prometherion</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1384">ko-build/ko#1384</a></li>
<li>Bump sigs.k8s.io/kind from 0.23.0 to 0.24.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1394">ko-build/ko#1394</a></li>
<li>build with go1.23 and general housekeeping by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1396">ko-build/ko#1396</a></li>
<li>Bump actions/upload-artifact from 4.3.3 to 4.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1397">ko-build/ko#1397</a></li>
<li>Bump github/codeql-action from 3.26.6 to 3.26.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1399">ko-build/ko#1399</a></li>
<li>Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1393">ko-build/ko#1393</a></li>
<li>Bump k8s.io/apimachinery from 0.31.0 to 0.31.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1398">ko-build/ko#1398</a></li>
<li>Bump github.com/docker/docker from 27.2.1+incompatible to
27.3.0+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1402">ko-build/ko#1402</a></li>
<li>Bump github/codeql-action from 3.26.7 to 3.26.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1401">ko-build/ko#1401</a></li>
<li>Bump github.com/docker/docker from 27.3.0+incompatible to
27.3.1+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1404">ko-build/ko#1404</a></li>
<li>Bump go.uber.org/automaxprocs from 1.5.3 to 1.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1405">ko-build/ko#1405</a></li>
<li>Bump github/codeql-action from 3.26.8 to 3.26.9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1406">ko-build/ko#1406</a></li>
<li>Bump actions/checkout from 4.1.7 to 4.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1408">ko-build/ko#1408</a></li>
<li>Bump github/codeql-action from 3.26.9 to 3.26.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1410">ko-build/ko#1410</a></li>
<li>Bump golang/govulncheck-action from 1.0.3 to 1.0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1411">ko-build/ko#1411</a></li>
<li>Bump github/codeql-action from 3.26.10 to 3.26.11 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1414">ko-build/ko#1414</a></li>
<li>Bump github.com/sigstore/cosign/v2 from 2.4.0 to 2.4.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1412">ko-build/ko#1412</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fd1f25182d"><code>fd1f251</code></a>
Remove cycle in release process</li>
<li><a
href="ac22328979"><code>ac22328</code></a>
feat: add image user option</li>
<li><a
href="6541f6e217"><code>6541f6e</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1421">#1421</a> from
ko-build/dependabot/github_actions/actions/uplo...</li>
<li><a
href="bfaef8b9bb"><code>bfaef8b</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1431">#1431</a> from
ko-build/dependabot/github_actions/actions/chec...</li>
<li><a
href="13b49554cd"><code>13b4955</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1432">#1432</a> from
ko-build/dependabot/go_modules/k8s.io/apimachin...</li>
<li><a
href="37013283ec"><code>3701328</code></a>
Bump k8s.io/apimachinery from 0.31.1 to 0.31.2</li>
<li><a
href="4e5d543714"><code>4e5d543</code></a>
Bump actions/checkout from 4.2.1 to 4.2.2</li>
<li><a
href="711779e829"><code>711779e</code></a>
Document linux_capabilities in builds section</li>
<li><a
href="4761e07a0d"><code>4761e07</code></a>
Bump actions/upload-artifact from 4.4.2 to 4.4.3</li>
<li><a
href="43baebd2d8"><code>43baebd</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1429">#1429</a> from
ko-build/dependabot/github_actions/github/codeq...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.16.0...v0.17.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:15:31 -03:00
dependabot[bot]
8856062d9e
chore(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (#5222) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.2
to 5.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/500">actions/setup-go#500</a></li>
<li>Upgrade IA Publish by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/502">actions/setup-go#502</a></li>
<li>Add architecture to cache key by <a
href="https://github.com/Zxilly"><code>@​Zxilly</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/493">actions/setup-go#493</a>
This addresses issues with caching by adding the architecture (arch) to
the cache key, ensuring that cache keys are accurate to prevent
conflicts.
