go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-14 03:51:24 +02:00
Code Issues Releases Activity
6,040 Commits 9 Branches 558 Tags 41 MiB
85a7ce067d
Commit Graph

6040 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
e52b71ed44
chore(deps): bump github/codeql-action from 3.26.13 to 3.27.0 (#5216) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.13 to 3.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.0/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with &quot;upload-sarif post-action step failed: Input required and not
supplied: token&quot; when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="662472033e"><code>6624720</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2561">#2561</a>
from github/update-v3.27.0-b35b023d9</li>
<li><a
href="ce7c2b560d"><code>ce7c2b5</code></a>
Update changelog for v3.27.0</li>
<li><a
href="b35b023d9b"><code>b35b023</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2552">#2552</a>
from github/update-bundle/codeql-bundle-v2.19.2</li>
<li><a
href="dafc762411"><code>dafc762</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2560">#2560</a>
from github/aeisenberg/fix-required-checks</li>
<li><a
href="0d1eb88b60"><code>0d1eb88</code></a>
Remove ESLint from required checks</li>
<li><a
href="0a30541440"><code>0a30541</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2558">#2558</a>
from github/dependabot/npm_and_yarn/npm-6515e6e328</li>
<li><a
href="2a6a6ad1c8"><code>2a6a6ad</code></a>
Update checked-in dependencies</li>
<li><a
href="26c18c2c1f"><code>26c18c2</code></a>
Bump the npm group with 3 updates</li>
<li><a
href="7080a68cbc"><code>7080a68</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.2</li>
<li><a
href="63eb7bbf1f"><code>63eb7bb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2551">#2551</a>
from github/cklin/diff-informed-queries-feature</li>
<li>Additional commits viewable in <a
href="f779452ac5...662472033e">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.13&new-version=3.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:54 -03:00
dependabot[bot]
562ca2eff8
chore(deps): bump anchore/sbom-action from 0.17.3 to 0.17.5 (#5214) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.3 to 0.17.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.5</h2>
<h2>Changes in v0.17.5</h2>
<ul>
<li>chore(deps): update Syft to v1.14.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/503">#503</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.4</h2>
<h2>Changes in v0.17.4</h2>
<ul>
<li>chore(deps): update Syft to v1.14.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/502">#502</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ca97d9028"><code>1ca97d9</code></a>
chore(deps): update Syft to v1.14.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/503">#503</a>)</li>
<li><a
href="8d0a6505bf"><code>8d0a650</code></a>
chore(deps): update Syft to v1.14.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/502">#502</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.3...v0.17.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.3&new-version=0.17.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:39 -03:00
dependabot[bot]
3f406df9a4
chore(deps): bump github.com/charmbracelet/lipgloss from 0.13.0 to 0.13.1 (#5215) 
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.13.0 to 0.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.1</h2>
<h1>Table improvements, on stream</h1>
<p><a href="https://github.com/bashbunni"><code>@​bashbunni</code></a>
went to town in this release and fixed a bunch of bugs, mostly around
table. Best of all, she did most of it <a
href="https://www.twitch.tv/bashbunni">on stream</a>.</p>
<h2>Changelog</h2>
<h3>Table</h3>
<ul>
<li>fix(table): use table height by <a
href="https://github.com/Broderick-Westrope"><code>@​Broderick-Westrope</code></a>
in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/358">charmbracelet/lipgloss#358</a></li>
<li>fix(table): unset data rows without causing nil pointer err by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/372">charmbracelet/lipgloss#372</a></li>
<li>fix(table): shared indices for first row of data and headers
(StyleFunc bug) by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/377">charmbracelet/lipgloss#377</a></li>
<li>fix(table): do not shrink table with offset by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/373">charmbracelet/lipgloss#373</a></li>
<li>fix(table): include margins for cell width by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/401">charmbracelet/lipgloss#401</a></li>
</ul>
<h3>Other Stuff</h3>
<ul>
<li>fix(render): strip carriage returns from strings by <a
href="https://github.com/bashbunni"><code>@​bashbunni</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/386">charmbracelet/lipgloss#386</a></li>
</ul>
<h2>Bonus</h2>
<ul>
<li>docs(example): rainbow string by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/96">charmbracelet/lipgloss#96</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Broderick-Westrope"><code>@​Broderick-Westrope</code></a>
made their first contribution in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/358">charmbracelet/lipgloss#358</a></li>
<li><a href="https://github.com/swrenn"><code>@​swrenn</code></a> made
their first contribution in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/364">charmbracelet/lipgloss#364</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v0.13.1">https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v0.13.1</a></p>
<hr />
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<p>Thoughts? Questions? We love hearing from you. Feel free to reach out
on <a href="https://twitter.com/charmcli">Twitter</a>, <a
href="https://mastodon.technology/@charm">The Fediverse</a>, or on <a
href="https://charm.sh/chat">Discord</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="284c0c5c55"><code>284c0c5</code></a>
docs(list): fix list examples in godoc (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/404">#404</a>)</li>
<li><a
href="d8581323b6"><code>d858132</code></a>
fix(table): include margins in cell width (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/401">#401</a>)</li>
<li><a
href="80b4221fc1"><code>80b4221</code></a>
chore(lint): update linter (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/405">#405</a>)</li>
<li><a
href="fa2f4b06ca"><code>fa2f4b0</code></a>
docs(readme): update example screenshot with blend</li>
<li><a
href="68ca8486fc"><code>68ca848</code></a>
docs: update contributing guidelines (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/396">#396</a>)</li>
<li><a
href="24258b8e1a"><code>24258b8</code></a>
fix(examples): draw nested structure in file tree example</li>
<li><a
href="a5618cb034"><code>a5618cb</code></a>
fix(table): do not shrink table with offset (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/373">#373</a>)</li>
<li><a
href="9b809dc7e5"><code>9b809dc</code></a>
fix(examples): fix out of range error (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/395">#395</a>)</li>
<li><a
href="199d3c8af8"><code>199d3c8</code></a>
fix(render): strip carriage returns from strings (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/386">#386</a>)</li>
<li><a
href="07d18419d3"><code>07d1841</code></a>
docs(example): rainbow string (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/96">#96</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v0.13.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.13.0&new-version=0.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:13 -03:00
dependabot[bot]
96609bd7d8
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#5219) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1
to 4.2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<h2>v4.1.5</h2>
<ul>
<li>Update NPM dependencies by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
<li>Bump actions/setup-node from 1 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
<li>Bump actions/upload-artifact from 2 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
<li>README: Suggest <code>user.email</code> to be
<code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
</ul>
<h2>v4.1.4</h2>
<ul>
<li>Disable <code>extensions.worktreeConfig</code> when disabling
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
<li>Add dependabot config by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
<li>Bump the minor-actions-dependencies group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
</ul>
<h2>v4.1.3</h2>
<ul>
<li>Check git version before attempting to disable
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1656">actions/checkout#1656</a></li>
<li>Add SSH user parameter by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1685">actions/checkout#1685</a></li>
<li>Update <code>actions/checkout</code> version in
<code>update-main-version.yml</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1650">actions/checkout#1650</a></li>
</ul>
<h2>v4.1.2</h2>
<ul>
<li>Fix: Disable sparse checkout whenever <code>sparse-checkout</code>
option is not present <a
href="https://github.com/dscho"><code>@​dscho</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1598">actions/checkout#1598</a></li>
</ul>
<h2>v4.1.1</h2>
<ul>
<li>Correct link to GitHub Docs by <a
href="https://github.com/peterbe"><code>@​peterbe</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li>
<li>Link to release page from what's new section by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1514">actions/checkout#1514</a></li>
</ul>
<h2>v4.1.0</h2>
<ul>
<li><a href="https://redirect.github.com/actions/checkout/pull/1396">Add
support for partial checkout filters</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="11bd71901b"><code>11bd719</code></a>
Prepare 4.2.2 Release (<a
href="https://redirect.github.com/actions/checkout/issues/1953">#1953</a>)</li>
<li><a
href="e3d2460bbb"><code>e3d2460</code></a>
Expand unit test coverage (<a
href="https://redirect.github.com/actions/checkout/issues/1946">#1946</a>)</li>
<li><a
href="163217dfcd"><code>163217d</code></a>
<code>url-helper.ts</code> now leverages well-known environment
variables. (<a
href="https://redirect.github.com/actions/checkout/issues/1941">#1941</a>)</li>
<li>See full diff in <a
href="eef61447b9...11bd71901b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4.2.1&new-version=4.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:18:00 -03:00
Oleksandr Redko
869ef71e66
fix: typo in testctx.WithConfig parameter (#5220) 
The PR corrects a typo in the parameter of the `testctxt.WithCommit`
function.
 2024-10-25 11:17:38 -03:00
dependabot[bot]
7d4671a1f2
chore(deps): bump github.com/mattn/go-mastodon from 0.0.8 to 0.0.9 (#5224) 
Bumps
[github.com/mattn/go-mastodon](https://github.com/mattn/go-mastodon)
from 0.0.8 to 0.0.9.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ef73e8196"><code>1ef73e8</code></a>
Fix ID type of report methods</li>
<li><a
href="b43f379b32"><code>b43f379</code></a>
add comment about accessing AccessToken</li>
<li><a
href="c4d23bb80b"><code>c4d23bb</code></a>
Best solution that's type-safe but also extensible</li>
<li><a
href="fa6f8ccee1"><code>fa6f8cc</code></a>
