1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-04 03:11:55 +02:00
Commit Graph

4447 Commits

Author SHA1 Message Date
dependabot[bot]
f05b211b61
chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#3643)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.4.0
to 3.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>Add support for stable and oldstable aliases</h2>
<p>In scope of this release we introduce aliases for the
<code>go-version</code> input. The <code>stable</code> alias instals the
latest stable version of Go. The <code>oldstable</code> alias installs
previous latest minor release (the stable is 1.19.x -&gt; the oldstable
is 1.18.x).</p>
<h3>Stable</h3>
<pre lang="yaml"><code>steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version: 'stable'
  - run: go run hello.go
</code></pre>
<h3>OldStable</h3>
<pre lang="yaml"><code>steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version: 'oldstable'
  - run: go run hello.go
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6edd4406fa"><code>6edd440</code></a>
fix log for stable aliases (<a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/303">#303</a>)</li>
<li><a
href="38dbe75f81"><code>38dbe75</code></a>
Add stable and oldstable aliases (<a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/300">#300</a>)</li>
<li><a
href="30c39bfe0c"><code>30c39bf</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/301">#301</a>
from jongwooo/chore/use-cache-in-check-dist</li>
<li><a
href="8377b69a56"><code>8377b69</code></a>
Use cache in check-dist.yml</li>
<li>See full diff in <a
href="d0a58c1c4d...6edd4406fa">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=3.4.0&new-version=3.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-14 12:09:30 -03:00
dependabot[bot]
583bca59aa
feat(deps): bump github.com/caarlos0/log from 0.1.10 to 0.2.0 (#3634)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.1.10 to 0.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Entry WithoutPadding by <a
href="https://github.com/nervo"><code>@​nervo</code></a> in <a
href="https://github-redirect.dependabot.com/caarlos0/log/pull/5">caarlos0/log#5</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/caarlos0/log/compare/v0.1.10...v0.2.0">https://github.com/caarlos0/log/compare/v0.1.10...v0.2.0</a></p>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="20f9258240"><code>20f9258</code></a>
feat: Entry WithoutPadding (<a
href="https://github-redirect.dependabot.com/caarlos0/log/issues/5">#5</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.1.10...v0.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.1.10&new-version=0.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 09:56:07 -03:00
dependabot[bot]
43e2b3bf69
chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 (#3636)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0
to 3.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v3.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add GitHub Action to perform release by <a
href="https://github.com/rentziass"><code>@​rentziass</code></a> in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/942">actions/checkout#942</a></li>
<li>Fix status badge by <a
href="https://github.com/ScottBrenner"><code>@​ScottBrenner</code></a>
in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/967">actions/checkout#967</a></li>
<li>Replace datadog/squid with ubuntu/squid Docker image by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://github-redirect.dependabot.com/actions/checkout/pull/1002">actions/checkout#1002</a></li>
<li>Wrap pipeline commands for submoduleForeach in quotes by <a
href="https://github.com/jokreliable"><code>@​jokreliable</code></a> in
<a
href="https://github-redirect.dependabot.com/actions/checkout/pull/964">actions/checkout#964</a></li>
<li>Update <code>@​actions/io</code> to 1.1.2 by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://github-redirect.dependabot.com/actions/checkout/pull/1029">actions/checkout#1029</a></li>
<li>Upgrading version to 3.2.0 by <a
href="https://github.com/vmjoseph"><code>@​vmjoseph</code></a> in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/1039">actions/checkout#1039</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/ScottBrenner"><code>@​ScottBrenner</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/967">actions/checkout#967</a></li>
<li><a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/1002">actions/checkout#1002</a></li>
<li><a
href="https://github.com/jokreliable"><code>@​jokreliable</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/964">actions/checkout#964</a></li>
