This allows to open pull requests across repositories on nix, brew, krew
and scoop.
closes#4048
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from
0.3.15 to 0.3.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/imdario/mergo/releases">github.com/imdario/mergo's
releases</a>.</em></p>
<blockquote>
<h2>Announcement: v1.0.0 will be released on June 18th</h2>
<p><em>This release doesn't contain code changes.</em></p>
<p>After 10 years, with many corner cases covered, very few issues
pending (at least, comparing them with the usage of the library as part
of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I
think it's time to release a 1.0.0 version.</p>
<p>This version will be released under a vanity URL: dario.cat/mergo</p>
<p>PS: although I'll make sure that github.com/imdario/mergo will be
available, I'm going to also change my GitHub handle, so expect for a
few minutes to not be able to pull from github.com/imdario as I fork it
from the new handle to the old one.</p>
<p>PS2: I'm creating a discussion for this release to make sure we can
have a conversation around the topic, and anything else about Mergo that
you care about.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="14fe2b165b"><code>14fe2b1</code></a>
fix: OpenSSF scorecard generation</li>
<li><a
href="4cde94b0b5"><code>4cde94b</code></a>
fix: remove Travis link and fix tests actions</li>
<li><a
href="df62a52b84"><code>df62a52</code></a>
chore: README and GitHub actions</li>
<li>See full diff in <a
href="https://github.com/imdario/mergo/compare/v0.3.15...v0.3.16">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- deprecates `--debug` in favor of `--verbose` which is clearer
- improved some debug log outputs
- docs: update documentation to always use the `release` subcommand
(when it makes sense)
add ko-generated manifests to the artifact list, this way they can be
signed later.
closes#4027
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Empty tag names will then be filtered out. This allows to have optional
tags depending on templates, for example,
`{{if not .Prerelease}}latest{{end}}`, among other use cases.
This already happens in the `dockers` section, and is now implemented in
`kos` too.
refs https://github.com/orgs/goreleaser/discussions/4042
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.3.4 to 2.3.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.3.5 - 25 May 2023</h2>
<ul>
<li>Allow invalid URIs to be used as values to
<code>artifactLocation.uri</code> properties. This reverses a change
from <a
href="https://redirect.github.com/github/codeql-action/pull/1668">#1668</a>
that inadvertently led to stricter validation of some URI values. <a
href="https://redirect.github.com/github/codeql-action/pull/1705">#1705</a></li>
<li>Gracefully handle invalid URIs when fingerprinting. <a
href="https://redirect.github.com/github/codeql-action/pull/1694">#1694</a></li>
</ul>
<h2>2.3.4 - 24 May 2023</h2>
<ul>
<li>Updated the SARIF 2.1.0 JSON schema file to the latest from <a
href="123e95847b/Schemata/sarif-schema-2.1.0.json">oasis-tcs/sarif-spec</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/1668">#1668</a></li>
<li>We are rolling out a feature in May 2023 that will disable Python
dependency installation for new users of the CodeQL Action. This
improves the speed of analysis while having only a very minor impact on
results. <a
href="https://redirect.github.com/github/codeql-action/pull/1676">#1676</a></li>
<li>We are improving the way that <a
href="https://github.com/github/codeql-action/releases">CodeQL
bundles</a> are tagged to make it possible to easily identify bundles by
their CodeQL semantic version. <a
href="https://redirect.github.com/github/codeql-action/pull/1682">#1682</a>
<ul>
<li>As of CodeQL CLI 2.13.4, CodeQL bundles will be tagged using
semantic versions, for example <code>codeql-bundle-v2.13.4</code>,
instead of timestamps, like <code>codeql-bundle-20230615</code>.</li>
<li>This change does not affect the majority of workflows, and we will
not be changing tags for existing bundle releases.</li>
<li>Some workflows with custom logic that depends on the specific format
of the CodeQL bundle tag may need to be updated. For example, if your
workflow matches CodeQL bundle tag names against a
<code>codeql-bundle-yyyymmdd</code> pattern, you should update it to
also recognize <code>codeql-bundle-vx.y.z</code> tags.</li>
</ul>
</li>
<li>Remove the requirement for <code>on.push</code> and
<code>on.pull_request</code> to trigger on the same branches. <a
href="https://redirect.github.com/github/codeql-action/pull/1675">#1675</a></li>
</ul>
<h2>2.3.3 - 04 May 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.1. <a
href="https://redirect.github.com/github/codeql-action/pull/1664">#1664</a></li>
<li>You can now configure CodeQL within your code scanning workflow by