Note: This change may break previous cache keys as they will no longer
be compatible with the new format.</li>
<li>Enhance workflows and Upgrade micromatch Dependency by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/510">actions/setup-go#510</a></li>
</ul>
<p><strong>Bug Fixes</strong></p>
<ul>
<li>Revise <code>isGhes</code> logic by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/511">actions/setup-go#511</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Zxilly"><code>@​Zxilly</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/493">actions/setup-go#493</a></li>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/500">actions/setup-go#500</a></li>
<li><a href="https://github.com/jww3"><code>@​jww3</code></a> made their
first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/511">actions/setup-go#511</a></li>
<li><a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/510">actions/setup-go#510</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v5...v5.1.0">https://github.com/actions/setup-go/compare/v5...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41dfa10bad"><code>41dfa10</code></a>
Enhance workflows and Upgrade micromatch Dependency (<a
href="https://redirect.github.com/actions/setup-go/issues/510">#510</a>)</li>
<li><a
href="941977282c"><code>9419772</code></a>
Revise <code>isGhes</code> logic (<a
href="https://redirect.github.com/actions/setup-go/issues/511">#511</a>)</li>
<li><a
href="d60b41a563"><code>d60b41a</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-go/issues/502">#502</a>
from actions/Jcambass-patch-1</li>
<li><a
href="e09f57f6a9"><code>e09f57f</code></a>
Upgrade IA Publish</li>
<li><a
href="df1a11710e"><code>df1a117</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-go/issues/500">#500</a>
from actions/Jcambass-patch-1</li>
<li><a
href="49582f6476"><code>49582f6</code></a>
Add workflow file for publishing releases to immutable action
package</li>
<li><a
href="b26d40294f"><code>b26d402</code></a>
fix: add arch to cache key (<a
href="https://redirect.github.com/actions/setup-go/issues/493">#493</a>)</li>
<li>See full diff in <a
href="0a12ed9d6a...41dfa10bad">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=5.0.2&new-version=5.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:15:14 -03:00
Meng Zhuo
6a84e40115
ci: release to riscv64 (#5196) 2024-10-21 08:38:00 -03:00
Carlos Alexandro Becker
248c7fcb5f
docs: update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-16 01:22:12 -03:00
Carlos Alexandro Becker
724d4ae90d
refactor: improve buildtarget.List (#5208) 
honestly dunno why we were checking string prefixes there...

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-16 01:10:03 -03:00
Carlos Alexandro Becker
66db8c0857
fix: build 386 2024-10-15 15:28:52 -03:00
Carlos Alexandro Becker
24c6060050
fix: standardize .Ext to always have the preceding . (#5207) 
historically this is kind of a mess, some places set the prefixed ext
(e.g. `.exe`) others don't (e.g. `msi`)

this standardize it to have the preceding `.`

also makes `ByExt` works with or without it so it doesn't break anyone's
config.

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-15 14:57:27 -03:00
dependabot[bot]
5d62156ed1
chore(deps): bump github.com/xanzy/go-gitlab from 0.111.0 to 0.112.0 (#5202) 
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.111.0 to 0.112.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.112.0</h2>
<h2>Breaking changes:</h2>
<ul>
<li>Fix the branch protection defaults by <a
href="https://github.com/svanharmelen"><code>@​svanharmelen</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2036">xanzy/go-gitlab#2036</a>
This ☝🏻 fixes a bug in the settings API (see <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2033">#2033</a>)
by introducing a dedicated struct for branch protection defaults. To
prevent duplicated code, this struct is now also used (as a pointer!)
