1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-04 03:11:55 +02:00
Commit Graph

5130 Commits

Author SHA1 Message Date
Carlos Alexandro Becker
e9dda51607 test: fix 2023-11-03 21:47:09 -03:00
Carlos Alexandro Becker
422c46daff test: improve some tests 2023-11-03 21:47:09 -03:00
Carlos Alexandro Becker
0fbc447fe1 feat: --skip=homebrew 2023-11-03 21:47:09 -03:00
Carlos Alexandro Becker
954121ffb1 feat: --skip-nix 2023-11-03 21:47:09 -03:00
Carlos Alexandro Becker
53071b6642 feat: --skip=aur 2023-11-03 21:47:09 -03:00
dependabot[bot]
9fb281bd7a
chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#4376)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0
to 4.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update CODEOWNERS to Launch team by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1510">actions/checkout#1510</a></li>
<li>Correct link to GitHub Docs by <a
href="https://github.com/peterbe"><code>@​peterbe</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li>
<li>Link to release page from what's new section by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1514">actions/checkout#1514</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1510">actions/checkout#1510</a></li>
<li><a href="https://github.com/peterbe"><code>@​peterbe</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v4.1.1">https://github.com/actions/checkout/compare/v4...v4.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b4ffde65f4"><code>b4ffde6</code></a>
Link to release page from what's new section (<a
href="https://redirect.github.com/actions/checkout/issues/1514">#1514</a>)</li>
<li><a
href="8530928916"><code>8530928</code></a>
Correct link to GitHub Docs (<a
href="https://redirect.github.com/actions/checkout/issues/1511">#1511</a>)</li>
<li><a
href="7cdaf2fbc0"><code>7cdaf2f</code></a>
Update CODEOWNERS to Launch team (<a
href="https://redirect.github.com/actions/checkout/issues/1510">#1510</a>)</li>
<li>See full diff in <a
href="8ade135a41...b4ffde65f4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-03 21:42:31 -03:00
Carlos Alexandro Becker
2223c93b8c
feat: check if go.mod has replace directives (#4398)
closes #4395
2023-11-03 21:42:09 -03:00
Carlos Alexandro Becker
45839c13c3
fix(jsonschema): version is not required on v1.x
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-11-04 00:38:55 +00:00
Carlos Alexandro Becker
780fcc7163
Merge remote-tracking branch 'origin/main' 2023-11-04 00:38:23 +00:00
Carlos Alexandro Becker
178ce2af58 build: only update docs, schema, after a release
closes #4402
2023-11-03 21:37:39 -03:00
Carlos Alexandro Becker
1a8702f140
feat: --skip=snapcraft 2023-11-03 23:24:04 +00:00
Carlos Alexandro Becker
c6cb980c4f
feat: --skip=winget 2023-11-03 23:23:25 +00:00
Carlos Alexandro Becker
8ce439972a
feat: --skip=scoop 2023-11-03 23:22:50 +00:00
Carlos Alexandro Becker
8cd3104f1c
chore: update schema
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-11-02 20:38:07 +00:00
Carlos Alexandro Becker
b8cc16d4ac
fix: .Amd64 in build hooks
closes #4399
2023-11-02 12:47:00 +00:00
dependabot[bot]
69a1fb3ad4 feat(deps): bump golang from 926f7f7 to 96a8a70
Bumps golang from `926f7f7` to `96a8a70`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-02 09:33:41 -03:00
Carlos Alexandro Becker
3a3cf610f8
docs: conventional file name on armv6
refs https://github.com/charmbracelet/meta/pull/116
2023-11-02 12:32:31 +00:00
actions-user
9c54dda3ba chore: docs auto-update 2023-10-31 21:36:51 +00:00
Hervé Le Meur
1e06244363 Add updatecli.io to USERS.md 2023-10-31 18:34:33 -03:00
actions-user
c5de7c54ee chore: docs auto-update 2023-10-31 18:12:45 +00:00
Carlos Alexandro Becker
896366f3dc feat: version in the yaml file
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-31 15:10:16 -03:00
dependabot[bot]
3009ac1989 feat(deps): bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.6+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v24.0.6...v24.0.7)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 13:42:51 -03:00
Carlos Alexandro Becker
d4540f884f
test: fix unstable test 2023-10-30 15:50:30 +00:00
Gabriel F Cipriano
cf008d3ed7 fix: sort checksum lines by filename 2023-10-30 12:49:39 -03:00
Raito Bezarius
1a5d3ffa02 feat(nix): mark all Nix packages with the right source provenance
As GoReleaser focuses on binary packages wrapped in Nix, it is important
to mark their right source provenance, i.e. binary native code.
2023-10-30 12:23:14 -03:00
dependabot[bot]
8cb018bc42 feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.33.1 to 2.34.0
Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.33.1 to 2.34.0.
- [Release notes](https://github.com/goreleaser/nfpm/releases)
- [Changelog](https://github.com/goreleaser/nfpm/blob/main/.goreleaser.yml)
- [Commits](https://github.com/goreleaser/nfpm/compare/v2.33.1...v2.34.0)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/nfpm/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 11:49:56 -03:00
dependabot[bot]
b1271d2559 feat(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-27 08:11:55 -03:00
dependabot[bot]
5071b5ed39 feat(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-25 22:52:03 -03:00
Carlos Alexandro Becker
bc9f77b0e5 fix: schema enum options for dockers.use
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-25 22:51:30 -03:00
Carlos Alexandro Becker
de1c52b466 fix: improve run script
- if `VERSION` ends with `-pro`, set `DISTRIBUTION` to `pro`
- if `DISTRIBUTION` is `pro`, and `VERSION` does not have the `-pro`
  suffix, add it

