1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-10 03:47:03 +02:00
Commit Graph

4070 Commits

Author SHA1 Message Date
Carlos Alexandro Becker
36a48eabb7
fix: binary archive when multiple builds (#3385)
closes #3383

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-16 23:47:06 -03:00
dependabot[bot]
72fad7678b
chore(deps): bump github/codeql-action from 2.1.22 to 2.1.23 (#3382)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.22 to 2.1.23.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6a38b7d4a1"><code>6a38b7d</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1246">#1246</a>
from github/update-v2.1.23-fd4dc5bf</li>
<li><a
href="99d0a6bc15"><code>99d0a6b</code></a>
Update changelog for v2.1.23</li>
<li><a
href="fd4dc5bf31"><code>fd4dc5b</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1244">#1244</a>
from github/criemen/remove-lua-tracer-ff</li>
<li><a
href="c2560331fc"><code>c256033</code></a>
Fix runner integration test.</li>
<li><a
href="0a38743d1a"><code>0a38743</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1240">#1240</a>
from github/henrymercer/2.10.5-bump</li>
<li><a
href="3038e979a8"><code>3038e97</code></a>
Remove the lua tracer feature flag check from the codeql-action.</li>
<li><a
href="ff575f231d"><code>ff575f2</code></a>
Add changelog note</li>
<li><a
href="4a8d26e2bd"><code>4a8d26e</code></a>
Bump CodeQL version to 2.10.5</li>
<li><a
href="9ba4d500aa"><code>9ba4d50</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1221">#1221</a>
from github/aeisenberg/ghes-pack-download</li>
<li><a
href="6085805a3a"><code>6085805</code></a>
Append <code>/</code> to end of registries url</li>
<li>Additional commits viewable in <a
href="b398f525a5...6a38b7d4a1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.22&new-version=2.1.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 23:35:17 -03:00
Carlos Alexandro Becker
0ea3e0f572
fix: build --single-target when using specific targets (#3381)
When using specific targets in the config, single target becomes
ineffective. This should fix it. This also removes other build options
like gomips, goarm, goamd64, etc, as go will infer them from the current
OS. In theory we should one day support all the GO* flags go build
supports.
2022-09-15 22:17:40 -03:00
Carlos Alexandro Becker
69e9b2b120
fix: update cosign in docker img to 1.12.0 (#3379)
fix for
https://github.com/sigstore/cosign/security/advisories/GHSA-8gw7-4j42-w388

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-15 19:39:51 +03:00
Batuhan Apaydın
826944d62f
docs: add COSIGN_EXPERIMENTAL=1 for verify-blob (#3378)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->

Cross-ref: https://github.com/fluxcd/source-controller/issues/899

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2022-09-15 13:29:12 -03:00
dependabot[bot]
ad330ce61c
fix(deps): bump github.com/disgoorg/disgo from 0.13.17 to 0.13.20 (#3377)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.13.17 to 0.13.20.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.20 - Forum Channel Updates</h2>
<h2>What's Changed</h2>
<ul>
<li>implement recent forum updates by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/197">disgoorg/disgo#197</a></li>
<li>populate <code>GuildID</code> in <code>Message</code>s from
interactions by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="9ebbc6ea22</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.13.19...v0.13.20">https://github.com/disgoorg/disgo/compare/v0.13.19...v0.13.20</a></p>
<h2>v0.13.19 - Pagination and Improved Presence UX</h2>
<h2>What's Changed</h2>
<ul>
<li>pagination helpers by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/183">disgoorg/disgo#183</a></li>
<li>improve presence UX by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/196">disgoorg/disgo#196</a></li>
<li>payload type consistency fixes by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/198">disgoorg/disgo#198</a></li>
<li>add <code>JumpURL()</code> to <code>Message</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="97dd956ee7</a></li>
<li>add <code>GuildFeatureInvitesDisabled</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/192">disgoorg/disgo#192</a></li>
<li>rename <code>CommandNameLocalizations</code> to
<code>NameLocalizations</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="31933fcdeb</a></li>
<li>replace <code>rest.UpdateSelfNick</code> with
<code>rest.UpdateCurrentMember</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/199">disgoorg/disgo#199</a></li>
</ul>
<h2>Breaking</h2>
<ul>
<li><code>gateway.WithPresence(...)</code> was renamed to
<code>gateway.WithPresenceOpts(...)</code> and
<code>gateway.NewXPresence(...)</code> funcs were renamed to
<code>gateway.WithXPresence(...)</code>. This change makes all presence
data optional, meaning you won't have to pass unwanted data on every
presence update.</li>
</ul>
<p>Example:</p>
<pre lang="go"><code>bot.WithGatewayConfigOpts(