<li><a href="https://github.com/vmjoseph"><code>@​vmjoseph</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/actions/checkout/pull/1039">actions/checkout#1039</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v3...v3.2.0">https://github.com/actions/checkout/compare/v3...v3.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="755da8c3cf"><code>755da8c</code></a>
3.2.0 (<a
href="https://github-redirect.dependabot.com/actions/checkout/issues/1039">#1039</a>)</li>
<li><a
href="26d48e8ea1"><code>26d48e8</code></a>
Update <code>@​actions/io</code> to 1.1.2 (<a
href="https://github-redirect.dependabot.com/actions/checkout/issues/1029">#1029</a>)</li>
<li><a
href="bf085276ce"><code>bf08527</code></a>
wrap pipeline commands for submoduleForeach in quotes (<a
href="https://github-redirect.dependabot.com/actions/checkout/issues/964">#964</a>)</li>
<li><a
href="5c3ccc22eb"><code>5c3ccc2</code></a>
Replace datadog/squid with ubuntu/squid Docker image (<a
href="https://github-redirect.dependabot.com/actions/checkout/issues/1002">#1002</a>)</li>
<li><a
href="1f9a0c22da"><code>1f9a0c2</code></a>
README - fix status badge (<a
href="https://github-redirect.dependabot.com/actions/checkout/issues/967">#967</a>)</li>
<li><a
href="8230315d06"><code>8230315</code></a>
Add workflow to update a main version (<a
href="https://github-redirect.dependabot.com/actions/checkout/issues/942">#942</a>)</li>
<li>See full diff in <a
href="93ea575cb5...755da8c3cf">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=3.1.0&new-version=3.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 09:44:45 -03:00
dependabot[bot]
d0e91cb99b
feat(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11 (#3639)
Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from
0.5.10 to 0.5.11.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9d122a61c1"><code>9d122a6</code></a>
release version v0.5.11</li>
<li><a
href="4ce6f08566"><code>4ce6f08</code></a>
lzma: fix handling of small dictionary sizes</li>
<li><a
href="0b7c695d23"><code>0b7c695</code></a>
xz: add reader benchmark</li>
<li><a
href="5535077940"><code>5535077</code></a>
xz: add compression reate to Writer benchmark</li>
<li><a
href="886dc9acde"><code>886dc9a</code></a>
xz: add benchmark for Writer</li>
<li><a
href="ae233692d6"><code>ae23369</code></a>
Create codeql-analysis.yml</li>
<li><a
href="057ed39949"><code>057ed39</code></a>
Remove codeql workflows</li>
<li><a
href="d2624c667f"><code>d2624c6</code></a>
Add example_test.go</li>
<li><a
href="fdaf408660"><code>fdaf408</code></a>
README.md: small improvement to the documeation section</li>
<li><a
href="060c89d64f"><code>060c89d</code></a>
README.md: add link to pkg.go.dev</li>
<li>See full diff in <a
href="https://github.com/ulikunitz/xz/compare/v0.5.10...v0.5.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ulikunitz/xz&package-manager=go_modules&previous-version=0.5.10&new-version=0.5.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 09:44:34 -03:00
dependabot[bot]
6b01982e1b
feat(deps): bump github.com/xanzy/go-gitlab from 0.76.0 to 0.77.0 (#3637)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.76.0 to 0.77.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52eedaaf18"><code>52eedaa</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1598">#1598</a>
from armsnyder/fix-slow-tests</li>
<li><a
href="b56a655462"><code>b56a655</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1599">#1599</a>
from armsnyder/deprecate-test-teardown</li>
<li><a
href="946a151d3b"><code>946a151</code></a>
Refactor tests to not call teardown explicitly</li>
<li><a
href="4e7c141f18"><code>4e7c141</code></a>
Deprecate the test teardown function by moving teardown code into a test
clea...</li>
<li><a
href="65b39a6e49"><code>65b39a6</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1593">#1593</a>
from jokly/error-handler</li>
<li><a
href="837fee3854"><code>837fee3</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1596">#1596</a>
from armsnyder/get-latest-pipeline</li>
<li><a
href="db9dda5722"><code>db9dda5</code></a>
Add WithErrorHandler client option</li>
<li><a
href="21ae872d5d"><code>21ae872</code></a>
Fix slow tests by disabling retry backoff</li>
<li><a
href="91b78c1740"><code>91b78c1</code></a>
New GetLatestPipeline() client method</li>
<li><a
href="05207f556b"><code>05207f5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1585">#1585</a>
from cyd01/master</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.76.0...v0.77.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.76.0&new-version=0.77.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-13 09:44:09 -03:00
dependabot[bot]
261cc8a5cd
feat(deps): bump github.com/google/go-github/v48 from 48.1.0 to 48.2.0 (#3633)
Bumps
[github.com/google/go-github/v48](https://github.com/google/go-github)
from 48.1.0 to 48.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-github/releases">github.com/google/go-github/v48's
