1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-04 03:11:55 +02:00
Commit Graph

4636 Commits

Author SHA1 Message Date
dependabot[bot]
6f5e94c2fb
feat(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 (#4001) 2023-05-11 12:21:54 +00:00
dependabot[bot]
455730c619
feat(deps): bump github.com/disgoorg/disgo from 0.16.3 to 0.16.4 (#3996)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.3 to 0.16.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.4</h2>
<h2>What's Changed</h2>
<ul>
<li>fix missing user in resolved member by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="e9b9dd1605</a></li>
<li>fix missing user in target member by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="779858bdba</a></li>
<li>fix nil guild id in message delete event by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="66a0ba4e04</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.3...v0.16.4">https://github.com/disgoorg/disgo/compare/v0.16.3...v0.16.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66a0ba4e04"><code>66a0ba4</code></a>
fix nil guild id in message delete event</li>
<li><a
href="779858bdba"><code>779858b</code></a>
fix missing user in target member</li>
<li><a
href="e9b9dd1605"><code>e9b9dd1</code></a>
fix missing user in resolved member</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.3...v0.16.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.3&new-version=0.16.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 09:07:20 -03:00
dependabot[bot]
f8bf6f068a
feat(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 (#4002)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.7.0
to 0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="839de2255f"><code>839de22</code></a>
google: don't check for IsNotExist for well-known file</li>
<li><a
href="0690208dba"><code>0690208</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="451d5d662f"><code>451d5d6</code></a>
internal: remove repeated definite articles</li>
<li><a
href="cfe200d5bb"><code>cfe200d</code></a>
oauth2: parse RFC 6749 error response</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 08:47:42 -03:00
dependabot[bot]
83e754614e
feat(deps): bump golang.org/x/tools from 0.8.0 to 0.9.1 (#3999)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.8.0
to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.1</h2>
<p>This release fixes a regression in the v0.9.0 release: a crash when
running the <code>go:generate</code><code>golang/go#53781</code></p>
<p>Thank you to all those who filed crash reports, and apologies for the
breakage!</p>
<h2>gopls@v0.9.0</h2>
<p>This release contains significant performance improvements
(especially in incremental processing after source changes), bug fixes,
and support for the LSP “<a
href="https://redirect.github.com/microsoft/language-server-protocol/issues/956">inlay
hints</a>” feature, along with several other minor enhancements.</p>
<h2>Performance improvements</h2>
<p>Source edits cause gopls to invalidate and recompute information
about the workspace, most of which has not changed. Previously, gopls
would spend significant CPU copying data structures, sometimes more than
100ms per keystroke in a large workspace. This release includes many
optimizations to avoid copying data needlessly, including a new <a
href="https://cs.opensource.google/go/x/tools/+/gopls-release-branch.0.9:internal/persistent/map.go;l=26-37">map
representation</a> to achieve copying in constant time. Special thanks
to <a
href="https://github.com/euroelessar"><code>@​euroelessar</code></a> for
the design and implementation of this data structure.</p>
<p>As a result of these improvements, gopls should be more responsive
while typing in large codebases, though it will still use a lot of
memory.</p>
<p>Time to process a change notification in the Kubernetes repo:
<img
src="https://user-images.githubusercontent.com/57144380/176967584-a8040048-6357-40d5-9d80-c448281f6482.png"
alt="image" /></p>
<h2>New Features</h2>
<h3>Inlay hints</h3>
<p>Added support for displaying inlay hints of composite literal field
names and types, constant values, function parameter names, function
type params, and short variable declarations. You can try these out in
the <a
href="https://github.com/golang/vscode-go/blob/master/docs/nightly.md">vscode-go
nightly</a> by <a
href="https://github.com/golang/vscode-go/blob/master/docs/settings.md#goinlayhintsassignvariabletypes">enabling
inlay hints settings</a>.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967591-a7b767b3-d447-4691-9486-10f957dc9a0f.gif"
alt="image3" /></p>
<h3>Package References</h3>
<p>Find references on <code>package foo</code> now lists locations where
the given package is imported.</p>
<h3>Quick-fix to add field names to struct literals</h3>
<p>A new quick fix adds field names to struct literals with unkeyed
fields.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967261-6acbe0e7-7698-46ea-8deb-cbd913296034.gif"
alt="image1" /></p>
<h2>Bug fixes</h2>
<p>This release includes the following notable bugfixes:</p>
<ul>
<li>Fixes for goimports performance and correctness when using a go.work
file (<a href="https://go.dev/issue/52784">#52784</a>)</li>
<li>Fix a crash during renaming in a package that uses generics (<a
href="https://go.dev/issue/52940">#52940</a>)</li>