for the <code>DefaultBranchProtectionDefaults</code> field in the
<code>Group</code> struct.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Add alert status to project hooks by <a
href="https://github.com/dany74q"><code>@​dany74q</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2034">xanzy/go-gitlab#2034</a></li>
<li>missing protected_branches#deploy_key_id by <a
href="https://github.com/seyguai"><code>@​seyguai</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2035">xanzy/go-gitlab#2035</a></li>
<li>Add missing created at to project struct by <a
href="https://github.com/wind0r"><code>@​wind0r</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2037">xanzy/go-gitlab#2037</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/dany74q"><code>@​dany74q</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2034">xanzy/go-gitlab#2034</a></li>
<li><a href="https://github.com/seyguai"><code>@​seyguai</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2035">xanzy/go-gitlab#2035</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.111.0...v0.112.0">https://github.com/xanzy/go-gitlab/compare/v0.111.0...v0.112.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="56c0535486"><code>56c0535</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2036">#2036</a>
from xanzy/fix/settings</li>
<li><a
href="39fc25b65a"><code>39fc25b</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2037">#2037</a>
from wind0r/add_missing_updated_at_to_project</li>
<li><a
href="dab81401c1"><code>dab8140</code></a>
Add missing created at to project struct</li>
<li><a
href="0a72e2ccb0"><code>0a72e2c</code></a>
Reorder fields to align with the docs</li>
<li><a
href="da5d7f1de9"><code>da5d7f1</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2035">#2035</a>
from seyguai/protected_branches-deploy_key_id</li>
<li><a
href="5538ce0c79"><code>5538ce0</code></a>
Fix the branch protection defaults</li>
<li><a
href="f1dc012d60"><code>f1dc012</code></a>
Reorder fields to align with the docs</li>
<li><a
href="59e211b002"><code>59e211b</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2034">#2034</a>
from dany74q/add-alert-status-to-project-hooks</li>
<li><a
href="cda298626d"><code>cda2986</code></a>
missing protected_branches#deploy_key_id</li>
<li><a
href="baf40ca34c"><code>baf40ca</code></a>
Add alert status to project hooks</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.111.0...v0.112.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.111.0&new-version=0.112.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-15 12:59:25 -03:00
dependabot[bot]
f946a9c1f7
chore(deps): bump github.com/slack-go/slack from 0.14.0 to 0.15.0 (#5201) 
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.14.0 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<blockquote>
<p>[!WARNING]<br />
This release includes a breaking change since the last release.</p>
</blockquote>
<h2>What's Changed</h2>
<p>v0.15.0 is now available. It <strong>does contain minor breaking
changes</strong> to two Block Kit elements along with a lot of new
functionality.</p>
<h3>Breaking Changes</h3>
<p><strong>Block Kit - Rich Text Section Date Element</strong></p>
<p>If you are using the <code>RichTextSectionDateElement</code> block
kit element, there is a new field <code>Format</code> which is now
required. It previously did not exist, but was marked as required in the
<a
href="https://api.slack.com/reference/block-kit/blocks#date-element-type">Block
Kit Documentation</a>. Similarly, the function
<code>NewRichTextSectionDateElement</code> function signature has been
updated to require the new parameter. While this <em>may not</em> have
previously worked, the non-backwards compatible signature change prompts
it to be identified as breaking change.</p>
<p><strong>Block Kit - Rich Text input Block Element</strong></p>
<p>If you are using the <code>RichTextInputBlockElement</code> block kit
element, the <code>InitialValue</code> field type has been changed from
<code>string</code> to <code>*RichTextBlock</code> to provide a more
strongly typed experience. If you were previously passing a
pre-formatted JSON object you will need to update your input to use the