Revert to simple <code>io.Writer</code> with client-resetting</li>
<li><a
href="019b11d944"><code>019b11d</code></a>
Better handling of &quot;save the JSON&quot;</li>
<li><a
href="79bee3ed68"><code>79bee3e</code></a>
A simple test for retained JSON</li>
<li><a
href="2d49fbb883"><code>2d49fbb</code></a>
Gate the JSON saving behind a client flag</li>
<li><a
href="0f299f722f"><code>0f299f7</code></a>
Keep the API JSON around (briefly)</li>
<li><a
href="34bd0ff19f"><code>34bd0ff</code></a>
Obtain streaming url from Mastodon instance info</li>
<li><a
href="d74af49e64"><code>d74af49</code></a>
go mod tidy</li>
<li>See full diff in <a
href="https://github.com/mattn/go-mastodon/compare/v0.0.8...v0.0.9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/mattn/go-mastodon&package-manager=go_modules&previous-version=0.0.8&new-version=0.0.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:15:40 -03:00
dependabot[bot]
8ddb7b8508
chore(deps): bump github.com/google/ko from 0.16.0 to 0.17.1 (#5223) 
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.16.0
to 0.17.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove cycle in release process by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1435">ko-build/ko#1435</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.17.0...v0.17.1">https://github.com/ko-build/ko/compare/v0.17.0...v0.17.1</a></p>
<h2>v0.17.0</h2>
<h2>What's Changed</h2>
<ul>
<li>allow setting annotations by <a
href="https://github.com/seankhliao"><code>@​seankhliao</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1426">ko-build/ko#1426</a></li>
<li>Update recorder to lazy create file. by <a
href="https://github.com/jeffmendoza"><code>@​jeffmendoza</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1379">ko-build/ko#1379</a></li>
<li>Change OCI Layout publisher to lazy create layout after build. by <a
href="https://github.com/jeffmendoza"><code>@​jeffmendoza</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1385">ko-build/ko#1385</a></li>
<li>feat: add image user option by <a
href="https://github.com/maxbrunet"><code>@​maxbrunet</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1266">ko-build/ko#1266</a></li>
</ul>
<h4>Other changes</h4>
<ul>
<li>update k8s for kind e2e tests by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1352">ko-build/ko#1352</a></li>
<li>Bump github.com/docker/docker from 26.1.4+incompatible to
27.2.1+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1387">ko-build/ko#1387</a></li>
<li>Bump golang.org/x/tools from 0.21.0 to 0.25.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1386">ko-build/ko#1386</a></li>
<li>Bump reviewdog/action-misspell from 1.19.0 to 1.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1357">ko-build/ko#1357</a></li>
<li>Bump github/codeql-action from 3.25.7 to 3.26.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1383">ko-build/ko#1383</a></li>
<li>Bump imjasonh/setup-crane from 0.3 to 0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1335">ko-build/ko#1335</a></li>
<li>Bump actions/checkout from 4.1.6 to 4.1.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1336">ko-build/ko#1336</a></li>
<li>Bump github.com/google/go-containerregistry from 0.19.1 to 0.20.2 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1370">ko-build/ko#1370</a></li>
<li>Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1341">ko-build/ko#1341</a></li>
<li>Bump k8s.io/apimachinery from 0.30.1 to 0.31.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1374">ko-build/ko#1374</a></li>
<li>Bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1328">ko-build/ko#1328</a></li>
<li>Bump ko-build/setup-ko from 0.6 to 0.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1392">ko-build/ko#1392</a></li>
<li>Bump actions/setup-go from 5.0.1 to 5.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1390">ko-build/ko#1390</a></li>
<li>Bump actions/setup-python from 5.1.0 to 5.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1388">ko-build/ko#1388</a></li>
<li>Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1389">ko-build/ko#1389</a></li>
<li>Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1391">ko-build/ko#1391</a></li>
<li>docs: kamaji is a ko adopter by <a
href="https://github.com/prometherion"><code>@​prometherion</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1384">ko-build/ko#1384</a></li>
<li>Bump sigs.k8s.io/kind from 0.23.0 to 0.24.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1394">ko-build/ko#1394</a></li>
<li>build with go1.23 and general housekeeping by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1396">ko-build/ko#1396</a></li>
<li>Bump actions/upload-artifact from 4.3.3 to 4.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1397">ko-build/ko#1397</a></li>
<li>Bump github/codeql-action from 3.26.6 to 3.26.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1399">ko-build/ko#1399</a></li>
<li>Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1393">ko-build/ko#1393</a></li>
<li>Bump k8s.io/apimachinery from 0.31.0 to 0.31.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1398">ko-build/ko#1398</a></li>
<li>Bump github.com/docker/docker from 27.2.1+incompatible to
27.3.0+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1402">ko-build/ko#1402</a></li>
<li>Bump github/codeql-action from 3.26.7 to 3.26.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1401">ko-build/ko#1401</a></li>
<li>Bump github.com/docker/docker from 27.3.0+incompatible to
27.3.1+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1404">ko-build/ko#1404</a></li>
<li>Bump go.uber.org/automaxprocs from 1.5.3 to 1.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1405">ko-build/ko#1405</a></li>
<li>Bump github/codeql-action from 3.26.8 to 3.26.9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1406">ko-build/ko#1406</a></li>
<li>Bump actions/checkout from 4.1.7 to 4.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1408">ko-build/ko#1408</a></li>
<li>Bump github/codeql-action from 3.26.9 to 3.26.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1410">ko-build/ko#1410</a></li>
<li>Bump golang/govulncheck-action from 1.0.3 to 1.0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1411">ko-build/ko#1411</a></li>
<li>Bump github/codeql-action from 3.26.10 to 3.26.11 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1414">ko-build/ko#1414</a></li>
<li>Bump github.com/sigstore/cosign/v2 from 2.4.0 to 2.4.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1412">ko-build/ko#1412</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fd1f25182d"><code>fd1f251</code></a>
Remove cycle in release process</li>
<li><a
href="ac22328979"><code>ac22328</code></a>
feat: add image user option</li>
<li><a
href="6541f6e217"><code>6541f6e</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1421">#1421</a> from
ko-build/dependabot/github_actions/actions/uplo...</li>
<li><a
href="bfaef8b9bb"><code>bfaef8b</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1431">#1431</a> from
ko-build/dependabot/github_actions/actions/chec...</li>
<li><a
href="13b49554cd"><code>13b4955</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1432">#1432</a> from
ko-build/dependabot/go_modules/k8s.io/apimachin...</li>
<li><a
href="37013283ec"><code>3701328</code></a>
Bump k8s.io/apimachinery from 0.31.1 to 0.31.2</li>
<li><a
href="4e5d543714"><code>4e5d543</code></a>
Bump actions/checkout from 4.2.1 to 4.2.2</li>
<li><a
href="711779e829"><code>711779e</code></a>
Document linux_capabilities in builds section</li>
<li><a
href="4761e07a0d"><code>4761e07</code></a>
Bump actions/upload-artifact from 4.4.2 to 4.4.3</li>
<li><a
href="43baebd2d8"><code>43baebd</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1429">#1429</a> from
ko-build/dependabot/github_actions/github/codeq...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.16.0...v0.17.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:15:31 -03:00
dependabot[bot]
8856062d9e
chore(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (#5222) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.2
to 5.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/500">actions/setup-go#500</a></li>
<li>Upgrade IA Publish by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/502">actions/setup-go#502</a></li>
<li>Add architecture to cache key by <a
href="https://github.com/Zxilly"><code>@​Zxilly</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/493">actions/setup-go#493</a>
This addresses issues with caching by adding the architecture (arch) to
the cache key, ensuring that cache keys are accurate to prevent
conflicts.
Note: This change may break previous cache keys as they will no longer
be compatible with the new format.</li>
<li>Enhance workflows and Upgrade micromatch Dependency by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/510">actions/setup-go#510</a></li>
</ul>
<p><strong>Bug Fixes</strong></p>
<ul>
<li>Revise <code>isGhes</code> logic by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/511">actions/setup-go#511</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Zxilly"><code>@​Zxilly</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/493">actions/setup-go#493</a></li>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/500">actions/setup-go#500</a></li>
<li><a href="https://github.com/jww3"><code>@​jww3</code></a> made their
first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/511">actions/setup-go#511</a></li>
<li><a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/510">actions/setup-go#510</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v5...v5.1.0">https://github.com/actions/setup-go/compare/v5...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41dfa10bad"><code>41dfa10</code></a>
Enhance workflows and Upgrade micromatch Dependency (<a
href="https://redirect.github.com/actions/setup-go/issues/510">#510</a>)</li>
<li><a
href="941977282c"><code>9419772</code></a>
Revise <code>isGhes</code> logic (<a
href="https://redirect.github.com/actions/setup-go/issues/511">#511</a>)</li>
<li><a
href="d60b41a563"><code>d60b41a</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-go/issues/502">#502</a>
from actions/Jcambass-patch-1</li>
<li><a
href="e09f57f6a9"><code>e09f57f</code></a>
Upgrade IA Publish</li>
<li><a
href="df1a11710e"><code>df1a117</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-go/issues/500">#500</a>
from actions/Jcambass-patch-1</li>
<li><a
href="49582f6476"><code>49582f6</code></a>
Add workflow file for publishing releases to immutable action
package</li>
<li><a
href="b26d40294f"><code>b26d402</code></a>
fix: add arch to cache key (<a
href="https://redirect.github.com/actions/setup-go/issues/493">#493</a>)</li>
<li>See full diff in <a
href="0a12ed9d6a...41dfa10bad">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=5.0.2&new-version=5.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-25 11:15:14 -03:00
Meng Zhuo
6a84e40115
ci: release to riscv64 (#5196) 2024-10-21 08:38:00 -03:00
Carlos Alexandro Becker
248c7fcb5f
docs: update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-16 01:22:12 -03:00
Carlos Alexandro Becker
724d4ae90d
refactor: improve buildtarget.List (#5208) 
honestly dunno why we were checking string prefixes there...