<li>Fix gopls getting confused when moving a file from the
<code>foo_test</code> package to <code>foo</code> package (<a
href="https://redirect.github.com/golang/go/issues/45317">#45317</a>)</li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/260">gopls/v0.9.0
milestone</a>.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p>Thank you for your contribution, <a
href="https://github.com/alandonovan"><code>@​alandonovan</code></a>, <a
href="https://github.com/euroelessar"><code>@​euroelessar</code></a>, <a
href="https://github.com/findleyr"><code>@​findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@​hyangah</code></a>, <a
href="https://github.com/jamalc"><code>@​jamalc</code></a>, <a
href="https://github.com/jba"><code>@​jba</code></a>, <a
href="https://github.com/marwan-at-work"><code>@​marwan-at-work</code></a>,
<a href="https://github.com/suzmue"><code>@​suzmue</code></a>, and <a
href="https://github.com/dle8"><code>@​dle8</code></a>!</p>
<h2>What’s Next?</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4609d79b05"><code>4609d79</code></a>
cmd/bisect: add -compile and -godebug shorthands</li>
<li><a
href="ddfa2200ae"><code>ddfa220</code></a>
internal/fuzzy: improvements to the symbol scoring algorithm</li>
<li><a
href="344924276c"><code>3449242</code></a>
go/types/objectpath: don't panic when receiver is missing a method</li>
<li><a
href="0809ec2e45"><code>0809ec2</code></a>
gopls/internal/lsp/source: document {All,Workspace}Metadata</li>
<li><a
href="8f7fb01dd4"><code>8f7fb01</code></a>
go/analysis/unitchecker: add test of go vet on std</li>
<li><a
href="23e52a3e12"><code>23e52a3</code></a>
bisect: diagnose bad targets better</li>
<li><a
href="d5af8894fe"><code>d5af889</code></a>
gopls: set GOWORK=off for loads from debug and safetoken tests</li>
<li><a
href="c93329a947"><code>c93329a</code></a>
go/analysis/passes/printf: reshorten diagnostic about %s in Println
call</li>
<li><a
href="62197261cf"><code>6219726</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="f4d143ebcd"><code>f4d143e</code></a>
go/ssa: cleanup TestGenericBodies to pickup package name</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.8.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 11:02:44 -03:00
dependabot[bot]
64d6424215
chore(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 (#3994)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.14.1 to 0.14.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.2</h2>
<h2>Changes in v0.14.2</h2>
<ul>
<li>Update Syft to v0.80.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/415">#415</a>)</li>
<li>Make sure all invalid artifact name characters are replaced <a
href="https://redirect.github.com/anchore/sbom-action/issues/396">#396</a>
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/417">#417</a>)
[<a href="https://github.com/lts-po">lts-po</a>]</li>
<li>Ensure SBOM is copied to <code>output-file</code> (<a
href="https://redirect.github.com/anchore/sbom-action/issues/411">#411</a>)
[<a href="https://github.com/gszr">gszr</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4d571ad103"><code>4d571ad</code></a>
chore(deps): update Syft to v0.80.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/415">#415</a>)</li>
<li><a
href="a59054d328"><code>a59054d</code></a>
fix: Make sure all invalid chars are replaced for artifact names --
fixes <a
href="https://redirect.github.com/anchore/sbom-action/issues/39">#39</a>...</li>
<li><a
href="ea7104d799"><code>ea7104d</code></a>
chore: update snapshot workflow (<a
href="https://redirect.github.com/anchore/sbom-action/issues/413">#413</a>)</li>
<li><a
href="50dec67b80"><code>50dec67</code></a>
chore(deps): update Syft to v0.77.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/409">#409</a>)</li>
<li><a
href="8e2e93770c"><code>8e2e937</code></a>
fix: ensure sbom is copied to output-file (<a
href="https://redirect.github.com/anchore/sbom-action/issues/411">#411</a>)</li>
<li><a
href="800a56fe08"><code>800a56f</code></a>
chore: update snapshot workflow (<a
href="https://redirect.github.com/anchore/sbom-action/issues/412">#412</a>)</li>
<li><a
href="9cf3dcd573"><code>9cf3dcd</code></a>
chore: update snapshot workflow (<a
href="https://redirect.github.com/anchore/sbom-action/issues/410">#410</a>)</li>
<li><a
href="642f63cefc"><code>642f63c</code></a>
chore: update syft update check (<a
href="https://redirect.github.com/anchore/sbom-action/issues/408">#408</a>)</li>
<li><a
href="a7622b6841"><code>a7622b6</code></a>
chore: update deprecated set-output (<a
href="https://redirect.github.com/anchore/sbom-action/issues/407">#407</a>)</li>
<li><a
href="c82ee2675f"><code>c82ee26</code></a>
chore: add workflow to update snapshots from PR comment (<a
href="https://redirect.github.com/anchore/sbom-action/issues/406">#406</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/sbom-action/compare/v0.14.1...v0.14.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.14.1&new-version=0.14.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-08 08:49:41 -03:00
actions-user
51c4501d6a chore: docs releases json auto-update 2023-05-07 03:37:42 +00:00
actions-user
2beed29de2 chore: docs releases json auto-update 2023-05-07 03:27:03 +00:00
Carlos Alexandro Becker
ad00069419
fix: warn when no match on archive files (#3992)
refs https://github.com/orgs/goreleaser/discussions/3991