<code>RichTextBlock</code> struct instead.</p>
<h3>Enhancements</h3>
<ul>
<li>Added support for publishing a message to a specific thread by <a
href="https://github.com/Nikolo"><code>@​Nikolo</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1309">slack-go/slack#1309</a></li>
<li>Added support for unicode parameter in emoji type of rich text
blocks by <a
href="https://github.com/YutoKashiwagi"><code>@​YutoKashiwagi</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1319">slack-go/slack#1319</a></li>
<li>Added endpoints for <code>calls.*</code> apis and <code>Type:
call</code> in blockkit by <a
href="https://github.com/winston-stripe"><code>@​winston-stripe</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1190">slack-go/slack#1190</a></li>
<li>Added Convenience Methods to Block Elements by <a
href="https://github.com/obed-sj"><code>@​obed-sj</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1279">slack-go/slack#1279</a></li>
<li>Added functions.completeError and functions.completeSuccess by <a
href="https://github.com/gideonw"><code>@​gideonw</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1328">slack-go/slack#1328</a></li>
<li>Added support for external_limited option of inviteShared by <a
href="https://github.com/bamo"><code>@​bamo</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1330">slack-go/slack#1330</a></li>
<li>Added support for Canvas API methods by <a
href="https://github.com/jarospisak-unity"><code>@​jarospisak-unity</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1334">slack-go/slack#1334</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Added required <code>format</code> field to rich text date blocks by
<a href="https://github.com/luke-josh"><code>@​luke-josh</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1317">slack-go/slack#1317</a></li>
<li>Updated RichTextInputBlockElement InitialValue data type by <a
href="https://github.com/Manjish"><code>@​Manjish</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1320">slack-go/slack#1320</a></li>
</ul>
<h3>Chores</h3>
<ul>
<li>Added go v1.23 to test matrix (test.yml) by <a
href="https://github.com/nemuvski"><code>@​nemuvski</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1315">slack-go/slack#1315</a></li>
<li>Bumped GitHub Actions to Latest Versions by <a
href="https://github.com/shogo82148"><code>@​shogo82148</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1314">slack-go/slack#1314</a></li>
<li>Updated deprecated comment for UploadFile and UploadFileContext by
<a href="https://github.com/shogo82148"><code>@​shogo82148</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1316">slack-go/slack#1316</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/shogo82148"><code>@​shogo82148</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1314">slack-go/slack#1314</a></li>
<li><a href="https://github.com/Nikolo"><code>@​Nikolo</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1309">slack-go/slack#1309</a></li>
<li><a href="https://github.com/luke-josh"><code>@​luke-josh</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1317">slack-go/slack#1317</a></li>
<li><a href="https://github.com/Manjish"><code>@​Manjish</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1320">slack-go/slack#1320</a></li>
<li><a
href="https://github.com/YutoKashiwagi"><code>@​YutoKashiwagi</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1319">slack-go/slack#1319</a></li>
<li><a href="https://github.com/obed-sj"><code>@​obed-sj</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1279">slack-go/slack#1279</a></li>
<li><a href="https://github.com/gideonw"><code>@​gideonw</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1328">slack-go/slack#1328</a></li>
<li><a href="https://github.com/bamo"><code>@​bamo</code></a> made their
first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1330">slack-go/slack#1330</a></li>
<li><a
href="https://github.com/jarospisak-unity"><code>@​jarospisak-unity</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1334">slack-go/slack#1334</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.14.0...v0.15.0">https://github.com/slack-go/slack/compare/v0.14.0...v0.15.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="203cdb2305"><code>203cdb2</code></a>
