1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-14 03:51:24 +02:00
Commit Graph

6111 Commits

Author SHA1 Message Date
Jun Xiang (カエデ)
46b3d88ae5
docs: Add GH Actions OIDC permission docs (#5137)
## What is this?

Just adding documentation for using cosign with GitHub's OIDC in CI.

## Why?

I spent 4 hours looking through goreleaser and GitHub's docs before I
finally discovered I was missing the `id-token: write` permission in my
workflow file.

This PR serves to just include the `id-token: write` scope in the `CI ->
(GH) actions` section of the docs to hopefully save other devs the
trouble 🤣

### Additional

I also considered adding this to docs for the other CI providers, but I
am not too familiar on the OIDC side of things; might be worth
considering for the team?

Cheers

---

Been using goreleaser for one of my [oss
projects](https://github.com/caffeine-addictt/waku) recently and it's
been great! Just wanted to contribute something back, keep up the great
work! :>

Signed-off-by: AlexNg <contact@ngjx.org>
2024-09-13 13:21:23 -03:00
Carlos Alexandro Becker
586ce73ddb
docs: announce v2.3 (#5134)
prepping
2024-09-12 16:47:02 -03:00
Carlos Alexandro Becker
3149a36750
docs: update schema
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-12 16:46:46 -03:00
Carlos Alexandro Becker
9f485838a3
Merge remote-tracking branch 'origin/main' 2024-09-12 16:45:05 -03:00
Carlos Alexandro Becker
c7e5038077
fix: jsonschema 2024-09-12 16:44:44 -03:00
actions-user
34974df0c6 chore: auto-update generated files 2024-09-12 19:43:42 +00:00
Carlos Alexandro Becker
a9f07ef2ea
docs: fix wrong links 2024-09-12 14:26:40 -03:00
Carlos Alexandro Becker
1014db44ff
docs: update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-12 13:21:01 -03:00
Andrej Giesbrecht
377ced6577
feat: add upx to our docker images (#5131)
I like to use the goreleaser for my private project and would like to
have the binary scaled down with the UPX in the GitLab build pipeline.
Therefore, it would be nice if the UPX tool is pre-installed in the
Docker container.

Signed-off-by: Andrej Giesbrecht <giesan@gmx.net>
2024-09-12 11:24:54 -03:00
dependabot[bot]
0c5e4fd336
chore(deps): bump golang.org/x/tools from 0.24.0 to 0.25.0 (#5129)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.24.0
to 0.25.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7398f36f57"><code>7398f36</code></a>
all: fix some symbols error in comment</li>
<li><a
href="f111c72426"><code>f111c72</code></a>
go/callgraph/rta: skip test on js platform</li>
<li><a
href="9f9b7e39b5"><code>9f9b7e3</code></a>
gopls/internal/settings: add missing deep cloning in Options.Clone</li>
<li><a
href="ce7eed4960"><code>ce7eed4</code></a>
doc/generate: minor cleanup</li>
<li><a
href="075ae7d276"><code>075ae7d</code></a>
go/callgraph/vta: add basic tests for range-over-func</li>
<li><a
href="2c7aaab748"><code>2c7aaab</code></a>
go/ssa: skip failing test</li>
<li><a
href="1b5663fbc8"><code>1b5663f</code></a>
go/callgraph/vta: perform minor cleanups</li>
<li><a
href="0a498831d1"><code>0a49883</code></a>
gopls/go.mod: update the go directive to 1.23.1</li>
<li><a
href="ad366a81ee"><code>ad366a8</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="4fb36d15cc"><code>4fb36d1</code></a>
go/callgraph/rta: add rta analysis test case for multiple go
packages</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.24.0...v0.25.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.24.0&new-version=0.25.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-10 09:26:10 -03:00
Carlos Alexandro Becker
5495b670ae
chore(deps): update nfpm
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-09 22:31:32 -03:00
Julien Salleyron
40668d4382
fix(build): c-shared build and release when target is wasm (#5128)
This commit fixes the automatic extension when building the wasip1_wasm
target.

Additionally, in future Go versions, support will be added for
generating c-shared WASM binaries.
https://github.com/golang/go/issues/65199


Therefore, this PR corrects the extension in the build process and
removes the .h file from the release when c-shared is enabled and the
target is WASM.
2024-09-09 22:25:54 -03:00
Carlos Alexandro Becker
04dfb72d57
fix(brew): version and os not being considered
closes #5123