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-06 23:08:36 -03:00
Carlos Alexandro Becker
c6c6cdf0de
Revert "build: temp disable push to aur"
This reverts commit b037471278.
2023-05-06 03:18:48 +00:00
Brian Strauch
b54d9d8aa4
docs: fix prebuilt binaries page (#3987)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

Fixes documentation for the "prebuilt binaries" section of the docs
2023-05-05 13:37:52 -03:00
dependabot[bot]
d371145f89
chore(deps): bump github/codeql-action from 2.3.2 to 2.3.3 (#3983)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.3.2 to 2.3.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.3.3 - 04 May 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.1. <a
href="https://redirect.github.com/github/codeql-action/pull/1664">#1664</a></li>
<li>You can now configure CodeQL within your code scanning workflow by
passing a <code>config</code> input to the <code>init</code> Action. See
<a href="https://aka.ms/code-scanning-docs/config-file">Using a custom
configuration file</a> for more information about configuring code
scanning. <a
href="https://redirect.github.com/github/codeql-action/pull/1590">#1590</a></li>
</ul>
<h2>2.3.2 - 27 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.3.1 - 26 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.3.0 - 21 Apr 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.0. <a
href="https://redirect.github.com/github/codeql-action/pull/1649">#1649</a></li>
<li>Bump the minimum CodeQL bundle version to 2.8.5. <a
href="https://redirect.github.com/github/codeql-action/pull/1618">#1618</a></li>
</ul>
<h2>2.2.12 - 13 Apr 2023</h2>
<ul>
<li>Include the value of the <code>GITHUB_RUN_ATTEMPT</code> environment
variable in the telemetry sent to GitHub. <a
href="https://redirect.github.com/github/codeql-action/pull/1640">#1640</a></li>
<li>Improve the ease of debugging failed runs configured using <a
href="https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning-for-a-repository#configuring-code-scanning-automatically">default
setup</a>. The CodeQL Action will now upload diagnostic information to
Code Scanning from failed runs configured using default setup. You can
view this diagnostic information on the <a
href="https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-the-tool-status-page">tool
status page</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/1619">#1619</a></li>
</ul>
<h2>2.2.11 - 06 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.2.10 - 05 Apr 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.12.6. <a
href="https://redirect.github.com/github/codeql-action/pull/1629">#1629</a></li>
</ul>
<h2>2.2.9 - 27 Mar 2023</h2>
<ul>
<li>Customers post-processing the SARIF output of the
<code>analyze</code> Action before uploading it to Code Scanning will
benefit from an improved debugging experience. <a
href="https://redirect.github.com/github/codeql-action/pull/1598">#1598</a>
<ul>
<li>The CodeQL Action will now upload a SARIF file with debugging
information to Code Scanning on failed runs for customers using
<code>upload: false</code>. Previously, this was only available for
customers using the default value of the <code>upload</code> input.</li>
<li>The <code>upload</code> input to the <code>analyze</code> Action now
accepts the following values:
<ul>
<li><code>always</code> is the default value, which uploads the SARIF
file to Code Scanning for successful and failed runs.</li>
<li><code>failure-only</code> is recommended for customers
post-processing the SARIF file before uploading it to Code Scanning.
This option uploads debugging information to Code Scanning for failed
runs to improve the debugging experience.</li>
<li><code>never</code> avoids uploading the SARIF file to Code Scanning
even if the code scanning run fails. This is not recommended for
external users since it complicates debugging.</li>
<li>The legacy <code>true</code> and <code>false</code> options will be
interpreted as <code>always</code> and <code>failure-only</code>
respectively.</li>
</ul>
</li>
</ul>
</li>
</ul>
<h2>2.2.8 - 22 Mar 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.12.5. <a
href="https://redirect.github.com/github/codeql-action/pull/1585">#1585</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="29b1f65c5e"><code>29b1f65</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1669">#1669</a>
from github/update-v2.3.3-318bcc7f8</li>
<li><a
href="140500d80a"><code>140500d</code></a>
Update changelog for v2.3.3</li>
<li><a
href="318bcc7f84"><code>318bcc7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1664">#1664</a>