feat: Add support for Canvas API methods (<a
href="https://redirect.github.com/slack-go/slack/issues/1334">#1334</a>)</li>
<li><a
href="c5ef90eb58"><code>c5ef90e</code></a>
feat: Add support for external_limited option of inviteShared (<a
href="https://redirect.github.com/slack-go/slack/issues/1330">#1330</a>)</li>
<li><a
href="21e61c5b39"><code>21e61c5</code></a>
feat: Add functions.completeError and functions.completeSuccess (<a
href="https://redirect.github.com/slack-go/slack/issues/1328">#1328</a>)</li>
<li><a
href="132e0d11f7"><code>132e0d1</code></a>
feat: Add Convenience Methods to Block Elements (<a
href="https://redirect.github.com/slack-go/slack/issues/1279">#1279</a>)</li>
<li><a
href="57aa84d9a8"><code>57aa84d</code></a>
Add endpoints for <code>calls.*</code> apis and <code>Type: call</code>
in blockkit (<a
href="https://redirect.github.com/slack-go/slack/issues/1190">#1190</a>)</li>
<li><a
href="447b7cdae0"><code>447b7cd</code></a>
feat: Add support for unicode parameter in emoji type of rich text
blocks (<a
href="https://redirect.github.com/slack-go/slack/issues/1">#1</a>...</li>
<li><a
href="69981898f8"><code>6998189</code></a>
fix: Updated RichTextInputBlockElement InitialValue data type (<a
href="https://redirect.github.com/slack-go/slack/issues/1320">#1320</a>)</li>
<li><a
href="cd4e26e5ec"><code>cd4e26e</code></a>
fix: Add required <code>format</code> field to rich text date blocks (<a
href="https://redirect.github.com/slack-go/slack/issues/1317">#1317</a>)</li>
<li><a
href="6c4585b028"><code>6c4585b</code></a>
Support publishing a messge to a specific thread (<a
href="https://redirect.github.com/slack-go/slack/issues/1309">#1309</a>)</li>
<li><a
href="5386d65cc4"><code>5386d65</code></a>
fix: fix deprecated comment for UploadFile and UploadFileContext (<a
href="https://redirect.github.com/slack-go/slack/issues/1316">#1316</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/slack-go/slack/compare/v0.14.0...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-15 12:59:09 -03:00
dependabot[bot]
0f87e6f9f7
chore(deps): bump github/codeql-action from 3.26.12 to 3.26.13 (#5203) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.12 to 3.26.13.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f779452ac5"><code>f779452</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2539">#2539</a>
from github/update-v3.26.13-0c3e00641</li>
<li><a
href="532932479b"><code>5329324</code></a>
Update CHANGELOG.md</li>
<li><a
href="007ba25648"><code>007ba25</code></a>
Update changelog for v3.26.13</li>
<li><a
href="0c3e006416"><code>0c3e006</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2536">#2536</a>
from yoff/python/ff-std-lib-extraction</li>
<li><a
href="38469af228"><code>38469af</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2537">#2537</a>
from github/henrymercer/no-zstd-windows</li>
<li><a
href="5b6984ee4d"><code>5b6984e</code></a>
Assert that Windows downloads gzip</li>
<li><a
href="eefb943f7e"><code>eefb943</code></a>
Don't use Zstandard bundles on Windows</li>
<li><a
href="201e02efe2"><code>201e02e</code></a>
rebuild the action</li>
<li><a
href="ce5f900bfc"><code>ce5f900</code></a>
formatting</li>
<li><a
href="65dd816de1"><code>65dd816</code></a>
remove unused import</li>
<li>Additional commits viewable in <a
href="c36620d31a...f779452ac5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.12&new-version=3.26.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-15 12:58:55 -03:00
Carlos Alexandro Becker
91525f763c
fix: tmpl always copy before modifying (#5200) 
this is just to prevent some gotchas when using `templ` internally.
 2024-10-14 23:59:26 -03:00
Carlos Alexandro Becker
7f50679c4b
docs: update 2024-10-14 23:50:45 -03:00
Carlos Alexandro Becker
2b73005369
test: do not fail if not rel 2024-10-14 23:50:22 -03:00
Carlos Alexandro Becker
d933d8b316
fix: first class build targets 2024-10-14 14:30:28 -03:00
Carlos Alexandro Becker
a93f40b8cf
docs: fix 2024-10-14 14:25:47 -03:00
Carlos Alexandro Becker
4b91ae3589
docs: update 2024-10-14 11:30:16 -03:00
Carlos Alexandro Becker
d3ce82ff9f
fix: tmpl .386 -> .I386 
Template key can't start with a number.