gateway.WithPresenceOpts(gateway.WithListeningActivity(&quot;music&quot;)),
	...
)
</code></pre>
<p>New funcs:
<code>gateway.WithOnlineStatus(...)</code>
<code>gateway.WithAfk(...)</code>
<code>gateway.WithSince(...)</code></p>
<ul>
<li>some payload field types were changed to match the behavior of the
Discord API</li>
<li><code>CommandNameLocalizations</code> fields were renamed to
<code>NameLocalizations</code></li>
<li>the <code>limit</code> parameter in
<code>rest.GetGuildScheduledEventUsers</code> was moved</li>
<li><code>rest.UpdateSelfNick</code> was replaced with
<code>rest.UpdateCurrentMember</code> as the old endpoint is deprecated
(structs were also renamed accordingly)</li>
<li><code>MaxAgree</code> in <code>InviteCreate</code> was renamed to
<code>MaxAge</code> (this probably didn't even need to be mentioned
since no one complained lol)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.13.18...v0.13.19">https://github.com/disgoorg/disgo/compare/v0.13.18...v0.13.19</a></p>
<h2>v0.13.18 - Gateway Resume URL Handling</h2>
<h2>What's Changed</h2>
<ul>
<li>implement gateway resume URL handling by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/186">disgoorg/disgo#186</a></li>
<li>replace <code>DeleteMessageDays</code> with
<code>DeleteMessageSeconds</code> and make <code>rest.AddBan</code> take
a <code>time.Duration</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/195">disgoorg/disgo#195</a></li>
<li>add <code>MessageURL</code> format to <code>Message</code> by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="9f10939de2</a></li>
<li>add <code>ApplicationCommands</code> to <code>AuditLog</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/193">disgoorg/disgo#193</a></li>
<li>add <code>Scopes</code> to <code>BotIntegration</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/190">disgoorg/disgo#190</a></li>
</ul>
<h2>Breaking Changes</h2>
<ul>
<li><code>rest.AddBan</code> now takes a <code>time.Duration</code>
instead of an <code>int</code> of <code>deleteMessageDays</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f04f4638bb"><code>f04f463</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/197">#197</a>
from disgoorg/patch/forum-updates</li>
<li><a
href="78ef75c526"><code>78ef75c</code></a>
remove embedding</li>
<li><a
href="76def4ee6c"><code>76def4e</code></a>
Update discord/thread.go</li>
<li><a
href="5aab1eaabd"><code>5aab1ea</code></a>
Merge branch 'development' into patch/forum-updates</li>
<li><a
href="9ebbc6ea22"><code>9ebbc6e</code></a>
populate missing guild_id field in messages returned by
interactions</li>
<li><a
href="364ec06648"><code>364ec06</code></a>
fix &quot;unknown&quot; misspells</li>
<li><a
href="1c504a9a97"><code>1c504a9</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/183">#183</a>
from disgoorg/feature/pagination-helpers</li>
<li><a
href="0fa0901433"><code>0fa0901</code></a>
fix pagination example</li>
<li><a
href="15bdcc1e32"><code>15bdcc1</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/192">#192</a>
from disgoorg/patch/invites-disabled-feature</li>
<li><a
href="37d3de27da"><code>37d3de2</code></a>
remove unneeded UnmarshalChannel for threads in audit log</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.13.17...v0.13.20">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.13.17&new-version=0.13.20)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-15 10:05:04 -03:00
dependabot[bot]
8a36f2e656
fix(deps): bump github.com/slack-go/slack from 0.11.2 to 0.11.3 (#3369)
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.11.2 to 0.11.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.11.3</h2>
<h2>What's Changed</h2>
<h3>Enhancements/Refactoring</h3>
<ul>
<li>Add metadata related event types by <a
href="https://github.com/hrkskov"><code>@​hrkskov</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1096">slack-go/slack#1096</a></li>
<li>fix: UploadFileContext not calling api.AuthTestContext by <a
href="https://github.com/kevin-faliam"><code>@​kevin-faliam</code></a>
in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1109">slack-go/slack#1109</a></li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li>Handle null value in JSONTime by <a
href="https://github.com/rusq"><code>@​rusq</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1106">slack-go/slack#1106</a></li>
