go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-10 03:47:03 +02:00
Code Issues Releases Activity
4,187 Commits 8 Branches 558 Tags 41 MiB
78fa66ac7e
Commit Graph

4187 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Carlos A Becker
6dac256b45
docs: added /security 2022-11-08 00:05:36 -03:00
Steven Hartland
0ea4f1d5b7
fix(changelog): group regexps (#3527) 
Fix the regular expressions used in changelog group processing to valid
golang (RE2) regexps. These previously used PCRE character class `\w`
which is not supported in RE2 which is what golang regexp uses.

Also document that format matches not just title as some may thing but
the format `<abbrev-commit> <title-commit>`.
 2022-11-07 09:28:52 -03:00
dependabot[bot]
53fa4773c6
chore(deps): bump github/codeql-action from 2.1.30 to 2.1.31 (#3534) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.30 to 2.1.31.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c3b6fce4ee"><code>c3b6fce</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1345">#1345</a>
from github/update-v2.1.31-a8cabafa</li>
<li><a
href="8aa42f1f11"><code>8aa42f1</code></a>
Update CHANGELOG.md</li>
<li><a
href="29a5553722"><code>29a5553</code></a>
Update CHANGELOG.md</li>
<li><a
href="e260194d76"><code>e260194</code></a>
Update changelog for v2.1.31</li>
<li><a
href="a8cabafa56"><code>a8cabaf</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1344">#1344</a>
from github/edoardo/prune-ruby</li>
<li><a
href="862a512899"><code>862a512</code></a>
Prune results of Ruby query from SARIF</li>
<li><a
href="71510779c2"><code>7151077</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1342">#1342</a>
from github/mergeback/v2.1.30-to-main-18fe527f</li>
<li><a
href="81a1ec0fb3"><code>81a1ec0</code></a>
Update checked-in dependencies</li>
<li><a
href="60c8cda203"><code>60c8cda</code></a>
Update changelog and version after v2.1.30</li>
<li>See full diff in <a
href="18fe527fa8...c3b6fce4ee">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.30&new-version=2.1.31)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-07 09:12:17 -03:00
dependabot[bot]
2e0e5c259e
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.3 to 4.15.4 (#3535) 
Bumps
[stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action)
from 4.15.3 to 4.15.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/releases">stefanzweifel/git-auto-commit-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.15.4</h2>
<h2>Fixed</h2>
<ul>
<li>Let Action fail if git binary can't be located (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/261">#261</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2>Dependency Updates</h2>
<ul>
<li>Bump github/super-linter from 3 to 4 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/258">#258</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
<li>Bump bats from 1.7.0 to 1.8.2 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/259">#259</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
<li>Bump actions/checkout from 2 to 3 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/257">#257</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md">stefanzweifel/git-auto-commit-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>The format is based on <a
href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>
and this project adheres to <a
href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.4...HEAD">Unreleased</a></h2>
<blockquote>
<p>TBD</p>
</blockquote>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.3...v4.15.4">v4.15.4</a>
- 2022-11-05</h2>
<h3>Fixed</h3>
<ul>
<li>Let Action fail if git binary can't be located (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/261">#261</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Bump github/super-linter from 3 to 4 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/258">#258</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
<li>Bump bats from 1.7.0 to 1.8.2 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/259">#259</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
<li>Bump actions/checkout from 2 to 3 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/257">#257</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.2...v4.15.3">v4.15.3</a>
- 2022-10-26</h2>
<h3>Changed</h3>
<ul>
<li>Use deprecated set-output syntax if GITHUB_OUTPUT environment is not
available (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/255">#255</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.1...v4.15.2">v4.15.2</a>
- 2022-10-22</h2>
<h3>Changed</h3>
<ul>
<li>Replace set-output usage with GITHUB_OUTPUT (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/252">#252</a>)
<a href="https://github.com/amonshiz"><code>@​amonshiz</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.0...v4.15.1">v4.15.1</a>
- 2022-10-10</h2>
<h3>Fixed</h3>
<ul>
<li>Run Action on Node16 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/247">#247</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.1...v4.15.0">v4.15.0</a>
- 2022-09-24</h2>
<h3>Changed</h3>
<ul>
<li>Expand <code>file_pattern</code>-input to an array (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/205">#205</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>String values in README.md extended example are now correct (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/196">#196</a>)
<a
href="https://github.com/@karolswdev"><code>@​karolswdev</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0b007fbd11"><code>0b007fb</code></a>
Let Action fail if git binary can't be located (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/261">#261</a>)</li>
<li><a
href="7106b2184a"><code>7106b21</code></a>
Bump github/super-linter from 3 to 4 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/258">#258</a>)</li>
<li><a
href="f166130208"><code>f166130</code></a>
Bump bats from 1.7.0 to 1.8.2 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/259">#259</a>)</li>
<li><a
href="021a6363fa"><code>021a636</code></a>
Bump actions/checkout from 2 to 3 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/257">#257</a>)</li>
<li><a
href="38864a638f"><code>38864a6</code></a>
Create dependabot.yml</li>
<li><a
href="393fea59ef"><code>393fea5</code></a>
Update CHANGELOG</li>
<li>See full diff in <a
href="0049e3fa40...0b007fbd11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stefanzweifel/git-auto-commit-action&package-manager=github_actions&previous-version=4.15.3&new-version=4.15.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-07 09:11:56 -03:00
dependabot[bot]
77b5cc3430
feat(deps): bump github.com/slack-go/slack from 0.11.3 to 0.11.4 (#3536) 
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.11.3 to 0.11.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.11.4</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>sharedLinks struct should be exported by <a
href="https://github.com/pmenglund"><code>@​pmenglund</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1080">slack-go/slack#1080</a></li>
<li>Support slack events about file by <a
href="https://github.com/andyhaskell"><code>@​andyhaskell</code></a> in
<a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1115">slack-go/slack#1115</a></li>
<li>Add support for status_emoji_display_info by <a
href="https://github.com/paultyng"><code>@​paultyng</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1120">slack-go/slack#1120</a></li>
</ul>
<h3>Fixes</h3>
<ul>
<li>fix: remove omitempty from replace_original and delete_orginal by <a
href="https://github.com/yokishava"><code>@​yokishava</code></a> in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1122">slack-go/slack#1122</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/pmenglund"><code>@​pmenglund</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1080">slack-go/slack#1080</a></li>
<li><a
href="https://github.com/andyhaskell"><code>@​andyhaskell</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1115">slack-go/slack#1115</a></li>
<li><a href="https://github.com/paultyng"><code>@​paultyng</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1120">slack-go/slack#1120</a></li>
<li><a href="https://github.com/yokishava"><code>@​yokishava</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/slack-go/slack/pull/1122">slack-go/slack#1122</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.11.3...v0.11.4">https://github.com/slack-go/slack/compare/v0.11.3...v0.11.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c99b47be75"><code>c99b47b</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1122">#1122</a>
from yokishava/fix/replace-original-omitemtpy</li>
<li><a
href="df7caafe40"><code>df7caaf</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1120">#1120</a>
from paultyng/status_emoji_display_info</li>
<li><a
href="f1c8f0aea4"><code>f1c8f0a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1115">#1115</a>
from diffeo/diffeo/deserialize-file-events</li>
<li><a
href="e745a45f9f"><code>e745a45</code></a>
fix: remove omitempty from replace_original and delete_orginal of
WebhookMessage</li>
<li><a
href="048adff3fa"><code>048adff</code></a>
Add support for status_emoji_display_info</li>
<li><a
href="8bc6dae800"><code>8bc6dae</code></a>
add deserialization for file unshared event</li>
<li><a
href="413153e68f"><code>413153e</code></a>
add deserializations for file change, shared, deleted events</li>
<li><a
href="78e593a0c4"><code>78e593a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/slack-go/slack/issues/1080">#1080</a>
from pmenglund/sharedLinks</li>
<li>See full diff in <a
href="https://github.com/slack-go/slack/compare/v0.11.3...v0.11.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.11.3&new-version=0.11.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-07 09:11:42 -03:00
dependabot[bot]
bd4d497c99
chore(deps): bump anchore/sbom-action from 0.13.0 to 0.13.1 (#3533) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.13.0 to 0.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<h2>Changes in v0.13.1</h2>
<ul>
<li>File input not being passed properly to Syft invocation (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/385">#385</a>)
[<a href="https://github.com/kzantow">kzantow</a>]</li>
<li>Update Syft to v0.60.3 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/386">#386</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="06e109483e"><code>06e1094</code></a>
fix: file input not being passed properly to syft invocation (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/385">#385</a>)</li>
<li><a
href="f4e264e189"><code>f4e264e</code></a>
Update Syft to v0.60.3 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/386">#386</a>)</li>
<li><a
href="faa694c549"><code>faa694c</code></a>
chore: update dependencies (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/384">#384</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.13.0...v0.13.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.13.0&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-07 09:11:22 -03:00
Alex Logsdon
722463d129
docs: fix typo in .goreleaser.yaml (#3531) 
URL in `.goreleaser.yaml` pointed to https://goreleser.com which doesn't
exit, presumably it was intended to point to https://goreleaser.com
 2022-11-06 22:19:20 -03:00
Marc Miller
311db136d6
docs: update docs to mention gitlab protected vars (#3528) 
add warning about gitlab-ci protected variables for both CI/gitlab and
SCM/gitlab.
Failing to run the pipelines on a protected ref will cause goreleaser to
fail with `401: unauthorized` if for example, GITLAB_TOKEN is a
protected variable and the CI Job is running on a tag that is not
protected.