releases</a>.</em></p>
<blockquote>
<h2>v48.2.0</h2>
<p>This minor release includes the following changes:</p>
<ul>
<li>Add parents field to timeline events (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2566">#2566</a>)</li>
<li>Update doc URL for PackageGetAllVersions (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2568">#2568</a>)</li>
<li>Add the 'require_last_push_approval' field (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2567">#2567</a>)</li>
<li>Bump github.com/google/go-github/v48 from 48.0.0 to 48.1.0 in
/scrape (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2573">#2573</a>)</li>
<li>Bump golangci-lint version to 1.50.1 (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2576">#2576</a>)</li>
<li>Add RunAttempt field for WorkflowJob (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2562">#2562</a>)</li>
<li>Add LockBranch and AllowForkSyncing to repos.go (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2577">#2577</a>)</li>
<li>Add new field for issue state reason (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2583">#2583</a>)</li>
<li>Add support for repository actions access level / permission (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2578">#2578</a>)</li>
<li>Add has_discussions field to repository (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2589">#2589</a>)</li>
<li>Use 'concurrency' instead of 'styfle/cancel-workflow-action' in
GitHub Actions (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2591">#2591</a>)</li>
<li>Add MakeLatest parameter to support explicitly setting latest
release (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2594">#2594</a>)</li>
<li>Change create fork options from url param to body param (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2490">#2490</a>)</li>
<li>Support new GitHub v3 API calendar-based versioning (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2581">#2581</a>)</li>
<li>Update AUTHORS for v48.2.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ae4fda8be3"><code>ae4fda8</code></a>
Update AUTHORS for v48.2.0</li>
<li><a
href="9d020d70e3"><code>9d020d7</code></a>
Support new GitHub v3 API calendar-based versioning (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2581">#2581</a>)</li>
<li><a
href="3e3f03c6b3"><code>3e3f03c</code></a>
Change create fork options from url param to body param (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2490">#2490</a>)</li>
<li><a
href="44d91eb972"><code>44d91eb</code></a>
Add MakeLatest parameter to support explicitly setting latest release
(<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2594">#2594</a>)</li>
<li><a
href="153bbc2620"><code>153bbc2</code></a>
Use 'concurrency' instead of 'styfle/cancel-workflow-action' in GitHub
Action...</li>
<li><a
href="1cb3b4d18d"><code>1cb3b4d</code></a>
Add has_discussions field to repository (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2589">#2589</a>)</li>
<li><a
href="0621dee417"><code>0621dee</code></a>
Add support for repository actions access level / permission (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2578">#2578</a>)</li>
<li><a
href="6c430acced"><code>6c430ac</code></a>
Add new field for issue state reason (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2583">#2583</a>)</li>
<li><a
href="18cd63d0e2"><code>18cd63d</code></a>
Add LockBranch and AllowForkSyncing to repos.go (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2577">#2577</a>)</li>
<li><a
href="621c4ba715"><code>621c4ba</code></a>
Add RunAttempt field for WorkflowJob (<a
href="https://github-redirect.dependabot.com/google/go-github/issues/2562">#2562</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-github/compare/v48.1.0...v48.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-github/v48&package-manager=go_modules&previous-version=48.1.0&new-version=48.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-12 09:29:45 -03:00
Carlos A Becker
ddf7660b6d
fix: extra quotes on goreleaser archives 2022-12-10 12:46:23 -03:00
dependabot[bot]
dae543ff24
chore(deps): bump github/codeql-action from 2.1.35 to 2.1.36 (#3629)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.35 to 2.1.36.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.36 - 08 Dec 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.5. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1412">#1412</a></li>
<li>Add a step that tries to upload a SARIF file for the workflow run
when that workflow run fails. This will help better surface failed code
scanning workflow runs. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1393">#1393</a></li>
<li>Python automatic dependency installation will no longer consider
