mirror of
https://github.com/goreleaser/goreleaser.git
synced 2024-12-29 01:44:39 +02:00
6a9606d0b4
3990 Commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
actions-user
|
6a9606d0b4 | chore: docs auto-update | ||
Carlos Alexandro Becker
|
f3849e2bbe
|
fix: client key and cert should not be required (#3409)
closes #3407 Signed-off-by: Sheridan C Rawlins <scr@yahooinc.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Co-authored-by: Sheridan C Rawlins <scr@yahooinc.com> |
||
Alexandre Couedelo
|
b8d3fa3a39
|
docs: archives.*.builds is type []string (#3406)
The example creates an error because builds is supposed to be an array here is shown as a string <!-- Hi, thanks for contributing! Please make sure you read our CONTRIBUTING guide. Also, add tests and the respective documentation changes as well. --> <!-- If applied, this commit will... --> ... <!-- Why is this change being made? --> ... <!-- # Provide links to any relevant tickets, URLs or other resources --> ... |
||
Carlos Alexandro Becker
|
84d0bfef74
|
fix(deps): update cosign to v1.12.1 (#3403)
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
dependabot[bot]
|
ee62a8ec00
|
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.14.1 to 4.15.0 (#3405)
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.14.1 to 4.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stefanzweifel/git-auto-commit-action/releases">stefanzweifel/git-auto-commit-action's releases</a>.</em></p> <blockquote> <h2>v4.15.0</h2> <h2>Changed</h2> <ul> <li>Expand <code>file_pattern</code>-input to an array (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/205">#205</a>) <a href="https://github.com/@stefanzweifel"><code>@stefanzweifel</code></a></li> </ul> <h2>Fixed</h2> <ul> <li>String values in README.md extended example are now correct (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/196">#196</a>) <a href="https://github.com/@karolswdev"><code>@karolswdev</code></a></li> <li>Fix Typos and grammer Errors in README (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/235">#235</a>) <a href="https://github.com/@derrickleemy"><code>@derrickleemy</code></a></li> <li>Fix Typo in README (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/230">#230</a>) <a href="https://github.com/@fty4"><code>@fty4</code></a></li> <li>Add missing links in the CHANGELOG (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/223">#223</a>) <a href="https://github.com/@ericcornelissen"><code>@ericcornelissen</code></a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md">stefanzweifel/git-auto-commit-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a> and this project adheres to <a href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.0...HEAD">Unreleased</a></h2> <blockquote> <p>TBD</p> </blockquote> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.1...v4.15.0">v4.15.0</a> - 2022-09-24</h2> <h3>Changed</h3> <ul> <li>Expand <code>file_pattern</code>-input to an array (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/205">#205</a>) <a href="https://github.com/@stefanzweifel"><code>@stefanzweifel</code></a></li> </ul> <h3>Fixed</h3> <ul> <li>String values in README.md extended example are now correct (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/196">#196</a>) <a href="https://github.com/@karolswdev"><code>@karolswdev</code></a></li> <li>Fix Typos and grammer Errors in README (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/235">#235</a>) <a href="https://github.com/@derrickleemy"><code>@derrickleemy</code></a></li> <li>Fix Typo in README (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/230">#230</a>) <a href="https://github.com/@fty4"><code>@fty4</code></a></li> <li>Add missing links in the CHANGELOG (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/223">#223</a>) <a href="https://github.com/@ericcornelissen"><code>@ericcornelissen</code></a></li> </ul> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.0...v4.14.1">v4.14.1</a> - 2022-04-12</h2> <h2>Changed</h2> <ul> <li>Change Commit User Name from "GitHub Actions" to "github-actions[bot]" (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/213">#213</a>) <a href="https://github.com/jooola"><code>@jooola</code></a></li> <li>Change Commit User Email from "<a href="mailto:actions@github.com">actions@github.com</a>" to "github-actions[bot]<a href="https://github.com/users"><code>@users</code></a>.noreply.github.com" (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/213">#213</a>) <a href="https://github.com/jooola"><code>@jooola</code></a></li> </ul> <h2>Fixed</h2> <ul> <li>Update doc link to GITHUB_TOKEN not triggering new workflow runs (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/206">#206</a>) <a href="https://github.com/gapple"><code>@gapple</code></a></li> </ul> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.13.1...v4.14.0">v4.14.0</a> - 2022-03-18</h2> <h2>Added</h2> <ul> <li>Add <code>create_branch</code> option to force create a new branch (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/203">#203</a>) <a href="https://github.com/stefanzweifel"><code>@stefanzweifel</code></a></li> </ul> <h2>Fixed</h2> <ul> <li>README.md: Updates hyperlink to GH docs (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/200">#200</a>) <a href="https://github.com/funkyfuture"><code>@funkyfuture</code></a></li> </ul> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.13.0...v4.13.1">v4.13.1</a> - 2022-01-13</h2> <h2>Fixed</h2> <ul> <li>Properly disambiguate between branch or file checkout (<a href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/199">#199</a>) <a href="https://github.com/kenodegard"><code>@kenodegard</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