closes #4374
2023-10-25 22:51:30 -03:00
dependabot[bot]
b233c68349
feat(deps): bump github.com/xanzy/go-gitlab from 0.93.1 to 0.93.2 (#4381)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.93.1 to 0.93.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e78abac2dc"><code>e78abac</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1825">#1825</a>
from stevexuereb/fix/application-settings</li>
<li><a
href="ddc846cfa7"><code>ddc846c</code></a>
fix: application settings marshalling</li>
<li><a
href="b6f640592c"><code>b6f6405</code></a>
Rename master to main</li>
<li><a
href="9886bf83fa"><code>9886bf8</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1810">#1810</a>
from oSoloTurk/master</li>
<li><a
href="5553955487"><code>5553955</code></a>
Minor tweaks preparing to merge</li>
<li><a
href="61a2bebe76"><code>61a2beb</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1824">#1824</a>
from xanzy/feat/notes</li>
<li><a
href="bb35e1a383"><code>bb35e1a</code></a>
Fixes <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1822">#1822</a></li>
<li><a
href="8d77cca289"><code>8d77cca</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1809">#1809</a>
from PatrickRice-KSC/add-notification-events</li>
<li><a
href="e93019f2f0"><code>e93019f</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1820">#1820</a>
from xuxiaowei-com-cn/xuxiaowei/appearance</li>
<li><a
href="6ee683f42d"><code>6ee683f</code></a>
Refactor PR so it matches the rest of the package</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.93.1...v0.93.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.93.1&new-version=0.93.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 08:27:09 -03:00
Carlos Alexandro Becker
7d21a1b553
test: update assertion 2023-10-17 17:50:57 +00:00
Carlos Alexandro Becker
8248526512
chore: remove temporary log 2023-10-17 15:52:52 +00:00
Carlos Alexandro Becker
91c8db3973
fix: github getbranch maxredirects 2023-10-17 15:52:41 +00:00
dependabot[bot]
a00c3db123
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1
to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<h2>What's Changed</h2>
<ul>
<li>implement dumb cache for images by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li>
<li>fixed typo in configuration.md by <a
href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li>
<li>pkg/commands: fix dropped errors by <a
href="https://github.com/alrs"><code>@​alrs</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li>
<li>ci: add govulncheck by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li>
<li>chore: remove refs to deprecated io/ioutil by <a
href="https://github.com/testwill"><code>@​testwill</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li>
<li>Update install docs to install ko using Scoop by <a
href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li>
<li>include go build output in build error by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li>
<li>Use go1.21, clean up ci and drop go1.19 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li>
<li>Update e2e.yaml by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li>
<li>handle newfound lint errors by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li>
<li>fix test broken by lint fix by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li>
<li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li>
<li>fix env var for go env by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li>
<li>docs: add docs for TF and Lambda by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li>
<li>docs: add Lambda and TF pages to sidebar by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li>
<li>include example using go packages by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li>
<li>fix the release workflow and install instructions by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li>
<li>update missing places that was using go1.20 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li>
<li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their
first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li>
<li><a href="https://github.com/testwill"><code>@​testwill</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li>
<li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="31035ad202"><code>31035ad</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from
ko-build/dependabot/go_modules/golang.org/x/net...</li>
<li><a
href="ba952fd091"><code>ba952fd</code></a>
Bump golang.org/x/net from 0.16.0 to 0.17.0</li>
<li><a
href="277f5d7435"><code>277f5d7</code></a>
update missing places that was using go1.20 (<a
href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li>
<li><a
href="b8b3b21f83"><code>b8b3b21</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from
ko-build/dependabot/go_modules/github.com/googl...</li>
<li><a
href="4890ab2887"><code>4890ab2</code></a>
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li>
<li><a
href="30b62aee3f"><code>30b62ae</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from
ko-build/dependabot/go_modules/github.com/spf13...</li>
<li><a
href="449bcb6192"><code>449bcb6</code></a>
Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li>
<li><a
href="c543dd83cc"><code>c543dd8</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from
ko-build/dependabot/go_modules/golang.org/x/too...</li>
<li><a
href="c1ae5f5ce4"><code>c1ae5f5</code></a>
Bump golang.org/x/tools from 0.13.0 to 0.14.0</li>
<li><a
href="e50d2fd5ff"><code>e50d2fd</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from
ko-build/dependabot/go_modules/golang.org/x/syn...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 12:47:47 -03:00
dependabot[bot]
8d121c8681
feat(deps): bump github.com/caarlos0/log from 0.4.3 to 0.4.4 (#4372)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.3 to 0.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.4</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
<h2>v0.4.4</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="614b0a8e4b"><code>614b0a8</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1
(<a
href="https://redirect.github.com/caarlos0/log/issues/25">#25</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.3...v0.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.3&new-version=0.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 08:18:55 -03:00
Carlos Alexandro Becker
1a243dfc0d
feat(deps): update go-github to v56
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-14 22:04:41 +00:00
Carlos Alexandro Becker
3cfefcc4ce
fix: decouple project_name guessing from the release pipe (#4335)
the release's defaults run before the project's does, so, usually the
github/gitlab/gitea names are set.