<li>Honor deadman timer, fixes <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1093">#1093</a>
by <a href="https://github.com/parsley42"><code>@​parsley42</code></a>
in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1094">slack-go/slack#1094</a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>fix some simple typos by <a
href="https://github.com/lpmi-13"><code>@​lpmi-13</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1098">slack-go/slack#1098</a></li>
<li>Fix GoDoc grammers by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1099">slack-go/slack#1099</a></li>
</ul>
<h3>Misc</h3>
<ul>
<li>Update workflow for testing by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1100">slack-go/slack#1100</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lpmi-13"><code>@​lpmi-13</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1098">slack-go/slack#1098</a></li>
<li><a href="https://github.com/hrkskov"><code>@​hrkskov</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1096">slack-go/slack#1096</a></li>
<li><a
href="https://github.com/kevin-faliam"><code>@​kevin-faliam</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1109">slack-go/slack#1109</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.11.2...v0.11.3">https://github.com/slack-go/slack/compare/v0.11.2...v0.11.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6f5eda2a6c"><code>6f5eda2</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1094">#1094</a>
from lnxjedi/fix-timeout</li>
<li><a
href="d197559760"><code>d197559</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1106">#1106</a>
from rusq/patch-1</li>
<li><a
href="ba4dcc33c4"><code>ba4dcc3</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1109">#1109</a>
from kevin-faliam/fix_UploadFileContext</li>
<li><a
href="6e76f47f82"><code>6e76f47</code></a>
fix: UploadFileContext not calling api.AuthTestContext</li>
<li><a
href="e47ef98b88"><code>e47ef98</code></a>
add JSONTime test</li>
<li><a
href="0b2c5fadab"><code>0b2c5fa</code></a>
Handle null JSONTime Unmarshal</li>
<li><a
href="870ec8a6e7"><code>870ec8a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1096">#1096</a>
from hrkskov/feat/metadata_events</li>
<li><a
href="4e3dfc2ff2"><code>4e3dfc2</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1100">#1100</a>
from slack-go/ci-miscs</li>
<li><a
href="83bcc585db"><code>83bcc58</code></a>
Update workflow for testing</li>
<li><a
href="a5a199f631"><code>a5a199f</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1099">#1099</a>
from slack-go/fix/linter-errors</li>
<li>Additional commits viewable in <a
href="https://github.com/slack-go/slack/compare/v0.11.2...v0.11.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.11.2&new-version=0.11.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-15 09:45:02 -03:00
dependabot[bot]
4afcbe2ea1
fix(deps): bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 (#3372)
Bumps [github.com/caarlos0/env/v6](https://github.com/caarlos0/env) from
6.10.0 to 6.10.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v6's
releases</a>.</em></p>
<blockquote>
<h2>v6.10.1</h2>
<h2>Changelog</h2>
<h3>Bug fixes</h3>
<ul>
<li>f3ddf1f7ee602a224429717ddc431e9083d45882: fix: non empty struct
pointer value (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/236">#236</a>)
(<a href="https://github.com/akutuev"><code>@​akutuev</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="538d000518"><code>538d000</code></a>
chore: touch go.sum</li>
<li><a
href="5d66c35135"><code>5d66c35</code></a>
chore: govulncheck, semgrep &amp; ruleguard jobs</li>
<li><a
href="f3ddf1f7ee"><code>f3ddf1f</code></a>
fix: non empty struct pointer value (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/236">#236</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/env/compare/v6.10.0...v6.10.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/env/v6&package-manager=go_modules&previous-version=6.10.0&new-version=6.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-15 09:44:28 -03:00
Carlos Alexandro Becker
6606eec326
fix: yaml-lang-server modelines in init config (#3376)
- docs on how to specify the schema to the lang server
- add it automatically along with vim modelines to the init config
- added it to our config as well