Refs #5186
 2024-10-14 11:29:05 -03:00
Carlos Alexandro Becker
205b346215
chore(docs): update schema 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-14 10:06:27 -03:00
Carlos Alexandro Becker
d583861e06
feat(build): add GO386, GOMIPS64, GORISCV64, and GOPPC64 support (#5186) 
continuing the work of #5153

closes #5153

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Co-authored-by: 世界 <i@sekai.icu>
 2024-10-14 09:40:10 -03:00
dependabot[bot]
883c155a68
chore(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11 (#5197) 
Bumps
[github.com/klauspost/compress](https://github.com/klauspost/compress)
from 1.17.10 to 1.17.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/klauspost/compress/releases">github.com/klauspost/compress's
releases</a>.</em></p>
<blockquote>
<h2>v1.17.11</h2>
<h2>What's Changed</h2>
<ul>
<li>zstd: Fix extra CRC written with multiple Close calls by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1017">klauspost/compress#1017</a></li>
<li>s2: Don't use stack for index tables by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1014">klauspost/compress#1014</a></li>
<li>gzhttp: No content-type on no body response code by <a
href="https://github.com/juliens"><code>@​juliens</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1011">klauspost/compress#1011</a></li>
<li>gzhttp: Do not set the content-type when response has no body by <a
href="https://github.com/kevinpollet"><code>@​kevinpollet</code></a> in
<a
href="https://redirect.github.com/klauspost/compress/pull/1013">klauspost/compress#1013</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/juliens"><code>@​juliens</code></a> made
their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1011">klauspost/compress#1011</a></li>
<li><a
href="https://github.com/kevinpollet"><code>@​kevinpollet</code></a>
made their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1013">klauspost/compress#1013</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11">https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="72cd4a92a8"><code>72cd4a9</code></a>
zstd: Fix extra CRC written with multiple Close calls (<a
href="https://redirect.github.com/klauspost/compress/issues/1017">#1017</a>)</li>
<li><a
href="dbd6c38149"><code>dbd6c38</code></a>
s2: Don't use stack for index tables (<a
href="https://redirect.github.com/klauspost/compress/issues/1014">#1014</a>)</li>
<li><a
href="f73ab1e79f"><code>f73ab1e</code></a>
Do not set the content-type when response has no body (<a
href="https://redirect.github.com/klauspost/compress/issues/1013">#1013</a>)</li>
<li><a
href="f2a4f2583e"><code>f2a4f25</code></a>
build(deps): bump github/codeql-action in the github-actions group (<a
href="https://redirect.github.com/klauspost/compress/issues/1012">#1012</a>)</li>
<li><a
href="8e14b1b5a9"><code>8e14b1b</code></a>
No content-type on no body response code (<a
href="https://redirect.github.com/klauspost/compress/issues/1011">#1011</a>)</li>
<li><a
href="13a1ce6df1"><code>13a1ce6</code></a>
ci: Match goreleaser version (<a
href="https://redirect.github.com/klauspost/compress/issues/1009">#1009</a>)</li>
<li><a
href="6c5a195986"><code>6c5a195</code></a>
Update README.md</li>
<li>See full diff in <a
href="https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/klauspost/compress&package-manager=go_modules&previous-version=1.17.10&new-version=1.17.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-14 09:23:49 -03:00
dependabot[bot]
617ad4a4ae
chore(deps): bump anchore/scan-action from 4 to 5 (#5198) 
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from
4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/scan-action/releases">anchore/scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>New in scan-action v5.0.0</h2>
<ul>
<li>chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li>feat: short-lived grype-db cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)
[<a href="https://github.com/kzantow">kzantow</a>]
Note: with this release grype is no longer installed on
<code>$PATH</code>. We suspect the changes here could break a number of
users of the action who have learned to expect Grype be installed on
<code>$PATH</code>.</li>
</ul>
<h2>v4.1.2</h2>
<h2>New in scan-action v4.1.2</h2>
<ul>
<li>Update Grype to v0.80.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/358">#358</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v4.1.1</h2>
<h2>New in scan-action v4.1.1</h2>
<ul>
<li>chore(deps): update Grype to v0.79.6 (<a
href="https://redirect.github.com/anchore/scan-action/issues/352">#352</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>Document grype-version parameter (<a