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-09 22:25:21 -03:00
dependabot[bot]
4200454d4e
chore(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.12.0 to 2.13.0 (#5124)
Bumps
[github.com/atc0005/go-teams-notify/v2](https://github.com/atc0005/go-teams-notify)
from 2.12.0 to 2.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/releases">github.com/atc0005/go-teams-notify/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.13.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Add MSTeams CodeBlock element by <a
href="https://github.com/MichaelUrman"><code>@​MichaelUrman</code></a>
in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/293">atc0005/go-teams-notify#293</a></li>
<li>Update documentation for CodeBlock element by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/298">atc0005/go-teams-notify#298</a></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Update CHANGELOG for v2.13.0 release by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/300">atc0005/go-teams-notify#300</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/MichaelUrman"><code>@​MichaelUrman</code></a>
made their first contribution in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/293">atc0005/go-teams-notify#293</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.12.0...v2.13.0">https://github.com/atc0005/go-teams-notify/compare/v2.12.0...v2.13.0</a></p>
<h2>v2.13.0-rc.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Add MSTeams CodeBlock element by <a
href="https://github.com/MichaelUrman"><code>@​MichaelUrman</code></a>
in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/293">atc0005/go-teams-notify#293</a></li>
<li>Update documentation for CodeBlock element by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/298">atc0005/go-teams-notify#298</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/MichaelUrman"><code>@​MichaelUrman</code></a>
made their first contribution in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/293">atc0005/go-teams-notify#293</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.12.0...v2.13.0-rc.1">https://github.com/atc0005/go-teams-notify/compare/v2.12.0...v2.13.0-rc.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">github.com/atc0005/go-teams-notify/v2's
changelog</a>.</em></p>
<blockquote>
<h2>[v2.13.0] - 2024-09-08</h2>
<h3>Added</h3>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/293">GH-293</a>)
Add MSTeams CodeBlock element
<ul>
<li>credit: <a
href="https://github.com/MichaelUrman"><code>@​MichaelUrman</code></a></li>
</ul>
</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/298">GH-298</a>)
Update documentation for CodeBlock element</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="885b9d1882"><code>885b9d1</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/300">#300</a>
from atc0005/update-changelog-for-v2.13.0-release</li>
<li><a
href="7af366f7b6"><code>7af366f</code></a>
Update CHANGELOG for v2.13.0 release</li>
<li><a
href="6ac6dc041d"><code>6ac6dc0</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/298">#298</a>
from atc0005/i288-codeblock-tweaks</li>
<li><a
href="05de9cafeb"><code>05de9ca</code></a>
Update documentation for CodeBlock element</li>
<li><a
href="c0d6d3e68e"><code>c0d6d3e</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/293">#293</a>
from MichaelUrman/codeblock</li>
<li><a
href="f91f9e37cf"><code>f91f9e3</code></a>
Add MSTeams CodeBlock element</li>
<li>See full diff in <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.12.0...v2.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/atc0005/go-teams-notify/v2&package-manager=go_modules&previous-version=2.12.0&new-version=2.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 11:59:57 -03:00
dependabot[bot]
87d16953f7
chore(deps): bump github.com/xanzy/go-gitlab from 0.108.0 to 0.109.0 (#5125)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.108.0 to 0.109.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.109.0</h2>
<h2>Breaking Changes</h2>
<ul>
<li>Extend support for groups service accounts by <a
href="https://github.com/mXtone"><code>@​mXtone</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2005">xanzy/go-gitlab#2005</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Add endpoint to lists invited groups of a project by <a
href="https://github.com/habnux"><code>@​habnux</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2000">xanzy/go-gitlab#2000</a></li>
<li>Update jira integration pt2 by <a
href="https://github.com/deepflame"><code>@​deepflame</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1999">xanzy/go-gitlab#1999</a></li>
<li>chore: add ReportType to ProjectApprovalRule by <a
href="https://github.com/mdevilliers"><code>@​mdevilliers</code></a> in
<a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2001">xanzy/go-gitlab#2001</a></li>
<li>Bug: Needs to be a list of ProjectGroup by <a
href="https://github.com/habnux"><code>@​habnux</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2003">xanzy/go-gitlab#2003</a></li>
<li>Fix an issue with omitempty on default_branch_protection_defaults by
<a href="https://github.com/RicePatrick"><code>@​RicePatrick</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2004">xanzy/go-gitlab#2004</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/habnux"><code>@​habnux</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2000">xanzy/go-gitlab#2000</a></li>
<li><a href="https://github.com/mXtone"><code>@​mXtone</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/2005">xanzy/go-gitlab#2005</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.108.0...v0.109.0">https://github.com/xanzy/go-gitlab/compare/v0.108.0...v0.109.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="afb6163548"><code>afb6163</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2005">#2005</a>
from mXtone/main</li>
<li><a
href="21134f2576"><code>21134f2</code></a>
Fix typos for list methods - groups service accounts</li>
<li><a
href="291685b89b"><code>291685b</code></a>
Add support for groups service accounts</li>
<li><a
href="658c4fd474"><code>658c4fd</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2004">#2004</a>
from RicePatrick/fix-default-branch-typo</li>
<li><a
href="f1d37ee623"><code>f1d37ee</code></a>
Fix an issue with omitempty on default_branch_protection_defaults</li>
<li><a
href="6b15a3b4a5"><code>6b15a3b</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2003">#2003</a>
from habnux/main</li>
<li><a
href="a43dcb24e4"><code>a43dcb2</code></a>
Switch to list</li>
<li><a
href="fa3f0b2114"><code>fa3f0b2</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/2001">#2001</a>
from mdevilliers/add_missing_rule_types</li>
<li><a
href="e9e9ee8722"><code>e9e9ee8</code></a>
chore: add RuleType to ProjectApprovalRule</li>
<li><a
href="315e1c6d75"><code>315e1c6</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1999">#1999</a>
from deepflame/feature/update-jira-integration</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.108.0...v0.109.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.108.0&new-version=0.109.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 11:59:44 -03:00
dependabot[bot]
826a150597
chore(deps): bump golang from 1.23.0-alpine to 1.23.1-alpine (#5126)
Bumps golang from 1.23.0-alpine to 1.23.1-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.23.0-alpine&new-version=1.23.1-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 11:59:24 -03:00
Carlos Alexandro Becker
ed866f0531
docs: since 2024-09-07 11:19:56 -03:00
Carlos Alexandro Becker
c2c0403ddc
chore(docs): schema update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-07 11:19:06 -03:00
Carlos Alexandro Becker
708cd8904d
feat(ko): snapshot builds (#5116)
this makes ko run on snapshot builds, too.

the image will be `goreleaser.ko.local:[your tags]`, not sure if we can
change this, seems like we can't.

also fixed a small doc error around it, as well as added a new test to
cover this.

closes #4683

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-07 11:15:48 -03:00
Carlos Alexandro Becker
e8da87cecb
feat(tmpl): IsSingleTarget (#5122)
refs #5024

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-07 11:09:21 -03:00
Carlos Alexandro Becker
301b193e6e
feat(build): templateable no_unique_dist_dir (#5115)
closes https://github.com/goreleaser/goreleaser/issues/5024