passing a <code>config</code> input to the <code>init</code> Action. See
<a href="https://aka.ms/code-scanning-docs/config-file">Using a custom
configuration file</a> for more information about configuring code
scanning. <a
href="https://redirect.github.com/github/codeql-action/pull/1590">#1590</a></li>
</ul>
<h2>2.3.2 - 27 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.3.1 - 26 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.3.0 - 21 Apr 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.0. <a
href="https://redirect.github.com/github/codeql-action/pull/1649">#1649</a></li>
<li>Bump the minimum CodeQL bundle version to 2.8.5. <a
href="https://redirect.github.com/github/codeql-action/pull/1618">#1618</a></li>
</ul>
<h2>2.2.12 - 13 Apr 2023</h2>
<ul>
<li>Include the value of the <code>GITHUB_RUN_ATTEMPT</code> environment
variable in the telemetry sent to GitHub. <a
href="https://redirect.github.com/github/codeql-action/pull/1640">#1640</a></li>
<li>Improve the ease of debugging failed runs configured using <a
href="https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning-for-a-repository#configuring-code-scanning-automatically">default
setup</a>. The CodeQL Action will now upload diagnostic information to
Code Scanning from failed runs configured using default setup. You can
view this diagnostic information on the <a
href="https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-the-tool-status-page">tool
status page</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/1619">#1619</a></li>
</ul>
<h2>2.2.11 - 06 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.2.10 - 05 Apr 2023</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0225834cc5"><code>0225834</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1706">#1706</a>
from github/update-v2.3.5-d3314cca2</li>
<li><a
href="15f9b00614"><code>15f9b00</code></a>
Apply suggestions from code review</li>
<li><a
href="ff82fd0736"><code>ff82fd0</code></a>
Update changelog for v2.3.5</li>
<li><a
href="d3314cca22"><code>d3314cc</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1705">#1705</a>
from github/aeisenberg/location-uri-schema-fix</li>
<li><a
href="42add7b4d7"><code>42add7b</code></a>
Update changelog</li>
<li><a
href="9c5706e1a2"><code>9c5706e</code></a>
Avoid throwing validation error on invalid URIs</li>
<li><a
href="3912995667"><code>3912995</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1704">#1704</a>
from github/henrymercer/contributions-updates</li>
<li><a
href="8d7f61b8f2"><code>8d7f61b</code></a>
Update npm version</li>
<li><a
href="50bc388cfc"><code>50bc388</code></a>
Update Node version</li>
<li><a
href="4a409ace8f"><code>4a409ac</code></a>
Link to CONTRIBUTING doc from README</li>
<li>Additional commits viewable in <a
href="f0e3dfb303...0225834cc5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps
[cachix/install-nix-action](https://github.com/cachix/install-nix-action)
from 20 to 21.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cachix/install-nix-action/releases">cachix/install-nix-action's
releases</a>.</em></p>
<blockquote>
<h2>install-nix-action-v21</h2>
<ul>
<li>pin Nix to 2.15.1 (recent releases broke too many things)</li>
<li>fix the action to work on custom containers</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b933aa7eb"><code>4b933aa</code></a>
Nix: 2.15.1</li>
<li><a
href="35806937f1"><code>3580693</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/179">#179</a>
from joergdw/fix-action-path</li>
<li><a
href="3eb7a24508"><code>3eb7a24</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/178">#178</a>
from cachix/docs/149</li>
<li><a
href="840ed7ce9a"><code>840ed7c</code></a>
Document how to pass env vars to modern nix commands</li>
<li><a
href="b2f4229533"><code>b2f4229</code></a>
Fix action to make it work on custom containers;</li>
<li><a
href="e304541747"><code>e304541</code></a>
fix <a
href="https://redirect.github.com/cachix/install-nix-action/issues/170">#170</a></li>
<li><a
href="3988b729f9"><code>3988b72</code></a>
pin Nix to 2.15.0</li>
<li><a
href="763a380571"><code>763a380</code></a>
Bump revision in README</li>
<li><a
href="67e9fd765d"><code>67e9fd7</code></a>
bump revision in readme</li>
<li><a
href="be4cef7b77"><code>be4cef7</code></a>
Merge pull request <a
href="https://redirect.github.com/cachix/install-nix-action/issues/166">#166</a>
from l0b0/refactor/linting</li>
<li>Additional commits viewable in <a
href="https://github.com/cachix/install-nix-action/compare/v20...v21">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The lintian files were being written for every format, whether they were
a deb or not.
Since package name and arches are the same, and packaging runs in
parallel, it could happen that one goroutine is reading while the other
is writing, as we were guaranteeing uniquenes based on package name and
arch only.