dependecy code installed in venv as user-written, for projects using
Poetry that specify <code>virtualenvs.in-project = true</code> in their
<code>poetry.toml</code>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1419">#1419</a>.</li>
</ul>
<h2>2.1.35 - 01 Dec 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.34 - 25 Nov 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.4. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1391">#1391</a></li>
<li>Fixed a bug where some the <code>init</code> action and the
<code>analyze</code> action would have different sets of experimental
feature flags enabled. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1384">#1384</a></li>
</ul>
<h2>2.1.33 - 16 Nov 2022</h2>
<ul>
<li>Go is now analyzed in the same way as other compiled languages such
as C/C++, C#, and Java. This completes the rollout of the feature
described in <a
href="https://github.com/github/codeql-action/blob/main/#2127---06-oct-2022">CodeQL
Action version 2.1.27</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1322">#1322</a></li>
<li>Bump the minimum CodeQL bundle version to 2.6.3. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1358">#1358</a></li>
</ul>
<h2>2.1.32 - 14 Nov 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.3. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1348">#1348</a></li>
<li>Update the ML-powered additional query pack for JavaScript to
version 0.4.0. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1351">#1351</a></li>
</ul>
<h2>2.1.31 - 04 Nov 2022</h2>
<ul>
<li>The <code>rb/weak-cryptographic-algorithm</code> Ruby query has been
updated to no longer report uses of hash functions such as
<code>MD5</code> and <code>SHA1</code> even if they are known to be
weak. These hash algorithms are used very often in non-sensitive
contexts, making the query too imprecise in practice. For more
information, see the corresponding change in the <a
href="https://github-redirect.dependabot.com/github/codeql/pull/11129">github/codeql
repository</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1344">#1344</a></li>
</ul>
<h2>2.1.30 - 02 Nov 2022</h2>
<ul>
<li>Improve the error message when using CodeQL bundle version 2.7.2 and
earlier in a workflow that runs on a runner image such as
<code>ubuntu-22.04</code> that uses glibc version 2.34 and later. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1334">#1334</a></li>
</ul>
<h2>2.1.29 - 26 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.2. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1320">#1320</a></li>
</ul>
<h2>2.1.28 - 18 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.1. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1294">#1294</a></li>
<li>Replace uses of GitHub Actions command <code>set-output</code>
because it is now deprecated. See more information in the <a
href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">GitHub
Changelog</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1301">#1301</a></li>
</ul>
<h2>2.1.27 - 06 Oct 2022</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a669cc5936"><code>a669cc5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1428">#1428</a>
from github/update-v2.1.36-2b971a70</li>
<li><a
href="aab7a26877"><code>aab7a26</code></a>
Update changelog for v2.1.36</li>
<li><a
href="2b971a70bb"><code>2b971a7</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1426">#1426</a>
from github/dependabot/pip/python-setup/tests/poetry...</li>
<li><a
href="bf944d782b"><code>bf944d7</code></a>
Bump certifi in /python-setup/tests/poetry/requests-3</li>
<li><a
href="566a5e6727"><code>566a5e6</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1424">#1424</a>
from github/dependabot/pip/python-setup/tests/pipenv...</li>
<li><a
href="10c89976dc"><code>10c8997</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1421">#1421</a>
from github/cklin/fix-update-required-checks-sha</li>
<li><a
href="8121f62c54"><code>8121f62</code></a>
Bump certifi in /python-setup/tests/pipenv/python-3.8</li>
<li><a
href="104319fe98"><code>104319f</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1423">#1423</a>
from github/dependabot/pip/python-setup/tests/pipenv...</li>
<li><a
href="aba18b82f7"><code>aba18b8</code></a>
Bump certifi in /python-setup/tests/pipenv/requests-3</li>
<li><a
href="4a5ad5af18"><code>4a5ad5a</code></a>
update-required-checks.sh: ignore check-expected-release-files</li>
<li>Additional commits viewable in <a
href="b2a92eb56d...a669cc5936">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.35&new-version=2.1.36)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-09 13:53:16 -03:00
Jo
960814aea8
docs: fix skip_push parameter to skip_build (#3628)
Fix the wrong `skip_push` to `skip_build` in `docker.md`.
