1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-06 03:13:48 +02:00
Commit Graph

4797 Commits

Author SHA1 Message Date
actions-user
58ede9badd chore: docs auto-update 2023-06-22 12:10:28 +00:00
Carlos Alexandro Becker
f33a534825
fix: umask nfpm field (#4136)
nfpm was updated, but we never allowed to configure the umask field in
goreleaser.

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-22 09:08:31 -03:00
Carlos Alexandro Becker
0b1a6bbfea
chore: fmt
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-21 22:09:27 +00:00
Carlos Alexandro Becker
a130fe9cb2
docs: smallstep sponsorship
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-21 17:48:38 -03:00
Ville Skyttä
629df041d9
fix: do runner cleanups also on SIGINT and SIGTERM (#4133)
Behavior of the `EXIT` condition is not consistent between shells with
regards to abnormal exits and signals. This cleanup should occur always.

https://austingroupbugs.net/view.php?id=621
2023-06-21 17:08:08 -03:00
dependabot[bot]
cb77f8d667
chore(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 (#4130) 2023-06-21 19:13:11 +00:00
dependabot[bot]
9a21cbe32c
feat(deps): bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 (#4131)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.85.0 to 0.86.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0886867b3b"><code>0886867</code></a>
Update CI and CONTRIBUTION.md</li>
<li><a
href="57a8f8f705"><code>57a8f8f</code></a>
Fix two linter warnings</li>
<li><a
href="d4057c786d"><code>d4057c7</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1646">#1646</a>
from theoriginalstove/1643-contributing-guide</li>
<li><a
href="c1a78fc6ad"><code>c1a78fc</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1740">#1740</a>
from PatrickRice-KSC/add-admin-permission-const</li>
<li><a
href="9f3d9fad76"><code>9f3d9fa</code></a>
Add admin permission const</li>
<li><a
href="85fa21c71b"><code>85fa21c</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1732">#1732</a>
from Mareo/add-support-for-discord-service</li>
<li><a
href="1a7fd5cf74"><code>1a7fd5c</code></a>
Update README.md</li>
<li><a
href="39ca669228"><code>39ca669</code></a>
Update CONTRIBUTING.md</li>
<li><a
href="9fc3c91b5d"><code>9fc3c91</code></a>
Add support for Discord service</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.85.0...v0.86.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.85.0&new-version=0.86.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-21 15:56:09 -03:00
Carlos Alexandro Becker
7c658e57dc
docs: update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-20 12:43:18 +00:00
Carlos Alexandro Becker
72cf8404c1
feat: continue on error (#4127)
closes #3989

Basically, when some of these pipes fail, the error will be memorized,
and all errors will be thrown in the end.

Meaning: the exit code will still be 1, but it'll not have stopped in
the first error.

Thinking of maybe adding a `--fail-fast` flag to disable this behavior
as well 🤔

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-20 09:33:59 -03:00
dependabot[bot]
e2eb95d5cf
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to
0.30.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.30.0</h2>
<p><strong>blob</strong></p>
<ul>
<li><strong>all</strong>: Add <code>Upload</code> and
<code>Download</code> methods that may be more efficient for some
drivers.</li>
<li><strong>s3blob</strong>: Add support for per-request
<code>s3v2.Options</code>.</li>
<li><strong>s3blob</strong>: Stop escaping second <code>/</code> in
<code>//</code>; it's no longer necessary.</li>
</ul>
<p><strong>pubsub</strong></p>
<ul>
<li><strong>gcppubsub</strong>: Make it possible to configure
<code>max_send_batch_size</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d2d5bedb50"><code>d2d5bed</code></a>
all: prep for release (<a
href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li>
<li><a
href="c2e172b5a7"><code>c2e172b</code></a>
all: update dependencies (<a
href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li>
<li><a
href="098177a48c"><code>098177a</code></a>
blob/s3blob: fix the 'awssdk' argument examples</li>
<li><a
href="2e4fad43f0"><code>2e4fad4</code></a>
all: remove refs to deprecated xerrors</li>
<li><a
href="1db413f1b3"><code>1db413f</code></a>
pubsub/gcppubsub: make it possible to configure max_send_batch_size</li>
<li><a
href="0c8428bf43"><code>0c8428b</code></a>
blob: Add Upload and Download methods that may be more efficient for
some dri...</li>
<li><a
href="54c71241a5"><code>54c7124</code></a>
all: cleanup duplicate import statements</li>
<li><a
href="28b1328ae4"><code>28b1328</code></a>
all: minor code simplifications for returned boolean expressions</li>
<li><a
href="2a407f5e6a"><code>2a407f5</code></a>
blob/gcsblob: Refresh goldens</li>
<li><a
href="0cc16c8ae1"><code>0cc16c8</code></a>
all: update goldens (<a
href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 09:04:08 -03:00
Carlos Alexandro Becker
42822497ae
feat(aur): single commit per package (#4126)
using the new multiple files api to have a single commit/push for all
files of a package.