dependabot[bot]
|
fd8cc43ef3
|
chore(deps): bump sigstore/cosign-installer from 2.6.0 to 2.7.0 (#3404)
Bumps
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
from 2.6.0 to 2.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v2.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>bump cosign to v1.12.1 by <a
href="https://github.com/cpanato"><code>@cpanato</code></a> in <a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/94">sigstore/cosign-installer#94</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v2...v2.7.0">https://github.com/sigstore/cosign-installer/compare/v2...v2.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="
|
||
Carlos Alexandro Becker
|
a8b3806e7e
|
refactory: making merges with pro easier (#3400)
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
5058540112
|
docs: improve actions docs
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
39f18943bf
|
docs: make actions/docker a bit clearer | ||
Carlos Alexandro Becker
|
d7cf3dd889
|
docs: update nfpm docs (#3396)
closes #3380 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
6aa3f5a724
|
chore: minor workflows improvements | ||
dependabot[bot]
|
14884f52c9
|
chore(deps): bump github/codeql-action from 2.1.24 to 2.1.25 (#3394)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.24 to 2.1.25. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>2.1.25 - 21 Sep 2022</h2> <ul> <li>We will soon be rolling out a feature of the CodeQL Action that stores some information used to make future runs faster in the GitHub Actions cache. Initially, this will only be enabled on JavaScript repositories, but we plan to add more languages to this soon. The new feature can be disabled by passing the <code>trap-caching: false</code> option to your workflow's <code>init</code> step, for example if you are already using the GitHub Actions cache for a different purpose and are near the storage limit for it.</li> <li>Add support for Python automatic dependency installation with Poetry 1.2 <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1258">#1258</a>.</li> </ul> <h2>2.1.24 - 16 Sep 2022</h2> <p>No user facing changes.</p> <h2>2.1.23 - 14 Sep 2022</h2> <ul> <li>Allow CodeQL packs to be downloaded from GitHub Enterprise Server instances, using the new <code>registries</code> input for the <code>init</code> action. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1221">#1221</a></li> <li>Update default CodeQL bundle version to 2.10.5. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1240">#1240</a></li> </ul> <h2>2.1.22 - 01 Sep 2022</h2> <ul> <li>Downloading CodeQL packs has been moved to the <code>init</code> step. Previously, CodeQL packs were downloaded during the <code>analyze</code> step. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li> <li>Update default CodeQL bundle version to 2.10.4. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li> <li>The newly released <a href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry 1.2</a> is not yet supported. In the most common case where the CodeQL Action is automatically installing Python dependencies, it will continue to install and use Poetry 1.1 on its own. However, in certain cases such as with self-hosted runners, you may need to ensure Poetry 1.1 is installed yourself.</li> </ul> <h2>2.1.21 - 25 Aug 2022</h2> <ul> <li>Improve error messages when the code scanning configuration file includes an invalid <code>queries</code> block or an invalid <code>query-filters</code> block. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li> <li>Fix a bug where Go build tracing could fail on Windows. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li> </ul> <h2>2.1.20 - 22 Aug 2022</h2> <p>No user facing changes.</p> <h2>2.1.19 - 17 Aug 2022</h2> <ul> <li>Add the ability to filter queries from a code scanning run by using the <code>query-filters</code> option in the code scanning configuration file. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1098">#1098</a></li> <li>In debug mode, debug artifacts are now uploaded even if a step in the Actions workflow fails. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1159">#1159</a></li> <li>Update default CodeQL bundle version to 2.10.3. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1178">#1178</a></li> <li>The combination of python2 and Pipenv is no longer supported. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1181">#1181</a></li> </ul> <h2>2.1.18 - 03 Aug 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.10.2. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1156">#1156</a></li> </ul> <h2>2.1.17 - 28 Jul 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.10.1. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1143">#1143</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