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-16 01:10:03 -03:00
Carlos Alexandro Becker
66db8c0857
fix: build 386 2024-10-15 15:28:52 -03:00
Carlos Alexandro Becker
24c6060050
fix: standardize .Ext to always have the preceding . (#5207) 
historically this is kind of a mess, some places set the prefixed ext
(e.g. `.exe`) others don't (e.g. `msi`)

this standardize it to have the preceding `.`

also makes `ByExt` works with or without it so it doesn't break anyone's
config.

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-15 14:57:27 -03:00
dependabot[bot]
5d62156ed1
chore(deps): bump github.com/xanzy/go-gitlab from 0.111.0 to 0.112.0 (#5202) 
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.111.0 to 0.112.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.112.0</h2>
<h2>Breaking changes:</h2>
<ul>
<li>Fix the branch protection defaults by <a
href="https://github.com/svanharmelen"><code>@​svanharmelen</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2036">xanzy/go-gitlab#2036</a>
This ☝🏻 fixes a bug in the settings API (see <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2033">#2033</a>)
by introducing a dedicated struct for branch protection defaults. To
prevent duplicated code, this struct is now also used (as a pointer!)
for the <code>DefaultBranchProtectionDefaults</code> field in the
<code>Group</code> struct.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Add alert status to project hooks by <a
href="https://github.com/dany74q"><code>@​dany74q</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2034">xanzy/go-gitlab#2034</a></li>
<li>missing protected_branches#deploy_key_id by <a
href="https://github.com/seyguai"><code>@​seyguai</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2035">xanzy/go-gitlab#2035</a></li>
<li>Add missing created at to project struct by <a
href="https://github.com/wind0r"><code>@​wind0r</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2037">xanzy/go-gitlab#2037</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/dany74q"><code>@​dany74q</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2034">xanzy/go-gitlab#2034</a></li>
<li><a href="https://github.com/seyguai"><code>@​seyguai</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2035">xanzy/go-gitlab#2035</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.111.0...v0.112.0">https://github.com/xanzy/go-gitlab/compare/v0.111.0...v0.112.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="56c0535486"><code>56c0535</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2036">#2036</a>
from xanzy/fix/settings</li>
<li><a
href="39fc25b65a"><code>39fc25b</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2037">#2037</a>
from wind0r/add_missing_updated_at_to_project</li>
<li><a
href="dab81401c1"><code>dab8140</code></a>
Add missing created at to project struct</li>
<li><a
href="0a72e2ccb0"><code>0a72e2c</code></a>
Reorder fields to align with the docs</li>
<li><a
href="da5d7f1de9"><code>da5d7f1</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2035">#2035</a>
from seyguai/protected_branches-deploy_key_id</li>
<li><a
href="5538ce0c79"><code>5538ce0</code></a>
Fix the branch protection defaults</li>
<li><a
href="f1dc012d60"><code>f1dc012</code></a>
Reorder fields to align with the docs</li>
<li><a
href="59e211b002"><code>59e211b</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2034">#2034</a>
from dany74q/add-alert-status-to-project-hooks</li>
<li><a
href="cda298626d"><code>cda2986</code></a>
missing protected_branches#deploy_key_id</li>
<li><a
href="baf40ca34c"><code>baf40ca</code></a>
Add alert status to project hooks</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.111.0...v0.112.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.111.0&new-version=0.112.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-15 12:59:25 -03:00
dependabot[bot]
f946a9c1f7
chore(deps): bump github.com/slack-go/slack from 0.14.0 to 0.15.0 (#5201) 
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.14.0 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<blockquote>
<p>[!WARNING]<br />
This release includes a breaking change since the last release.</p>
</blockquote>
<h2>What's Changed</h2>
<p>v0.15.0 is now available. It <strong>does contain minor breaking
changes</strong> to two Block Kit elements along with a lot of new
functionality.</p>
<h3>Breaking Changes</h3>
<p><strong>Block Kit - Rich Text Section Date Element</strong></p>
<p>If you are using the <code>RichTextSectionDateElement</code> block
kit element, there is a new field <code>Format</code> which is now
required. It previously did not exist, but was marked as required in the
<a
href="https://api.slack.com/reference/block-kit/blocks#date-element-type">Block
Kit Documentation</a>. Similarly, the function
<code>NewRichTextSectionDateElement</code> function signature has been
updated to require the new parameter. While this <em>may not</em> have
previously worked, the non-backwards compatible signature change prompts
it to be identified as breaking change.</p>
<p><strong>Block Kit - Rich Text input Block Element</strong></p>
<p>If you are using the <code>RichTextInputBlockElement</code> block kit
element, the <code>InitialValue</code> field type has been changed from
<code>string</code> to <code>*RichTextBlock</code> to provide a more
strongly typed experience. If you were previously passing a
pre-formatted JSON object you will need to update your input to use the
<code>RichTextBlock</code> struct instead.</p>
<h3>Enhancements</h3>
<ul>
<li>Added support for publishing a message to a specific thread by <a
href="https://github.com/Nikolo"><code>@​Nikolo</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1309">slack-go/slack#1309</a></li>
<li>Added support for unicode parameter in emoji type of rich text
blocks by <a
href="https://github.com/YutoKashiwagi"><code>@​YutoKashiwagi</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1319">slack-go/slack#1319</a></li>
<li>Added endpoints for <code>calls.*</code> apis and <code>Type:
call</code> in blockkit by <a
href="https://github.com/winston-stripe"><code>@​winston-stripe</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1190">slack-go/slack#1190</a></li>
<li>Added Convenience Methods to Block Elements by <a
href="https://github.com/obed-sj"><code>@​obed-sj</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1279">slack-go/slack#1279</a></li>
<li>Added functions.completeError and functions.completeSuccess by <a
href="https://github.com/gideonw"><code>@​gideonw</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1328">slack-go/slack#1328</a></li>
<li>Added support for external_limited option of inviteShared by <a
href="https://github.com/bamo"><code>@​bamo</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1330">slack-go/slack#1330</a></li>
<li>Added support for Canvas API methods by <a
href="https://github.com/jarospisak-unity"><code>@​jarospisak-unity</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1334">slack-go/slack#1334</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Added required <code>format</code> field to rich text date blocks by
<a href="https://github.com/luke-josh"><code>@​luke-josh</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1317">slack-go/slack#1317</a></li>
<li>Updated RichTextInputBlockElement InitialValue data type by <a
href="https://github.com/Manjish"><code>@​Manjish</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1320">slack-go/slack#1320</a></li>
</ul>
<h3>Chores</h3>
<ul>
<li>Added go v1.23 to test matrix (test.yml) by <a
href="https://github.com/nemuvski"><code>@​nemuvski</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1315">slack-go/slack#1315</a></li>
<li>Bumped GitHub Actions to Latest Versions by <a
href="https://github.com/shogo82148"><code>@​shogo82148</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1314">slack-go/slack#1314</a></li>
<li>Updated deprecated comment for UploadFile and UploadFileContext by
<a href="https://github.com/shogo82148"><code>@​shogo82148</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1316">slack-go/slack#1316</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/shogo82148"><code>@​shogo82148</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1314">slack-go/slack#1314</a></li>
<li><a href="https://github.com/Nikolo"><code>@​Nikolo</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1309">slack-go/slack#1309</a></li>
<li><a href="https://github.com/luke-josh"><code>@​luke-josh</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1317">slack-go/slack#1317</a></li>
<li><a href="https://github.com/Manjish"><code>@​Manjish</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1320">slack-go/slack#1320</a></li>
<li><a
href="https://github.com/YutoKashiwagi"><code>@​YutoKashiwagi</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1319">slack-go/slack#1319</a></li>
<li><a href="https://github.com/obed-sj"><code>@​obed-sj</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1279">slack-go/slack#1279</a></li>
<li><a href="https://github.com/gideonw"><code>@​gideonw</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1328">slack-go/slack#1328</a></li>
<li><a href="https://github.com/bamo"><code>@​bamo</code></a> made their
first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1330">slack-go/slack#1330</a></li>
<li><a
href="https://github.com/jarospisak-unity"><code>@​jarospisak-unity</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1334">slack-go/slack#1334</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.14.0...v0.15.0">https://github.com/slack-go/slack/compare/v0.14.0...v0.15.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="203cdb2305"><code>203cdb2</code></a>
feat: Add support for Canvas API methods (<a
href="https://redirect.github.com/slack-go/slack/issues/1334">#1334</a>)</li>
<li><a
href="c5ef90eb58"><code>c5ef90e</code></a>
feat: Add support for external_limited option of inviteShared (<a
href="https://redirect.github.com/slack-go/slack/issues/1330">#1330</a>)</li>
<li><a
href="21e61c5b39"><code>21e61c5</code></a>
feat: Add functions.completeError and functions.completeSuccess (<a
href="https://redirect.github.com/slack-go/slack/issues/1328">#1328</a>)</li>
<li><a
href="132e0d11f7"><code>132e0d1</code></a>
feat: Add Convenience Methods to Block Elements (<a
href="https://redirect.github.com/slack-go/slack/issues/1279">#1279</a>)</li>
<li><a
href="57aa84d9a8"><code>57aa84d</code></a>
Add endpoints for <code>calls.*</code> apis and <code>Type: call</code>
in blockkit (<a
href="https://redirect.github.com/slack-go/slack/issues/1190">#1190</a>)</li>
<li><a
href="447b7cdae0"><code>447b7cd</code></a>
feat: Add support for unicode parameter in emoji type of rich text
blocks (<a
href="https://redirect.github.com/slack-go/slack/issues/1">#1</a>...</li>
<li><a
href="69981898f8"><code>6998189</code></a>
fix: Updated RichTextInputBlockElement InitialValue data type (<a
href="https://redirect.github.com/slack-go/slack/issues/1320">#1320</a>)</li>
<li><a
href="cd4e26e5ec"><code>cd4e26e</code></a>
fix: Add required <code>format</code> field to rich text date blocks (<a
href="https://redirect.github.com/slack-go/slack/issues/1317">#1317</a>)</li>
<li><a
href="6c4585b028"><code>6c4585b</code></a>
Support publishing a messge to a specific thread (<a
href="https://redirect.github.com/slack-go/slack/issues/1309">#1309</a>)</li>
<li><a
href="5386d65cc4"><code>5386d65</code></a>
fix: fix deprecated comment for UploadFile and UploadFileContext (<a
href="https://redirect.github.com/slack-go/slack/issues/1316">#1316</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/slack-go/slack/compare/v0.14.0...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-15 12:59:09 -03:00
dependabot[bot]
0f87e6f9f7
chore(deps): bump github/codeql-action from 3.26.12 to 3.26.13 (#5203) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.12 to 3.26.13.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f779452ac5"><code>f779452</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2539">#2539</a>
from github/update-v3.26.13-0c3e00641</li>
<li><a
href="532932479b"><code>5329324</code></a>
Update CHANGELOG.md</li>
<li><a
href="007ba25648"><code>007ba25</code></a>
Update changelog for v3.26.13</li>
<li><a
href="0c3e006416"><code>0c3e006</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2536">#2536</a>
from yoff/python/ff-std-lib-extraction</li>
<li><a
href="38469af228"><code>38469af</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2537">#2537</a>
from github/henrymercer/no-zstd-windows</li>
<li><a
href="5b6984ee4d"><code>5b6984e</code></a>
Assert that Windows downloads gzip</li>
<li><a
href="eefb943f7e"><code>eefb943</code></a>
Don't use Zstandard bundles on Windows</li>
<li><a
href="201e02efe2"><code>201e02e</code></a>
rebuild the action</li>
<li><a
href="ce5f900bfc"><code>ce5f900</code></a>
formatting</li>
<li><a
href="65dd816de1"><code>65dd816</code></a>
remove unused import</li>
<li>Additional commits viewable in <a
href="c36620d31a...f779452ac5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.12&new-version=3.26.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-15 12:58:55 -03:00
Carlos Alexandro Becker
91525f763c
fix: tmpl always copy before modifying (#5200) 
this is just to prevent some gotchas when using `templ` internally.
 2024-10-14 23:59:26 -03:00
Carlos Alexandro Becker
7f50679c4b
docs: update 2024-10-14 23:50:45 -03:00
Carlos Alexandro Becker
2b73005369
test: do not fail if not rel 2024-10-14 23:50:22 -03:00
Carlos Alexandro Becker
d933d8b316
fix: first class build targets 2024-10-14 14:30:28 -03:00
Carlos Alexandro Becker
a93f40b8cf
docs: fix 2024-10-14 14:25:47 -03:00
Carlos Alexandro Becker
4b91ae3589
docs: update 2024-10-14 11:30:16 -03:00
Carlos Alexandro Becker
d3ce82ff9f
fix: tmpl .386 -> .I386 
Template key can't start with a number.