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-19 14:03:22 -03:00
dependabot[bot]
db6a1704ed
chore(deps): bump cachix/install-nix-action from 21 to 22 (#4125)
Bumps
[cachix/install-nix-action](https://github.com/cachix/install-nix-action)
from 21 to 22.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cachix/install-nix-action/releases">cachix/install-nix-action's
releases</a>.</em></p>
<blockquote>
<h2>install-nix-action-v22</h2>
<ul>
<li>Nix 2.16.1</li>
<li>Fix issues with System Integrity Protection when using macos-12</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6ed004b9cc"><code>6ed004b</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/184">#184</a>
from cachix/macos-bump</li>
<li><a
href="e27879448e"><code>e278794</code></a>
Nix: 2.15.1 -&gt; 2.16.1</li>
<li><a
href="8ab3881720"><code>8ab3881</code></a>
use system certs</li>
<li><a
href="16b951426e"><code>16b9514</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/182">#182</a>
from l0b0/feat/configure-editors</li>
<li><a
href="2c203fd87b"><code>2c203fd</code></a>
feat: Configure editors</li>
<li>See full diff in <a
href="https://github.com/cachix/install-nix-action/compare/v21...v22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cachix/install-nix-action&package-manager=github_actions&previous-version=21&new-version=22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-19 08:59:24 -03:00
Carlos Alexandro Becker
739490290f
test: improve more tests (#4124) 2023-06-18 11:58:17 -03:00
Carlos Alexandro Becker
c6851f5eee
fix(nix): hc should report nix-prefetch-url as a dependency
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-17 23:23:14 +00:00
Carlos Alexandro Becker
94981fb8c0
chore: schema udpate
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-16 16:55:12 +00:00
Carlos Alexandro Becker
7d7e02b739
chore: update schema
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-16 16:48:59 +00:00
Carlos Alexandro Becker
b4dbf6b64b
feat(jsonschema): mark deprecated options as so
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-16 16:46:58 +00:00
Carlos Alexandro Becker
3e66f8418e
chore: update schema
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-16 16:43:36 +00:00
actions-user
4d115cbf81 chore: docs auto-update 2023-06-16 16:33:12 +00:00
Carlos Alexandro Becker
e5c9338efd
feat: changelog.include (#4122)
closes https://github.com/goreleaser/goreleaser/issues/4111
refs https://github.com/orgs/goreleaser/discussions/4110
recreated #4115

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-16 13:31:23 -03:00
dependabot[bot]
5f908bd121
feat(deps): bump golang.org/x/tools from 0.9.3 to 0.10.0 (#4121) 2023-06-16 13:24:19 -03:00
Carlos Alexandro Becker
2ad313a7e2
test: syscall.EACCES and os.ErrNoExist (#4120)
extracted from #3795

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 23:53:20 -03:00
Carlos Alexandro Becker
bad7984962
test: improve executable not found checks (#4119)
extracted from #3795
2023-06-15 23:51:07 -03:00
Carlos Alexandro Becker
bb33419beb
fix: archives should always use forward slash (#4116)
extracted from #3795

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 23:43:29 -03:00
Carlos Alexandro Becker
ef3c42f22e
fix: artifact.Path should filepath.ToSlash (#4117)
this is needed when we run part of the pipeline on windows, and the rest
on linux, for example, the split build pro feature.

extracted from https://github.com/goreleaser/goreleaser/pull/3795 

+ added tests for relative path thing

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 23:43:06 -03:00
Carlos Alexandro Becker
e5a0f662fd
test: ECONNREFUSED (#4118)
improved test check

extracted from #3795
2023-06-15 23:42:55 -03:00
Ville Skyttä
3eecfddfc5
fix: runner tarball extract path (#4114)
Sigh, yet another regression from
4b78278292. I actually _did_ test already
with 10a627c196, but for some reason
failed to notice the error. Tested better now :/
2023-06-15 16:34:45 -03:00
Ville Skyttä
10a627c196
fix: runner tarball download URL (#4113) 2023-06-15 14:57:43 -03:00
Ville Skyttä
4b78278292
docs: runner script fixes (#4112)
Primary motivation here is to fix the runner script on Linux arm64; see
the first commit. The other two contain some while-at-it cleanups.
2023-06-15 14:34:09 -03:00
Carlos Alexandro Becker
a76db83da0
sec: fix for GHSA-2fvp-53hw-f9fc
This is a meta commit so this gets properly categorized in the
changelog.

Originally fixed in 265148c

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 14:47:12 +00:00
Ville Skyttä
265148c661
Merge pull request from GHSA-2fvp-53hw-f9fc
Also takes care of removing the temporary directory when done.

Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 11:45:14 -03:00
dependabot[bot]
b6e9eb81e4
feat(deps): bump golang from b036c52 to fd9d9d7 (#4108) 2023-06-15 14:36:49 +00:00
dependabot[bot]
7af206fab5
feat(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#4109) 2023-06-15 14:23:43 +00:00
Carlos Alexandro Becker
0f5b058363
feat(winget): support arm64
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 03:34:12 +00:00
Carlos Alexandro Becker
7355ccd524
build: fix config 2023-06-15 03:19:58 +00:00
Carlos Alexandro Becker
0e83d32610
chore: schema update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 03:09:13 +00:00
Carlos Alexandro Becker
f365c724dc
build: fix docs build
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 03:03:33 +00:00
Carlos Alexandro Becker
14c141abf3
build: fix docs build
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 03:03:13 +00:00
actions-user
dce5649319 chore: docs auto-update 2023-06-15 03:02:19 +00:00
Carlos Alexandro Becker
6afdb49c12
feat: winget support (#4081)
this will add support to winget into goreleaser.

Basically, the plan is:

- we generate the 3 needed yaml files 
- we commit them to a repo

and that's it.

Initially, will probably have limited options support, and will only
have the default locale.

###### TODO

- [x] docs
- [x] review by someone who knows how this works?
- [x] test install somewhere
- [x] more tests maybe?
- [x] PR templates via API?
https://github.com/goreleaser/goreleaser/pull/4105
- [x] real project test 
- [x] setup goreleaser to pr to winget as well
- [x] document sync fork stuff
https://github.com/goreleaser/goreleaser/pull/4106

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-14 23:59:55 -03:00
Carlos Alexandro Becker
81bd82b13b
fix(nix): improve error message
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-15 02:55:32 +00:00
Carlos Alexandro Becker
823bc6062d
feat: make git client support creating multiple files in a single commit (#4107)
extracted from #4081

a little bit of a better impl than there, actually...
2023-06-14 23:52:35 -03:00
Carlos Alexandro Becker
f070847a87
docs: add more info about opening prs (#4106)
add another include with information about PRs, to be included
everywhere `repository.md` is included, too.

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-14 23:34:41 -03:00
Carlos Alexandro Becker
bbcc45b677
feat: support pull request templates (#4105)
check if there is a `.github/PULL_REQUEST_TEMPLATE.md` file, and use it
as body of the pull request if there is.

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-14 23:28:38 -03:00
Carlos Alexandro Becker
2519581221
chore: update schema
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-14 18:04:51 +00:00
Carlos Alexandro Becker
41536fd13d
docs: explain artifactory mode binary better
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-14 18:04:46 +00:00
dependabot[bot]
277339bf1f
feat(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#4103) 2023-06-14 12:48:43 +00:00
dependabot[bot]
62002b5ffd
feat(deps): bump golang.org/x/text from 0.9.0 to 0.10.0 (#4102)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [golang.org/x/text](https://github.com/golang/text) from 0.9.0 to
0.10.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3a7a2557e7"><code>3a7a255</code></a>
internal/export/idna: make more space for mapping index</li>
<li><a
href="d61dd50441"><code>d61dd50</code></a>
go.mod: delete repeated &quot;indirect&quot;</li>
<li><a
href="efb744f6d9"><code>efb744f</code></a>
internal/export/idna: fix infinite loop in Go pre-1.10</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.9.0...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.9.0&new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-14 09:36:54 -03:00
dependabot[bot]
a3efb28d47
feat(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 (#4101)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.9.0
to 0.10.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8e447d8cc5"><code>8e447d8</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="22c9997952"><code>22c9997</code></a>
go.mod: tell x repo tagging to ignore dep on net</li>
<li><a
href="d0b316056b"><code>d0b3160</code></a>
x509roots: add new module</li>
<li><a
href="16222386f4"><code>1622238</code></a>
Add support for &quot;<a
href="mailto:hmac-sha2-512-etm@openssh.com">hmac-sha2-512-etm@openssh.com</a>&quot;</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.9.0...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.9.0&new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-14 09:36:28 -03:00
dependabot[bot]
605467bfa4
chore(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 (#4100)
Bumps
[docker/setup-buildx-action](https://github.com/docker/setup-buildx-action)
from 2.6.0 to 2.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.7.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.3.0 to 0.5.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/237">docker/setup-buildx-action#237</a>
<a
href="https://redirect.github.com/docker/setup-buildx-action/pull/238">docker/setup-buildx-action#238</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-buildx-action/compare/v2.6.0...v2.7.0">https://github.com/docker/setup-buildx-action/compare/v2.6.0...v2.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ecf95283f0"><code>ecf9528</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/238">#238</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="b2a38ee0c6"><code>b2a38ee</code></a>
update generated content</li>
<li><a
href="7f79690cac"><code>7f79690</code></a>
Bump <code>@​docker/actions-toolkit</code> from 0.4.0 to 0.5.0</li>
<li><a
href="bdd549bec0"><code>bdd549b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/237">#237</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="be4a3855af"><code>be4a385</code></a>
update generated content</li>
<li><a
href="6c4dbb29f6"><code>6c4dbb2</code></a>
Bump <code>@​docker/actions-toolkit</code> from 0.3.0 to 0.4.0</li>
<li>See full diff in <a
href="6a58db7e0d...ecf95283f0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/setup-buildx-action&package-manager=github_actions&previous-version=2.6.0&new-version=2.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-14 09:35:59 -03:00