dependabot[bot]
|
326b588ece
|
chore(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#3390)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.0 to 3.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/releases">codecov/codecov-action's releases</a>.</em></p> <blockquote> <h2>3.1.1</h2> <h2>What's Changed</h2> <ul> <li>Update deprecation warning by <a href="https://github.com/slifty"><code>@slifty</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/661">codecov/codecov-action#661</a></li> <li>Create codeql-analysis.yml by <a href="https://github.com/mitchell-codecov"><code>@mitchell-codecov</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/593">codecov/codecov-action#593</a></li> <li>build(deps): bump node-fetch from 3.2.3 to 3.2.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/714">codecov/codecov-action#714</a></li> <li>build(deps-dev): bump typescript from 4.6.3 to 4.6.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/713">codecov/codecov-action#713</a></li> <li>README: fix typo by <a href="https://github.com/Evalir"><code>@Evalir</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/712">codecov/codecov-action#712</a></li> <li>build(deps): bump github/codeql-action from 1 to 2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/724">codecov/codecov-action#724</a></li> <li>build(deps-dev): bump <code>@types/jest</code> from 27.4.1 to 27.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/717">codecov/codecov-action#717</a></li> <li>fix: Remove a blank row by <a href="https://github.com/johnmanjiro13"><code>@johnmanjiro13</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/725">codecov/codecov-action#725</a></li> <li>Update README.md with correct badge version by <a href="https://github.com/gsheni"><code>@gsheni</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/726">codecov/codecov-action#726</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 17.0.25 to 17.0.33 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/729">codecov/codecov-action#729</a></li> <li>build(deps-dev): downgrade <code>@types/node</code> to 16.11.35 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/734">codecov/codecov-action#734</a></li> <li>build(deps): bump actions/checkout from 2 to 3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/723">codecov/codecov-action#723</a></li> <li>build(deps): bump <code>@actions/github</code> from 5.0.1 to 5.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/733">codecov/codecov-action#733</a></li> <li>build(deps): bump <code>@actions/core</code> from 1.6.0 to 1.8.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/732">codecov/codecov-action#732</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 16.11.35 to 16.11.36 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/737">codecov/codecov-action#737</a></li> <li>Create scorecards-analysis.yml by <a href="https://github.com/mitchell-codecov"><code>@mitchell-codecov</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/633">codecov/codecov-action#633</a></li> <li>build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/749">codecov/codecov-action#749</a></li> <li>fix: add more verbosity to validation by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/747">codecov/codecov-action#747</a></li> <li>build(deps-dev): bump typescript from 4.6.4 to 4.7.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/755">codecov/codecov-action#755</a></li> <li>Regenerate scorecards-analysis.yml by <a href="https://github.com/mitchell-codecov"><code>@mitchell-codecov</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/750">codecov/codecov-action#750</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 16.11.36 to 16.11.39 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/759">codecov/codecov-action#759</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 16.11.39 to 16.11.40 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/762">codecov/codecov-action#762</a></li> <li>build(deps-dev): bump <code>@vercel/ncc</code> from 0.33.4 to 0.34.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/746">codecov/codecov-action#746</a></li> <li>build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/757">codecov/codecov-action#757</a></li> <li>build(deps): bump openpgp from 5.2.1 to 5.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/760">codecov/codecov-action#760</a></li> <li>build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/748">codecov/codecov-action#748</a></li> <li>build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/766">codecov/codecov-action#766</a></li> <li>Switch to v3 by <a href="https://github.com/thomasrockhu"><code>@thomasrockhu</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/774">codecov/codecov-action#774</a></li> <li>Fix <code>network</code> entry in table by <a href="https://github.com/kevmoo"><code>@kevmoo</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/783">codecov/codecov-action#783</a></li> <li>Trim arguments after splitting them by <a href="https://github.com/mitchell-codecov"><code>@mitchell-codecov</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/791">codecov/codecov-action#791</a></li> <li>build(deps): bump openpgp from 5.3.0 to 5.