2022-12-08 09:43:03 -03:00
dependabot[bot]
7083751934
feat(deps): bump github.com/dghubble/oauth1 from 0.7.1 to 0.7.2 (#3627)
Bumps [github.com/dghubble/oauth1](https://github.com/dghubble/oauth1)
from 0.7.1 to 0.7.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dghubble/oauth1/releases">github.com/dghubble/oauth1's
releases</a>.</em></p>
<blockquote>
<h2>v0.7.2</h2>
<ul>
<li>Update minimum Go version from v1.17 to v1.18 (<a
href="https://github-redirect.dependabot.com/dghubble/oauth1/pull/66">#66</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dghubble/oauth1/blob/main/CHANGES.md">github.com/dghubble/oauth1's
changelog</a>.</em></p>
<blockquote>
<h2>v0.7.2</h2>
<ul>
<li>Update minimum Go version from v1.17 to v1.18 (<a
href="https://github-redirect.dependabot.com/dghubble/oauth1/pull/66">#66</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1445aad23c"><code>1445aad</code></a>
Update minimum Go version from v1.17 to v1.18</li>
<li><a
href="953dec31c2"><code>953dec3</code></a>
Bump github.com/stretchr/testify from 1.8.0 to 1.8.1</li>
<li><a
href="56d749ba2f"><code>56d749b</code></a>
Add go 1.19 to test matrix</li>
<li><a
href="6f7198ab32"><code>6f7198a</code></a>
Bump github.com/stretchr/testify from 1.7.5 to 1.8.0</li>
<li><a
href="2e9b39a9c1"><code>2e9b39a</code></a>
Bump github.com/stretchr/testify from 1.7.4 to 1.7.5</li>
<li><a
href="52fe671438"><code>52fe671</code></a>
Bump github.com/stretchr/testify from 1.7.2 to 1.7.4</li>
<li><a
href="4590427589"><code>4590427</code></a>
Bump github.com/stretchr/testify from 1.7.1 to 1.7.2</li>
<li><a
href="74c7d89474"><code>74c7d89</code></a>
Update Go test matrix to add Go v1.18</li>
<li><a
href="dec88a17f7"><code>dec88a1</code></a>
Bump github.com/stretchr/testify from 1.7.0 to 1.7.1</li>
<li>See full diff in <a
href="https://github.com/dghubble/oauth1/compare/v0.7.1...v0.7.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/dghubble/oauth1&package-manager=go_modules&previous-version=0.7.1&new-version=0.7.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 09:41:38 -03:00
dependabot[bot]
e8773b7f9d
feat(deps): bump golang from 1.19.3-alpine to 1.19.4-alpine (#3626)
Bumps golang from 1.19.3-alpine to 1.19.4-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.19.3-alpine&new-version=1.19.4-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-07 09:28:07 -03:00
Carlos Alexandro Becker
7e9c6a82df
chore: delete lock.yml
not really that useful, as we rarely have gravediggers... and its too noisy.