Refs #5186
 2024-10-14 11:29:05 -03:00
Carlos Alexandro Becker
205b346215
chore(docs): update schema 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-14 10:06:27 -03:00
Carlos Alexandro Becker
d583861e06
feat(build): add GO386, GOMIPS64, GORISCV64, and GOPPC64 support (#5186) 
continuing the work of #5153

closes #5153

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Co-authored-by: 世界 <i@sekai.icu>
 2024-10-14 09:40:10 -03:00
dependabot[bot]
883c155a68
chore(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11 (#5197) 
Bumps
[github.com/klauspost/compress](https://github.com/klauspost/compress)
from 1.17.10 to 1.17.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/klauspost/compress/releases">github.com/klauspost/compress's
releases</a>.</em></p>
<blockquote>
<h2>v1.17.11</h2>
<h2>What's Changed</h2>
<ul>
<li>zstd: Fix extra CRC written with multiple Close calls by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1017">klauspost/compress#1017</a></li>
<li>s2: Don't use stack for index tables by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1014">klauspost/compress#1014</a></li>
<li>gzhttp: No content-type on no body response code by <a
href="https://github.com/juliens"><code>@​juliens</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1011">klauspost/compress#1011</a></li>
<li>gzhttp: Do not set the content-type when response has no body by <a
href="https://github.com/kevinpollet"><code>@​kevinpollet</code></a> in
<a
href="https://redirect.github.com/klauspost/compress/pull/1013">klauspost/compress#1013</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/juliens"><code>@​juliens</code></a> made
their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1011">klauspost/compress#1011</a></li>
<li><a
href="https://github.com/kevinpollet"><code>@​kevinpollet</code></a>
made their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1013">klauspost/compress#1013</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11">https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="72cd4a92a8"><code>72cd4a9</code></a>
zstd: Fix extra CRC written with multiple Close calls (<a
href="https://redirect.github.com/klauspost/compress/issues/1017">#1017</a>)</li>
<li><a
href="dbd6c38149"><code>dbd6c38</code></a>
s2: Don't use stack for index tables (<a
href="https://redirect.github.com/klauspost/compress/issues/1014">#1014</a>)</li>
<li><a
href="f73ab1e79f"><code>f73ab1e</code></a>
Do not set the content-type when response has no body (<a
href="https://redirect.github.com/klauspost/compress/issues/1013">#1013</a>)</li>
<li><a
href="f2a4f2583e"><code>f2a4f25</code></a>
build(deps): bump github/codeql-action in the github-actions group (<a
href="https://redirect.github.com/klauspost/compress/issues/1012">#1012</a>)</li>
<li><a
href="8e14b1b5a9"><code>8e14b1b</code></a>
No content-type on no body response code (<a
href="https://redirect.github.com/klauspost/compress/issues/1011">#1011</a>)</li>
<li><a
href="13a1ce6df1"><code>13a1ce6</code></a>
ci: Match goreleaser version (<a
href="https://redirect.github.com/klauspost/compress/issues/1009">#1009</a>)</li>
<li><a
href="6c5a195986"><code>6c5a195</code></a>
Update README.md</li>
<li>See full diff in <a
href="https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/klauspost/compress&package-manager=go_modules&previous-version=1.17.10&new-version=1.17.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-14 09:23:49 -03:00
dependabot[bot]
617ad4a4ae
chore(deps): bump anchore/scan-action from 4 to 5 (#5198) 
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from
4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/scan-action/releases">anchore/scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>New in scan-action v5.0.0</h2>
<ul>
<li>chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li>feat: short-lived grype-db cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)
[<a href="https://github.com/kzantow">kzantow</a>]
Note: with this release grype is no longer installed on
<code>$PATH</code>. We suspect the changes here could break a number of
users of the action who have learned to expect Grype be installed on
<code>$PATH</code>.</li>
</ul>
<h2>v4.1.2</h2>
<h2>New in scan-action v4.1.2</h2>
<ul>
<li>Update Grype to v0.80.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/358">#358</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v4.1.1</h2>
<h2>New in scan-action v4.1.1</h2>
<ul>
<li>chore(deps): update Grype to v0.79.6 (<a
href="https://redirect.github.com/anchore/scan-action/issues/352">#352</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>Document grype-version parameter (<a
href="https://redirect.github.com/anchore/scan-action/issues/319">#319</a>)
[<a href="https://github.com/vprivat-ads">vprivat-ads</a>]</li>
</ul>
<h2>v4.1.0</h2>
<h2>New in scan-action v4.1.0</h2>
<ul>
<li>chore(deps): update Grype to v0.79.3 (<a
href="https://redirect.github.com/anchore/scan-action/issues/341">#341</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e08a16a68"><code>4e08a16</code></a>
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/anchore/scan-action/issues/386">#386</a>)</li>
<li><a
href="a18ff2d1f2"><code>a18ff2d</code></a>
add release docs (<a
href="https://redirect.github.com/anchore/scan-action/issues/388">#388</a>)</li>
<li><a
href="c6c022e588"><code>c6c022e</code></a>
chore: add changelog ignore (<a
href="https://redirect.github.com/anchore/scan-action/issues/387">#387</a>)</li>
<li><a
href="65953694f6"><code>6595369</code></a>
chore: remove blocking workflow (<a
href="https://redirect.github.com/anchore/scan-action/issues/385">#385</a>)</li>
<li><a
href="11237475cc"><code>1123747</code></a>
chore(deps-dev): bump eslint from 9.11.1 to 9.12.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/381">#381</a>)</li>
<li><a
href="99311beeba"><code>99311be</code></a>
chore: update sha to correct pin for workflow actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/384">#384</a>)</li>
<li><a
href="2491ad68a9"><code>2491ad6</code></a>
chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)</li>
<li><a
href="2a3918e906"><code>2a3918e</code></a>
chore: optionally cache grype-db in actions cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)</li>
<li><a
href="a957c8db22"><code>a957c8d</code></a>
feat: update versions for actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/380">#380</a>)</li>
<li><a
href="54efbc6a14"><code>54efbc6</code></a>
chore(deps-dev): bump tslib from 2.6.3 to 2.7.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/359">#359</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/scan-action/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/scan-action&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-14 09:23:42 -03:00
dependabot[bot]
70ae5bb236
chore(deps): bump anchore/sbom-action from 0.17.2 to 0.17.3 (#5199) 
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.2 to 0.17.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.3</h2>
<h2>Changes in v0.17.3</h2>
<ul>
<li>chore(deps): update Syft to v1.14.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/498">#498</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f5e124a5e5"><code>f5e124a</code></a>
chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/493">#493</a>)</li>
<li><a
href="eff08d02ac"><code>eff08d0</code></a>
chore: configure changelog-ignore label (<a
href="https://redirect.github.com/anchore/sbom-action/issues/499">#499</a>)</li>
<li><a
href="18f9bdeed7"><code>18f9bde</code></a>
chore: remove snapshot tests; fix deprecation errors for outdated
packages (#...</li>
<li><a
href="2e8723687b"><code>2e87236</code></a>
add release docs (<a
href="https://redirect.github.com/anchore/sbom-action/issues/500">#500</a>)</li>
<li><a
href="4a914bc36a"><code>4a914bc</code></a>
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/497">#497</a>)</li>
<li><a
href="8cb9966eff"><code>8cb9966</code></a>
chore(deps): update Syft to v1.14.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/498">#498</a>)</li>
<li><a
href="beb779bf22"><code>beb779b</code></a>
Update README to include bit about permissions near the top (<a
href="https://redirect.github.com/anchore/sbom-action/issues/496">#496</a>)</li>
<li><a
href="87b31375ff"><code>87b3137</code></a>
chore(deps): update Syft to v1.13.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/488">#488</a>)</li>
<li><a
href="5cc1a40ded"><code>5cc1a40</code></a>
chore(deps): bump actions/checkout from 4.1.7 to 4.2.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/495">#495</a>)</li>
<li><a
href="dbef896719"><code>dbef896</code></a>
add awaiting response management (<a
href="https://redirect.github.com/anchore/sbom-action/issues/494">#494</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.2...v0.17.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.2&new-version=0.17.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-14 09:23:32 -03:00
dependabot[bot]
c4900fb1e6
chore(deps): bump gocloud.dev from 0.39.0 to 0.40.0 (#5194) 2024-10-11 15:19:21 +00:00
Carlos Alexandro Becker
efd9edc51c
fix(gitlab): improve artifact upload retry (#5185) 
this makes it more similar to github's implementation.