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-07 11:09:06 -03:00
dependabot[bot]
2d3b737d03
chore(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 (#5117) 2024-09-06 13:01:33 +00:00
dependabot[bot]
ae5ca2c022
chore(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0 (#5121) 2024-09-06 12:52:07 +00:00
Carlos Alexandro Becker
96c87fff72
fix: build --single-target filters (#5114)
make them more precise, as its currently only taking GOOS/GOARCH into
account, and we can do more.

closes #5112

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-04 10:10:27 -03:00
Carlos Alexandro Becker
f203105bb9
fix(deps): not sure why we were using a rc version of runc
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-09-03 22:34:01 -03:00
Carlos Alexandro Becker
05c79c9dfc
test: check if pre-requisites are installed (#5109)
closes #5104
2024-09-03 20:39:33 -03:00
Carlos Alexandro Becker
83ce50237c
chore: update nix 2024-09-03 19:57:29 -03:00
Carlos Alexandro Becker
edaf931ad1
docs: improve git semver sorting pro warning
closes #5110
2024-09-03 19:57:07 -03:00
dependabot[bot]
00f237aa6e
chore(deps): bump github/codeql-action from 3.26.5 to 3.26.6 (#5108)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.5 to 3.26.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.6 - 29 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2449">#2449</a></li>
</ul>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4dd16135b6"><code>4dd1613</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2452">#2452</a>
from github/update-v3.26.6-7233ec5e6</li>
<li><a
href="dd9dd2d538"><code>dd9dd2d</code></a>
Update changelog for v3.26.6</li>
<li><a
href="7233ec5e6b"><code>7233ec5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2449">#2449</a>
from github/update-bundle/codeql-bundle-v2.18.3</li>
<li><a
href="a32c44dba1"><code>a32c44d</code></a>
Add changelog note</li>
<li><a
href="2966897c67"><code>2966897</code></a>
Update default bundle to codeql-bundle-v2.18.3</li>
<li><a
href="b8efe4dc6a"><code>b8efe4d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2435">#2435</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="ab408a875b"><code>ab408a8</code></a>
Merge branch 'main' into
update-supported-enterprise-server-versions</li>
<li><a
href="864b979bc3"><code>864b979</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2443">#2443</a>
from github/dbartol/config-file-telemetry</li>
<li><a
href="d36c7aaf6a"><code>d36c7aa</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2448">#2448</a>
from github/dependabot/npm_and_yarn/npm-09b7c43f6b</li>
<li><a
href="b3bf514df4"><code>b3bf514</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="2c779ab0d0...4dd16135b6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.5&new-version=3.26.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-30 17:03:52 -03:00
Tom Payne
3a36a49984
chore: fix linter errors (#5111)
If applied, this commit will fix the current linter errors, which are
currently causing all Github Actions to fail.

See, for example, the latest `main` run:
https://github.com/goreleaser/goreleaser/actions/runs/10607661596/job/29400451251.
2024-08-30 17:03:10 -03:00
Carlos Alexandro Becker
599ce44c74
test: do not fail if missing binaries (#5107)
closes #5104

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-28 23:30:22 -03:00
Manuel Rüger
6272ce0e6d
fix: Handle error on failed release (github) (#5106)
When trying to release an artifact to github and it fails, I observed
the following stacktrace:
```
• publishing
    • scm releases
      • releasing                                    tag=v1.11.0 repo=my-github-repo
      • could not check rate limits, hoping for the best...
      • could not check rate limits, hoping for the best...
      • took: 1m40s
  • took: 1m40s
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe28b72]
goroutine 55 [running]:
github.com/goreleaser/goreleaser/v2/internal/client.(*githubClient).createOrUpdateRelease(0xc0001b24c8, 0xc0002c5108, 0xc000b478, {0xc00039ed00, 0x80e})
	github.com/goreleaser/goreleaser/v2@v2.2.0/internal/client/github.go:454 +0x3b2
github.com/goreleaser/goreleaser/v2/internal/client.(*githubClient).CreateRelease(0xc0001b24c8, 0xc0002c5108, {0xc00039ed00, 0x80e})
	github.com/goreleaser/goreleaser/v2@v2.2.0/internal/client/github.go:402 +0x339
github.com/goreleaser/goreleaser/v2/internal/pipe/release.doPublish(0xc0002c5108, {0x2ce2d40, 0xc0001b24c8})
...
```

I believe this happens because if the
[CreateRelease](c96ef954c3/github/repos_releases.go (L221))
fails, resp might be empty and the resp.Header does not exist, which
causes a segfault.
```
WithField("request-id", resp.Header.Get("X-GitHub-Request-Id")).
```