this should prevent some "out of date" schema issues, as well as mixing
tabs with spaces and whatnot when an editorconfig plugin is not
installed.
2022-09-15 09:41:26 -03:00
Carlos Alexandro Becker
89978a2a5c
fix: fish completions path on nfpm (#3375)
https://fishshell.com/docs/current/completions.html#where-to-put-completions

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-15 01:29:47 -03:00
Carlos Alexandro Becker
707747db3b
fix: print release url after publishing it (#3374)
very small improvement, but useful nevertheless

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-13 23:52:54 -03:00
Carlos A Becker
a8403f2a0c
docs: improve actions docs 2022-09-13 23:50:59 -03:00
Carlos A Becker
cb686785b0
docs: why we made it, is it any good, video, etc 2022-09-13 23:47:23 -03:00
Carlos Alexandro Becker
7bb7ed67db
docs: update readme 2022-09-13 22:55:27 -03:00
dependabot[bot]
f7efe9ca2b
chore(deps): bump sigstore/cosign-installer from 2.5.1 to 2.6.0 (#3368)
Bumps
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
from 2.5.1 to 2.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v2.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>update action to default cosign to v1.11.0 release by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/89">sigstore/cosign-installer#89</a></li>
<li>cleanup dependabot by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/90">sigstore/cosign-installer#90</a></li>
<li>default cosign to v1.11.1 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/91">sigstore/cosign-installer#91</a></li>
<li>Bump actions/setup-go from 3.2.1 to 3.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/92">sigstore/cosign-installer#92</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0">https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f3c664df7a"><code>f3c664d</code></a>
Bump actions/setup-go from 3.2.1 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/issues/92">#92</a>)</li>
<li><a
href="14d43345ff"><code>14d4334</code></a>
default cosign to v1.11.1 (<a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/issues/91">#91</a>)</li>
<li><a
href="8d0fee40fd"><code>8d0fee4</code></a>
cleanup dependabot (<a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/issues/90">#90</a>)</li>
<li><a
href="716fc02719"><code>716fc02</code></a>
update action to default cosign to v1.11.0 release (<a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/issues/89">#89</a>)</li>
<li>See full diff in <a
href="https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/cosign-installer&package-manager=github_actions&previous-version=2.5.1&new-version=2.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-12 09:36:39 -03:00
Carlos A Becker
da05701977
fix: race condition on logs
This brings an update on caarlos0/log, precisely due to
452cd19227,
which fixes the bug reported at #3363.

Closes #3363
2022-09-11 23:06:01 -03:00
Carlos Alexandro Becker
61f586e625
docs: version recent changes (#3367)
versioned all new options since v1.2 (late 2021).

Should be enough to fix #3317 for now.

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-11 16:54:51 -03:00
dependabot[bot]
c7bb924e44
fix(deps): bump golang from 1.19.0-alpine to 1.19.1-alpine (#3355)
Bumps golang from 1.19.0-alpine to 1.19.1-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.19.0-alpine&new-version=1.19.1-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-11 15:38:45 -03:00
Carlos Alexandro Becker
8cb4eb1654
fix: ruleguard and semgrep scans and fixes (#3364)
run semgrep-go ruleguard and semgrep scans

https://github.com/dgryski/semgrep-go

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-11 15:32:23 -03:00
Carlos Alexandro Becker
2244bba1e0
fix: templates in release URLs (#3365)
closes #3356

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-11 14:28:50 -03:00
Carlos Alexandro Becker
5185b5b6ed
chore(ci): govulncheck (#3362)
check for vulnerabilities