should fix #5177
 2024-10-11 12:03:13 -03:00
dependabot[bot]
8843f09b21
chore(deps): bump dagger/dagger-for-github from 6.12.0 to 6.13.0 (#5193) 
Bumps
[dagger/dagger-for-github](https://github.com/dagger/dagger-for-github)
from 6.12.0 to 6.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dagger/dagger-for-github/releases">dagger/dagger-for-github's
releases</a>.</em></p>
<blockquote>
<h2>v6.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: bump default version to v0.13.5 by <a
href="https://github.com/sipsma"><code>@​sipsma</code></a> in <a
href="https://redirect.github.com/dagger/dagger-for-github/pull/152">dagger/dagger-for-github#152</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dagger/dagger-for-github/compare/v6...v6.13.0">https://github.com/dagger/dagger-for-github/compare/v6...v6.13.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6b6e9832f7"><code>6b6e983</code></a>
chore: bump default version to v0.13.5</li>
<li>See full diff in <a
href="https://github.com/dagger/dagger-for-github/compare/v6.12.0...v6.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dagger/dagger-for-github&package-manager=github_actions&previous-version=6.12.0&new-version=6.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-11 12:00:36 -03:00
dependabot[bot]
ce90955872
chore(deps): bump github.com/xanzy/go-gitlab from 0.110.0 to 0.111.0 (#5195) 
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.110.0 to 0.111.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.111.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add event_name field to the audit events. by <a
href="https://github.com/lstout"><code>@​lstout</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2024">xanzy/go-gitlab#2024</a></li>
<li>Add Description field in Environments API by <a
href="https://github.com/timofurrer"><code>@​timofurrer</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2025">xanzy/go-gitlab#2025</a></li>
<li>Add 'default_branch' attribute by <a
href="https://github.com/jgangemi"><code>@​jgangemi</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2030">xanzy/go-gitlab#2030</a></li>
<li>Add support for Harbor Integration by <a
href="https://github.com/houstonj1"><code>@​houstonj1</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2027">xanzy/go-gitlab#2027</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jgangemi"><code>@​jgangemi</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2030">xanzy/go-gitlab#2030</a></li>
<li><a href="https://github.com/houstonj1"><code>@​houstonj1</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2027">xanzy/go-gitlab#2027</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.110.0...v0.111.0">https://github.com/xanzy/go-gitlab/compare/v0.110.0...v0.111.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b5e0812497"><code>b5e0812</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2027">#2027</a>
from houstonj1/feat/harbor-integration</li>
<li><a
href="e6a0bbf23a"><code>e6a0bbf</code></a>
change UseInheritedSettings from BoolValue to bool</li>
<li><a
href="8401d7e1ea"><code>8401d7e</code></a>
Merge branch 'xanzy:main' into feat/harbor-integration</li>
<li><a
href="87336053bb"><code>8733605</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2030">#2030</a>
from jgangemi/jae/issue-2029</li>
<li><a
href="18f1a0f245"><code>18f1a0f</code></a>
feat: add 'default_branch' attribute</li>
<li><a
href="1bdf26e781"><code>1bdf26e</code></a>
add missing field to test</li>
<li><a
href="3ac57b9e9e"><code>3ac57b9</code></a>
remove extra period</li>
<li><a
href="66f30b3d17"><code>66f30b3</code></a>
fix missing omitempty on SetHarborServiceOptions</li>
<li><a
href="ce294e84dd"><code>ce294e8</code></a>
Add support for Harbor Integration</li>
<li><a
href="6c05c53408"><code>6c05c53</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2025">#2025</a>
from timofurrer/environment-description</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.110.0...v0.111.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.110.0&new-version=0.111.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-11 12:00:21 -03:00
Paul Querna
47212a5410
fix(brew): Fix Forumla Class Name builder (#5192) 
- Fixes #5191 
- I added a test case, but I don't have a great mechanism to test this
fully in a live environment.

---------

Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-11 11:59:47 -03:00
dependabot[bot]
3a859db169
chore(deps): bump dagger/dagger-for-github from 6.11.0 to 6.12.0 (#5190) 
Bumps
[dagger/dagger-for-github](https://github.com/dagger/dagger-for-github)
from 6.11.0 to 6.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dagger/dagger-for-github/releases">dagger/dagger-for-github's
releases</a>.</em></p>
<blockquote>
<h2>v6.12.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: bump default dagger version to v0.13.4 by <a
href="https://github.com/jedevc"><code>@​jedevc</code></a> in <a
href="https://redirect.github.com/dagger/dagger-for-github/pull/150">dagger/dagger-for-github#150</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dagger/dagger-for-github/compare/v6...v6.12.0">https://github.com/dagger/dagger-for-github/compare/v6...v6.12.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c697168041"><code>c697168</code></a>
chore: bump default dagger version to v0.13.4 (<a
href="https://redirect.github.com/dagger/dagger-for-github/issues/150">#150</a>)</li>
<li>See full diff in <a
href="https://github.com/dagger/dagger-for-github/compare/v6.11.0...v6.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dagger/dagger-for-github&package-manager=github_actions&previous-version=6.11.0&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-10 16:40:48 -03:00
dependabot[bot]
4871e768aa
chore(deps): bump actions/cache from 4.1.0 to 4.1.1 (#5189) 
Bumps [actions/cache](https://github.com/actions/cache) from 4.1.0 to
4.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Restore original behavior of <code>cache-hit</code> output by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1467">actions/cache#1467</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v4.1.0...v4.1.1">https://github.com/actions/cache/compare/v4.1.0...v4.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h3>4.1.1</h3>
<ul>
<li>Restore original behavior of <code>cache-hit</code> output - <a
href="https://redirect.github.com/actions/cache/pull/1467">#1467</a></li>
</ul>
<h3>4.1.0</h3>
<ul>
<li>Ensure <code>cache-hit</code> output is set when a cache is missed -
<a
href="https://redirect.github.com/actions/cache/pull/1404">#1404</a></li>
<li>Deprecate <code>save-always</code> input - <a
href="https://redirect.github.com/actions/cache/pull/1452">#1452</a></li>
</ul>
<h3>4.0.2</h3>
<ul>
<li>Fixed restore <code>fail-on-cache-miss</code> not working.</li>
</ul>
<h3>4.0.1</h3>
<ul>
<li>Updated <code>isGhes</code> check</li>
</ul>
<h3>4.0.0</h3>
<ul>
<li>Updated minimum runner version support from node 12 -&gt; node
20</li>
</ul>
<h3>3.3.3</h3>
<ul>
<li>Updates <code>@​actions/cache</code> to v3.2.3 to fix accidental
mutated path arguments to <code>getCacheVersion</code> <a
href="https://redirect.github.com/actions/toolkit/pull/1378">actions/toolkit#1378</a></li>
<li>Additional audit fixes of npm package(s)</li>
</ul>
<h3>3.3.2</h3>
<ul>
<li>Fixes bug with Azure SDK causing blob downloads to get stuck.</li>
</ul>
<h3>3.3.1</h3>
<ul>
<li>Reduced segment size to 128MB and segment timeout to 10 minutes to
fail fast in case the cache download is stuck.</li>
</ul>
<h3>3.3.0</h3>
<ul>
<li>Added option to lookup cache without downloading it.</li>
</ul>
<h3>3.2.6</h3>
<ul>
<li>Fix zstd not being used after zstd version upgrade to 1.5.4 on
hosted runners.</li>
</ul>
<h3>3.2.5</h3>
<ul>
<li>Added fix to prevent from setting MYSYS environment variable
globally.</li>
</ul>
<h3>3.2.4</h3>
<ul>
<li>Added option to fail job on cache miss.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3624ceb22c"><code>3624ceb</code></a>
Restore original behavior of <code>cache-hit</code> output (<a
href="https://redirect.github.com/actions/cache/issues/1467">#1467</a>)</li>
<li>See full diff in <a
href="2cdf405574...3624ceb22c">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-09 10:17:59 -03:00
dependabot[bot]
13f8857c20
chore(deps): bump github/codeql-action from 3.26.11 to 3.26.12 (#5188) 
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.11 to 3.26.12.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.12 - 07 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. <a
href="https://redirect.github.com/github/codeql-action/pull/2520">#2520</a></p>
<ul>
<li>
<p>If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</p>
</li>
<li>
<p>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.26.11</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.26.11</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</p>
</li>
</ul>
</li>
</ul>
<h2>3.26.11 - 03 Oct 2024</h2>
<ul>
<li>
<p><em>Upcoming breaking change</em>: Add support for using
<code>actions/download-artifact@v4</code> to programmatically consume
CodeQL Action debug artifacts.</p>
<p>Starting November 30, 2024, GitHub.com customers will <a
href="https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/">no
longer be able to use <code>actions/download-artifact@v3</code></a>.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
<code>CODEQL_ACTION_ARTIFACT_V4_UPGRADE</code> environment variable to
<code>true</code> and bump <code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
<code>actions/download-artifact@v3</code> to
<code>actions/download-artifact@v4</code> will begin failing then.</p>
<p>This change is currently unavailable for GitHub Enterprise Server
customers, as <code>actions/upload-artifact@v4</code> and
<code>actions/download-artifact@v4</code> are not yet compatible with
GHES.</p>
</li>
<li>
<p>Update default CodeQL bundle version to 2.19.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2519">#2519</a></p>
</li>
</ul>
<h2>3.26.10 - 30 Sep 2024</h2>
<ul>
<li>We are rolling out a feature in September/October 2024 that sets up
CodeQL using a bundle compressed with <a
href="http://facebook.github.io/zstd/">Zstandard</a>. Our aim is to
improve the performance of setting up CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/2502">#2502</a></li>
</ul>
<h2>3.26.9 - 24 Sep 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.8 - 19 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2483">#2483</a></li>
</ul>
<h2>3.26.7 - 13 Sep 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2471">#2471</a></li>
</ul>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c36620d31a"><code>c36620d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2529">#2529</a>
from github/update-v3.26.12-c9a70ff45</li>
<li><a
href="570aecb95f"><code>570aecb</code></a>
Update changelog for v3.26.12</li>
<li><a
href="c9a70ff45f"><code>c9a70ff</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2526">#2526</a>
from github/henrymercer/check-zstd-on-path</li>
<li><a
href="d65a17605a"><code>d65a176</code></a>
Rebuild</li>
<li><a
href="bf2e624d0b"><code>bf2e624</code></a>
Update src/tar.ts</li>
<li><a
href="56d197570a"><code>56d1975</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2489">#2489</a>
from github/redsun82/rust</li>
<li><a
href="7cf65a5b2e"><code>7cf65a5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2518">#2518</a>
from github/dependabot/npm_and_yarn/npm-88156698cd</li>
<li><a
href="8a56dd2e53"><code>8a56dd2</code></a>
Update to <code>@​actions/core</code> 1.11.1</li>
<li><a
href="1532671351"><code>1532671</code></a>
Update default bundle to 2.19.1 (<a
href="https://redirect.github.com/github/codeql-action/issues/2519">#2519</a>)</li>
<li><a
href="64871a860c"><code>64871a8</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.1</li>
<li>Additional commits viewable in <a
href="6db8d6351f...c36620d31a">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.11&new-version=3.26.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-08 09:01:13 -03:00
dependabot[bot]
ec2447f9af
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (#5187) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0
to 4.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<h2>v4.1.5</h2>
<ul>
<li>Update NPM dependencies by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
<li>Bump actions/setup-node from 1 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
<li>Bump actions/upload-artifact from 2 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
<li>README: Suggest <code>user.email</code> to be
<code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
</ul>
<h2>v4.1.4</h2>
<ul>
<li>Disable <code>extensions.worktreeConfig</code> when disabling
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
<li>Add dependabot config by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
<li>Bump the minor-actions-dependencies group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
</ul>
<h2>v4.1.3</h2>
<ul>
<li>Check git version before attempting to disable
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1656">actions/checkout#1656</a></li>
<li>Add SSH user parameter by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1685">actions/checkout#1685</a></li>
<li>Update <code>actions/checkout</code> version in
<code>update-main-version.yml</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1650">actions/checkout#1650</a></li>
</ul>
<h2>v4.1.2</h2>
<ul>
<li>Fix: Disable sparse checkout whenever <code>sparse-checkout</code>
option is not present <a
href="https://github.com/dscho"><code>@​dscho</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1598">actions/checkout#1598</a></li>
</ul>
<h2>v4.1.1</h2>
<ul>
<li>Correct link to GitHub Docs by <a
href="https://github.com/peterbe"><code>@​peterbe</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li>
<li>Link to release page from what's new section by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1514">actions/checkout#1514</a></li>
</ul>
<h2>v4.1.0</h2>
<ul>
<li><a href="https://redirect.github.com/actions/checkout/pull/1396">Add
support for partial checkout filters</a></li>
</ul>
<h2>v4.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/actions/checkout/pull/1067">Support
fetching without the --progress option</a></li>
<li><a
href="https://redirect.github.com/actions/checkout/pull/1436">Update to
node20</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="eef61447b9"><code>eef6144</code></a>
Prepare 4.2.1 release (<a
href="https://redirect.github.com/actions/checkout/issues/1925">#1925</a>)</li>
<li><a
href="6b42224f41"><code>6b42224</code></a>
Add workflow file for publishing releases to immutable action package
(<a
href="https://redirect.github.com/actions/checkout/issues/1919">#1919</a>)</li>
<li><a
href="de5a000abf"><code>de5a000</code></a>
Check out other refs/* by commit if provided, fall back to ref (<a
href="https://redirect.github.com/actions/checkout/issues/1924">#1924</a>)</li>
<li>See full diff in <a
href="d632683dd7...eef61447b9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4.2.0&new-version=4.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-08 09:01:00 -03:00
Eng Zer Jun
b2a02b582f
fix(changelog): fix random order of first commit in first release (#5173) 
## Background