Signed-off-by: Manuel Rüger <manuel@rueg.eu>
2024-08-29 00:32:27 +00:00
Carlos Alexandro Becker
5a10792f7e
chore(deps): update go-github
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-28 11:29:50 -03:00
dependabot[bot]
5928b4fb5a
chore(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 (#5105)
Bumps
[github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver)
from 3.2.1 to 3.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/releases">github.com/Masterminds/semver/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix: bad package in README by <a
href="https://github.com/sdelicata"><code>@​sdelicata</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/226">Masterminds/semver#226</a></li>
<li>Updating the GitHub Actions and versions of Go used by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/229">Masterminds/semver#229</a></li>
<li>Fix spelling in README by <a
href="https://github.com/robinschneider"><code>@​robinschneider</code></a>
in <a
href="https://redirect.github.com/Masterminds/semver/pull/222">Masterminds/semver#222</a></li>
<li>Adding go build cache to fuzz output by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/232">Masterminds/semver#232</a></li>
<li>Add caching to fuzz testing by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/234">Masterminds/semver#234</a></li>
<li>updating github actions by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/235">Masterminds/semver#235</a></li>
<li>feat: nil version equality by <a
href="https://github.com/KnutZuidema"><code>@​KnutZuidema</code></a> in
<a
href="https://redirect.github.com/Masterminds/semver/pull/213">Masterminds/semver#213</a></li>
<li>add &gt;= and &lt;= by <a
href="https://github.com/grosser"><code>@​grosser</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/238">Masterminds/semver#238</a></li>
<li>doc: hyphen range constraint without whitespace by <a
href="https://github.com/johnnychen94"><code>@​johnnychen94</code></a>
in <a
href="https://redirect.github.com/Masterminds/semver/pull/216">Masterminds/semver#216</a></li>
<li>Removing reference to vert by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/245">Masterminds/semver#245</a></li>
<li>simplify StrictNewVersion by <a
href="https://github.com/grosser"><code>@​grosser</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/241">Masterminds/semver#241</a></li>
<li>Updating the testing version of Go used by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/246">Masterminds/semver#246</a></li>
<li>bumping min version in go.mod based on what's tested by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/248">Masterminds/semver#248</a></li>
<li>Updating changelog for 3.3.0 by <a
href="https://github.com/mattfarina"><code>@​mattfarina</code></a> in <a
href="https://redirect.github.com/Masterminds/semver/pull/249">Masterminds/semver#249</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/sdelicata"><code>@​sdelicata</code></a>
made their first contribution in <a
href="https://redirect.github.com/Masterminds/semver/pull/226">Masterminds/semver#226</a></li>
<li><a
href="https://github.com/robinschneider"><code>@​robinschneider</code></a>
made their first contribution in <a
href="https://redirect.github.com/Masterminds/semver/pull/222">Masterminds/semver#222</a></li>
<li><a
href="https://github.com/KnutZuidema"><code>@​KnutZuidema</code></a>
made their first contribution in <a
href="https://redirect.github.com/Masterminds/semver/pull/213">Masterminds/semver#213</a></li>
<li><a href="https://github.com/grosser"><code>@​grosser</code></a> made
their first contribution in <a
href="https://redirect.github.com/Masterminds/semver/pull/238">Masterminds/semver#238</a></li>
<li><a
href="https://github.com/johnnychen94"><code>@​johnnychen94</code></a>
made their first contribution in <a
href="https://redirect.github.com/Masterminds/semver/pull/216">Masterminds/semver#216</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Masterminds/semver/compare/v3.2.1...v3.3.0">https://github.com/Masterminds/semver/compare/v3.2.1...v3.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/blob/master/CHANGELOG.md">github.com/Masterminds/semver/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.3.0 (2024-08-27)</h2>
<h3>Added</h3>
<ul>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/238">#238</a>:
Add LessThanEqual and GreaterThanEqual functions (thanks <a
href="https://github.com/grosser"><code>@​grosser</code></a>)</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/213">#213</a>:
nil version equality checking (thanks <a
href="https://github.com/KnutZuidema"><code>@​KnutZuidema</code></a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/241">#241</a>:
Simplify StrictNewVersion parsing (thanks <a
href="https://github.com/grosser"><code>@​grosser</code></a>)</li>
<li>Testing support up through Go 1.23</li>
<li>Minimum version set to 1.21 as this is what's tested now</li>
<li>Fuzz testing now supports caching</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e6e3d4d3cb"><code>e6e3d4d</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/249">#249</a>
from mattfarina/update-changelog-3.3.0</li>
<li><a
href="e80c4ea723"><code>e80c4ea</code></a>
Updating changelog for 3.3.0</li>
<li><a
href="80427ad56e"><code>80427ad</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/248">#248</a>
from mattfarina/bump-min-version</li>
<li><a
href="b610837227"><code>b610837</code></a>
bumping min version in go.mod based on what's tested</li>
<li><a
href="a4cccd8ea5"><code>a4cccd8</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/246">#246</a>
from mattfarina/bump-go-1.23</li>
<li><a
href="7c178cf0c6"><code>7c178cf</code></a>
Updating the testing version of Go used</li>
<li><a
href="29f94c1119"><code>29f94c1</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/241">#241</a>
from grosser/grosser/validate</li>
<li><a
href="2cf1b16b95"><code>2cf1b16</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/245">#245</a>
from mattfarina/remove-vert</li>
<li><a
href="b55476af0e"><code>b55476a</code></a>
Removing reference to vert</li>
<li><a
href="d07450b7cf"><code>d07450b</code></a>
simplify StrictNewVersion</li>
<li>Additional commits viewable in <a
href="https://github.com/Masterminds/semver/compare/v3.2.1...v3.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Masterminds/semver/v3&package-manager=go_modules&previous-version=3.2.1&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-28 11:26:33 -03:00
Nicolás Parada
a9e0a8f112
fix(build): ignore empty flags after templating (#5103)
Ignore empty flags after templating is applied for final Go build line.