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/799">codecov/codecov-action#799</a></li> <li>build(deps): bump <code>@actions/core</code> from 1.8.2 to 1.9.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/798">codecov/codecov-action#798</a></li> <li>Plumb failCi into verification function. by <a href="https://github.com/RobbieMcKinstry"><code>@RobbieMcKinstry</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/769">codecov/codecov-action#769</a></li> <li>release: update changelog and version to 3.1.1 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/828">codecov/codecov-action#828</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/slifty"><code>@slifty</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/661">codecov/codecov-action#661</a></li> <li><a href="https://github.com/Evalir"><code>@Evalir</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/712">codecov/codecov-action#712</a></li> <li><a href="https://github.com/johnmanjiro13"><code>@johnmanjiro13</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/725">codecov/codecov-action#725</a></li> <li><a href="https://github.com/gsheni"><code>@gsheni</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/726">codecov/codecov-action#726</a></li> <li><a href="https://github.com/kevmoo"><code>@kevmoo</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/783">codecov/codecov-action#783</a></li> <li><a href="https://github.com/RobbieMcKinstry"><code>@RobbieMcKinstry</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/codecov/codecov-action/pull/769">codecov/codecov-action#769</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1">https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md">codecov/codecov-action's changelog</a>.</em></p> <blockquote> <h2>3.1.1</h2> <h3>Fixes</h3> <ul> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/661">#661</a> Update deprecation warning</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/593">#593</a> Create codeql-analysis.yml</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/712">#712</a> README: fix typo</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/725">#725</a> fix: Remove a blank row</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/726">#726</a> Update README.md with correct badge version</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/633">#633</a> Create scorecards-analysis.yml</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/747">#747</a> fix: add more verbosity to validation</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/750">#750</a> Regenerate scorecards-analysis.yml</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/774">#774</a> Switch to v3</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/783">#783</a> Fix network entry in table</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/791">#791</a> Trim arguments after splitting them</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/769">#769</a> Plumb failCi into verification function.</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/713">#713</a> build(deps-dev): bump typescript from 4.6.3 to 4.6.4</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/714">#714</a> build(deps): bump node-fetch from 3.2.3 to 3.2.4</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/724">#724</a> build(deps): bump github/codeql-action from 1 to 2</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/717">#717</a> build(deps-dev): bump <code>@types/jest</code> from 27.4.1 to 27.5.0</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/729">#729</a> build(deps-dev): bump <code>@types/node</code> from 17.0.25 to 17.0.33</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/734">#734</a> build(deps-dev): downgrade <code>@types/node</code> to 16.11.35</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/723">#723</a> build(deps): bump actions/checkout from 2 to 3</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/733">#733</a> build(deps): bump <code>@actions/github</code> from 5.0.1 to 5.0.3</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/732">#732</a> build(deps): bump <code>@actions/core</code> from 1.6.0 to 1.8.2</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/737">#737</a> build(deps-dev): bump <code>@types/node</code> from 16.11.35 to 16.11.36</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/749">#749</a> build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/755">#755</a> build(deps-dev): bump typescript from 4.6.4 to 4.7.3</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/759">#759</a> build(deps-dev): bump <code>@types/node</code> from 16.11.36 to 