<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

Add a warning about Gitlab CI and protected variables

<!-- Why is this change being made? -->

To prevent future users from running into issues with protected
variables.

<!-- # Provide links to any relevant tickets, URLs or other resources
-->

[Discord
Convo](https://discord.com/channels/890434333251362866/890434334803247126/1038130560293412955)
 2022-11-04 16:04:19 -03:00
Marc Miller
b101e3bada
docs: add Syft to contributing docs (#3529) 
Update contributing doc to include Syft

<!-- Why is this change being made? -->

Help contributors prevent errors with `task test`
 2022-11-04 16:03:53 -03:00
Carlos A Becker
129c23f2d9
test: fix scm test on forks 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-11-04 16:02:33 -03:00
Carlos A Becker
4f2c0ce34a
test: skip sbom tests locally if not syft 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-11-04 16:00:29 -03:00
dependabot[bot]
914d3d5941
chore(deps): bump github/codeql-action from 2.1.29 to 2.1.30 (#3526) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.29 to 2.1.30.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.30 - 02 Nov 2022</h2>
<ul>
<li>Improve the error message when using CodeQL bundle version 2.7.2 and
earlier in a workflow that runs on a runner image such as
<code>ubuntu-22.04</code> that uses glibc version 2.34 and later. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1334">#1334</a></li>
</ul>
<h2>2.1.29 - 26 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.2. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1320">#1320</a></li>
</ul>
<h2>2.1.28 - 18 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.1. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1294">#1294</a></li>
<li>Replace uses of GitHub Actions command <code>set-output</code>
because it is now deprecated. See more information in the <a
href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">GitHub
Changelog</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1301">#1301</a></li>
</ul>
<h2>2.1.27 - 06 Oct 2022</h2>
<ul>
<li>We are rolling out a feature of the CodeQL Action in October 2022
that changes the way that Go code is analyzed to be more consistent with
other compiled languages like C/C++, C#, and Java. You do not need to
alter your code scanning workflows. If you encounter any problems,
please <a href="https://github.com/github/codeql-action/issues">file an
issue</a> or open a private ticket with GitHub Support and request an
escalation to engineering.</li>
</ul>
<h2>2.1.26 - 29 Sep 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.0. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1267">#1267</a></li>
</ul>
<h2>2.1.25 - 21 Sep 2022</h2>
<ul>
<li>We will soon be rolling out a feature of the CodeQL Action that
stores some information used to make future runs faster in the GitHub
Actions cache. Initially, this will only be enabled on JavaScript
repositories, but we plan to add more languages to this soon. The new
feature can be disabled by passing the <code>trap-caching: false</code>
option to your workflow's <code>init</code> step, for example if you are
already using the GitHub Actions cache for a different purpose and are
near the storage limit for it.</li>
<li>Add support for Python automatic dependency installation with Poetry
1.2 <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1258">#1258</a>.</li>
</ul>
<h2>2.1.24 - 16 Sep 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.23 - 14 Sep 2022</h2>
<ul>
<li>Allow CodeQL packs to be downloaded from GitHub Enterprise Server
instances, using the new <code>registries</code> input for the
<code>init</code> action. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1221">#1221</a></li>
<li>Update default CodeQL bundle version to 2.10.5. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1240">#1240</a></li>
</ul>
<h2>2.1.22 - 01 Sep 2022</h2>
<ul>
<li>Downloading CodeQL packs has been moved to the <code>init</code>
step. Previously, CodeQL packs were downloaded during the
<code>analyze</code> step. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li>
<li>Update default CodeQL bundle version to 2.10.4. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li>
<li>The newly released <a
href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry
1.2</a> is not yet supported. In the most common case where the CodeQL
Action is automatically installing Python dependencies, it will continue
to install and use Poetry 1.1 on its own. However, in certain cases such
as with self-hosted runners, you may need to ensure Poetry 1.1 is
installed yourself.</li>
</ul>
<h2>2.1.21 - 25 Aug 2022</h2>
<ul>
<li>Improve error messages when the code scanning configuration file
includes an invalid <code>queries</code> block or an invalid
<code>query-filters</code> block. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="18fe527fa8"><code>18fe527</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1341">#1341</a>
from github/update-v2.1.30-cd983e71</li>
<li><a
href="f04ca7c11c"><code>f04ca7c</code></a>
Update changelog for v2.1.30</li>
<li><a
href="cd983e71c6"><code>cd983e7</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1334">#1334</a>
from github/henrymercer/better-error-for-glibc</li>
<li><a
href="2ec046b5ac"><code>2ec046b</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1328">#1328</a>
from github/angelapwen/add-go-autobuild-comment</li>
<li><a
href="72bd9cbe62"><code>72bd9cb</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1321">#1321</a>
from github/criemen/datadog-tag</li>
<li><a
href="ac0112f7f1"><code>ac0112f</code></a>
Add Go to list of supported languages</li>
<li><a
href="77b1f7e44c"><code>77b1f7e</code></a>
Merge remote-tracking branch 'origin/main' into criemen/datadog-tag</li>
<li><a
href="aa07b3894b"><code>aa07b38</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1340">#1340</a>