however, in some cases, the release's defaults might be skipped, in
which case they'll be empty.

this breaks things like `goreleaser changelog`, especially on non-go
repositories.

this pr tries to extract the project name from the git remote url in the
project's defaulter.

it might be possible now to move it to run before the release defaulter,
even.

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-14 18:59:07 -03:00
Carlos Alexandro Becker
95c990b166
fix: build --single-target (#4370)
closes #4369
2023-10-14 18:58:03 -03:00
dependabot[bot]
c72b730258
feat(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (#4367)
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.9.0 to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.9.1</h2>
<p>This bugfix release changes the Table <code>Headers</code> API to
accept <code>[]string</code> for consistency with <code>Row</code> /
<code>Rows</code> and downgrades Lip Gloss to Go version
<code>v1.17</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>Table Headers type from <code>[]any</code> → <code>[]string</code>
by <a href="https://github.com/maaslalani"><code>@​maaslalani</code></a>
in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li>
<li>Downgrade Lip Gloss to <code>v1.17</code> by <a
href="https://github.com/maaslalani"><code>@​maaslalani</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f093bc1509"><code>f093bc1</code></a>
Make headers <code>[]string</code> (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/234">#234</a>)</li>
<li><a
href="42db873617"><code>42db873</code></a>
test(table): ensure README example works</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.9.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 18:57:21 -03:00
dependabot[bot]
35b0d4c0b5
feat(deps): bump github.com/caarlos0/log from 0.4.2 to 0.4.3 (#4366)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.2 to 0.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.3</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f01ba34cc7"><code>f01ba34</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0
(<a
href="https://redirect.github.com/caarlos0/log/issues/24">#24</a>)</li>
<li><a
href="ea95b5bf18"><code>ea95b5b</code></a>
chore(deps): bump goreleaser/goreleaser-action from 4 to 5 (<a
href="https://redirect.github.com/caarlos0/log/issues/23">#23</a>)</li>
<li><a
href="273756e9f7"><code>273756e</code></a>
chore(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/caarlos0/log/issues/22">#22</a>)</li>
<li><a
href="f63049b4a4"><code>f63049b</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.7.1 to 0.8.0
(<a
href="https://redirect.github.com/caarlos0/log/issues/21">#21</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.2...v0.4.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.2&new-version=0.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 18:50:22 -03:00
dependabot[bot]
c15ebb8703
feat(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#4365)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.16.0 to
0.17.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b225e7ca6d"><code>b225e7c</code></a>
http2: limit maximum handler goroutines to MaxConcurrentStreams</li>
<li>See full diff in <a
href="https://github.com/golang/net/compare/v0.16.0...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-13 15:34:49 -03:00
Batuhan Apaydın
a932dd85de
SLSA Provenance generation blog post (#4361)
kindly ping @Dentrax