href="https://redirect.github.com/anchore/scan-action/issues/319">#319</a>)
[<a href="https://github.com/vprivat-ads">vprivat-ads</a>]</li>
</ul>
<h2>v4.1.0</h2>
<h2>New in scan-action v4.1.0</h2>
<ul>
<li>chore(deps): update Grype to v0.79.3 (<a
href="https://redirect.github.com/anchore/scan-action/issues/341">#341</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e08a16a68"><code>4e08a16</code></a>
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/anchore/scan-action/issues/386">#386</a>)</li>
<li><a
href="a18ff2d1f2"><code>a18ff2d</code></a>
add release docs (<a
href="https://redirect.github.com/anchore/scan-action/issues/388">#388</a>)</li>
<li><a
href="c6c022e588"><code>c6c022e</code></a>
chore: add changelog ignore (<a
href="https://redirect.github.com/anchore/scan-action/issues/387">#387</a>)</li>
<li><a
href="65953694f6"><code>6595369</code></a>
chore: remove blocking workflow (<a
href="https://redirect.github.com/anchore/scan-action/issues/385">#385</a>)</li>
<li><a
href="11237475cc"><code>1123747</code></a>
chore(deps-dev): bump eslint from 9.11.1 to 9.12.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/381">#381</a>)</li>
<li><a
href="99311beeba"><code>99311be</code></a>
chore: update sha to correct pin for workflow actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/384">#384</a>)</li>
<li><a
href="2491ad68a9"><code>2491ad6</code></a>
chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)</li>
<li><a
href="2a3918e906"><code>2a3918e</code></a>
chore: optionally cache grype-db in actions cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)</li>
<li><a
href="a957c8db22"><code>a957c8d</code></a>
feat: update versions for actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/380">#380</a>)</li>
<li><a
href="54efbc6a14"><code>54efbc6</code></a>
chore(deps-dev): bump tslib from 2.6.3 to 2.7.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/359">#359</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/scan-action/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/scan-action&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-14 09:23:42 -03:00
dependabot[bot]
70ae5bb236
chore(deps): bump anchore/sbom-action from 0.17.2 to 0.17.3 (#5199) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.2 to 0.17.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.3</h2>
<h2>Changes in v0.17.3</h2>
<ul>
<li>chore(deps): update Syft to v1.14.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/498">#498</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f5e124a5e5"><code>f5e124a</code></a>
chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/493">#493</a>)</li>
<li><a
href="eff08d02ac"><code>eff08d0</code></a>
chore: configure changelog-ignore label (<a
href="https://redirect.github.com/anchore/sbom-action/issues/499">#499</a>)</li>
<li><a
href="18f9bdeed7"><code>18f9bde</code></a>
chore: remove snapshot tests; fix deprecation errors for outdated
packages (#...</li>
<li><a
href="2e8723687b"><code>2e87236</code></a>
add release docs (<a
href="https://redirect.github.com/anchore/sbom-action/issues/500">#500</a>)</li>
<li><a
href="4a914bc36a"><code>4a914bc</code></a>
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/497">#497</a>)</li>
<li><a
href="8cb9966eff"><code>8cb9966</code></a>
chore(deps): update Syft to v1.14.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/498">#498</a>)</li>
<li><a
href="beb779bf22"><code>beb779b</code></a>
Update README to include bit about permissions near the top (<a
href="https://redirect.github.com/anchore/sbom-action/issues/496">#496</a>)</li>
<li><a
href="87b31375ff"><code>87b3137</code></a>
chore(deps): update Syft to v1.13.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/488">#488</a>)</li>
<li><a
href="5cc1a40ded"><code>5cc1a40</code></a>
chore(deps): bump actions/checkout from 4.1.7 to 4.2.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/495">#495</a>)</li>
<li><a
href="dbef896719"><code>dbef896</code></a>
add awaiting response management (<a
href="https://redirect.github.com/anchore/sbom-action/issues/494">#494</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.2...v0.17.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.2&new-version=0.17.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-14 09:23:32 -03:00
dependabot[bot]
c4900fb1e6
chore(deps): bump gocloud.dev from 0.39.0 to 0.40.0 (#5194) 2024-10-11 15:19:21 +00:00
Carlos Alexandro Becker
efd9edc51c
fix(gitlab): improve artifact upload retry (#5185) 
this makes it more similar to github's implementation.