This makes it only creates the lintian files when format is deb, so this
shouldn't happen anymore.
It also goes one step further by using the actual format in the filepath
instead of hard-coding "deb".
This also still supports tmux.
closes#4024
very, very, very WIP implementation of nixpkgs for GoReleaser.
**Decisions made for this first version:**
- only linux and darwin, arm64, 386 and amd64
- only support pkgs from goreleaser-generated archives
- no support to push into default nixpkgs repository
- no support to automatically add the _maybe_ new pkg to the root
`default.nix`
- the generated nixpkg will be rather verbose, which shouldn't be too
much of an issue as it is autogenerated anyway
**TODOs**:
- [x] macos universal binary support
- [x] custom pkg path (e.g. pkgs/misc/foo/bar/default.nix)
- [x] handle archives with a folder in them
- [x] add more options: postInstall, ??
**Will be handled in future versions**:
- [ ] archives.format=binary support
- [ ] compile from source
- [ ] PR-ing into nixpkgs
- [ ] armv6l-linux & armv7l-linux support
closes#3537
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.3.3 to 2.3.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.3.4 - 24 May 2023</h2>
<ul>
<li>Updated the SARIF 2.1.0 JSON schema file to the latest from <a
href="123e95847b/Schemata/sarif-schema-2.1.0.json">oasis-tcs/sarif-spec</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/1668">#1668</a></li>
<li>We are rolling out a feature in May 2023 that will disable Python
dependency installation for new users of the CodeQL Action. This
improves the speed of analysis while having only a very minor impact on
results. <a
href="https://redirect.github.com/github/codeql-action/pull/1676">#1676</a></li>
<li>We are improving the way that <a
href="https://github.com/github/codeql-action/releases">CodeQL
bundles</a> are tagged to make it possible to easily identify bundles by
their CodeQL semantic version. <a
href="https://redirect.github.com/github/codeql-action/pull/1682">#1682</a>
<ul>
<li>As of CodeQL CLI 2.13.4, CodeQL bundles will be tagged using
semantic versions, for example <code>codeql-bundle-v2.13.4</code>,
instead of timestamps, like <code>codeql-bundle-20230615</code>.</li>
<li>This change does not affect the majority of workflows, and we will
not be changing tags for existing bundle releases.</li>
<li>Some workflows with custom logic that depends on the specific format
of the CodeQL bundle tag may need to be updated. For example, if your
workflow matches CodeQL bundle tag names against a
<code>codeql-bundle-yyyymmdd</code> pattern, you should update it to
also recognize <code>codeql-bundle-vx.y.z</code> tags.</li>
</ul>
</li>
<li>Remove the requirement for <code>on.push</code> and
<code>on.pull_request</code> to trigger on the same branches. <a
href="https://redirect.github.com/github/codeql-action/pull/1675">#1675</a></li>
</ul>
<h2>2.3.3 - 04 May 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.1. <a
href="https://redirect.github.com/github/codeql-action/pull/1664">#1664</a></li>
<li>You can now configure CodeQL within your code scanning workflow by
passing a <code>config</code> input to the <code>init</code> Action. See
<a href="https://aka.ms/code-scanning-docs/config-file">Using a custom
configuration file</a> for more information about configuring code
scanning. <a
href="https://redirect.github.com/github/codeql-action/pull/1590">#1590</a></li>
</ul>
<h2>2.3.2 - 27 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.3.1 - 26 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.3.0 - 21 Apr 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.0. <a
href="https://redirect.github.com/github/codeql-action/pull/1649">#1649</a></li>
<li>Bump the minimum CodeQL bundle version to 2.8.5. <a
href="https://redirect.github.com/github/codeql-action/pull/1618">#1618</a></li>
</ul>
<h2>2.2.12 - 13 Apr 2023</h2>
<ul>
<li>Include the value of the <code>GITHUB_RUN_ATTEMPT</code> environment
variable in the telemetry sent to GitHub. <a
href="https://redirect.github.com/github/codeql-action/pull/1640">#1640</a></li>
<li>Improve the ease of debugging failed runs configured using <a
href="https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning-for-a-repository#configuring-code-scanning-automatically">default
setup</a>. The CodeQL Action will now upload diagnostic information to
Code Scanning from failed runs configured using default setup. You can
view this diagnostic information on the <a
href="https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-the-tool-status-page">tool
status page</a>. <a
href="https://redirect.github.com/github/codeql-action/pull/1619">#1619</a></li>
</ul>
<h2>2.2.11 - 06 Apr 2023</h2>
<p>No user facing changes.</p>
<h2>2.2.10 - 05 Apr 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.12.6. <a
href="https://redirect.github.com/github/codeql-action/pull/1629">#1629</a></li>
</ul>
<h2>2.2.9 - 27 Mar 2023</h2>
<ul>
<li>Customers post-processing the SARIF output of the
<code>analyze</code> Action before uploading it to Code Scanning will