from github/henrymercer/fix-proxy-check</li>
<li><a
href="c44e6c6096"><code>c44e6c6</code></a>
Fix missing Docker image in proxy test</li>
<li><a
href="ae0a2603c1"><code>ae0a260</code></a>
Update src/actions-util.ts</li>
<li>Additional commits viewable in <a
href="ec3cf9c605...18fe527fa8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.29&new-version=2.1.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-03 09:34:07 -03:00
Carlos A Becker
b6e5b87711
docs: instruct how to use a pinned version of the jsonschema 
closes #3495
 2022-11-02 22:14:25 -03:00
actions-user
9c750737b9 chore: docs auto-update 2022-11-02 18:31:45 +00:00
Arsen6331
ad359a4712
feat: implement nfpm archlinux packages (#3470) 
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

This PR implements the Archlinux packages that were added in nfpm
v2.20.0, as well as tests and documentation for them.

<!-- Why is this change being made? -->

<!-- # Provide links to any relevant tickets, URLs or other resources
-->

goreleaser/nfpm#133
goreleaser/nfpm#543
Fixes #3469

Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2022-11-02 15:30:06 -03:00
Carlos A Becker
0638b0aa38
feat(deps): update nfpm to v2.21.0 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-11-02 15:02:25 -03:00
Carlos Alexandro Becker
1a69d44d6d
fix: allow to template scoop/brew/krew repo ref (#3521) 
closes #3508

- adds template support for krew and scoop repo refs
- template branch on reporef on brew as well

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-11-02 14:54:16 -03:00
Carlos Alexandro Becker
7544f7ab96
feat: update to go 1.19.3 (#3523) 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-11-02 14:19:01 -03:00
Carlos Alexandro Becker
6fd8eec224
fix: do not run changelog on goreleaser build (#3520) 
Its not really needed, nor used for anything, and can cause some issues.

fixes #3510

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-11-02 13:08:32 -03:00
dependabot[bot]
b9649cfe49
feat(deps): bump golang from 1.19.2-alpine to 1.19.3-alpine (#3522) 
Bumps golang from 1.19.2-alpine to 1.19.3-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.19.2-alpine&new-version=1.19.3-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-02 12:41:45 -03:00
dependabot[bot]
de1e6bb861
feat(deps): bump github.com/disgoorg/disgo from 0.13.20 to 0.13.21 (#3519) 
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.13.20 to 0.13.21.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.21</h2>
<h2>What's Changed</h2>
<ul>
<li>add PremiumTypeNitroBasic by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="903df646b4</a></li>
<li>update guild features by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="5f832114b8</a></li>
<li>update <a
href="https://github.com/disgoorg/snowflake"><code>snowflake</code></a>
module to fix issues with decoding some <code>GuildCreate</code> events
by <a href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a>
in <a
href="2e94ec627a</a></li>
<li>add <code>SetFooterIconf</code>, <code>SetImagef</code>,
<code>SetThumbnailf</code> and <code>SetURLf</code> by <a
href="https://github.com/itasli"><code>@​itasli</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/204">disgoorg/disgo#204</a></li>
<li>add more automod audit log types + fields by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/189">disgoorg/disgo#189</a></li>
<li>update oauth2 connections by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="9910965d4b</a></li>
<li>add default sort order to forums by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="0f47660bb9</a></li>
<li>add missing fields to <code>GuildForumChannelCreate</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="d5b5254c4f</a></li>
<li>fix missing <code>guild_id</code> in GuildForumChannels by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="16246893ae</a></li>
<li>add <code>Flags</code> to <code>GuildForumChannelUpdate</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="bdac2ebafb</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/itasli"><code>@​itasli</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/204">disgoorg/disgo#204</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.13.20...v0.13.21">https://github.com/disgoorg/disgo/compare/v0.13.20...v0.13.21</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="903df646b4"><code>903df64</code></a>
add PremiumTypeNitroBasic</li>
<li><a
href="5f832114b8"><code>5f83211</code></a>
update feature list</li>
<li><a
href="2e94ec627a"><code>2e94ec6</code></a>
update snowflake module to v2.0.1 to fix snowlfake decoding error &amp;
move gate...</li>
<li><a
href="17ccdf302f"><code>17ccdf3</code></a>
add SetFooterIconf, SetImagef, SetThumbnailf and SetURLf (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/204">#204</a>)</li>
<li><a
href="5cad8df785"><code>5cad8df</code></a>
fix incorrect json field name for ExpiresAt</li>
<li><a
href="0f47660bb9"><code>0f47660</code></a>
add default sort order to forums (again)</li>
<li><a
href="bdac2ebafb"><code>bdac2eb</code></a>
add Flags to GuildForumChannelUpdate</li>
<li><a
href="e1e6eb2de9"><code>e1e6eb2</code></a>
add missing methods on flag types</li>
<li><a
href="9910965d4b"><code>9910965</code></a>
update connections</li>
<li><a
href="1e34b93709"><code>1e34b93</code></a>
Revert &quot;add default sort order to forums&quot;</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.13.20...v0.13.21">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.13.20&new-version=0.13.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-11-01 10:26:54 -03:00
Carlos A Becker
0a042bebf8
chore: update mailmap 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-31 16:06:50 -03:00
Carlos A Becker
f912f08ff0
chore: update mailmap 2022-10-31 16:02:42 -03:00
John Olheiser
1e39e3ce79
docs: add woodpecker ci (#3516) 
This PR adds [woodpecker](https://woodpecker-ci.org) to the CI docs.