2022-12-05 11:20:01 -03:00
dependabot[bot]
60cbed540e
chore(deps): bump dessant/lock-threads from 3.0.0 to 4.0.0 (#3621)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads)
from 3.0.0 to 4.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dessant/lock-threads/releases">dessant/lock-threads's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<p>Learn more about this release from the <a
href="https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md#changelog">changelog</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md">dessant/lock-threads's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/dessant/lock-threads/compare/v3.0.0...v4.0.0">4.0.0</a>
(2022-12-04)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>the action now requires Node.js 16</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>update dependencies (<a
href="38e9185581">38e9185</a>)</li>
<li>update docs (<a
href="32986e2696">32986e2</a>)</li>
</ul>
<h2><a
href="https://github.com/dessant/lock-threads/compare/v2.1.2...v3.0.0">3.0.0</a>
(2021-09-27)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>
<p>input parameter names have changed</p>
<p>Rename the following input parameters when upgrading from v2 to
v3:</p>
<ul>
<li><code>issue-lock-inactive-days</code> --&gt;
<code>issue-inactive-days</code></li>
<li><code>issue-exclude-created-before</code> --&gt;
<code>exclude-issue-created-before</code></li>
<li><code>issue-exclude-labels</code> --&gt;
<code>exclude-any-issue-labels</code></li>
<li><code>issue-lock-labels</code> --&gt;
<code>add-issue-labels</code></li>
<li><code>issue-lock-comment</code> --&gt;
<code>issue-comment</code></li>
<li><code>pr-lock-inactive-days</code> --&gt;
<code>pr-inactive-days</code></li>
<li><code>pr-exclude-created-before</code> --&gt;
<code>exclude-pr-created-before</code></li>
<li><code>pr-exclude-labels</code> --&gt;
<code>exclude-any-pr-labels</code></li>
<li><code>pr-lock-labels</code> --&gt; <code>add-pr-labels</code></li>
<li><code>pr-lock-comment</code> --&gt; <code>pr-comment</code></li>
</ul>
</li>
</ul>
<h3>Features</h3>
<ul>
<li>add new filtering and labeling options, update input parameter names
(<a
href="26fd836f96">26fd836</a>)</li>
<li>allow manual triggering (<a
href="a0c7da3065">a0c7da3</a>)</li>
</ul>
<h3><a
href="https://github.com/dessant/lock-threads/compare/v2.1.1...v2.1.2">2.1.2</a>
(2021-08-17)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>ignore error when commenting on issue converted to discussion (<a
href="60d2a1a4be">60d2a1a</a>),
closes <a
href="https://github-redirect.dependabot.com/dessant/lock-threads/issues/24">#24</a></li>
</ul>
<h3><a
href="https://github.com/dessant/lock-threads/compare/v2.1.0...v2.1.1">2.1.1</a>
(2021-07-09)</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c1b35aecc5"><code>c1b35ae</code></a>
chore(release): 4.0.0</li>
<li><a
href="32986e2696"><code>32986e2</code></a>
fix: update docs</li>
<li><a
href="b677b85bbb"><code>b677b85</code></a>
chore: update workflows</li>
<li><a
href="dc42875c06"><code>dc42875</code></a>
chore: update package</li>
<li><a
href="38e9185581"><code>38e9185</code></a>
fix: update dependencies</li>
<li><a
href="08e671be8a"><code>08e671b</code></a>
chore: add upgrade guide</li>
<li>See full diff in <a
href="e460dfeb36...c1b35aecc5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dessant/lock-threads&package-manager=github_actions&previous-version=3.0.0&new-version=4.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2022-12-05 09:55:17 -03:00
Engin Diri
e57416e0ab
chore: update lock task parameter due to breaking change (#3623)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

Update lock task due to breaking changes 


https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md#changelog

<!-- Why is this change being made? -->

Updated the properties

<!-- # Provide links to any relevant tickets, URLs or other resources
-->

...