benefit from an improved debugging experience. <a
href="https://redirect.github.com/github/codeql-action/pull/1598">#1598</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f0e3dfb303"><code>f0e3dfb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1700">#1700</a>
from github/update-v2.3.4-570734c55</li>
<li><a
href="0d65621757"><code>0d65621</code></a>
Update CHANGELOG.md</li>
<li><a
href="c3ae9dcd15"><code>c3ae9dc</code></a>
Update changelog for v2.3.4</li>
<li><a
href="570734c55c"><code>570734c</code></a>
Remove unnecessary conditional for Ruby autodetect (<a
href="https://redirect.github.com/github/codeql-action/issues/1699">#1699</a>)</li>
<li><a
href="8c923c00a3"><code>8c923c0</code></a>
Fix Swift PR Checks on <code>nightly-latest</code> CLI (<a
href="https://redirect.github.com/github/codeql-action/issues/1696">#1696</a>)</li>
<li><a
href="1245696032"><code>1245696</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1687">#1687</a>
from github/henrymercer/update-changelog-note</li>
<li><a
href="317cd34a7a"><code>317cd34</code></a>
Push back semver CodeQL bundles</li>
<li><a
href="6cfb483131"><code>6cfb483</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1682">#1682</a>
from github/henrymercer/semver-bundles</li>
<li><a
href="a5f4123fb0"><code>a5f4123</code></a>
Improve changelog note</li>
<li><a
href="50931b43dd"><code>50931b4</code></a>
Add changelog note</li>
<li>Additional commits viewable in <a
href="29b1f65c5e...f0e3dfb303">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.28.0 to 2.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.29.0</h2>
<h2>Changelog</h2>
<h3>Security updates</h3>
<ul>
<li>ed9abdf63d5012cc884f2a83b4ab2b42b3680d30: sec: fix for
CVE-2023-32698 (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>9ac328846c8b562562c6edfa910f3163ddbe4adc: fix: deb arm64 (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>312fd85338c26a44d330ed07f318d0640a11dcbb: fix: improve goarch to pkg
conversion (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>f64a311eefea340cd3f20cd4568de41b4c5e9aa6: fix: improve umask tests
and documentation (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>b1f3fef606dd1106ca163e5c7f4da0023f308c96: fix: md5sums entries and
lintian errors/warnings (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/656">#656</a>)
(<a href="https://github.com/malaupa"><code>@malaupa</code></a>)</li>
<li>c20618cdd39ed938f9bf9b97461ce830429fa60c: fix: mips architecture (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>9524bb8a26d3915e84a4df956d2ec064e836c4a3: fix: mips
softfloat/hardfloat handling (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
</ul>
<h3>Dependency updates</h3>
<ul>
<li>c2f47813a3d824bef5c3455669bd9b50081b89fc: feat(deps): bump
github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/649">#649</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
<li>c24e1b4d99a451a1e023565b2930bc5512224c0e: feat(deps): bump
github.com/klauspost/compress from 1.16.3 to 1.16.4 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/646">#646</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
<li>fccdae5dfcb9214ec38d631628074e1c129c204d: feat(deps): bump
github.com/klauspost/compress from 1.16.4 to 1.16.5 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/651">#651</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
<li>a1fb0477f0f57fde4d673bee8afb8a20273eb7af: feat(deps): bump
github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/654">#654</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
<li>561c39b135794aefb877769910e322d614b20d9d: feat(deps): bump
github.com/stretchr/testify from 1.8.2 to 1.8.3 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/661">#661</a>)
(<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot])</li>
</ul>
<h3>Build process updates</h3>
<ul>
<li>4593dcb36ae178ccb5e6514b93499bf81d70529e: build: improve changelog
(<a href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>e01884ecba1964027fa87bbdb9bf5341408b2ef7: build: improve release
notes (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>ab59aadf2347b47379cc6c764c00f4e3a5d196e6: docs: fix schema.json URL
(<a href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>590a3ff6f78deeca9bc6803518a173e53c3e65f9: docs: fix verify
instructions (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/647">#647</a>)
(<a href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>dce0853e6360835e450db726a3c13e0886f7aad6: docs: goarch to packager
(<a href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>2b9864a79ed85b4818d1ae1fa3cdfd76a3f8e4f7: docs: update SECURITY.md
(<a href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>858b78b7c12cf9b54a79956655ef8acf3207e3c4: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
<li>1ba5a445d794977df0ee19ec333b36562f2b0e94: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0">https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0</a></p>
<h2>Helping out</h2>
<p>This release is only possible thanks to <strong>all</strong> the
support of <strong>awesome people</strong>!</p>
<p>Want to be one of them?