Signed-off-by: jolheiser <john.olheiser@gmail.com>
 2022-10-31 14:45:37 -03:00
dependabot[bot]
e269a1d095
feat(deps): bump github.com/xanzy/go-gitlab from 0.73.1 to 0.74.0 (#3513) 
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.73.1 to 0.74.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4ec1dc623e"><code>4ec1dc6</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1540">#1540</a>
from weirdian2k3/master</li>
<li><a
href="26519c9ab7"><code>26519c9</code></a>
Fixup the PR</li>
<li><a
href="d3d6dcfe3c"><code>d3d6dcf</code></a>
Fixup the PR</li>
<li><a
href="15530cae1b"><code>15530ca</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1528">#1528</a>
from weavedev/add-feature-flag-support</li>
<li><a
href="24edab0c8f"><code>24edab0</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1559">#1559</a>
from epropulsion-tech/master</li>
<li><a
href="f56f2462b6"><code>f56f246</code></a>
Added missing fields</li>
<li><a
href="eff633c2a2"><code>eff633c</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1567">#1567</a>
from christian-sahlmann/emails-on-push</li>
<li><a
href="cc0d6de381"><code>cc0d6de</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1566">#1566</a>
from Veres72/add_resource_weight_events</li>
<li><a
href="d160433066"><code>d160433</code></a>
Super minor tweak</li>
<li><a
href="1114045cc6"><code>1114045</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1565">#1565</a>
from vntw/deploy-hook-ref</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.73.1...v0.74.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.73.1&new-version=0.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-31 11:14:11 -03:00
dependabot[bot]
f3aea7663f
chore(deps): bump anchore/sbom-action from 0.12.0 to 0.13.0 (#3512) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.12.0 to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.0</h2>
<h2>Changes in v0.13.0</h2>
<ul>
<li>Allow type &quot;file:...&quot; to enable creation of SBOMs from tar
and other package formats (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/357">#357</a>)
[<a href="https://github.com/malt3">malt3</a>]</li>
<li>Update Syft to v0.59.0 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/371">#371</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>Update dependencies and node version (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/372">#372</a>)
[<a href="https://github.com/kzantow">kzantow</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b7e8507c6a"><code>b7e8507</code></a>
chore: remove dependabot (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/381">#381</a>)</li>
<li><a
href="2424de21c4"><code>2424de2</code></a>
Bump <code>@​types/node</code> from 18.11.2 to 18.11.3 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/373">#373</a>)</li>
<li><a
href="12a03b588c"><code>12a03b5</code></a>
Update Syft to v0.59.0 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/371">#371</a>)</li>
<li><a
href="563238bdcc"><code>563238b</code></a>
chore: Update dependencies and action node version (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/372">#372</a>)</li>
<li><a
href="eda59434a8"><code>eda5943</code></a>
Update Syft to v0.58.0 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/354">#354</a>)</li>
<li><a
href="614fe8a3b7"><code>614fe8a</code></a>
feat: Allow type &quot;file:...&quot; (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/357">#357</a>)</li>
<li><a
href="6218d4fbd4"><code>6218d4f</code></a>
Update Syft to v0.57.0 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/344">#344</a>)</li>
<li><a
href="a173e5341b"><code>a173e53</code></a>
Update Syft to v0.56.0 (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/329">#329</a>)</li>
<li><a
href="2cd5755dcc"><code>2cd5755</code></a>
Add update-deps script (<a
href="https://github-redirect.dependabot.com/anchore/sbom-action/issues/322">#322</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-31 11:13:56 -03:00
Carlos Alexandro Becker
c71d8ecafa
docs: gif (#3504) 
gif powered by vhs cc/ @maaslalani