This caused us some problems since we had an `if` without `else`,
resulting in an empty flag, causing the whole build to fail with a
misleading error message like:

```
malformed import path "-myflag": leading dash
```
2024-08-27 09:06:27 -03:00
dependabot[bot]
69e2d8f45a
chore(deps): bump github.com/xanzy/go-gitlab from 0.107.0 to 0.108.0 (#5101)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.107.0 to 0.108.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/xanzy/go-gitlab/releases">github.com/xanzy/go-gitlab's
releases</a>.</em></p>
<blockquote>
<h2>v0.108.0</h2>
<h2>Breaking Changes</h2>
<ul>
<li>Get scoped group variables by <a
href="https://github.com/andersparslov"><code>@​andersparslov</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1995">xanzy/go-gitlab#1995</a></li>
<li>Rename GroupId to GroupID in the <code>MemberRole</code> and
<code>Iteration</code> structs <a
href="f97a106073">f97a106</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Adds <code>HookEventToken</code> helper function for X-Gitlab-Token
by <a href="https://github.com/MaerF0x0"><code>@​MaerF0x0</code></a> in
<a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1976">xanzy/go-gitlab#1976</a></li>
<li>Add <code>ContainerRegistrySize</code> field to
<code>Statistics</code> struct by <a
href="https://github.com/Florian3535"><code>@​Florian3535</code></a> in
<a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1978">xanzy/go-gitlab#1978</a></li>
<li>chore: add report type to MergeRequestApprovalRule by <a
href="https://github.com/mdevilliers"><code>@​mdevilliers</code></a> in
<a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1975">xanzy/go-gitlab#1975</a></li>
<li>Add field &quot;is_auditor&quot; in user by <a
href="https://github.com/thomasboni"><code>@​thomasboni</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1981">xanzy/go-gitlab#1981</a></li>
<li>Fix the user tests by <a
href="https://github.com/svanharmelen"><code>@​svanharmelen</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1982">xanzy/go-gitlab#1982</a></li>
<li>Add new DCO attribute to project and group push rules by <a
href="https://github.com/beekeep"><code>@​beekeep</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1980">xanzy/go-gitlab#1980</a></li>
<li>Support more options for list PATs by <a
href="https://github.com/hjweddie"><code>@​hjweddie</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1977">xanzy/go-gitlab#1977</a></li>
<li>feat: add Bitbucket Cloud and Server import endpoints by <a
href="https://github.com/pwlandoll"><code>@​pwlandoll</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1979">xanzy/go-gitlab#1979</a></li>
<li>Expose PreReceiveSecretDetectionEnabled project setting by <a
href="https://github.com/gravis"><code>@​gravis</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1984">xanzy/go-gitlab#1984</a></li>
<li>Add 15 Missing GitLab Settings by <a
href="https://github.com/Jitsusama"><code>@​Jitsusama</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1985">xanzy/go-gitlab#1985</a></li>
<li>Add <code>prevent_merge_without_jira_issue</code> to Edit Project
API by <a href="https://github.com/mtibben"><code>@​mtibben</code></a>
in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1986">xanzy/go-gitlab#1986</a></li>
<li>build(github): Added support for more versions of unit tests by <a
href="https://github.com/flc1125"><code>@​flc1125</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1992">xanzy/go-gitlab#1992</a></li>
<li>Move PreReceiveSecretDetectionEnabled to Project by <a
href="https://github.com/gravis"><code>@​gravis</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1989">xanzy/go-gitlab#1989</a></li>
<li>Add 26 Missing GitLab Settings by <a
href="https://github.com/Jitsusama"><code>@​Jitsusama</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1987">xanzy/go-gitlab#1987</a></li>
<li>Add page token to ListOption by <a
href="https://github.com/0xDagal"><code>@​0xDagal</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1994">xanzy/go-gitlab#1994</a></li>
<li>member role model follow 17.4.0 spec by <a
href="https://github.com/Quanalogy"><code>@​Quanalogy</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1997">xanzy/go-gitlab#1997</a></li>
<li>Add more filters to List group milestones by <a
href="https://github.com/adamcohen2"><code>@​adamcohen2</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1998">xanzy/go-gitlab#1998</a></li>
<li>Add 28 Missing GitLab Settings by <a
href="https://github.com/Jitsusama"><code>@​Jitsusama</code></a> in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1996">xanzy/go-gitlab#1996</a></li>
<li>Add an exponential backoff to the retry function by <a
href="https://github.com/RicePatrick"><code>@​RicePatrick</code></a> in
<a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1993">xanzy/go-gitlab#1993</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/MaerF0x0"><code>@​MaerF0x0</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1976">xanzy/go-gitlab#1976</a></li>
<li><a
href="https://github.com/Florian3535"><code>@​Florian3535</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1978">xanzy/go-gitlab#1978</a></li>
<li><a
href="https://github.com/mdevilliers"><code>@​mdevilliers</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1975">xanzy/go-gitlab#1975</a></li>
<li><a
href="https://github.com/thomasboni"><code>@​thomasboni</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1981">xanzy/go-gitlab#1981</a></li>
<li><a href="https://github.com/mtibben"><code>@​mtibben</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1986">xanzy/go-gitlab#1986</a></li>
<li><a href="https://github.com/flc1125"><code>@​flc1125</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1992">xanzy/go-gitlab#1992</a></li>
<li><a href="https://github.com/0xDagal"><code>@​0xDagal</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1994">xanzy/go-gitlab#1994</a></li>
<li><a href="https://github.com/Quanalogy"><code>@​Quanalogy</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1997">xanzy/go-gitlab#1997</a></li>
<li><a
href="https://github.com/adamcohen2"><code>@​adamcohen2</code></a> made
their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1998">xanzy/go-gitlab#1998</a></li>
<li><a
href="https://github.com/andersparslov"><code>@​andersparslov</code></a>
made their first contribution in <a
href="https://redirect.github.com/xanzy/go-gitlab/pull/1995">xanzy/go-gitlab#1995</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.108.0">https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.108.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6404ea33e7"><code>6404ea3</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1993">#1993</a>