You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a
href="https://goreleaser.com/contributing">contribute with code</a>.</p>
<h2>Where to go next?</h2>
<ul>
<li>nFPM is a satellite project from GoReleaser. <a
href="https://goreleaser.com">Check it out</a>!</li>
<li>Find examples and commented usage of all options in our <a
href="https://nfpm.goreleaser.com/">website</a>.</li>
<li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and
<a href="https://twitter.com/goreleaser">Twitter</a>!</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ed9abdf63d"><code>ed9abdf</code></a>
sec: fix for CVE-2023-32698</li>
<li><a
href="4593dcb36a"><code>4593dcb</code></a>
build: improve changelog</li>
<li><a
href="e01884ecba"><code>e01884e</code></a>
build: improve release notes</li>
<li><a
href="f6f8048d47"><code>f6f8048</code></a>
test: stabilize arch test</li>
<li><a
href="7d6a77bee6"><code>7d6a77b</code></a>
test: fix arch tests</li>
<li><a
href="815b388464"><code>815b388</code></a>
test: fix</li>
<li><a
href="9524bb8a26"><code>9524bb8</code></a>
fix: mips softfloat/hardfloat handling</li>
<li><a
href="a8c16744a1"><code>a8c1674</code></a>
test: fix files test</li>
<li><a
href="66c3d277cf"><code>66c3d27</code></a>
test: fixes</li>
<li><a
href="f64a311eef"><code>f64a311</code></a>
fix: improve umask tests and documentation</li>
<li>Additional commits viewable in <a
href="https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.4 to 0.16.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="125d0727da"><code>125d072</code></a>
fix unmarshalling & marshalling of InteractionChannel</li>
<li><a
href="67ddd7c006"><code>67ddd7c</code></a>
change Interaction.Channel from PartialChannel to
InteractionChannel</li>
<li><a
href="3eb45b6149"><code>3eb45b6</code></a>
fix nil pointer on user leaving voice channel and no audioReceiver being
setup</li>
<li><a
href="554e2695e2"><code>554e269</code></a>
add GatewayMessageDataUnknown & don't error on unknown voice gateway
message</li>
<li><a
href="6b794ba092"><code>6b794ba</code></a>
rename BoostProgressBarEnabled to PremiumProgressBarEnabled</li>
<li><a
href="c3f2beb13f"><code>c3f2beb</code></a>
add Stickers to GuildPreview</li>
<li><a
href="6cda94940a"><code>6cda949</code></a>
Add raid protection (<a
href="https://redirect.github.com/disgoorg/disgo/issues/223">#223</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.4...v0.16.5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.8.2 to 1.8.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4c93d8f201"><code>4c93d8f</code></a>
EqualExportedValues: Handle nested pointer, slice and map fields (<a
href="https://redirect.github.com/stretchr/testify/issues/1379">#1379</a>)</li>
<li><a
href="4b2f4d2bcf"><code>4b2f4d2</code></a>
add EventuallyWithT assertion (<a
href="https://redirect.github.com/stretchr/testify/issues/1264">#1264</a>)</li>
<li><a
href="b3106d772c"><code>b3106d7</code></a>
allow testing for functional options (<a
href="https://redirect.github.com/stretchr/testify/issues/1023">#1023</a>)</li>
<li><a
href="437071b948"><code>437071b</code></a>
assert: fix error message formatting for NotContains (<a
href="https://redirect.github.com/stretchr/testify/issues/1362">#1362</a>)</li>
<li><a
href="c5fc9d6b6b"><code>c5fc9d6</code></a>
Compare public elements of struct (<a
href="https://redirect.github.com/stretchr/testify/issues/1309">#1309</a>)</li>
<li>See full diff in <a
href="https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Adjust the logging of warnings for unmatched globs to only show when the
glob is not a default. No warning will be output for the default globs
when there are no matching files.
These are defaults, by design, very generic.
We should not warn the user about them not finding anything, as that is
their expected behavior most of the time.
If you run `goreleaser build --single-target` with
`universalbinaries[*].replace = true` on a mac, it'll break.
This fixes it by disabling universal binaries when building a single
target.
It isn't useful anyway.
Closes#4004
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Bumps golang from `913de96` to `ee2f23f`.
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