from github/update-bundle/codeql-bundle-20230428</li>
<li><a
href="f72bf5dfb3"><code>f72bf5d</code></a>
Fix workflow formatting</li>
<li><a
href="33461954a5"><code>3346195</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-20230428</li>
<li><a
href="8ca5570701"><code>8ca5570</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1666">#1666</a>
from github/aeisenberg/readme-update</li>
<li><a
href="b1b3d00b62"><code>b1b3d00</code></a>
Add link to changenote for custom config</li>
<li><a
href="d2f6dfd52d"><code>d2f6dfd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1665">#1665</a>
from github/aeisenberg/config-param</li>
<li><a
href="cba5616040"><code>cba5616</code></a>
Update CHANGELOG.md</li>
<li><a
href="40c95932fe"><code>40c9593</code></a>
Add changelog note</li>
<li>Additional commits viewable in <a
href="f3feb00acb...29b1f65c5e">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.3.2&new-version=2.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-05 10:10:43 -03:00
actions-user
072173cdc5 chore: docs releases json auto-update 2023-05-05 04:52:44 +00:00
actions-user
bee9a91af0 chore: docs releases json auto-update 2023-05-05 04:45:31 +00:00
actions-user
c8e1e64d7e chore: docs releases json auto-update 2023-05-05 04:31:08 +00:00
Carlos Alexandro Becker
aaa9da33d5
fix: disable upx for now 2023-05-05 04:26:12 +00:00
actions-user
b35b8b29d9 chore: docs releases json auto-update 2023-05-05 03:44:34 +00:00
Carlos Alexandro Becker
b037471278
build: temp disable push to aur 2023-05-05 03:28:11 +00:00
Carlos Alexandro Becker
337f34ef01
chore: go mod tidy
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-04 02:33:35 +00:00
Carlos Alexandro Becker
de986a199e
docs: update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-04 02:33:06 +00:00
Carlos Alexandro Becker
3707fe4d82
feat: allow to goreleaser check multiple files (#3980)
This will be more useful for goreleaser pro than for oss, but I thought
it might worth it having it in both versions.
2023-05-03 23:28:55 -03:00
Carlos Alexandro Becker
e8be671703
docs: multi platform docker images
closes #3978
2023-05-04 02:28:12 +00:00
dependabot[bot]
38b82f1117
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979)
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor)
from 1.0.1 to 1.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's
releases</a>.</em></p>
<blockquote>
<h1>v1.1.1</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li>Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li>Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li>Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>remove legacy encrypted cosign key (<a
href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li>
<li>swap cjson dependency (<a
href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li>
<li>Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-2h5h-59f5-c5x9</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Hayden B</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p>
<h1>v1.1.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>improve validation on intoto v0.0.2 type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li>
<li>add feature to limit HTTP request body length to process (<a
href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li>
<li>add information about the file size limit (<a
href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li>
<li>Add script to backfill Redis from Rekor (<a
href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li>
<li>Feature: add search support for sha512 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>fuzzing: refactor OSS-Fuzz build script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li>
<li>Update cloudbuild for cosign 2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li>
<li>Tests - Additional sharding tests (<a
href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li>
<li>jar type: add fuzzer for 3rd-party dep (<a
href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li>
<li>update cosign to 2.0.0 and builder image and also cosign flags (<a
href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li>
<li>fuzzing: move alpine utils to fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li>
<li>fuzzing: add seed for alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li>
<li>jar: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li>
<li>fuzzing: open writer later in fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li>
<li>fuzzing: remove tar operations in alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li>
<li>alpine: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li>