Signed-off-by: Batuhan Apaydin <batuhan.apaydin@chainguard.dev>
2023-10-11 09:41:49 -03:00
dependabot[bot]
766a3f2d90
feat(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0 (#4364)
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.8.0 to 0.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.9.0</h2>
<h1>My, how the tables have turned</h1>
<p>Now you can draw <code>Table</code>s with Lip Gloss! 💅</p>
<!-- raw HTML omitted -->
<p>View <a
href="https://github.com/charmbracelet/lipgloss/tree/master/examples/table/pokemon/main.go">the
source code</a>.</p>
<h2>Let's get started</h2>
<pre lang="go"><code>import
&quot;github.com/charmbracelet/lipgloss/table&quot;
</code></pre>
<p>Define some rows of data.</p>
<pre lang="go"><code>rows := [][]string{
    {&quot;Chinese&quot;, &quot;您好&quot;, &quot;你好&quot;},
    {&quot;Japanese&quot;, &quot;こんにちは&quot;, &quot;やあ&quot;},
    {&quot;Arabic&quot;, &quot;أهلين&quot;, &quot;أهلا&quot;},
    {&quot;Russian&quot;, &quot;Здравствуйте&quot;, &quot;Привет&quot;},
    {&quot;Spanish&quot;, &quot;Hola&quot;, &quot;¿Qué tal?&quot;},
}
</code></pre>
<p>Use the table package to style and render the table.</p>
<pre lang="go"><code>t := table.New().
    Border(lipgloss.NormalBorder()).

BorderStyle(lipgloss.NewStyle().Foreground(lipgloss.Color(&quot;99&quot;))).
    StyleFunc(func(row, col int) lipgloss.Style {
        switch {
        case row == 0:
            return HeaderStyle
        case row%2 == 0:
            return EvenRowStyle
        default:
            return OddRowStyle
        }
    }).
Headers(&quot;LANGUAGE&quot;, &quot;FORMAL&quot;, &quot;INFORMAL&quot;).
    Rows(rows...)
<p>// You can also add tables row-by-row
t.Row(&quot;English&quot;, &quot;You look absolutely fabulous.&quot;,
&quot;How's it going?&quot;)
</code></pre></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4476263d05"><code>4476263</code></a>
Feature: Tables (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/218">#218</a>)</li>
<li><a
href="408dcf3b9e"><code>408dcf3</code></a>
feat: add <code>Middle</code> borders (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/230">#230</a>)</li>
<li><a
href="93cd5e0d35"><code>93cd5e0</code></a>
feat: bump minimum go version to 1.18 (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/216">#216</a>)</li>
<li><a
href="b766f24d45"><code>b766f24</code></a>
feat(deps): bump github.com/mattn/go-runewidth from 0.0.14 to 0.0.15 (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/215">#215</a>)</li>
<li><a
href="b0eb95dbc1"><code>b0eb95d</code></a>
fix(border): both GetHorizontalBorderSize and GetVerticalBorderSize (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/225">#225</a>)</li>
<li><a
href="2d2a577e2d"><code>2d2a577</code></a>
fix(border): GetBorderRightSize (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/224">#224</a>)</li>
<li><a
href="18166eaa8a"><code>18166ea</code></a>
chore(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/222">#222</a>)</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.8.0...v0.9.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-11 09:05:53 -03:00
dependabot[bot]
d5c896bc7a
feat(deps): bump golang from 1.21.2-alpine to 1.21.3-alpine (#4363)
Bumps golang from 1.21.2-alpine to 1.21.3-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.21.2-alpine&new-version=1.21.3-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-11 09:01:16 -03:00
Carlos Alexandro Becker
6b00bb9664
refactor: use ordered.First (#4362) 2023-10-10 23:16:27 -03:00
Eng Zer Jun
37e3fdee55
refactor(tmpl): avoid unnecessary byte/string conversion (#4356)
We can use `(*regexp.Regexp).MatchString` instead of
`(*regexp.Regexp).Match([]byte(...))` to avoid unnecessary `[]byte`
conversions and reduce allocations. A one-line change for free
performance gain.