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-09 11:36:15 -03:00
Carlos A Becker
b8a225b6c7
docs: improve monorepo docs
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-09-04 16:16:34 -03:00
actions-user
101c6af085 chore: docs auto-update 2022-09-04 02:29:09 +00:00
Carlos A Becker
dbc32c23ee
docs: improve sponsors page 2022-09-03 23:27:04 -03:00
Carlos A Becker
1c96e113c4
docs: improve links page 2022-09-03 23:21:55 -03:00
Carlos A Becker
1830126ee0
docs: add eula and linkedin to links 2022-09-03 23:18:10 -03:00
dependabot[bot]
74abb18d2d
chore(deps): bump github/codeql-action from 2.1.21 to 2.1.22 (#3354)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.22.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.22 - 01 Sep 2022</h2>
<ul>
<li>Downloading CodeQL packs has been moved to the <code>init</code> step. Previously, CodeQL packs were downloaded during the <code>analyze</code> step. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li>
<li>Update default CodeQL bundle version to 2.10.4. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li>
<li>The newly released <a href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry 1.2</a> is not yet supported. In the most common case where the CodeQL Action is automatically installing Python dependencies, it will continue to install and use Poetry 1.1 on its own. However, in certain cases such as with self-hosted runners, you may need to ensure Poetry 1.1 is installed yourself.</li>
</ul>
<h2>2.1.21 - 25 Aug 2022</h2>
<ul>
<li>Improve error messages when the code scanning configuration file includes an invalid <code>queries</code> block or an invalid <code>query-filters</code> block. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li>
<li>Fix a bug where Go build tracing could fail on Windows. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li>
</ul>
<h2>2.1.20 - 22 Aug 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.19 - 17 Aug 2022</h2>
<ul>
<li>Add the ability to filter queries from a code scanning run by using the <code>query-filters</code> option in the code scanning configuration file. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1098">#1098</a></li>
<li>In debug mode, debug artifacts are now uploaded even if a step in the Actions workflow fails. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1159">#1159</a></li>
<li>Update default CodeQL bundle version to 2.10.3. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1178">#1178</a></li>
<li>The combination of python2 and Pipenv is no longer supported. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1181">#1181</a></li>
</ul>
<h2>2.1.18 - 03 Aug 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.10.2.  <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1156">#1156</a></li>
</ul>
<h2>2.1.17 - 28 Jul 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.10.1.  <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1143">#1143</a></li>
</ul>
<h2>2.1.16 - 13 Jul 2022</h2>
<ul>
<li>You can now quickly debug a job that uses the CodeQL Action by re-running the job from the GitHub UI and selecting the &quot;Enable debug logging&quot; option. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1132">#1132</a></li>
<li>You can now see diagnostic messages produced by the analysis in the logs of the <code>analyze</code> Action by enabling debug mode. To enable debug mode, pass <code>debug: true</code> to the <code>init</code> Action, or <a href="https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging#enabling-step-debug-logging">enable step debug logging</a>. This feature is available for CodeQL CLI version 2.10.0 and later. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1133">#1133</a></li>
</ul>
<h2>2.1.15 - 28 Jun 2022</h2>
<ul>
<li>CodeQL query packs listed in the <code>packs</code> configuration field will be skipped if their target language is not being analyzed in the current Actions job. Previously, this would throw an error. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1116">#1116</a></li>
<li>The combination of python2 and poetry is no longer supported. See <a href="https://github-redirect.dependabot.com/actions/setup-python/issues/374">actions/setup-python#374</a> for more details. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1124">#1124</a></li>
<li>Update default CodeQL bundle version to 2.10.0. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1123">#1123</a></li>
</ul>
<h2>2.1.14 - 22 Jun 2022</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="b398f525a5"><code>b398f52</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1225">#1225</a> from github/update-v2.1.22-a5966ad4</li>
<li><a href="b0f41e06da"><code>b0f41e0</code></a> Update changelog for v2.1.22</li>
<li><a href="a5966ad4f1"><code>a5966ad</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1224">#1224</a> from github/edoardo/2.10.4-bump</li>
<li><a href="8c692b37a0"><code>8c692b3</code></a> Pin <code>poetry</code> to 1.1</li>
<li><a href="693b97bf50"><code>693b97b</code></a> Bump CodeQL version to 2.10.4</li>
<li><a href="d92a91c5c4"><code>d92a91c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1218">#1218</a> from github/aeisenberg/move-pack-download-to-init</li>
<li><a href="7294b404d8"><code>7294b40</code></a> Fix call to <code>endGroup</code></li>
<li><a href="354bc9f629"><code>354bc9f</code></a> Add Changelog entry</li>
<li><a href="0a2b0d236c"><code>0a2b0d2</code></a> Moves calls to pack download to the init action</li>
<li><a href="a59fbe2208"><code>a59fbe2</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1215">#1215</a> from github/dependabot/npm_and_yarn/octokit/types-7.1.1</li>
<li>Additional commits viewable in <a href="c7f292ea4f...b398f525a5">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.21&new-version=2.1.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-02 14:22:57 -03:00
Colin Kennedy
45387f5dc0
docs: insert missing word (#3352)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

...

<!-- Why is this change being made? -->

...

<!-- # Provide links to any relevant tickets, URLs or other resources -->

...
2022-08-31 14:40:08 -03:00
Carlos A Becker
e31f7806dc
docs: update schema
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-30 22:25:33 -03:00
actions-user
23a7922f8e chore: docs auto-update 2022-08-30 15:07:04 +00:00
Carlos Alexandro Becker
efdba10f58
fix: guard changelog commit abbrev behind config (#3349)
this allows the user to specify the abbrev lenght to use, and will also add the option to omit the commit hash altogether by setting it to -1.
default is doing nothing

closes #3348

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-30 12:04:01 -03:00
Abirdcfly
cce963caf2
chore: remove duplicate word in comments (#3347)
Signed-off-by: Abirdcfly <fp544037857@gmail.com>

<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

...

<!-- Why is this change being made? -->

...

<!-- # Provide links to any relevant tickets, URLs or other resources -->

...