<li>hashedrekord: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li>
<li>fuzzing: add call to IndexKeys in multiple fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li>
<li>fuzzing: improve cose fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li>
<li>fuzzing: improve fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's
changelog</a>.</em></p>
<blockquote>
<h1>v1.1.1</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li>Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li>Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li>Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>remove legacy encrypted cosign key (<a
href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li>
<li>swap cjson dependency (<a
href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li>
<li>Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-2h5h-59f5-c5x9</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Hayden B</li>
</ul>
<h1>v1.1.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>improve validation on intoto v0.0.2 type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li>
<li>add feature to limit HTTP request body length to process (<a
href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li>
<li>add information about the file size limit (<a
href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li>
<li>Add script to backfill Redis from Rekor (<a
href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li>
<li>Feature: add search support for sha512 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>fuzzing: refactor OSS-Fuzz build script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li>
<li>Update cloudbuild for cosign 2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li>
<li>Tests - Additional sharding tests (<a
href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li>
<li>jar type: add fuzzer for 3rd-party dep (<a
href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li>
<li>update cosign to 2.0.0 and builder image and also cosign flags (<a
href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li>
<li>fuzzing: move alpine utils to fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li>
<li>fuzzing: add seed for alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li>
<li>jar: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li>
<li>fuzzing: open writer later in fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li>
<li>fuzzing: remove tar operations in alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li>
<li>alpine: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li>
<li>hashedrekord: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li>
<li>fuzzing: add call to IndexKeys in multiple fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li>
<li>fuzzing: improve cose fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li>
<li>fuzzing: improve fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li>
<li>fuzzing: improve alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li>
<li>fuzzing: go mod edit go-fuzz-headers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0c1914e5e9"><code>0c1914e</code></a>
update CHANGELOG for v1.1.1 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li>
<li><a
href="cf42ace826"><code>cf42ace</code></a>
Merge pull request from GHSA-2h5h-59f5-c5x9</li>
<li><a
href="46ac0b224e"><code>46ac0b2</code></a>
Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li><a
href="5d6e9723b1"><code>5d6e972</code></a>
build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li>
<li><a
href="baa14ce4eb"><code>baa14ce</code></a>
Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li><a
href="059e097a0b"><code>059e097</code></a>
build(deps): bump github.com/go-playground/validator/v10 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li>
<li><a
href="1f75c79256"><code>1f75c79</code></a>
Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
<li><a
href="98163f336c"><code>98163f3</code></a>
build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li>
<li><a
href="24cb647106"><code>24cb647</code></a>
Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li><a
href="39bd69bc7c"><code>39bd69b</code></a>
Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-03 23:11:29 -03:00
Carlos Alexandro Becker
007690f154
test: force constant goversion et al on tests
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-03 18:00:13 +00:00
Carlos Alexandro Becker
f3aa9c79fa
docs: note about upx not in path
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-03 17:59:59 +00:00
Carlos Alexandro Becker
803ef6566e
build: use ghaction-upx
thanks @crazy-max!