Benchmark:

```go
func BenchmarkMatch(b *testing.B) {
	for i := 0; i < b.N; i++ {
		if match := envOnlyRe.Match([]byte("{{ .Env.FOO }}")); !match {
			b.Fail()
		}
	}
}

func BenchmarkMatchString(b *testing.B) {
	for i := 0; i < b.N; i++ {
		if match := envOnlyRe.MatchString("{{ .Env.FOO }}"); !match {
			b.Fail()
		}
	}
}
```

Result:

```
goos: linux
goarch: amd64
pkg: github.com/goreleaser/goreleaser/internal/tmpl cpu: AMD Ryzen 7 PRO 4750U with Radeon Graphics
BenchmarkMatch-16          	 4320873	       381.2 ns/op	      16 B/op	       1 allocs/op
BenchmarkMatchString-16    	 5973543	       203.9 ns/op	       0 B/op	       0 allocs/op
PASS
ok  	github.com/goreleaser/goreleaser/internal/tmpl	3.366s
```

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2023-10-10 09:54:44 -03:00
dependabot[bot]
8203f919b0
feat(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 (#4352)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.12.0 to 0.13.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3c5dbf08cc"><code>3c5dbf0</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="11625ccb95"><code>11625cc</code></a>
google: add authorized_user conditional to
Credentials.UniverseDomain</li>
<li><a
href="8d6d45b6cd"><code>8d6d45b</code></a>
google: add Credentials.UniverseDomain to support TPC</li>
<li><a
href="43b6a7ba19"><code>43b6a7b</code></a>
google: adding support for external account authorized user</li>
<li><a
href="14b275c918"><code>14b275c</code></a>
oauth2: workaround misspelling of verification_uri</li>
<li><a
href="18352fc433"><code>18352fc</code></a>
google/internal/externalaccount: adding BYOID Metrics</li>
<li><a
href="9095a51613"><code>9095a51</code></a>
oauth2: clarify error if endpoint missing DeviceAuthURL</li>
<li><a
href="2d9e4a2adf"><code>2d9e4a2</code></a>
oauth2/google: remove meta validations for aws external credentials</li>
<li><a
href="55cd552a36"><code>55cd552</code></a>
oauth2: support PKCE</li>
<li><a
href="e3fb0fb3af"><code>e3fb0fb</code></a>
oauth2: support device flow</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 09:54:00 -03:00
dependabot[bot]
53189c1e00
feat(deps): bump golang.org/x/tools from 0.13.0 to 0.14.0 (#4359)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.13.0
to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.13.2</h2>
<p><code>golang/go#61813</code></p>
<h2>gopls/v0.13.1</h2>
<p>This is a patch release to fix three issues with the v0.13.0
release:</p>
<ul>
<li><a
href="https://redirect.github.com/golang/go/issues/61670">golang/go#61670</a>:
broken imports due to corrupted export data</li>
<li><a
href="https://redirect.github.com/golang/go/issues/61693">golang/go#61693</a>:
panic in stubmethods with variadic args</li>
<li><a
href="https://redirect.github.com/golang/go/issues/61692">golang/go#61692</a>:
gofumpt integration panics when used with the new go directive syntax in
go.mod files (e.g. <code>go 1.21rc3</code>)</li>
</ul>
<p>Incidentally, this release also picks up a few fixes for references
and renaming. See the <a
href="https://github.com/golang/go/milestone/325?closed=1">milestone</a>
for the complete list of resolved issues.</p>
<p>Thank you to all who reported bugs. If are still encountering
problems, please <a
href="https://github.com/golang/go/issues/new?assignees=&amp;labels=gopls+Tools&amp;projects=&amp;template=03-gopls.md&amp;title=x%2Ftools%2Fgopls%3A+">file
an issue</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3f4194ee29"><code>3f4194e</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="1e4ce7c30c"><code>1e4ce7c</code></a>
internal/refactor/inline: yet more tweaks to everything test</li>
<li><a
href="ee20ddf1f7"><code>ee20ddf</code></a>
internal/refactor/inline: permit return conversions in tailcall</li>
<li><a
href="db1d1e0d33"><code>db1d1e0</code></a>
gopls/internal/lsp: go to definition from embed directive</li>
<li><a
href="2be977ecc5"><code>2be977e</code></a>
internal/refactor/inline: work around channel type misformatting</li>
<li><a
href="0ba9c8439e"><code>0ba9c84</code></a>
internal/fuzzy: several improvements for symbol matching</li>
<li><a
href="c2725ad840"><code>c2725ad</code></a>
gopls: update x/telemetry dependency</li>
<li><a
href="e8722c0103"><code>e8722c0</code></a>
go/types/internal/play: show types.Selection information</li>
<li><a
href="a819c616c8"><code>a819c61</code></a>
internal/refactor/inline: eliminate unnecessary binding decl</li>
<li><a
href="102b64b540"><code>102b64b</code></a>
internal/refactor/inline: tweak everything-test docs again</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 09:49:58 -03:00
actions-user
95e5ef6226 chore: docs auto-update 2023-10-10 12:39:32 +00:00