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-27 15:06:26 -03:00
dependabot[bot]
d73a0116e0
chore(deps): bump github/codeql-action from 2.1.28 to 2.1.29 (#3498) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.28 to 2.1.29.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.29 - 26 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.2. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1320">#1320</a></li>
</ul>
<h2>2.1.28 - 18 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.1. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1294">#1294</a></li>
<li>Replace uses of GitHub Actions command <code>set-output</code>
because it is now deprecated. See more information in the <a
href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">GitHub
Changelog</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1301">#1301</a></li>
</ul>
<h2>2.1.27 - 06 Oct 2022</h2>
<ul>
<li>We are rolling out a feature of the CodeQL Action in October 2022
that changes the way that Go code is analyzed to be more consistent with
other compiled languages like C/C++, C#, and Java. You do not need to
alter your code scanning workflows. If you encounter any problems,
please <a href="https://github.com/github/codeql-action/issues">file an
issue</a> or open a private ticket with GitHub Support and request an
escalation to engineering.</li>
</ul>
<h2>2.1.26 - 29 Sep 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.0. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1267">#1267</a></li>
</ul>
<h2>2.1.25 - 21 Sep 2022</h2>
<ul>
<li>We will soon be rolling out a feature of the CodeQL Action that
stores some information used to make future runs faster in the GitHub
Actions cache. Initially, this will only be enabled on JavaScript
repositories, but we plan to add more languages to this soon. The new
feature can be disabled by passing the <code>trap-caching: false</code>
option to your workflow's <code>init</code> step, for example if you are
already using the GitHub Actions cache for a different purpose and are
near the storage limit for it.</li>
<li>Add support for Python automatic dependency installation with Poetry
1.2 <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1258">#1258</a>.</li>
</ul>
<h2>2.1.24 - 16 Sep 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.23 - 14 Sep 2022</h2>
<ul>
<li>Allow CodeQL packs to be downloaded from GitHub Enterprise Server
instances, using the new <code>registries</code> input for the
<code>init</code> action. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1221">#1221</a></li>
<li>Update default CodeQL bundle version to 2.10.5. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1240">#1240</a></li>
</ul>
<h2>2.1.22 - 01 Sep 2022</h2>
<ul>
<li>Downloading CodeQL packs has been moved to the <code>init</code>
step. Previously, CodeQL packs were downloaded during the
<code>analyze</code> step. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li>
<li>Update default CodeQL bundle version to 2.10.4. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li>
<li>The newly released <a
href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry
1.2</a> is not yet supported. In the most common case where the CodeQL
Action is automatically installing Python dependencies, it will continue
to install and use Poetry 1.1 on its own. However, in certain cases such
as with self-hosted runners, you may need to ensure Poetry 1.1 is
installed yourself.</li>
</ul>
<h2>2.1.21 - 25 Aug 2022</h2>
<ul>
<li>Improve error messages when the code scanning configuration file
includes an invalid <code>queries</code> block or an invalid
<code>query-filters</code> block. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li>
<li>Fix a bug where Go build tracing could fail on Windows. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li>
</ul>
<h2>2.1.20 - 22 Aug 2022</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec3cf9c605"><code>ec3cf9c</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1323">#1323</a>
from github/update-v2.1.29-4b53723d</li>
<li><a
href="f246f20ec4"><code>f246f20</code></a>
Update changelog for v2.1.29</li>
<li><a
href="4b53723d6b"><code>4b53723</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1320">#1320</a>
from github/edoardo/2.11.2-bump</li>
<li><a
href="de9f112cd1"><code>de9f112</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1318">#1318</a>
from github/aeisenberg/bump-min-version</li>
<li><a
href="f1a4ff53b4"><code>f1a4ff5</code></a>
Bumps the min version for code scanning config in the cli</li>
<li><a
href="624418cb40"><code>624418c</code></a>
Bump default CodeQL version to 2.11.2</li>
<li><a
href="f0a1281661"><code>f0a1281</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1315">#1315</a>
from github/mergeback/v2.1.28-to-main-cc7986c0</li>
<li><a
href="f0b3ef9e9c"><code>f0b3ef9</code></a>
Update checked-in dependencies</li>
<li><a
href="3920e2d8ae"><code>3920e2d</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1313">#1313</a>
from github/criemen/ghes-31-deprecation</li>
<li><a
href="be55631a21"><code>be55631</code></a>
Update changelog and version after v2.1.28</li>
<li>Additional commits viewable in <a
href="cc7986c02b...ec3cf9c605">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.28&new-version=2.1.29)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-27 09:32:34 -03:00
dependabot[bot]
f0b912a708
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.2 to 4.15.3 (#3499) 
Bumps
[stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action)
from 4.15.2 to 4.15.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/releases">stefanzweifel/git-auto-commit-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.15.3</h2>
<h2>Changed</h2>
<ul>
<li>Use deprecated set-output syntax if GITHUB_OUTPUT environment is not
available (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/255">#255</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md">stefanzweifel/git-auto-commit-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>The format is based on <a
href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>
and this project adheres to <a
href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.3...HEAD">Unreleased</a></h2>
<blockquote>
<p>TBD</p>
</blockquote>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.2...v4.15.3">v4.15.3</a>
- 2022-10-26</h2>
<h3>Changed</h3>
<ul>
<li>Use deprecated set-output syntax if GITHUB_OUTPUT environment is not
available (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/255">#255</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.1...v4.15.2">v4.15.2</a>
- 2022-10-22</h2>
<h3>Changed</h3>
<ul>
<li>Replace set-output usage with GITHUB_OUTPUT (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/252">#252</a>)
<a href="https://github.com/amonshiz"><code>@​amonshiz</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.0...v4.15.1">v4.15.1</a>
- 2022-10-10</h2>
<h3>Fixed</h3>
<ul>
<li>Run Action on Node16 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/247">#247</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.1...v4.15.0">v4.15.0</a>
- 2022-09-24</h2>
<h3>Changed</h3>
<ul>
<li>Expand <code>file_pattern</code>-input to an array (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/205">#205</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>String values in README.md extended example are now correct (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/196">#196</a>)
<a
href="https://github.com/@karolswdev"><code>@​karolswdev</code></a></li>
<li>Fix Typos and grammer Errors in README (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/235">#235</a>)
<a
href="https://github.com/@derrickleemy"><code>@​derrickleemy</code></a></li>
<li>Fix Typo in README (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/230">#230</a>)
<a href="https://github.com/@fty4"><code>@​fty4</code></a></li>
<li>Add missing links in the CHANGELOG (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/223">#223</a>)
<a
href="https://github.com/@ericcornelissen"><code>@​ericcornelissen</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.0...v4.14.1">v4.14.1</a>
- 2022-04-12</h2>
<h2>Changed</h2>
<ul>
<li>Change Commit User Name from &quot;GitHub Actions&quot; to
&quot;github-actions[bot]&quot; (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/213">#213</a>)
<a href="https://github.com/jooola"><code>@​jooola</code></a></li>
<li>Change Commit User Email from &quot;<a
href="mailto:actions@github.com">actions@github.com</a>&quot; to
&quot;github-actions[bot]<a
href="https://github.com/users"><code>@​users</code></a>.noreply.github.com&quot;
(<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/213">#213</a>)
<a href="https://github.com/jooola"><code>@​jooola</code></a></li>
</ul>
<h2>Fixed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0049e3fa40"><code>0049e3f</code></a>
Use deprecated set-output syntax if GITHUB_OUTPUT environment is not
availabl...</li>
<li><a
href="f6f7a9c351"><code>f6f7a9c</code></a>
Update CHANGELOG</li>
<li>See full diff in <a
href="2fde6fc18d...0049e3fa40">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stefanzweifel/git-auto-commit-action&package-manager=github_actions&previous-version=4.15.2&new-version=4.15.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-27 09:29:34 -03:00
dependabot[bot]
f01f30031a
feat(deps): bump golang from f3e6836 to e4dcdac (#3500) 
Bumps golang from `f3e6836` to `e4dcdac`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.19.2-alpine&new-version=1.19.2-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-27 09:29:16 -03:00
Carlos A Becker
10586bdba7
docs: clarify lack of vcs info when building from proxy 
closes #3491