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-03 17:06:46 +00:00
dependabot[bot]
038567475b
feat(deps): bump golang from 1.20.3-alpine to 1.20.4-alpine (#3976)
Bumps golang from 1.20.3-alpine to 1.20.4-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.20.3-alpine&new-version=1.20.4-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-03 09:53:08 -03:00
dependabot[bot]
2e589fd0ec
feat(deps): bump github.com/caarlos0/log from 0.4.0 to 0.4.1 (#3977)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.0 to 0.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.1</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aea58aebca"><code>aea58ae</code></a>
chore(deps): bump github.com/stretchr/testify from 1.7.1 to 1.8.2 (<a
href="https://redirect.github.com/caarlos0/log/issues/16">#16</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.0...v0.4.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.0&new-version=0.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-03 09:52:49 -03:00
dependabot[bot]
718c42895f
chore(deps): bump actions/github-script from 6.4.0 to 6.4.1 (#3973)
Bumps [actions/github-script](https://github.com/actions/github-script)
from 6.4.0 to 6.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/github-script/releases">actions/github-script's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add <code>@​octokit/plugin-request-log</code>, to produce debug
output for requests by <a
href="https://github.com/mjpieters"><code>@​mjpieters</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/358">actions/github-script#358</a></li>
<li>fix input handling by <a
href="https://github.com/mjpieters"><code>@​mjpieters</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/357">actions/github-script#357</a></li>
<li>Remove unused dependencies by <a
href="https://github.com/mjpieters"><code>@​mjpieters</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/356">actions/github-script#356</a></li>
<li>Default debug to current runner debug state by <a
href="https://github.com/mjpieters"><code>@​mjpieters</code></a> in <a
href="https://redirect.github.com/actions/github-script/pull/363">actions/github-script#363</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mjpieters"><code>@​mjpieters</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/github-script/pull/358">actions/github-script#358</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/github-script/compare/v6.4.0...v6.4.1">https://github.com/actions/github-script/compare/v6.4.0...v6.4.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d7906e4ad0"><code>d7906e4</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/github-script/issues/363">#363</a>
from mjpieters/auto_debug</li>
<li><a
href="ea954ff83a"><code>ea954ff</code></a>
Default debug to current runner debug state</li>
<li><a
href="57c10d434e"><code>57c10d4</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/github-script/issues/356">#356</a>
from mjpieters/clean_deps</li>
<li><a
href="eae7dc1b88"><code>eae7dc1</code></a>
Merge branch 'main' into clean_deps</li>
<li><a
href="f1ab5779d6"><code>f1ab577</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/github-script/issues/357">#357</a>
from mjpieters/fix_input_handling</li>
<li><a
href="8d9f8fc050"><code>8d9f8fc</code></a>
Fix null handling, covered by integration tests</li>
<li><a
href="a4f398e58b"><code>a4f398e</code></a>
Remove unused dependencies</li>
<li><a
href="806be26275"><code>806be26</code></a>
Clean and spruce up the integration tests a bit</li>
<li><a
href="8d76c9a913"><code>8d76c9a</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/github-script/issues/358">#358</a>
from mjpieters/request-log-plugin</li>
<li><a
href="78f623b2da"><code>78f623b</code></a>
Add <code>@​octokit/plugin-request-log</code>, to produce debug output
for requests</li>
<li>See full diff in <a
href="98814c53be...d7906e4ad0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=6.4.0&new-version=6.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-02 09:30:17 -03:00
Carlos Alexandro Becker
d4fc62780c
chore(deps): bump many actions 2023-05-02 12:24:53 +00:00
Carlos Alexandro Becker
6eed3e03b0
fix: typo in a brew error message 2023-05-02 12:18:36 +00:00
Carlos Alexandro Becker
161bc9e706
build: fix fig.yml 2023-05-02 12:09:23 +00:00
Carlos Alexandro Becker
6fd5fd45ea
feat: improve output (#3966)
- log keys will be ordered as intended instead of sorted
- paths always relative to cwd