16.11.39</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/762">#762</a> build(deps-dev): bump <code>@types/node</code> from 16.11.39 to 16.11.40</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/746">#746</a> build(deps-dev): bump <code>@vercel/ncc</code> from 0.33.4 to 0.34.0</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/757">#757</a> build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/760">#760</a> build(deps): bump openpgp from 5.2.1 to 5.3.0</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/748">#748</a> build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/766">#766</a> build(deps-dev): bump typescript from 4.7.3 to 4.7.4</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/799">#799</a> build(deps): bump openpgp from 5.3.0 to 5.4.0</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/798">#798</a> build(deps): bump <code>@actions/core</code> from 1.8.2 to 1.9.1</li> </ul> <h2>3.1.0</h2> <h3>Features</h3> <ul> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/699">#699</a> Incorporate <code>xcode</code> arguments for the Codecov uploader</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/694">#694</a> build(deps-dev): bump <code>@vercel/ncc</code> from 0.33.3 to 0.33.4</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/696">#696</a> build(deps-dev): bump <code>@types/node</code> from 17.0.23 to 17.0.25</li> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/698">#698</a> build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0</li> </ul> <h2>3.0.0</h2> <h3>Breaking Changes</h3> <ul> <li><a href="https://github-redirect.dependabot.com/codecov/codecov-action/issues/689">#689</a> Bump to node16 and small fixes</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
Carlos Alexandro Becker
|
445f2e730d
|
chore: avoid running actions when not needed/possible (#3389)
- only run the build action when actual go files changed - only run some actions on the main fork to avoid errors |
||
dependabot[bot]
|
b59920c54d
|
chore(deps): bump github/codeql-action from 2.1.23 to 2.1.24 (#3387)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.23 to 2.1.24. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <h2>[UNRELEASED]</h2> <ul> <li>We will soon be rolling out a feature of the CodeQL Action that stores some information used to make future runs faster in the GitHub Actions cache. Initially, this will only be enabled on JavaScript repositories, but we plan to add more languages to this soon. The new feature can be disabled by passing the <code>trap-caching: false</code> option to your workflow's <code>init</code> step, for example if you are already using the GitHub Actions cache for a different purpose and are near the storage limit for it.</li> </ul> <h2>2.1.24 - 16 Sep 2022</h2> <p>No user facing changes.</p> <h2>2.1.23 - 14 Sep 2022</h2> <ul> <li>Allow CodeQL packs to be downloaded from GitHub Enterprise Server instances, using the new <code>registries</code> input for the <code>init</code> action. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1221">#1221</a></li> <li>Update default CodeQL bundle version to 2.10.5. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1240">#1240</a></li> </ul> <h2>2.1.22 - 01 Sep 2022</h2> <ul> <li>Downloading CodeQL packs has been moved to the <code>init</code> step. Previously, CodeQL packs were downloaded during the <code>analyze</code> step. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li> <li>Update default CodeQL bundle version to 2.10.4. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li> <li>The newly released <a href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry 1.2</a> is not yet supported. In the most common case where the CodeQL Action is automatically installing Python dependencies, it will continue to install and use Poetry 1.1 on its own. However, in certain cases such as with self-hosted runners, you may need to ensure Poetry 1.1 is installed yourself.</li> </ul> <h2>2.1.21 - 25 Aug 2022</h2> <ul> <li>Improve error messages when the code scanning configuration file includes an invalid <code>queries</code> block or an invalid <code>query-filters</code> block. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li> <li>Fix a bug where Go build tracing could fail on Windows. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li> </ul> <h2>2.1.20 - 22 Aug 2022</h2> <p>No user facing changes.</p> <h2>2.1.19 - 17 Aug 2022</h2> <ul> <li>Add the ability to filter queries from a code scanning run by using the <code>query-filters</code> option in the code scanning configuration file. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1098">#1098</a></li> <li>In debug mode, debug artifacts are now uploaded even if a step in the Actions workflow fails. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1159">#1159</a></li> <li>Update default CodeQL bundle version to 2.10.3. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1178">#1178</a></li> <li>The combination of python2 and Pipenv is no longer supported. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1181">#1181</a></li> </ul> <h2>2.1.18 - 03 Aug 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.10.2. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1156">#1156</a></li> </ul> <h2>2.1.17 - 28 Jul 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.10.1. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1143">#1143</a></li> </ul> <h2>2.1.16 - 13 Jul 2022</h2> <ul> <li>You can now quickly debug a job that uses the CodeQL Action by re-running the job from the GitHub UI and selecting the "Enable debug logging" option. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1132">#1132</a></li> <li>You can now see diagnostic messages produced by the analysis in the logs of the <code>analyze</code> Action by enabling debug mode. To enable debug mode, pass <code>debug: true</code> to the <code>init</code> Action, or <a href="https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging#enabling-step-debug-logging">enable step debug logging</a>. This feature is available for CodeQL CLI version 2.10.0 and later. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1133">#1133</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
Carlos Alexandro Becker
|
d19ff6eb1e
|
chore: splitting workflows (#3386)
split build & release workflows Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
e9a54ce40b
|
test: fixed a broken test
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
7ea12d2ac5
|
docs: clarify build docs a bit | ||
Carlos A Becker
|
91c6f75b8f
|
chore: ign linter warning
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos Alexandro Becker
|
c1965923b0
|
docs: improve wording/formatting in several places (#3384)
this just improves docs wording and formatting in several places. Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos Alexandro Becker
|
36a48eabb7
|
fix: binary archive when multiple builds (#3385)
closes #3383 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
dependabot[bot]
|
72fad7678b
|
chore(deps): bump github/codeql-action from 2.1.22 to 2.1.23 (#3382)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.23. <details> <summary>Commits</summary> <ul> <li><a href=" |
||
Carlos Alexandro Becker
|
0ea3e0f572
|
fix: build --single-target when using specific targets (#3381)
When using specific targets in the config, single target becomes ineffective. This should fix it. This also removes other build options like gomips, goarm, goamd64, etc, as go will infer them from the current OS. In theory we should one day support all the GO* flags go build supports. |
||
Carlos Alexandro Becker
|
69e9b2b120
|
fix: update cosign in docker img to 1.12.0 (#3379)
fix for https://github.com/sigstore/cosign/security/advisories/GHSA-8gw7-4j42-w388 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Batuhan Apaydın
|
826944d62f
|
docs: add COSIGN_EXPERIMENTAL=1 for verify-blob (#3378)
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> <!-- Hi, thanks for contributing! Please make sure you read our CONTRIBUTING guide. Also, add tests and the respective documentation changes as well. --> Cross-ref: https://github.com/fluxcd/source-controller/issues/899 Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com> |
||
dependabot[bot]
|
ad330ce61c
|
fix(deps): bump github.com/disgoorg/disgo from 0.13.17 to 0.13.20 (#3377)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo) from 0.13.17 to 0.13.20. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's releases</a>.</em></p> <blockquote> <h2>v0.13.20 - Forum Channel Updates</h2> <h2>What's Changed</h2> <ul> <li>implement recent forum updates by <a href="https://github.com/caneleex"><code>@caneleex</code></a> in <a href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/197">disgoorg/disgo#197</a></li> <li>populate <code>GuildID</code> in <code>Message</code>s from interactions by <a href="https://github.com/TopiSenpai"><code>@TopiSenpai</code></a> in <a href=" |
||
dependabot[bot]
|
8a36f2e656
|
fix(deps): bump github.com/slack-go/slack from 0.11.2 to 0.11.3 (#3369)
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack) from 0.11.2 to 0.11.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's releases</a>.</em></p> <blockquote> <h2>v0.11.3</h2> <h2>What's Changed</h2> <h3>Enhancements/Refactoring</h3> <ul> <li>Add metadata related event types by <a href="https://github.com/hrkskov"><code>@hrkskov</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1096">slack-go/slack#1096</a></li> <li>fix: UploadFileContext not calling api.AuthTestContext by <a href="https://github.com/kevin-faliam"><code>@kevin-faliam</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1109">slack-go/slack#1109</a></li> </ul> <h3>Bugfixes</h3> <ul> <li>Handle null value in JSONTime by <a href="https://github.com/rusq"><code>@rusq</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1106">slack-go/slack#1106</a></li> <li>Honor deadman timer, fixes <a href="https://github-redirect.dependabot.com/slack-go/slack/issues/1093">#1093</a> by <a href="https://github.com/parsley42"><code>@parsley42</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1094">slack-go/slack#1094</a></li> </ul> <h3>Docs</h3> <ul> <li>fix