This is a bug that occurs randomly under a very specific condition.

Not sure how long this bug has been around. I first noticed it in the
failed Dagger test job in
https://github.com/goreleaser/goreleaser/pull/5161 after the `TestGroup`
unit test was updated to use regex matching
https://github.com/goreleaser/goreleaser/pull/5161#discussion_r1781302054.

Log:
https://github.com/goreleaser/goreleaser/actions/runs/11108665571/job/30862144417#step:4:680

```
--- FAIL: TestGroup (0.23s)
    changelog_test.go:843: 
        	Error Trace:	/src/internal/pipe/changelog/changelog_test.go:843
        	Error:      	Expect "## Changelog
        	            	### Features
        	            	* a77c0b89a457ee6a78447f6c9113b79cf4dce8ce feat: added that thing
        	            	### Bug Fixes
        	            	* 3e2908a87e5fdfdbd5efaad013c0b2d196c64c40 bug: Merge pull request #999 from goreleaser/some-branch
        	            	### Bots
        	            	* e2b7fbaaf1387cd4af575f5e329d9441ce1a917b feat(deps): update foobar [bot]
        	            	### Others
        	            	* 3643389d7150dc191eca4ac8428274fb31213a12 this is not a Merge pull request
        	            	* 3e1421263cd99fbd9a1a6c0196a355efe96e631d chore: something about cArs we dont need
        	            	* c094f150bc948d76f920219ef9729fd63747324b docs: whatever
        	            	* 242178ede64b3ff570dfbde6416f2c4718dd5b68 fix: whatever
        	            	* 02b7e77076dfed7475d42d728d69d13d19a10a39 ignored: whatever
        	            	* c3b78e347e5c38acc6b78e5a963b28221ac0cfee fixed bug 2
        	            	* fc5f56a9d915d19bc3630dc40aabd99a3eede02b added feature 1
        	            	* dc67ddaae25db36fe70d3b96311243621c176169 first
        	            	" to match "## Changelog
        	            	### Features
        	            	\* \w+ feat: added that thing
        	            	### Bug Fixes
        	            	\* \w+ bug: Merge pull request #999 from goreleaser\/some-branch
        	            	### Bots
        	            	\* \w+ feat\(deps\): update foobar \[bot\]
        	            	### Others
        	            	\* \w+ first
        	            	\* \w+ this is not a Merge pull request
        	            	\* \w+ chore: something about cArs we dont need
        	            	\* \w+ docs: whatever
        	            	\* \w+ fix: whatever
        	            	\* \w+ ignored: whatever
        	            	\* \w+ fixed bug 2
        	            	\* \w+ added feature 1
        	            	"
        	Test:       	TestGroup
```


Then it also failed in:

1. 71e7a63ca1

Log:
https://github.com/goreleaser/goreleaser/actions/runs/11166871425/job/31041794426#step:4:667

```
--- FAIL: TestGroup (0.13s)
    changelog_test.go:843: 
        	Error Trace:	/src/internal/pipe/changelog/changelog_test.go:843
        	Error:      	Expect "## Changelog
        	            	### Features
        	            	* 7a9c58e3f299b347754c02a149f77d4450768aba feat: added that thing
        	            	### Bug Fixes
        	            	* 9d5982da0fa36817c9c907271ece0a238bc24918 bug: Merge pull request #999 from goreleaser/some-branch
        	            	### Bots
        	            	* 6890859be3907f8f1b60b1a82cb4af277a0bc425 feat(deps): update foobar [bot]
        	            	### Others
        	            	* 6acc3600c5fe17d0330b566e6d5703e48725f300 this is not a Merge pull request
        	            	* 31abf613e4c3a5fcaebb0a1a23bcd418d61d2c4d first
        	            	* 14a53e66c59c532a81e729b6717aa4137cc292fb chore: something about cArs we dont need
        	            	* df77c2f0d8b1bbdc697e843e1dd2764a716a2aa5 docs: whatever
        	            	* a4802f6fc858cbc12ceca360a89894a61a0a097f fix: whatever
        	            	* 7a2645a1262516ca24443a65c137680e2e3857fc ignored: whatever
        	            	* b66e319579a7eeb319d1d2a95cb938d6316d3edb fixed bug 2
        	            	* 377012fb77758238b46a20c8bbd348e55d011168 added feature 1
        	            	" to match "## Changelog
        	            	### Features
        	            	\* \w+ feat: added that thing
        	            	### Bug Fixes
        	            	\* \w+ bug: Merge pull request #999 from goreleaser\/some-branch
        	            	### Bots
        	            	\* \w+ feat\(deps\): update foobar \[bot\]
        	            	### Others
        	            	\* \w+ first
        	            	\* \w+ this is not a Merge pull request
        	            	\* \w+ chore: something about cArs we dont need
        	            	\* \w+ docs: whatever
        	            	\* \w+ fix: whatever
        	            	\* \w+ ignored: whatever
        	            	\* \w+ fixed bug 2
        	            	\* \w+ added feature 1
        	            	"
        	Test:       	TestGroup
```

2. 747c11d833

Log:
https://github.com/goreleaser/goreleaser/actions/runs/11166873534/job/31041800714#step:4:677

```
--- FAIL: TestGroup (0.09s)
    changelog_test.go:843: 
        	Error Trace:	/src/internal/pipe/changelog/changelog_test.go:843
        	Error:      	Expect "## Changelog
        	            	### Features
        	            	* 49f56e2d8ca352d4641828efd167dbfe91f5769a feat: added that thing
        	            	### Bug Fixes
        	            	* 11c8dafa67d5973c359ed3bcf859b81d571396ed bug: Merge pull request #999 from goreleaser/some-branch
        	            	### Bots
        	            	* df888fe601a92afe5d8d4fcae5a551b0eaa57684 feat(deps): update foobar [bot]
        	            	### Others
        	            	* 03f397c28cd4f5484afee71f7edd99977f85deec this is not a Merge pull request
        	            	* 16333c2d178e4911a049ba63b0b8783bbc7e497b chore: something about cArs we dont need
        	            	* e7b30e58579bdaaeea184d78ddb5017a2bdc3459 docs: whatever
        	            	* ab9abbc7aa88208f2b3dc44dc9f7b0e55771b826 fix: whatever
        	            	* 87fc355911ca94f0a1e5a6c332e36b1f73654fbe ignored: whatever
        	            	* 189fa3fb4ceb246084404247ad1b521747f30991 fixed bug 2
        	            	* 49fdca4fd96ec600d79722f3453c1b84e82dd6e5 added feature 1
        	            	* ea1e16eb97b432d9c111df934ea4b6ce3691438a first
        	            	" to match "## Changelog
        	            	### Features
        	            	\* \w+ feat: added that thing
        	            	### Bug Fixes
        	            	\* \w+ bug: Merge pull request #999 from goreleaser\/some-branch
        	            	### Bots
        	            	\* \w+ feat\(deps\): update foobar \[bot\]
        	            	### Others
        	            	\* \w+ first
        	            	\* \w+ this is not a Merge pull request
        	            	\* \w+ chore: something about cArs we dont need
        	            	\* \w+ docs: whatever
        	            	\* \w+ fix: whatever
        	            	\* \w+ ignored: whatever
        	            	\* \w+ fixed bug 2
        	            	\* \w+ added feature 1
        	            	"
        	Test:       	TestGroup
```