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-25 22:16:32 -03:00
Carlos A Becker
1447ac8259
docs: add openssf badge 2022-10-25 22:12:38 -03:00
dependabot[bot]
6bcc103659
feat(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#3494) 
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from
1.6.0 to 1.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.1</h2>
<h3>Bug fixes 🐛</h3>
<ul>
<li>Fixes a panic when <code>AddGroup</code> isn't called before
<code>AddCommand(my-sub-command)</code> is executed. This can happen
within more complex cobra file structures that have many different
<code>init</code>s to be executed. Now, the check for groups has been
moved to <code>ExecuteC</code> and provides more flexibility when
working with grouped commands - <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a>
(and shout out to <a
href="https://github.com/aawsome"><code>@​aawsome</code></a>, <a
href="https://github.com/andig"><code>@​andig</code></a> and <a
href="https://github.com/KINGSABRI"><code>@​KINGSABRI</code></a> for a
deep investigation into this! 👏🏼)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b43be995eb"><code>b43be99</code></a>
Check for group presence after full initialization (<a
href="https://github-redirect.dependabot.com/spf13/cobra/issues/1839">#1839</a>)
(<a
href="https://github-redirect.dependabot.com/spf13/cobra/issues/1841">#1841</a>)</li>
<li>See full diff in <a
href="https://github.com/spf13/cobra/compare/v1.6.0...v1.6.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.6.0&new-version=1.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-25 08:29:06 -03:00
dependabot[bot]
b3d8353b37
feat(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#3493) 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.8.0 to 1.8.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b747d7c5f8"><code>b747d7c</code></a>
Bump github.com/stretchr/objx from 0.4.0 to 0.5.0 (<a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1283">#1283</a>)</li>
<li>See full diff in <a
href="https://github.com/stretchr/testify/compare/v1.8.0...v1.8.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.0&new-version=1.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-24 10:46:01 -03:00
dependabot[bot]
62361bb6ad
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.1 to 4.15.2 (#3492) 
Bumps
[stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action)
from 4.15.1 to 4.15.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/releases">stefanzweifel/git-auto-commit-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.15.2</h2>
<h2>Changed</h2>
<ul>
<li>Replace set-output usage with GITHUB_OUTPUT (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/252">#252</a>)
<a href="https://github.com/amonshiz"><code>@​amonshiz</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md">stefanzweifel/git-auto-commit-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>The format is based on <a
href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>
and this project adheres to <a
href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.2...HEAD">Unreleased</a></h2>
<blockquote>
<p>TBD</p>
</blockquote>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.1...v4.15.2">v4.15.2</a>
- 2022-10-22</h2>
<h3>Changed</h3>
<ul>
<li>Replace set-output usage with GITHUB_OUTPUT (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/252">#252</a>)
<a href="https://github.com/amonshiz"><code>@​amonshiz</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.0...v4.15.1">v4.15.1</a>
- 2022-10-10</h2>
<h3>Fixed</h3>
<ul>
<li>Run Action on Node16 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/247">#247</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.1...v4.15.0">v4.15.0</a>
- 2022-09-24</h2>
<h3>Changed</h3>
<ul>
<li>Expand <code>file_pattern</code>-input to an array (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/205">#205</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>String values in README.md extended example are now correct (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/196">#196</a>)
<a
href="https://github.com/@karolswdev"><code>@​karolswdev</code></a></li>
<li>Fix Typos and grammer Errors in README (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/235">#235</a>)
<a
href="https://github.com/@derrickleemy"><code>@​derrickleemy</code></a></li>
<li>Fix Typo in README (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/230">#230</a>)
<a href="https://github.com/@fty4"><code>@​fty4</code></a></li>
<li>Add missing links in the CHANGELOG (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/223">#223</a>)
<a
href="https://github.com/@ericcornelissen"><code>@​ericcornelissen</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.0...v4.14.1">v4.14.1</a>
- 2022-04-12</h2>
<h2>Changed</h2>
<ul>
<li>Change Commit User Name from &quot;GitHub Actions&quot; to
&quot;github-actions[bot]&quot; (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/213">#213</a>)
<a href="https://github.com/jooola"><code>@​jooola</code></a></li>
<li>Change Commit User Email from &quot;<a
href="mailto:actions@github.com">actions@github.com</a>&quot; to
&quot;github-actions[bot]<a
href="https://github.com/users"><code>@​users</code></a>.noreply.github.com&quot;
(<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/213">#213</a>)
<a href="https://github.com/jooola"><code>@​jooola</code></a></li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Update doc link to GITHUB_TOKEN not triggering new workflow runs (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/206">#206</a>)
<a href="https://github.com/gapple"><code>@​gapple</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.13.1...v4.14.0">v4.14.0</a>
- 2022-03-18</h2>
<h2>Added</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2fde6fc18d"><code>2fde6fc</code></a>
Replace set-output usage with GITHUB_OUTPUT (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/252">#252</a>)</li>
<li><a
href="faf78595b8"><code>faf7859</code></a>
Update README.md</li>
<li><a
href="a0873a0795"><code>a0873a0</code></a>
Update CHANGELOG</li>
<li>See full diff in <a
href="fd157da78f...2fde6fc18d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stefanzweifel/git-auto-commit-action&package-manager=github_actions&previous-version=4.15.1&new-version=4.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-24 10:45:43 -03:00
Carlos A Becker
1cf40901fc
chore: improve releaser footer 2022-10-23 15:19:31 -03:00
Carlos A Becker
f2f72a57e3
test: gitea with trailing slash 2022-10-21 22:53:24 -03:00
Sam Therapy
154c520755
fix: Trim trailing slash from Gitea URL (#3488) 
This PR will truncate any trailing slash left by specifying only a Gitea
API URL.