Signed-off-by: Abirdcfly <fp544037857@gmail.com>
2022-08-30 11:42:29 -03:00
dependabot[bot]
c812210167
chore(deps): bump actions/github-script from 6.1.1 to 6.2.0 (#3346)
Bumps [actions/github-script](https://github.com/actions/github-script)
from 6.1.1 to 6.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/github-script/releases">actions/github-script's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@octokit/plugin-rest-endpoint-methods</code> to version
6.x by <a href="https://github.com/desrosj"><code>@​desrosj</code></a>
in <a
href="https://github-redirect.dependabot.com/actions/github-script/pull/283">actions/github-script#283</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/desrosj"><code>@​desrosj</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/actions/github-script/pull/283">actions/github-script#283</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/github-script/compare/v6.1.1...v6.2.0">https://github.com/actions/github-script/compare/v6.1.1...v6.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c713e510db"><code>c713e51</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/github-script/issues/283">#283</a>
from desrosj/update/plugin-rest-endpoint-methods</li>
<li><a
href="fc8cad1c91"><code>fc8cad1</code></a>
Update licenses</li>
<li><a
href="4d94eeabef"><code>4d94eea</code></a>
Update version in <code>package*.json</code> files.</li>
<li><a
href="b9c21f17c0"><code>b9c21f1</code></a>
Update <code>@octokit/plugin-rest-endpoint-methods</code> to
v6.3.0.</li>
<li><a
href="6e70142499"><code>6e70142</code></a>
Update <code>@octokit/plugin-rest-endpoint-methods</code>.</li>
<li>See full diff in <a
href="d50f485531...c713e510db">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=6.1.1&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-29 10:25:05 -03:00
Carlos A Becker
999cf91af4
docs: improved wording in many places 2022-08-28 16:15:24 -03:00
Carlos A Becker
4a67c765af
feat(deps): update cosign to 1.11.1
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-28 10:55:22 -03:00
Carlos A Becker
d853ee2db7
docs: schema update
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-27 17:38:23 -03:00
dependabot[bot]
d3d338d34d
chore(deps): bump github/codeql-action from 2.1.20 to 2.1.21 (#3345)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.20 to 2.1.21.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.21 - 25 Aug 2022</h2>
<ul>
<li>Improve error messages when the code scanning configuration file includes an invalid <code>queries</code> block or an invalid <code>query-filters</code> block. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li>
<li>Fix a bug where Go build tracing could fail on Windows. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li>
</ul>
<h2>2.1.20 - 22 Aug 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.19 - 17 Aug 2022</h2>
<ul>
<li>Add the ability to filter queries from a code scanning run by using the <code>query-filters</code> option in the code scanning configuration file. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1098">#1098</a></li>
<li>In debug mode, debug artifacts are now uploaded even if a step in the Actions workflow fails. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1159">#1159</a></li>
<li>Update default CodeQL bundle version to 2.10.3. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1178">#1178</a></li>
<li>The combination of python2 and Pipenv is no longer supported. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1181">#1181</a></li>
</ul>
<h2>2.1.18 - 03 Aug 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.10.2.  <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1156">#1156</a></li>
</ul>
<h2>2.1.17 - 28 Jul 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.10.1.  <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1143">#1143</a></li>
</ul>
<h2>2.1.16 - 13 Jul 2022</h2>
<ul>
<li>You can now quickly debug a job that uses the CodeQL Action by re-running the job from the GitHub UI and selecting the &quot;Enable debug logging&quot; option. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1132">#1132</a></li>
<li>You can now see diagnostic messages produced by the analysis in the logs of the <code>analyze</code> Action by enabling debug mode. To enable debug mode, pass <code>debug: true</code> to the <code>init</code> Action, or <a href="https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging#enabling-step-debug-logging">enable step debug logging</a>. This feature is available for CodeQL CLI version 2.10.0 and later. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1133">#1133</a></li>
</ul>
<h2>2.1.15 - 28 Jun 2022</h2>
<ul>
<li>CodeQL query packs listed in the <code>packs</code> configuration field will be skipped if their target language is not being analyzed in the current Actions job. Previously, this would throw an error. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1116">#1116</a></li>
<li>The combination of python2 and poetry is no longer supported. See <a href="https://github-redirect.dependabot.com/actions/setup-python/issues/374">actions/setup-python#374</a> for more details. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1124">#1124</a></li>
<li>Update default CodeQL bundle version to 2.10.0. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1123">#1123</a></li>
</ul>
<h2>2.1.14 - 22 Jun 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.13 - 21 Jun 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.9.4. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1100">#1100</a></li>
</ul>
<h2>2.1.12 - 01 Jun 2022</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="c7f292ea4f"><code>c7f292e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1212">#1212</a> from github/update-v2.1.21-21bf3087</li>
<li><a href="00ef1ee757"><code>00ef1ee</code></a> Update changelog for v2.1.21</li>
<li><a href="21bf3087a5"><code>21bf308</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1211">#1211</a> from github/get-default-branch-correctly-schedule</li>
<li><a href="5960bffd3f"><code>5960bff</code></a> When running on a schedule, make a better guess about whether we're analyzing...</li>
<li><a href="92c650bfbd"><code>92c650b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1210">#1210</a> from github/edoardo/record-db-creation-time</li>
<li><a href="8b45ef3845"><code>8b45ef3</code></a> Telemetry: Record DB creation time</li>
<li><a href="e7d4da3fa2"><code>e7d4da3</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1209">#1209</a> from github/henrymercer/fix-go-tracing-tests</li>
<li><a href="182342cdd7"><code>182342c</code></a> Remove unguarded Actions library query</li>
<li><a href="e195431677"><code>e195431</code></a> Override <code>CODEQL_EXTRACTOR_GO_BUILD_TRACING</code> with <code>on</code> when it's <code>true</code></li>
<li><a href="3069613ebd"><code>3069613</code></a> Prevent hangs in Go autobuild tests due to .NET keychain prompts</li>
<li>Additional commits viewable in <a href="7fee4ca032...c7f292ea4f">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.20&new-version=2.1.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-26 10:59:22 -03:00
Carlos A Becker
c9a9916dc1
docs: update install page 2022-08-25 14:45:20 -03:00
Carlos Alexandro Becker
d7acf21f03
fix: source archive add subfolders (#3343)
`--add-file` adds only the `--prefix` joined with the basename of the added file, so, adding a folder like `vendor` would break havoc.