3. 10980311a5

Log:
https://github.com/goreleaser/goreleaser/actions/runs/11183904433/job/31093519567#step:14:41

```
--- FAIL: TestGroup (0.14s)
    changelog_test.go:843: 
        	Error Trace:	/home/runner/work/goreleaser/goreleaser/internal/pipe/changelog/changelog_test.go:843
        	Error:      	Expect "## Changelog
        	            	### Features
        	            	* ec216fc3537667e300da4181c6b51520367afd28 feat: added that thing
        	            	### Bug Fixes
        	            	* 5132e678d5f69a366415474cefce012c640a7de9 bug: Merge pull request #999 from goreleaser/some-branch
        	            	### Bots
        	            	* dd9571e27c5a4f19882b8062a790636376b677bc feat(deps): update foobar [bot]
        	            	### Others
        	            	* c9b95e3b52ad6a82bacabae63decd45b1038d137 this is not a Merge pull request
        	            	* 260f70d5c2b6e31a35058b727818a78a7d589a22 chore: something about cArs we dont need
        	            	* 0969cba5b1363473e05eb251ffefbccd46fa6fc8 first
        	            	* c504cb0173a1f312ab39d17852f86b95504ff767 docs: whatever
        	            	* d57cab9360470d0e0a03d1ecb4763e89fe182f8f fix: whatever
        	            	* 2e659ceef3f2231ed107c80954833d9073091dd3 ignored: whatever
        	            	* 72658b11fd2789a03e83496d723a9196f7b14467 fixed bug 2
        	            	* 883d4fab813e6849520463b5325077a9ef45131d added feature 1
        	            	" to match "## Changelog
        	            	### Features
        	            	\* \w+ feat: added that thing
        	            	### Bug Fixes
        	            	\* \w+ bug: Merge pull request #999 from goreleaser\/some-branch
        	            	### Bots
        	            	\* \w+ feat\(deps\): update foobar \[bot\]
        	            	### Others
        	            	\* \w+ first
        	            	\* \w+ this is not a Merge pull request
        	            	\* \w+ chore: something about cArs we dont need
        	            	\* \w+ docs: whatever
        	            	\* \w+ fix: whatever
        	            	\* \w+ ignored: whatever
        	            	\* \w+ fixed bug 2
        	            	\* \w+ added feature 1
        	            	"
        	Test:       	TestGroup
```


As we can see from the log, the first commit with the `first` message
can appear in a random order in the changelog.

---

## Solution

In the `TestGroup` unit test, we are making 11 git commits, all within a
second. There seems to be a bug with `git log` where it is unable to
order the commits in reverse chronological order if all commits have the
same authored and committed date, as shown below.

> [!note]
> `/tmp/TestGroup4125952855/001` is the temporary directory created by
`testlib.Mktmp` in `TestGroup` test.

`git log` without revision range:

```
/tmp/TestGroup4125952855/001 main ❯ git log --oneline
85f005f (HEAD -> main, tag: v0.0.2) this is not a Merge pull request
27dbd0e bug: Merge pull request #999 from goreleaser/some-branch
3495034 feat: added that thing
9f0db77 chore: something about cArs we dont need
634e043 docs: whatever
ef52fef fix: whatever
ff49bea feat(deps): update foobar [bot]
e0f4e4b ignored: whatever
ce7fbfa fixed bug 2
940a684 added feature 1
2750980 (tag: v0.0.1) first
```

`git log` with multiple revision ranges, the "first" commit appears at
the top:

```
/tmp/TestGroup4125952855/001 main ❯ git log --oneline 2750980 v0.0.2
2750980 (tag: v0.0.1) first
85f005f (HEAD -> main, tag: v0.0.2) this is not a Merge pull request
27dbd0e bug: Merge pull request #999 from goreleaser/some-branch
3495034 feat: added that thing
9f0db77 chore: something about cArs we dont need
634e043 docs: whatever
ef52fef fix: whatever
ff49bea feat(deps): update foobar [bot]
e0f4e4b ignored: whatever
ce7fbfa fixed bug 2
940a684 added feature 1
```

If we specify only one revision, then the commits are ordered correctly
in reverse chronological order:

```
/tmp/TestGroup4125952855/001 main ❯ git log --oneline v0.0.2
85f005f (HEAD -> main, tag: v0.0.2) this is not a Merge pull request
27dbd0e bug: Merge pull request #999 from goreleaser/some-branch
3495034 feat: added that thing
9f0db77 chore: something about cArs we dont need
634e043 docs: whatever
ef52fef fix: whatever
ff49bea feat(deps): update foobar [bot]
e0f4e4b ignored: whatever
ce7fbfa fixed bug 2
940a684 added feature 1
2750980 (tag: v0.0.1) first
```

Based on my observations, this bug can only happen when all commits are
created at the same time, and the user is creating their first release
note.

This commit fixes the bug by excluding the first commit SHA-1 hash from
`git log` in `gitChangeLogger`.

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
 2024-10-07 21:45:32 -03:00
Carlos Alexandro Becker
a2257ee415
chore(deps): update go-github to v66 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-10-07 10:01:13 -03:00
dependabot[bot]
daf917fee5
chore(deps): bump golang.org/x/tools from 0.25.0 to 0.26.0 (#5182) 
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.25.0
to 0.26.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2ab3b51435"><code>2ab3b51</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="2683c792b4"><code>2683c79</code></a>
gopls/internal/golang/stubmethods: rename analysis/stubmethods</li>
<li><a
href="efd951d807"><code>efd951d</code></a>
gopls/internal/analysis/stubmethods: merge into CodeAction</li>
<li><a
href="d0d0d9ebc2"><code>d0d0d9e</code></a>
gopls/internal/cache: memoize dependent hash on analysisNode</li>
<li><a
href="a19eef6bcb"><code>a19eef6</code></a>
gopls/internal/cache: express packageHandle as a state machine</li>
<li><a
href="dd745ec14b"><code>dd745ec</code></a>
gopls/internal/test/marker: update regression test issue68918.txt</li>
<li><a
href="a02ee353de"><code>a02ee35</code></a>
go/analysis/passes/stdversion: reenable tests</li>
<li><a
href="a24facf9e5"><code>a24facf</code></a>
all: set gotypesalias=0 explicitly</li>
<li><a
href="ce2a33e35d"><code>ce2a33e</code></a>
gopls/internal: fix extract refactor for cases with anonymous
functions</li>
<li><a
href="a2ff832d75"><code>a2ff832</code></a>
go/ssa: remove references to GOEXPERIMENT range</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.25.0...v0.26.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.25.0&new-version=0.26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 09:49:50 -03:00
dependabot[bot]
adfe828c88
chore(deps): bump github.com/xanzy/go-gitlab from 0.109.0 to 0.110.0 (#5181) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.109.0 to 0.110.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.110.0</h2>
<h2>Breaking Changes</h2>
<ul>
<li>New options when calling DeleteProject by <a
href="https://github.com/heidiberry"><code>@​heidiberry</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2010">xanzy/go-gitlab#2010</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Support Kubernetes-related Environments API fields by <a
href="https://github.com/timofurrer"><code>@​timofurrer</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2013">xanzy/go-gitlab#2013</a></li>
<li>add MergeStatus filed to struct MergeEvent by <a
href="https://github.com/cestlive"><code>@​cestlive</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2016">xanzy/go-gitlab#2016</a></li>
<li>Add ListServiceAccounts function to list all service accounts by <a
href="https://github.com/Atoms"><code>@​Atoms</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2012">xanzy/go-gitlab#2012</a></li>
<li>Add support for the Redmine Integration by <a
href="https://github.com/heidiberry"><code>@​heidiberry</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2007">xanzy/go-gitlab#2007</a></li>
<li>feat(runners): add maintenance_note on put/get runner details by <a
href="https://github.com/jaredallard"><code>@​jaredallard</code></a> in
<a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2017">xanzy/go-gitlab#2017</a></li>
<li>feat: add deployment approval config attribute by <a
href="https://github.com/loozhengyuan"><code>@​loozhengyuan</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2022">xanzy/go-gitlab#2022</a></li>
<li>feat: add new pages api endpoint by <a
href="https://github.com/nickshine"><code>@​nickshine</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2019">xanzy/go-gitlab#2019</a></li>
<li>Support API endpoint: List memberships for a billable member of a
group by <a href="https://github.com/Iridias"><code>@​Iridias</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2021">xanzy/go-gitlab#2021</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cestlive"><code>@​cestlive</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2016">xanzy/go-gitlab#2016</a></li>
<li><a href="https://github.com/Atoms"><code>@​Atoms</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2012">xanzy/go-gitlab#2012</a></li>
<li><a
href="https://github.com/jaredallard"><code>@​jaredallard</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2017">xanzy/go-gitlab#2017</a></li>
<li><a
href="https://github.com/loozhengyuan"><code>@​loozhengyuan</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2022">xanzy/go-gitlab#2022</a></li>
<li><a href="https://github.com/Iridias"><code>@​Iridias</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2021">xanzy/go-gitlab#2021</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.109.0...v0.110.0">https://github.com/xanzy/go-gitlab/compare/v0.109.0...v0.110.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3047899ef7"><code>3047899</code></a>
Run gofmt on the codebase</li>
<li><a
href="a5cc26bee8"><code>a5cc26b</code></a>
Fix tabs/spaces...</li>
<li><a
href="21b43f833f"><code>21b43f8</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2021">#2021</a>
from Iridias/main</li>
<li><a
href="38c50a4fb7"><code>38c50a4</code></a>
Make a few small tweaks to get the PR inline with the docs</li>
<li><a
href="8ac0c82d26"><code>8ac0c82</code></a>
Minor changes to keep code consistent within the package</li>
<li><a
href="8082427716"><code>8082427</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2019">#2019</a>
from splunk/pages-api-update</li>
<li><a
href="8a715ef928"><code>8a715ef</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2022">#2022</a>
from loozhengyuan/feat/add-allow-pipeline-trigger-ap...</li>
<li><a
href="a1f4e7b8a9"><code>a1f4e7b</code></a>
feat: add deployment approval config attribute</li>
<li><a
href="9a60185697"><code>9a60185</code></a>
Support API endpoint: List memberships for a billable member of a
group</li>
<li><a
href="5f6d49af81"><code>5f6d49a</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2017">#2017</a>
from jaredallard/patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.109.0...v0.110.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.109.0&new-version=0.110.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 09:17:31 -03:00
dependabot[bot]
0949389662
chore(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0 (#5180) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from
0.27.0 to 0.28.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="adef4cc1a8"><code>adef4cc</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="a0819fbb02"><code>a0819fb</code></a>
sha3: fix cSHAKE initialization for extremely large N and or S</li>
<li><a
href="42ee18b963"><code>42ee18b</code></a>
ssh: return ServerAuthError after too many auth failures</li>
<li><a
href="9e92970a1e"><code>9e92970</code></a>
bn256: add missing symbols in comment</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.27.0...v0.28.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 09:17:09 -03:00
dependabot[bot]
d23f2c7681
chore(deps): bump golang.org/x/text from 0.18.0 to 0.19.0 (#5179) 
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.18.0 to
0.19.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3043346206"><code>3043346</code></a>
x/text: Correct examples in number/doc</li>
<li><a
href="38a95c2d4a"><code>38a95c2</code></a>
all: fix some comments</li>
<li><a
href="20097e45e6"><code>20097e4</code></a>
all: fix printf(var) mistakes detected by latest printf checker</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.18.0...v0.19.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.18.0&new-version=0.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 09:16:51 -03:00
dependabot[bot]
156f49522b
chore(deps): bump sigstore/cosign-installer from 3.6.0 to 3.7.0 (#5183) 2024-10-07 11:44:10 +00:00
dependabot[bot]
42185b6db0
chore(deps): bump actions/cache from 4.0.2 to 4.1.0 (#5184) 2024-10-07 11:34:56 +00:00
Bob Callaway
012cfc391c
point to GHCR instead of GCR for cosign container (#5176) 
This changes the Dockerfile to pull the cosign container image from GHCR
instead of Google Cloud. This helps the Sigstore team manage their cloud
spend (as GHCR is provided for free and Google Cloud Artifact Registry
is not).