Fixes #3487

I have not added any tests for this.

Signed-off-by: Sam Therapy <sam@samtherapy.net>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2022-10-21 22:42:19 -03:00
Sam Therapy
f1e63050d6
docs: Mention Gitea explicitly (#3489) 
This PR adds explicit mention of Gitea in the AUR, Homebrew and Scoop
sections.

I have tested and tried using Homebrew and Scoop with a Gitea instance,
I have not tried the AUR but it should work the same.
 2022-10-21 22:30:54 -03:00
Carlos A Becker
f28a70c481
chore: image scan always fails 
the security issues comes from the golang image, which we need to be
using in order to build stuff.

That said, not much we can do either way, so, I'm disabling this check
for now.

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-21 08:56:21 -03:00
dependabot[bot]
bc5d4bf97a
chore(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#3486) 
Bumps
[golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action)
from 3.2.0 to 3.3.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07db5389c9"><code>07db538</code></a>
build(deps): bump <code>@​actions/cache</code> from 3.0.4 to 3.0.5 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/586">#586</a>)</li>
<li><a
href="328c000029"><code>328c000</code></a>
build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 5.39.0 to 5.40.0 ...</li>
<li><a
href="3a79f8d45a"><code>3a79f8d</code></a>
build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
5.39.0 to 5.40.0 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/584">#584</a>)</li>
<li><a
href="43c645b597"><code>43c645b</code></a>
build(deps-dev): bump eslint from 8.24.0 to 8.25.0 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/582">#582</a>)</li>
<li><a
href="88e5fc6380"><code>88e5fc6</code></a>
build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 5.38.1 to 5.39.0 ...</li>
<li><a
href="6191de56c9"><code>6191de5</code></a>
build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
5.38.1 to 5.39.0 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/580">#580</a>)</li>
<li><a
href="5423639e7b"><code>5423639</code></a>
build(deps): bump <code>@​actions/core</code> from 1.9.1 to 1.10.0 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/578">#578</a>)</li>
<li><a
href="c225631afd"><code>c225631</code></a>
build(deps): bump <code>@​actions/github</code> from 5.1.0 to 5.1.1 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/576">#576</a>)</li>
<li><a
href="b81d829cdb"><code>b81d829</code></a>
build(deps-dev): bump typescript from 4.8.3 to 4.8.4 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/577">#577</a>)</li>
<li><a
href="5b682fd40b"><code>5b682fd</code></a>
build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
5.38.0 to 5.38.1 (<a
href="https://github-redirect.dependabot.com/golangci/golangci-lint-action/issues/575">#575</a>)</li>
<li>Additional commits viewable in <a
href="537aa1903e...07db5389c9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golangci/golangci-lint-action&package-manager=github_actions&previous-version=3.2.0&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-21 08:54:45 -03:00
Carlos A Becker
117a5fa027
chore: trigger docs 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-20 10:15:12 -03:00
Carlos A Becker
e27e6a9e8c
chore: no changes 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-20 09:30:56 -03:00
Carlos A Becker
5df96cb697
chore: trigger docs 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-19 10:37:06 -03:00
Carlos Alexandro Becker
75effef85a
fix: unknown revision when installing with go install (#3482) 
fixes #3481