should fix #5177
 2024-10-11 12:03:13 -03:00
dependabot[bot]
8843f09b21
chore(deps): bump dagger/dagger-for-github from 6.12.0 to 6.13.0 (#5193) 
Bumps
[dagger/dagger-for-github](https://github.com/dagger/dagger-for-github)
from 6.12.0 to 6.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dagger/dagger-for-github/releases">dagger/dagger-for-github's
releases</a>.</em></p>
<blockquote>
<h2>v6.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: bump default version to v0.13.5 by <a
href="https://github.com/sipsma"><code>@​sipsma</code></a> in <a
href="https://redirect.github.com/dagger/dagger-for-github/pull/152">dagger/dagger-for-github#152</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dagger/dagger-for-github/compare/v6...v6.13.0">https://github.com/dagger/dagger-for-github/compare/v6...v6.13.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6b6e9832f7"><code>6b6e983</code></a>
chore: bump default version to v0.13.5</li>
<li>See full diff in <a
href="https://github.com/dagger/dagger-for-github/compare/v6.12.0...v6.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dagger/dagger-for-github&package-manager=github_actions&previous-version=6.12.0&new-version=6.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-11 12:00:36 -03:00
dependabot[bot]
ce90955872
chore(deps): bump github.com/xanzy/go-gitlab from 0.110.0 to 0.111.0 (#5195) 
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.110.0 to 0.111.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.111.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add event_name field to the audit events. by <a
href="https://github.com/lstout"><code>@​lstout</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2024">xanzy/go-gitlab#2024</a></li>
<li>Add Description field in Environments API by <a
href="https://github.com/timofurrer"><code>@​timofurrer</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2025">xanzy/go-gitlab#2025</a></li>
<li>Add 'default_branch' attribute by <a
href="https://github.com/jgangemi"><code>@​jgangemi</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2030">xanzy/go-gitlab#2030</a></li>
<li>Add support for Harbor Integration by <a
href="https://github.com/houstonj1"><code>@​houstonj1</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2027">xanzy/go-gitlab#2027</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jgangemi"><code>@​jgangemi</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2030">xanzy/go-gitlab#2030</a></li>
<li><a href="https://github.com/houstonj1"><code>@​houstonj1</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2027">xanzy/go-gitlab#2027</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.110.0...v0.111.0">https://github.com/xanzy/go-gitlab/compare/v0.110.0...v0.111.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b5e0812497"><code>b5e0812</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2027">#2027</a>
from houstonj1/feat/harbor-integration</li>
<li><a
href="e6a0bbf23a"><code>e6a0bbf</code></a>
change UseInheritedSettings from BoolValue to bool</li>
<li><a
href="8401d7e1ea"><code>8401d7e</code></a>
Merge branch 'xanzy:main' into feat/harbor-integration</li>
<li><a
href="87336053bb"><code>8733605</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2030">#2030</a>
from jgangemi/jae/issue-2029</li>
<li><a
href="18f1a0f245"><code>18f1a0f</code></a>
feat: add 'default_branch' attribute</li>
<li><a
href="1bdf26e781"><code>1bdf26e</code></a>
add missing field to test</li>
<li><a
href="3ac57b9e9e"><code>3ac57b9</code></a>
remove extra period</li>
<li><a
href="66f30b3d17"><code>66f30b3</code></a>
fix missing omitempty on SetHarborServiceOptions</li>
<li><a
href="ce294e84dd"><code>ce294e8</code></a>
Add support for Harbor Integration</li>
<li><a
href="6c05c53408"><code>6c05c53</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2025">#2025</a>
from timofurrer/environment-description</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.110.0...v0.111.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.110.0&new-version=0.111.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-11 12:00:21 -03:00