this basically writes our own source archives (which are more compressed) and allows to add an entire folder easily, as well as other mappings as `archives` already supports. 

refs #3102 #2911

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-25 02:15:37 -03:00
actions-user
12c425614c chore: docs auto-update 2022-08-25 04:12:08 +00:00
Carlos Alexandro Becker
e67975ea99
feat: add extra files to source archives (#3102)
closes https://github.com/goreleaser/goreleaser/issues/2911

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-25 01:10:26 -03:00
dependabot[bot]
7ed4197f51
feat(deps): bump github.com/caarlos0/env/v6 from 6.9.3 to 6.10.0 (#3338)
Bumps [github.com/caarlos0/env/v6](https://github.com/caarlos0/env) from 6.9.3 to 6.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v6's releases</a>.</em></p>
<blockquote>
<h2>v6.10.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>69c7b5a1dc8b2c4e78a7211aef3fd102333e4e4f: feat: aggregate validation errors (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/233">#233</a>) (<a href="https://github.com/akutuev"><code>@​akutuev</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>439dbad60f367bc1995f066cf9127743d468a572: fix: RequiredIfNoDef with nested structs (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/229">#229</a>) (<a href="https://github.com/HarmlessEvil"><code>@​HarmlessEvil</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>60b5226da3e5e4ca3dcb795b8416f30c5cb2c5a9: docs: broken link (<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>4c93d81012635da80954a1b3ec2e30566aa1b9d9: docs: remove duplicate <code>string</code> (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/232">#232</a>) (<a href="https://github.com/dacapoday"><code>@​dacapoday</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="69c7b5a1dc"><code>69c7b5a</code></a> feat: aggregate validation errors (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/233">#233</a>)</li>
<li><a href="4c93d81012"><code>4c93d81</code></a> docs: remove duplicate <code>string</code> (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/232">#232</a>)</li>
<li><a href="60b5226da3"><code>60b5226</code></a> docs: broken link</li>
<li><a href="1917ee3bb3"><code>1917ee3</code></a> chore(build): makefile</li>
<li><a href="439dbad60f"><code>439dbad</code></a> fix: RequiredIfNoDef with nested structs (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/229">#229</a>)</li>
<li>See full diff in <a href="https://github.com/caarlos0/env/compare/v6.9.3...v6.10.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/env/v6&package-manager=go_modules&previous-version=6.9.3&new-version=6.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-25 01:08:00 -03:00
dependabot[bot]
6778972ce6
chore(deps): bump actions/setup-go from 3.2.1 to 3.3.0 (#3340)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.1 to 3.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/actions/setup-go/releases">actions/setup-go's releases</a>.</em></p>
<blockquote>
<h2>Support architecture input and fix Expand-Archive issue</h2>
<p>This release introduces support for architecture input for <code>setup-go</code> action <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/253">#253</a>. It also adds support for arm32 architecture for self-hosted runners. If architecture is not provided action will use default runner architecture.
Example of usage:</p>
<pre lang="yaml"><code>steps:
- uses: actions/checkout@v3
- uses: actions/setup-go@v3
  with:
   go-version: '1.16'
   architecture: arm
</code></pre>
<p>This release also provides fix for issue <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/241">#241</a>. <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/250">#250</a> adds support for using explicit filename for Windows which is necessary to satisfy Expand-Archive's requirement on .zip extension.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="268d8c0ca0"><code>268d8c0</code></a> Add support for arm32 go arch (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/253">#253</a>)</li>
<li><a href="f279813975"><code>f279813</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/250">#250</a> from jromero/feature/windows-download-filename</li>
<li><a href="1022489cb7"><code>1022489</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/249">#249</a> from e-korolevskii/main</li>
<li><a href="e0dce94eb0"><code>e0dce94</code></a> Use explicit filename when downloading Windows go package</li>
<li><a href="dab57c7c68"><code>dab57c7</code></a> update docs</li>
<li><a href="f2e56d8191"><code>f2e56d8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/246">#246</a> from e-korolevskii/Update-contributors-guide</li>
<li><a href="edd0aca6b1"><code>edd0aca</code></a> update tests path</li>