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-19 10:03:25 -03:00
dependabot[bot]
097baac606
chore(deps): bump actions/setup-go from 3.3.0 to 3.3.1 (#3477) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.3.0
to 3.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>Fix cache issues and update dependencies</h2>
<p>In scope of this release we fixed the issue with the correct
generation of the cache key when the <code>go-version-file</code> input
is set (<a
href="https://github-redirect.dependabot.com/actions/setup-go/pull/267">actions/setup-go#267</a>).
Moreover, we fixed an issue when <a
href="https://github-redirect.dependabot.com/actions/setup-go/pull/264">the
cache folder was not found</a>. Besides, we updated
<code>actions/core</code> to 1.10.0 version (<a
href="https://github-redirect.dependabot.com/actions/setup-go/pull/273">actions/setup-go#273</a>).</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c4a742cab1"><code>c4a742c</code></a>
fix(): cache resolve version input (<a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/267">#267</a>)</li>
<li><a
href="f556e5b7e0"><code>f556e5b</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/273">#273</a>
from rentziass/rentziass/update-actions-core</li>
<li><a
href="514ae57904"><code>514ae57</code></a>
Update <code>@​actions/core</code> to 1.10.0</li>
<li><a
href="30b9ddff11"><code>30b9ddf</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/264">#264</a>
from e-korolevskii/258-not-throw-err-no-cache-folders</li>
<li><a
href="c4e169859f"><code>c4e1698</code></a>
prettier format</li>
<li><a
href="db58e98a43"><code>db58e98</code></a>
format</li>
<li><a
href="2905db4069"><code>2905db4</code></a>
update build</li>
<li><a
href="57452eb902"><code>57452eb</code></a>
fix debug lines in test</li>
<li><a
href="5547b9ed8d"><code>5547b9e</code></a>
fix(cache): Not throw err if no cache folders</li>
<li><a
href="be45b2722d"><code>be45b27</code></a>
build</li>
<li>Additional commits viewable in <a
href="268d8c0ca0...c4a742cab1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=3.3.0&new-version=3.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-19 09:54:46 -03:00
dependabot[bot]
a94d809a63
chore(deps): bump sigstore/cosign-installer from 2.8.0 to 2.8.1 (#3478) 
Bumps
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
from 2.8.0 to 2.8.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.1</h2>
<h2>What's Changed</h2>
<ul>
<li>bump cosign install to use release v1.13.1 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/pull/98">sigstore/cosign-installer#98</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v2...v2.8.1">https://github.com/sigstore/cosign-installer/compare/v2...v2.8.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9becc61764"><code>9becc61</code></a>
bump cosign install to use release v1.13.1 (<a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/issues/98">#98</a>)</li>
<li><a
href="c6d50c2e98"><code>c6d50c2</code></a>
Bump actions/checkout from 3.0.2 to 3.1.0 (<a
href="https://github-redirect.dependabot.com/sigstore/cosign-installer/issues/96">#96</a>)</li>
<li>See full diff in <a
href="https://github.com/sigstore/cosign-installer/compare/v2.8.0...v2.8.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/cosign-installer&package-manager=github_actions&previous-version=2.8.0&new-version=2.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-19 09:54:06 -03:00
dependabot[bot]
7b1ce71351
chore(deps): bump github/codeql-action from 2.1.27 to 2.1.28 (#3479) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.27 to 2.1.28.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.28 - 18 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.1. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1294">#1294</a></li>
<li>Replace uses of GitHub Actions command <code>set-output</code>
because it is now deprecated. See more information in the <a
href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">GitHub
Changelog</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1301">#1301</a></li>
</ul>
<h2>2.1.27 - 06 Oct 2022</h2>
<ul>
<li>We are rolling out a feature of the CodeQL Action in October 2022
that changes the way that Go code is analyzed to be more consistent with
other compiled languages like C/C++, C#, and Java. You do not need to
alter your code scanning workflows. If you encounter any problems,
please <a href="https://github.com/github/codeql-action/issues">file an
issue</a> or open a private ticket with GitHub Support and request an
escalation to engineering.</li>
</ul>
<h2>2.1.26 - 29 Sep 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.0. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1267">#1267</a></li>
</ul>
<h2>2.1.25 - 21 Sep 2022</h2>
<ul>
<li>We will soon be rolling out a feature of the CodeQL Action that
stores some information used to make future runs faster in the GitHub
Actions cache. Initially, this will only be enabled on JavaScript
repositories, but we plan to add more languages to this soon. The new
feature can be disabled by passing the <code>trap-caching: false</code>
option to your workflow's <code>init</code> step, for example if you are
already using the GitHub Actions cache for a different purpose and are
near the storage limit for it.</li>
<li>Add support for Python automatic dependency installation with Poetry
1.2 <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1258">#1258</a>.</li>
</ul>
<h2>2.1.24 - 16 Sep 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.23 - 14 Sep 2022</h2>
<ul>
<li>Allow CodeQL packs to be downloaded from GitHub Enterprise Server
instances, using the new <code>registries</code> input for the
<code>init</code> action. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1221">#1221</a></li>
<li>Update default CodeQL bundle version to 2.10.5. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1240">#1240</a></li>
</ul>
<h2>2.1.22 - 01 Sep 2022</h2>
<ul>
<li>Downloading CodeQL packs has been moved to the <code>init</code>
step. Previously, CodeQL packs were downloaded during the
<code>analyze</code> step. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li>
<li>Update default CodeQL bundle version to 2.10.4. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li>
<li>The newly released <a
href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry
1.2</a> is not yet supported. In the most common case where the CodeQL
Action is automatically installing Python dependencies, it will continue
to install and use Poetry 1.1 on its own. However, in certain cases such
as with self-hosted runners, you may need to ensure Poetry 1.1 is
installed yourself.</li>
</ul>
<h2>2.1.21 - 25 Aug 2022</h2>
<ul>
<li>Improve error messages when the code scanning configuration file
includes an invalid <code>queries</code> block or an invalid
<code>query-filters</code> block. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li>
<li>Fix a bug where Go build tracing could fail on Windows. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li>
</ul>
<h2>2.1.20 - 22 Aug 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.19 - 17 Aug 2022</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cc7986c02b"><code>cc7986c</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1311">#1311</a>
from github/update-v2.1.28-96c8872f</li>
<li><a
href="aecd03235b"><code>aecd032</code></a>
Update changelog for v2.1.28</li>
<li><a
href="96c8872f06"><code>96c8872</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1310">#1310</a>
from github/henrymercer/v2-mergeback</li>
<li><a
href="b709139433"><code>b709139</code></a>
Merge branch 'releases/v2' into henrymercer/v2-mergeback</li>
<li><a
href="5dd73678a4"><code>5dd7367</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1308">#1308</a>
from github/aeisenberg/fix-merge</li>
<li><a
href="4c1ccc4a5e"><code>4c1ccc4</code></a>
Fix CHANGELOG</li>
<li><a
href="c2f5185572"><code>c2f5185</code></a>
Merge commit 'e4cc4a2f' into releases/v2</li>
<li><a
href="297ec80a46"><code>297ec80</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1301">#1301</a>
from github/aeisenberg/remove-set-output</li>
<li><a
href="b0f8861cea"><code>b0f8861</code></a>
Update CHANGELOG.md</li>
<li><a
href="2ee8edc7f0"><code>2ee8edc</code></a>
Update changelog</li>
<li>Additional commits viewable in <a
href="807578363a...cc7986c02b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.27&new-version=2.1.28)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-19 09:53:53 -03:00
dependabot[bot]
97e9bc40f9
chore(deps): bump docker/setup-buildx-action from 2.2.0 to 2.2.1 (#3480) 
Bumps
[docker/setup-buildx-action](https://github.com/docker/setup-buildx-action)
from 2.2.0 to 2.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Preserve quotes surrounding fields in input list by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> (<a
href="https://github-redirect.dependabot.com/docker/setup-buildx-action/issues/174">#174</a>)</li>
<li>Escape surrounding quotes for <code>platforms</code> input by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> (<a
href="https://github-redirect.dependabot.com/docker/setup-buildx-action/issues/175">#175</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-buildx-action/compare/v2.2.0...v2.2.1">https://github.com/docker/setup-buildx-action/compare/v2.2.0...v2.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8c0edbc76e"><code>8c0edbc</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/docker/setup-buildx-action/issues/175">#175</a>
from crazy-max/input-list-quotes</li>
<li><a
href="1fb9cbdb32"><code>1fb9cbd</code></a>
escape surrounding quotes for platforms input</li>
<li><a
href="693fdd6ca6"><code>693fdd6</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/docker/setup-buildx-action/issues/174">#174</a>
from crazy-max/input-quote</li>
<li><a
href="fe4c1ac86d"><code>fe4c1ac</code></a>
preserve quotes surrounding fields in input list</li>
<li>See full diff in <a
href="c74574e6c8...8c0edbc76e">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/setup-buildx-action&package-manager=github_actions&previous-version=2.2.0&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-19 09:53:41 -03:00
Carlos Alexandro Becker
afdb8e7a49
fix(deps): update to go-github v48 (#3475) 
latest and greatest

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-10-19 09:53:23 -03:00