Note the container hash does not change and images are posted to both
locations upon cosign's release process.
 2024-10-07 08:25:15 -03:00
dependabot[bot]
10980311a5
chore(deps): bump cachix/install-nix-action from 29 to 30 (#5169) 
Bumps
[cachix/install-nix-action](https://github.com/cachix/install-nix-action)
from 29 to 30.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cachix/install-nix-action/releases">cachix/install-nix-action's
releases</a>.</em></p>
<blockquote>
<h2>v30</h2>
<ul>
<li>Nix: 2.24.7 -&gt; 2.24.9, fixing <a
href="https://github.com/NixOS/nix/security/advisories/GHSA-6fjr-mq49-mm2c">GHSA-6fjr-mq49-mm2c</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="08dcb3a5e6"><code>08dcb3a</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/217">#217</a>
from Enzime/bump</li>
<li><a
href="4204e15198"><code>4204e15</code></a>
nix: 2.24.8 -&gt; 2.24.9</li>
<li><a
href="6a10e2e9fd"><code>6a10e2e</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/216">#216</a>
from Mic92/nix-bump</li>
<li><a
href="2bb614e91a"><code>2bb614e</code></a>
Nix: 2.24.7 -&gt; 2.24.8</li>
<li>See full diff in <a
href="https://github.com/cachix/install-nix-action/compare/v29...v30">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cachix/install-nix-action&package-manager=github_actions&previous-version=29&new-version=30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-04 13:58:41 -03:00
dependabot[bot]
2841417574
chore(deps): bump docker/setup-buildx-action from 3.7.0 to 3.7.1 (#5170) 2024-10-04 14:52:54 +00:00
dependabot[bot]
e62db3c9ba
chore(deps): bump github/codeql-action from 3.26.9 to 3.26.11 (#5171) 2024-10-04 14:43:41 +00:00
dependabot[bot]
8f1f86a660
chore(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 (#5163) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[codecov/codecov-action](https://github.com/codecov/codecov-action) from
4.5.0 to 4.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/codecov/codecov-action/releases">codecov/codecov-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1481">codecov/codecov-action#1481</a></li>
<li>build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1480">codecov/codecov-action#1480</a></li>
<li>build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1479">codecov/codecov-action#1479</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.13.0 to 7.13.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1485">codecov/codecov-action#1485</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 7.13.0 to 7.13.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1484">codecov/codecov-action#1484</a></li>
<li>build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1490">codecov/codecov-action#1490</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.13.1 to 7.14.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1493">codecov/codecov-action#1493</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 7.13.1 to 7.14.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1492">codecov/codecov-action#1492</a></li>
<li>build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1496">codecov/codecov-action#1496</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 7.14.1 to 7.15.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1501">codecov/codecov-action#1501</a></li>
<li>build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1500">codecov/codecov-action#1500</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.14.1 to 7.15.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1499">codecov/codecov-action#1499</a></li>
<li>build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1502">codecov/codecov-action#1502</a></li>
<li>build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1504">codecov/codecov-action#1504</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 7.15.0 to 7.16.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1503">codecov/codecov-action#1503</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1507">codecov/codecov-action#1507</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.15.0 to 7.16.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1505">codecov/codecov-action#1505</a></li>
<li>build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1509">codecov/codecov-action#1509</a></li>
<li>chore(ci): restrict scorecards to codecov/codecov-action by <a
href="https://github.com/thomasrockhu-codecov"><code>@​thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1512">codecov/codecov-action#1512</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 7.16.0 to 7.16.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1514">codecov/codecov-action#1514</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.16.0 to 7.16.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1513">codecov/codecov-action#1513</a></li>
<li>test: <code>versionInfo</code> by <a
href="https://github.com/marcobiedermann"><code>@​marcobiedermann</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1407">codecov/codecov-action#1407</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1515">codecov/codecov-action#1515</a></li>
<li>build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1516">codecov/codecov-action#1516</a></li>
<li>build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1521">codecov/codecov-action#1521</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.16.1 to 7.17.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1520">codecov/codecov-action#1520</a></li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
7.17.0 to 7.18.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1528">codecov/codecov-action#1528</a></li>
<li>build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1526">codecov/codecov-action#1526</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1525">codecov/codecov-action#1525</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1532">codecov/codecov-action#1532</a></li>
<li>build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1534">codecov/codecov-action#1534</a></li>
<li>build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1542">codecov/codecov-action#1542</a></li>
<li>build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1541">codecov/codecov-action#1541</a></li>
<li>ref: Tidy up types and remove string coercion by <a
href="https://github.com/nicholas-codecov"><code>@​nicholas-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1536">codecov/codecov-action#1536</a></li>
<li>build(deps-dev): bump <code>@​octokit/webhooks-types</code> from
3.77.1 to 7.5.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1545">codecov/codecov-action#1545</a></li>
<li>build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1551">codecov/codecov-action#1551</a></li>
<li>feat: pass tokenless value as branch override by <a
href="https://github.com/joseph-sentry"><code>@​joseph-sentry</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1511">codecov/codecov-action#1511</a></li>
<li>build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1563">codecov/codecov-action#1563</a></li>
<li>Create makefile.yml by <a
href="https://github.com/Hawthorne001"><code>@​Hawthorne001</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1555">codecov/codecov-action#1555</a></li>
<li>build(deps): bump github/codeql-action from 3.26.2 to 3.26.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1562">codecov/codecov-action#1562</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1557">codecov/codecov-action#1557</a></li>
<li>Spell <code>evenName</code> in the logs correctly by <a
href="https://github.com/webknjaz"><code>@​webknjaz</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1560">codecov/codecov-action#1560</a></li>
<li>build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1566">codecov/codecov-action#1566</a></li>
<li>build(deps-dev): bump <code>@​types/jest</code> from 29.5.12 to
29.5.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1567">codecov/codecov-action#1567</a></li>
<li>build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1569">codecov/codecov-action#1569</a></li>
<li>build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1571">codecov/codecov-action#1571</a></li>
<li>build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1575">codecov/codecov-action#1575</a></li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.1 to
0.38.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1577">codecov/codecov-action#1577</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b9fd7d16f6"><code>b9fd7d1</code></a>
chore(release):4.6.0 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1587">#1587</a>)</li>
<li><a
href="6f7612c64d"><code>6f7612c</code></a>
fix: bump eslint parser deps (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1586">#1586</a>)</li>
<li><a
href="26c7e28d7e"><code>26c7e28</code></a>
build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1583">#1583</a>)</li>
<li><a
href="6f744f78de"><code>6f744f7</code></a>
build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1584">#1584</a>)</li>
<li><a
href="543c3d42fc"><code>543c3d4</code></a>
chore: fix typo of OSS (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1578">#1578</a>)</li>
<li><a
href="e379426d37"><code>e379426</code></a>
build(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.1 to 0.38.2
(<a
href="https://redirect.github.com/codecov/codecov-action/issues/1577">#1577</a>)</li>
<li><a
href="42656e4cb1"><code>42656e4</code></a>
build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1575">#1575</a>)</li>
<li><a
href="2296b6ba9e"><code>2296b6b</code></a>
build(deps-dev): bump eslint from 8.57.0 to 8.57.1 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1571">#1571</a>)</li>
<li><a
href="bd77bc323c"><code>bd77bc3</code></a>
build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1569">#1569</a>)</li>
<li><a
href="180b964407"><code>180b964</code></a>
build(deps-dev): bump <code>@​types/jest</code> from 29.5.12 to 29.5.13
(<a
href="https://redirect.github.com/codecov/codecov-action/issues/1567">#1567</a>)</li>
<li>Additional commits viewable in <a
href="e28ff129e5...b9fd7d16f6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=4.5.0&new-version=4.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-03 14:38:28 -03:00