from RicePatrick/add-retry-exponential-backoff</li>
<li><a
href="cd5f603fcb"><code>cd5f603</code></a>
Update the comment</li>
<li><a
href="203df8edce"><code>203df8e</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1996">#1996</a>
from Jitsusama/Settings-Parameter-Sync-Batch-3</li>
<li><a
href="8f7222230d"><code>8f72222</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1995">#1995</a>
from andersparslov/get-scoped-group-variables</li>
<li><a
href="f97a106073"><code>f97a106</code></a>
Rename GroupId to GroupID in the <code>MemberRole</code> and
<code>Iteration</code> structs</li>
<li><a
href="2269380b76"><code>2269380</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1998">#1998</a>
from adamcohen2/add-more-filters-to-group-milestones...</li>
<li><a
href="825df946b5"><code>825df94</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1997">#1997</a>
from Quanalogy/feature/member_role_model_follow_17_4...</li>
<li><a
href="466b5353f1"><code>466b535</code></a>
Change time fields from *time.Time to *ISOTime</li>
<li><a
href="feb5c719ad"><code>feb5c71</code></a>
Add more filters to group milestones</li>
<li><a
href="65c324f4f2"><code>65c324f</code></a>
Update backoff to only apply when the header isn't set</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.108.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.107.0&new-version=0.108.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-26 09:55:12 -03:00
dependabot[bot]
35c9bdb587
chore(deps): bump github/codeql-action from 3.26.4 to 3.26.5 (#5100)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.4 to 3.26.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.5 - 23 Aug 2024</h2>
<ul>
<li>Fix an issue where the <code>csrutil</code> system call used for
telemetry would fail on MacOS ARM machines with System Integrity
Protection disabled. <a
href="https://redirect.github.com/github/codeql-action/pull/2441">#2441</a></li>
</ul>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2c779ab0d0"><code>2c779ab</code></a>
Merge main into releases/v3 (<a
href="https://redirect.github.com/github/codeql-action/issues/2444">#2444</a>)</li>
<li><a
href="68cd1f9de3"><code>68cd1f9</code></a>
Update changelog for v3.26.5</li>
<li><a
href="7e27807413"><code>7e27807</code></a>
Only run check SIP enablement once in <code>init</code> step (<a
href="https://redirect.github.com/github/codeql-action/issues/2441">#2441</a>)</li>
<li><a
href="fd5fa130e2"><code>fd5fa13</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2438">#2438</a>
from github/mergeback/v3.26.4-to-main-f0f3afee</li>
<li><a
href="6f10eb0e36"><code>6f10eb0</code></a>
Update checked-in dependencies</li>
<li><a
href="b15a247a6c"><code>b15a247</code></a>
Update changelog and version after v3.26.4</li>
<li>See full diff in <a
href="f0f3afee80...2c779ab0d0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.4&new-version=3.26.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-26 09:20:36 -03:00
Carlos Alexandro Becker
6445e43a78
test(ko): fix chainguard image label update
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-26 09:12:02 -03:00
dependabot[bot]
9ac2794aa3
chore(deps): bump github/codeql-action from 3.26.3 to 3.26.4 (#5097)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.3 to 3.26.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.4 - 21 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> The <code>add-snippets</code> input on the
<code>analyze</code> Action is deprecated and will be removed in the
first release in August 2025. <a
href="https://redirect.github.com/github/codeql-action/pull/2436">#2436</a></li>
<li>Fix an issue where the disk usage system call used for telemetry
would fail on MacOS ARM machines with System Integrity Protection
disabled, and then surface a warning. The system call is now disabled
for these machines. <a
href="https://redirect.github.com/github/codeql-action/pull/2434">#2434</a></li>
</ul>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f0f3afee80"><code>f0f3afe</code></a>
Merge main into releases/v3 (<a
href="https://redirect.github.com/github/codeql-action/issues/2437">#2437</a>)</li>
<li><a
href="e3543591a5"><code>e354359</code></a>
Update changelog for v3.26.4</li>
<li><a
href="ae01f807ca"><code>ae01f80</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2436">#2436</a>
from rvermeulen/rvermeulen/deprecate-add-snippets</li>
<li><a
href="72bc3f7f61"><code>72bc3f7</code></a>
Address incorrect changelog location</li>
<li><a
href="7388c476ae"><code>7388c47</code></a>
Merge branch 'main' into rvermeulen/deprecate-add-snippets</li>
<li><a
href="d7c48ef5a8"><code>d7c48ef</code></a>
Add link to PR deprecating <code>add-snippets</code> to
CHANGELOG.md</li>
<li><a
href="ec21b8f8a4"><code>ec21b8f</code></a>
Update changelog with deprecation.</li>
<li><a
href="4067cdab78"><code>4067cda</code></a>
Add deprecation message to <code>add-snippets</code> input.</li>
<li><a
href="202b3b97bf"><code>202b3b9</code></a>
Stop checking disk usage for MacOS ARM with SIP disabled (<a
href="https://redirect.github.com/github/codeql-action/issues/2434">#2434</a>)</li>
<li><a
href="512e3066dd"><code>512e306</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2404">#2404</a>
from github/marcogario/proxy_64</li>
<li>Additional commits viewable in <a
href="883d8588e5...f0f3afee80">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.3&new-version=3.26.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-23 11:05:42 -03:00
dependabot[bot]
23cd3352f7
chore(deps): bump anchore/sbom-action from 0.17.1 to 0.17.2 (#5098)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from
0.17.1 to 0.17.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.2</h2>
<h2>Changes in v0.17.2</h2>
<ul>
<li>Update Syft to v1.11.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/485">#485</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="61119d458a"><code>61119d4</code></a>
chore(deps): update Syft to v1.11.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/485">#485</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.17.1...v0.17.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.17.1&new-version=0.17.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-23 11:05:33 -03:00
Andrew Newdigate
e4b91521d0
chore(deps): upgrade cosign to 2.4.0 (#5099)
goreleaser currently uses `cosign` `v2.1.1`, this change switches it to
`v2.4.0`.