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-02 09:06:35 -03:00
Carlos Alexandro Becker
45b80dfa26
fix: pass tree state as ldflag (#3968)
needs #3967

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-02 01:04:48 -03:00
Carlos Alexandro Becker
4330b522ea
feat: IsGitDirty template variable (#3967)
will only ever be true on snapshots or when ran with `--skip-validate`.
This should be useful as a ldflag, for example.
2023-05-02 01:04:18 -03:00
Carlos Alexandro Becker
59e7f1bd5a
docs: update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-02 02:48:51 +00:00
actions-user
282f9fbf52 chore: docs auto-update 2023-05-02 00:23:54 +00:00
Carlos Alexandro Becker
43ae761179
feat: native upx support (#3965)
this adds a new root-level `upx` config, so users can pack their
binaries with upx :)

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-01 21:22:05 -03:00
dependabot[bot]
57e104d49c
feat(deps): bump github.com/disgoorg/disgo from 0.16.2 to 0.16.3 (#3964)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.2 to 0.16.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Add voice messages by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/265">disgoorg/disgo#265</a></li>
<li>Add <code>Reaction()</code> to emojis by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/266">disgoorg/disgo#266</a></li>
<li>Fix(caches): properly calculate permissions' bitfield by <a
href="https://github.com/ZenShibata"><code>@​ZenShibata</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/268">disgoorg/disgo#268</a></li>
<li>Fix: reset write &amp; read deadline in voice conn open by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="ccbf79c87c</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.2...v0.16.3">https://github.com/disgoorg/disgo/compare/v0.16.2...v0.16.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ccbf79c87c"><code>ccbf79c</code></a>
reset write &amp; read deadline in voice conn open</li>
<li><a
href="57b63ff2ee"><code>57b63ff</code></a>
Add Reaction() to emojis (<a
href="https://redirect.github.com/disgoorg/disgo/issues/266">#266</a>)</li>
<li><a
href="38bc148d39"><code>38bc148</code></a>
fix(caches): properly calculate permissions' bitfield (<a
href="https://redirect.github.com/disgoorg/disgo/issues/268">#268</a>)</li>
<li><a
href="7086ffd506"><code>7086ffd</code></a>
rename automod badge to
ApplicationFlagAutoModerationRuleCreateBadge</li>
<li><a
href="f7f72a88b7"><code>f7f72a8</code></a>
move PermissionSendVoiceMessages to PermissionsAllText</li>
<li><a
href="c02850603d"><code>c028506</code></a>
Add voice messages (<a
href="https://redirect.github.com/disgoorg/disgo/issues/265">#265</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.2...v0.16.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.2&new-version=0.16.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 09:56:52 -03:00
actions-user
02b584fc6f chore: docs auto-update 2023-05-01 00:31:30 +00:00
Carlos Alexandro Becker
eb823dee14
feat: allow multiple scoops (#3963)
This brings the scoops feature a bit more closer to similar pipes, like
brew and krew.

- It now supports multiple scoops
- It improves some validations to prevent wrong manifests
- It uses extra.binaries instead of extra.builds, as brew does too
	- extra.builds is now unused, will be removed in a subsequent PR
- More tests were added as well

closes #3941

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 21:29:36 -03:00
Carlos Alexandro Becker
01e9810ab2
chore: thanks for using goreleaser! 2023-04-30 17:48:36 +00:00
Carlos Alexandro Becker
d62abe0b16
fix: pass goversion.Info instead of string
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 17:26:17 +00:00
Carlos Alexandro Becker
9aeea7b430
feat: new --version output (#3962)
using the same output as most cloud-native Go-written CLI's use, i.e.
using
[sigs.k8s.io/release-utils](https://github.com/kubernetes-sigs/release-utils).

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 14:19:55 -03:00
Carlos Alexandro Becker
b36e913eda
fix: reportsizes before metadate 2023-04-30 17:00:43 +00:00
Carlos Alexandro Becker
28ca70faae
refactor: use context 2023-04-30 13:33:57 +00:00
Carlos Alexandro Becker
7858e3ee1a
refactor: improvements 2023-04-30 13:23:26 +00:00
actions-user
b01f6ec14a chore: docs auto-update 2023-04-30 13:19:58 +00:00
Carlos Alexandro Becker
5bf42b726f
feat: publish taps, krews and scoops to regular git repositories (#3961)
basically redoing #3559 as it got impossible to merge with the many
changes since it was open (which is totally my fault for not merging it
earlier).

Anyhow, still a WIP, going also doing some other related improvements in
the way.

cc/ @graytonio

closes #3559
closes #3525

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Co-authored-by: Grayton Ward <graytonio.ward@gmail.com>
2023-04-30 10:18:13 -03:00
Carlos Alexandro Becker
a33a1871b0
refactor: improve method name
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 00:03:03 +00:00
Carlos Alexandro Becker
cc2805b801
docs: improve wording
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 00:02:38 +00:00