<li><a href="f3e3b7c2f2"><code>f3e3b7c</code></a> Update docs/contributors.md</li>
<li><a href="4a0c081511"><code>4a0c081</code></a> Update docs/contributors.md</li>
<li><a href="185e7f2f01"><code>185e7f2</code></a> Update docs/contributors.md</li>
<li>Additional commits viewable in <a href="84cbf80943...268d8c0ca0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=3.2.1&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-24 10:02:10 -03:00
dependabot[bot]
ffe7c2cea8
feat(deps): bump github.com/xanzy/go-gitlab from 0.73.0 to 0.73.1 (#3342)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.73.0 to 0.73.1.
<details>
<summary>Commits</summary>
<ul>
<li><a href="e3c6ee4750"><code>e3c6ee4</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1531">#1531</a> from timofurrer/fix-group-saml</li>
<li><a href="c6383e6edc"><code>c6383e6</code></a> Fix SAML Group Links Access Level type</li>
<li>See full diff in <a href="https://github.com/xanzy/go-gitlab/compare/v0.73.0...v0.73.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.73.0&new-version=0.73.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-24 10:01:30 -03:00
dependabot[bot]
db373b2204
feat(deps): bump github.com/disgoorg/disgo from 0.13.16 to 0.13.17 (#3341)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo) from 0.13.16 to 0.13.17.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's releases</a>.</em></p>
<blockquote>
<h2>v0.13.17 - Slash Command Mentions</h2>
<h2>What's Changed</h2>
<ul>
<li>add support for slash command mentions by <a href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/194">disgoorg/disgo#194</a></li>
<li>add <code>CreatedAt()</code> to most entities and improve type consistency of stored timestaps by <a href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/185">disgoorg/disgo#185</a></li>
<li>remove <code>AutoModerationTriggerTypeHarmfulLink</code> by <a href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/188">disgoorg/disgo#188</a></li>
<li>add <code>AutoModerationTriggerTypeMentionSpam</code> by <a href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a href="cedb59b631</a></li>
<li>add <code>Position</code> to <code>Message</code> by <a href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a href="aebcd69359</a></li>
</ul>
<h2>Breaking Changes</h2>
<ul>
<li><code>Activity</code> and <code>ActivityTimestamps</code> now use <code>time.Time</code> instead of <code>int64</code></li>
<li><code>AutoModerationTriggerTypeHarmfulLink</code> was removed as the filter is now used globally</li>
<li><code>Entries</code> field in <code>AuditLog</code> was renamed to <code>AuditLogEntries</code> to match the API name</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/disgoorg/disgo/compare/v0.13.16...v0.13.17">https://github.com/disgoorg/disgo/compare/v0.13.16...v0.13.17</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="72321bc8fd"><code>72321bc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/194">#194</a> from disgoorg/patch/command-mentions</li>
<li><a href="1cbb8506d3"><code>1cbb850</code></a> rename CommandMention to SlashCommandMention</li>
<li><a href="389446f954"><code>389446f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/188">#188</a> from disgoorg/patch/remove-harmful-link-trigger</li>
<li><a href="e91ec49fea"><code>e91ec49</code></a> Merge branch 'development' into patch/command-mentions</li>
<li><a href="060a735f35"><code>060a735</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/185">#185</a> from disgoorg/patch/entity-creation</li>
<li><a href="7295dbe0d0"><code>7295dbe</code></a> added some missing CreatedAt() time.Time methods</li>
<li><a href="29b7e568fc"><code>29b7e56</code></a> fix wrong iterator in AuditLog unmarshal</li>
<li><a href="a2aca7ab43"><code>a2aca7a</code></a> fix &quot;whether&quot; typos</li>
<li><a href="1ae0e72f29"><code>1ae0e72</code></a> add a comment to CommandMention</li>
<li><a href="4f441f3a13"><code>4f441f3</code></a> add MentionTypeCommand</li>
<li>Additional commits viewable in <a href="https://github.com/disgoorg/disgo/compare/v0.13.16...v0.13.17">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.13.16&new-version=0.13.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-24 10:01:10 -03:00
Carlos A Becker
fe3284285c
fix: github changeloger should use short commits 2022-08-22 22:34:48 -03:00
Carlos A Becker
ff0eeaca35
fix: improve tar error handling 2022-08-22 22:06:20 -03:00
Carlos A Becker
0325b0485b
feat(deps): update go-github to v47
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-22 21:48:57 -03:00
Carlos A Becker
7f04e4df98
docs: update jsonschema
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-08-22 21:48:57 -03:00
actions-user
e55df16ff1 chore: docs auto-update 2022-08-23 00:36:57 +00:00