While there may be other useful updates, I'd like this update to
workaround a bug which I'm experiencing:
https://github.com/sigstore/cosign/issues/3614#issuecomment-2012521670,
and which is solved by upgrading the `cosign` version.
2024-08-23 10:53:45 -03:00
dependabot[bot]
498b55bcc4
chore(deps): bump github.com/charmbracelet/lipgloss from 0.12.1 to 0.13.0 (#5095)
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.12.1 to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.0</h2>
<h1>Woodn’t you know, Lip Gloss has trees!</h1>
<p>Lip Gloss now ships with a tree rendering sub-package!</p>
<pre lang="go"><code>import
&quot;github.com/charmbracelet/lipgloss/tree&quot;
</code></pre>
<p>Define a new tree.</p>
<pre lang="go"><code>t := tree.Root(&quot;.&quot;).
  Child(&quot;A&quot;, &quot;B&quot;, &quot;C&quot;)
</code></pre>
<p>Print the tree.</p>
<pre lang="go"><code>fmt.Println(t)
<p>// .<br />
// ├── A<br />
// ├── B<br />
// └── C<br />
</code></pre></p>
<p>Trees have the ability to nest.</p>
<pre lang="go"><code>t := tree.Root(&quot;.&quot;).
  Child(&quot;Item 1&quot;).
  Child(
    tree.Root(&quot;Item 2&quot;).
      Child(&quot;Item 2.1&quot;).
      Child(&quot;Item 2.2&quot;).
      Child(&quot;Item 2.3&quot;),
  ).
  Child(
    tree.Root(&quot;Item 3&quot;).
      Child(&quot;Item 3.1&quot;).
      Child(&quot;Item 3.2&quot;),
  )
</code></pre>
<p>Print the tree.</p>
<pre lang="go"><code>fmt.Println(t)
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bb3e3398bb"><code>bb3e339</code></a>
docs(README): match tree example alignment with list examples</li>
<li><a
href="bc0de5ca26"><code>bc0de5c</code></a>
docs(README): make tree example match output</li>
<li><a
href="185fde3531"><code>185fde3</code></a>
docs(README): update tree images</li>
<li><a
href="cf0a7c615f"><code>cf0a7c6</code></a>
docs: fix tree screenshot</li>
<li><a
href="feb42a9be4"><code>feb42a9</code></a>
feat: move tree to root (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/342">#342</a>)</li>
<li><a
href="0618c73743"><code>0618c73</code></a>
feat(test): add test for <code>JoinHorizontal</code> (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/346">#346</a>)</li>
<li><a
href="ed7f56e2a7"><code>ed7f56e</code></a>
docs: fix <code>CompleteColor</code> example (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/345">#345</a>)</li>
<li><a
href="8a0e6405b7"><code>8a0e640</code></a>
fix: remove unnecessary if</li>
<li><a
href="87dd58def7"><code>87dd58d</code></a>
chore: fix little typo in comment in go.mod</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.12.1...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.12.1&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-21 15:40:16 -03:00
dependabot[bot]
3e6d825c80
chore(deps): bump github/codeql-action from 3.26.2 to 3.26.3 (#5094)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.26.2 to 3.26.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic
messages on Windows. This issue did not impact analysis quality. <a
href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no
longer supported. Please migrate to a macOS runner if this affects you.
<a
href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a
href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts
the same HTTP proxy as used by <a
href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>.
Do not use this in production as it is part of an internal experiment
and subject to change at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a
href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4
and earlier. These versions of CodeQL were discontinued on 9 July 2024
alongside GitHub Enterprise Server 3.9, and will be unsupported by
CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later.
<a
href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.13.5 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.12.6 and 2.13.4, you can replace
<code>github/codeql-action/*@v3</code> by
<code>github/codeql-action/*@v3.25.13</code> and
<code>github/codeql-action/*@v2</code> by
<code>github/codeql-action/*@v2.25.13</code> in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when
analyzing a compiled language with the <code>autobuild</code> <a
href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build
mode</a> on GitHub Enterprise Server. This feature is already available
to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading
debug artifacts. <a
href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="883d8588e5"><code>883d858</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2431">#2431</a>
from github/update-v3.26.3-b187c86ce</li>
<li><a
href="e100cebbec"><code>e100ceb</code></a>
Update changelog for v3.26.3</li>
<li><a
href="b187c86ce5"><code>b187c86</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2430">#2430</a>
from github/henrymercer/windows-diagnostics-fix</li>
<li><a
href="e2bb5a2777"><code>e2bb5a2</code></a>
Add changelog note</li>
<li><a
href="e5a65875f9"><code>e5a6587</code></a>
Fix writing diagnostics on Windows</li>
<li><a
href="5c681efc3f"><code>5c681ef</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2426">#2426</a>
from github/mergeback/v3.26.2-to-main-429e1977</li>
<li><a
href="676519a882"><code>676519a</code></a>
Update checked-in dependencies</li>
<li><a
href="25a5b8f08c"><code>25a5b8f</code></a>
Update changelog and version after v3.26.2</li>
<li>See full diff in <a
href="429e197704...883d8588e5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.2&new-version=3.26.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-20 08:38:35 -03:00
dependabot[bot]
0e971dcbf1
chore(deps): bump dario.cat/mergo from 1.0.0 to 1.0.1 (#5093)
Bumps [dario.cat/mergo](https://github.com/imdario/mergo) from 1.0.0 to
1.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/imdario/mergo/releases">dario.cat/mergo's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fixes issue <a
href="https://redirect.github.com/imdario/mergo/issues/187">#187</a> by
<a href="https://github.com/vsemichev"><code>@​vsemichev</code></a> in
<a
href="https://redirect.github.com/darccio/mergo/pull/253">darccio/mergo#253</a></li>
<li>fix: <code>WithoutDereference</code> should respect non-nil struct
pointers by <a
href="https://github.com/joshkaplinsky"><code>@​joshkaplinsky</code></a>
in <a
href="https://redirect.github.com/darccio/mergo/pull/251">darccio/mergo#251</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/vsemichev"><code>@​vsemichev</code></a>