some simple typos by <a href="https://github.com/lpmi-13"><code>@lpmi-13</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1098">slack-go/slack#1098</a></li> <li>Fix GoDoc grammers by <a href="https://github.com/kanata2"><code>@kanata2</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1099">slack-go/slack#1099</a></li> </ul> <h3>Misc</h3> <ul> <li>Update workflow for testing by <a href="https://github.com/kanata2"><code>@kanata2</code></a> in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1100">slack-go/slack#1100</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lpmi-13"><code>@lpmi-13</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1098">slack-go/slack#1098</a></li> <li><a href="https://github.com/hrkskov"><code>@hrkskov</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1096">slack-go/slack#1096</a></li> <li><a href="https://github.com/kevin-faliam"><code>@kevin-faliam</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/slack-go/slack/pull/1109">slack-go/slack#1109</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/slack-go/slack/compare/v0.11.2...v0.11.3">https://github.com/slack-go/slack/compare/v0.11.2...v0.11.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
dependabot[bot]
|
4afcbe2ea1
|
fix(deps): bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 (#3372)
Bumps [github.com/caarlos0/env/v6](https://github.com/caarlos0/env) from 6.10.0 to 6.10.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v6's releases</a>.</em></p> <blockquote> <h2>v6.10.1</h2> <h2>Changelog</h2> <h3>Bug fixes</h3> <ul> <li>f3ddf1f7ee602a224429717ddc431e9083d45882: fix: non empty struct pointer value (<a href="https://github-redirect.dependabot.com/caarlos0/env/issues/236">#236</a>) (<a href="https://github.com/akutuev"><code>@akutuev</code></a>)</li> </ul> <hr /> <p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser Pro</a>!</em></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
Carlos Alexandro Becker
|
6606eec326
|
fix: yaml-lang-server modelines in init config (#3376)
- docs on how to specify the schema to the lang server - add it automatically along with vim modelines to the init config - added it to our config as well this should prevent some "out of date" schema issues, as well as mixing tabs with spaces and whatnot when an editorconfig plugin is not installed. |
||
Carlos Alexandro Becker
|
89978a2a5c
|
fix: fish completions path on nfpm (#3375)
https://fishshell.com/docs/current/completions.html#where-to-put-completions Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos Alexandro Becker
|
707747db3b
|
fix: print release url after publishing it (#3374)
very small improvement, but useful nevertheless Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
a8403f2a0c
|
docs: improve actions docs | ||
Carlos A Becker
|
cb686785b0
|
docs: why we made it, is it any good, video, etc | ||
Carlos Alexandro Becker
|
7bb7ed67db
|
docs: update readme | ||
dependabot[bot]
|
f7efe9ca2b
|
chore(deps): bump sigstore/cosign-installer from 2.5.1 to 2.6.0 (#3368)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.1 to 2.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's releases</a>.</em></p> <blockquote> <h2>v2.6.0</h2> <h2>What's Changed</h2> <ul> <li>update action to default cosign to v1.11.0 release by <a href="https://github.com/cpanato"><code>@cpanato</code></a> in <a href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/89">sigstore/cosign-installer#89</a></li> <li>cleanup dependabot by <a href="https://github.com/cpanato"><code>@cpanato</code></a> in <a href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/90">sigstore/cosign-installer#90</a></li> <li>default cosign to v1.11.1 by <a href="https://github.com/cpanato"><code>@cpanato</code></a> in <a href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/91">sigstore/cosign-installer#91</a></li> <li>Bump actions/setup-go from 3.2.1 to 3.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/92">sigstore/cosign-installer#92</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0">https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
Carlos A Becker
|
da05701977
|
fix: race condition on logs
This brings an update on caarlos0/log, precisely due to
|
||
Carlos Alexandro Becker
|
61f586e625
|
docs: version recent changes (#3367)
versioned all new options since v1.2 (late 2021). Should be enough to fix #3317 for now. Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
dependabot[bot]
|
c7bb924e44
|
fix(deps): bump golang from 1.19.0-alpine to 1.19.1-alpine (#3355)
Bumps golang from 1.19.0-alpine to 1.19.1-alpine. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.19.0-alpine&new-version=1.19.1-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
Carlos Alexandro Becker
|
8cb4eb1654
|
fix: ruleguard and semgrep scans and fixes (#3364)
run semgrep-go ruleguard and semgrep scans https://github.com/dgryski/semgrep-go Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos Alexandro Becker
|
2244bba1e0
|
fix: templates in release URLs (#3365)
closes #3356 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos Alexandro Becker
|
5185b5b6ed
|
chore(ci): govulncheck (#3362)
check for vulnerabilities Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
Carlos A Becker
|
b8a225b6c7
|
docs: improve monorepo docs
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
actions-user
|
101c6af085 | chore: docs auto-update | ||
Carlos A Becker
|
dbc32c23ee
|
docs: improve sponsors page | ||
Carlos A Becker
|
1c96e113c4
|
docs: improve links page | ||
Carlos A Becker
|
1830126ee0
|
docs: add eula and linkedin to links | ||
dependabot[bot]
|
74abb18d2d
|
chore(deps): bump github/codeql-action from 2.1.21 to 2.1.22 (#3354)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.22. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>2.1.22 - 01 Sep 2022</h2> <ul> <li>Downloading CodeQL packs has been moved to the <code>init</code> step. Previously, CodeQL packs were downloaded during the <code>analyze</code> step. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li> <li>Update default CodeQL bundle version to 2.10.4. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li> <li>The newly released <a href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry 1.2</a> is not yet supported. In the most common case where the CodeQL Action is automatically installing Python dependencies, it will continue to install and use Poetry 1.1 on its own. However, in certain cases such as with self-hosted runners, you may need to ensure Poetry 1.1 is installed yourself.</li> </ul> <h2>2.1.21 - 25 Aug 2022</h2> <ul> <li>Improve error messages when the code scanning configuration file includes an invalid <code>queries</code> block or an invalid <code>query-filters</code> block. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li> <li>Fix a bug where Go build tracing could fail on Windows. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li> </ul> <h2>2.1.20 - 22 Aug 2022</h2> <p>No user facing changes.</p> <h2>2.1.19 - 17 Aug 2022</h2> <ul> <li>Add the ability to filter queries from a code scanning run by using the <code>query-filters</code> option in the code scanning configuration file. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1098">#1098</a></li> <li>In debug mode, debug artifacts are now uploaded even if a step in the Actions workflow fails. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1159">#1159</a></li> <li>Update default CodeQL bundle version to 2.10.3. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1178">#1178</a></li> <li>The combination of python2 and Pipenv is no longer supported. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1181">#1181</a></li> </ul> <h2>2.1.18 - 03 Aug 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.10.2. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1156">#1156</a></li> </ul> <h2>2.1.17 - 28 Jul 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.10.1. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1143">#1143</a></li> </ul> <h2>2.1.16 - 13 Jul 2022</h2> <ul> <li>You can now quickly debug a job that uses the CodeQL Action by re-running the job from the GitHub UI and selecting the "Enable debug logging" option. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1132">#1132</a></li> <li>You can now see diagnostic messages produced by the analysis in the logs of the <code>analyze</code> Action by enabling debug mode. To enable debug mode, pass <code>debug: true</code> to the <code>init</code> Action, or <a href="https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging#enabling-step-debug-logging">enable step debug logging</a>. This feature is available for CodeQL CLI version 2.10.0 and later. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1133">#1133</a></li> </ul> <h2>2.1.15 - 28 Jun 2022</h2> <ul> <li>CodeQL query packs listed in the <code>packs</code> configuration field will be skipped if their target language is not being analyzed in the current Actions job. Previously, this would throw an error. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1116">#1116</a></li> <li>The combination of python2 and poetry is no longer supported. See <a href="https://github-redirect.dependabot.com/actions/setup-python/issues/374">actions/setup-python#374</a> for more details. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1124">#1124</a></li> <li>Update default CodeQL bundle version to 2.10.0. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1123">#1123</a></li> </ul> <h2>2.1.14 - 22 Jun 2022</h2> <p>No user facing changes.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
Colin Kennedy
|
45387f5dc0
|
docs: insert missing word (#3352)
<!-- Hi, thanks for contributing! Please make sure you read our CONTRIBUTING guide. Also, add tests and the respective documentation changes as well. --> <!-- If applied, this commit will... --> ... <!-- Why is this change being made? --> ... <!-- # Provide links to any relevant tickets, URLs or other resources --> ... |
||
Carlos A Becker
|
e31f7806dc
|
docs: update schema
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com> |
||
actions-user
|
23a7922f8e | chore: docs auto-update |