made their first contribution in <a
href="https://redirect.github.com/darccio/mergo/pull/253">darccio/mergo#253</a></li>
<li><a
href="https://github.com/joshkaplinsky"><code>@​joshkaplinsky</code></a>
made their first contribution in <a
href="https://redirect.github.com/darccio/mergo/pull/251">darccio/mergo#251</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/darccio/mergo/compare/v1.0.0...v1.0.1">https://github.com/darccio/mergo/compare/v1.0.0...v1.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="59ea6a9cd9"><code>59ea6a9</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/251">#251</a>
from joshkaplinsky/joshkaplinsky/without-dereference-...</li>
<li><a
href="96f24afa92"><code>96f24af</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/253">#253</a>
from vsemichev/master</li>
<li><a
href="2f1a6156ce"><code>2f1a615</code></a>
fixes issue <a
href="https://redirect.github.com/imdario/mergo/issues/187">#187</a>.
adds test to verify the fix.</li>
<li><a
href="4da170b81e"><code>4da170b</code></a>
fixes issue <a
href="https://redirect.github.com/imdario/mergo/issues/187">#187</a>.
attempt <a
href="https://redirect.github.com/imdario/mergo/issues/3">#3</a></li>
<li><a
href="a13a1175be"><code>a13a117</code></a>
fixes issue <a
href="https://redirect.github.com/imdario/mergo/issues/187">#187</a>.
attempt <a
href="https://redirect.github.com/imdario/mergo/issues/2">#2</a></li>
<li><a
href="6b830ffc3d"><code>6b830ff</code></a>
fixes issue <a
href="https://redirect.github.com/imdario/mergo/issues/187">#187</a></li>
<li><a
href="f33862a523"><code>f33862a</code></a>
WithoutDereference should respect structs</li>
<li><a
href="cde9f0ea26"><code>cde9f0e</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/246">#246</a>
from darccio/darccio/v1-frozen</li>
<li><a
href="f1e2fe566a"><code>f1e2fe5</code></a>
chore: frozen v1</li>
<li><a
href="7f7b4afa33"><code>7f7b4af</code></a>
Update FUNDING.yml</li>
<li>Additional commits viewable in <a
href="https://github.com/imdario/mergo/compare/v1.0.0...v1.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dario.cat/mergo&package-manager=go_modules&previous-version=1.0.0&new-version=1.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-19 09:25:23 -03:00
dependabot[bot]
16af0bae82
chore(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.11.0 to 2.12.0 (#5092)
Bumps
[github.com/atc0005/go-teams-notify/v2](https://github.com/atc0005/go-teams-notify)
from 2.11.0 to 2.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/releases">github.com/atc0005/go-teams-notify/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.12.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Expose <code>TeamsMessage</code> interface to support mocking by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/291">atc0005/go-teams-notify#291</a></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Update CHANGELOG for v2.12.0 release by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/295">atc0005/go-teams-notify#295</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.11.0...v2.12.0">https://github.com/atc0005/go-teams-notify/compare/v2.11.0...v2.12.0</a></p>
<h2>v2.12.0-rc.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Expose <code>TeamsMessage</code> interface to support mocking by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/291">atc0005/go-teams-notify#291</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.11.0...v2.12.0-rc.1">https://github.com/atc0005/go-teams-notify/compare/v2.11.0...v2.12.0-rc.1</a></p>
<h2>v2.12.0-alpha.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>New Features or Enhancements 🎉</h3>
<ul>
<li>Expose <code>TeamsMessage</code> interface to support mocking by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/289">atc0005/go-teams-notify#289</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>Update CodeQL workflow to run on dev branch PRs by <a
href="https://github.com/atc0005"><code>@​atc0005</code></a> in <a
href="https://redirect.github.com/atc0005/go-teams-notify/pull/282">atc0005/go-teams-notify#282</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.11.0-alpha.5...v2.12.0-alpha.1">https://github.com/atc0005/go-teams-notify/compare/v2.11.0-alpha.5...v2.12.0-alpha.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">github.com/atc0005/go-teams-notify/v2's
changelog</a>.</em></p>
<blockquote>
<h2>[v2.12.0] - 2024-08-16</h2>
<h3>Added</h3>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/291">GH-291</a>)
Expose <code>TeamsMessage</code> interface to support mocking</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f047a24ffb"><code>f047a24</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/295">#295</a>
from atc0005/update-changelog-for-v2.12.0-release</li>
<li><a
href="74ee0ac512"><code>74ee0ac</code></a>
Update CHANGELOG for v2.12.0 release</li>
<li><a
href="adbaed0c6b"><code>adbaed0</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/291">#291</a>
from atc0005/i285-expose-TeamsMessage-interface</li>
<li><a
href="8b7707c601"><code>8b7707c</code></a>
Expose <code>TeamsMessage</code> interface to support mocking</li>
<li>See full diff in <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.11.0...v2.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/atc0005/go-teams-notify/v2&package-manager=go_modules&previous-version=2.11.0&new-version=2.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-19 09:25:03 -03:00
Carlos Alexandro Becker
c95bcdc1c6
chore(deps): update gocloud to v0.39.0 (#5091)
forcing `awssdk=v1` for now.

will probably need to remove that soon, holding it now only because of
https://github.com/google/go-cloud/issues/3472

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-08-18 16:58:28 -03:00
Carlos Alexandro Becker
5b87a85ee0
feat(nfpm): better support aix (#5075)
building upon the great work done at #4898


closes #4898

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Co-authored-by: Dylan Myers <dylan.myers@bluemedora.com>
2024-08-18 16:58:12 -03:00
Carlos Alexandro Becker
11aa7cfceb
feat(build): template skip (#5089)
closes #5071
2024-08-18 16:57:59 -03:00
Carlos Alexandro Becker
4e699a4caf
build: fix port error with dockertest on blob_minio_test.go (#5090)
This happened locally, doesn't seem to happen in the CI though.

Probably related to the Docker version.
2024-08-18 16:57:28 -03:00
Carlos Alexandro Becker
5b23a9d903
Merge remote-tracking branch 'origin/main' 2024-08-18 16:09:29 -03:00