2022-12-05 09:54:29 -03:00
dependabot[bot]
50d1ca68e2
feat(deps): bump golang.org/x/text from 0.4.0 to 0.5.0 (#3622)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.4.0 to
0.5.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c8236a6712"><code>c8236a6</code></a>
unicode/bidi: remove unused global</li>
<li><a
href="ada7473102"><code>ada7473</code></a>
all: remove redundant type conversion</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.4.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-05 09:53:37 -03:00
Carlos A Becker
5c15e5a6ef
docs: errors/build
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-04 10:29:02 -03:00
Carlos A Becker
b06f217e3b
docs: update docker options and schema
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-02 22:38:39 -03:00
actions-user
370575107e chore: docs auto-update 2022-12-03 00:51:42 +00:00
Carlos Alexandro Becker
f5696d01ee
feat: custom tag.sort (#3611)
closes #3609

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-12-02 21:50:04 -03:00
dependabot[bot]
4c62c9b450
feat(deps): bump golang from d171aa3 to 8bd8a4b (#3617)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps golang from `d171aa3` to `8bd8a4b`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang&package-manager=docker&previous-version=1.19.3-alpine&new-version=1.19.3-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 09:10:07 -03:00
dependabot[bot]
2228edc406
chore(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (#3616)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.3.1
to 3.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>Add support for go.work and pass the token input through on
GHES</h2>
<p>In scope of this release we added <a
href="https://github-redirect.dependabot.com/actions/setup-go/pull/283">support
for go.work file to pass it in go-version-file input</a>.</p>
<pre lang="yaml"><code>steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v3
    with:
      go-version-file: go.work
  - run: go run hello.go
</code></pre>
<p>Besides, we added support to <a
href="https://github-redirect.dependabot.com/actions/setup-go/pull/277">pass
the token input through on GHES</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d0a58c1c4d"><code>d0a58c1</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/294">#294</a>
from JamesMGreene/patch-1</li>
<li><a
href="3dcd9d6eb3"><code>3dcd9d6</code></a>
Update to latest <code>actions/publish-action</code></li>
<li><a
href="e983b65a44"><code>e983b65</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/283">#283</a>
from koba1t/add_support_gowork_for_go-version-file</li>
<li><a
href="27b43e1b0d"><code>27b43e1</code></a>
Pass the token input through on GHES (<a
href="https://github-redirect.dependabot.com/actions/setup-go/issues/277">#277</a>)</li>
<li><a
href="7678c83214"><code>7678c83</code></a>
add support gowork for go-version-file</li>
<li>See full diff in <a
href="c4a742cab1...d0a58c1c4d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=3.3.1&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 09:09:52 -03:00
dependabot[bot]
c26340a267
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.4 to 4.16.0 (#3615)
Bumps
[stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action)
from 4.15.4 to 4.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/releases">stefanzweifel/git-auto-commit-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.16.0</h2>
<h2>Changed</h2>
<ul>
<li>Don't commit files when only LF/CRLF changes (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/265">#265</a>)
<a href="https://github.com/@ZeroRin"><code>@​ZeroRin</code></a></li>
<li>Update default email address of github-actions[bot] (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/264">#264</a>)
<a href="https://github.com/@Teko012"><code>@​Teko012</code></a></li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Fix link and text for workflow limitation (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/263">#263</a>)
<a href="https://github.com/@Teko012"><code>@​Teko012</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md">stefanzweifel/git-auto-commit-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>The format is based on <a
href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>
and this project adheres to <a
href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.16.0...HEAD">Unreleased</a></h2>
<blockquote>
<p>TBD</p>
</blockquote>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.4...v4.16.0">v4.16.0</a>
- 2022-12-02</h2>
<h3>Changed</h3>
<ul>
<li>Don't commit files when only LF/CRLF changes (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/265">#265</a>)
<a href="https://github.com/@ZeroRin"><code>@​ZeroRin</code></a></li>
<li>Update default email address of github-actions[bot] (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/264">#264</a>)
<a href="https://github.com/@Teko012"><code>@​Teko012</code></a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix link and text for workflow limitation (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/263">#263</a>)
<a href="https://github.com/@Teko012"><code>@​Teko012</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.3...v4.15.4">v4.15.4</a>
- 2022-11-05</h2>
<h3>Fixed</h3>
<ul>
<li>Let Action fail if git binary can't be located (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/261">#261</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Bump github/super-linter from 3 to 4 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/258">#258</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
<li>Bump bats from 1.7.0 to 1.8.2 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/259">#259</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
<li>Bump actions/checkout from 2 to 3 (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/257">#257</a>)
<a
href="https://github.com/@dependabot"><code>@​dependabot</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.2...v4.15.3">v4.15.3</a>
- 2022-10-26</h2>
<h3>Changed</h3>
<ul>
<li>Use deprecated set-output syntax if GITHUB_OUTPUT environment is not
available (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/255">#255</a>)
<a
href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.1...v4.15.2">v4.15.2</a>
- 2022-10-22</h2>
<h3>Changed</h3>
<ul>
<li>Replace set-output usage with GITHUB_OUTPUT (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/pull/252">#252</a>)
<a href="https://github.com/amonshiz"><code>@​amonshiz</code></a></li>
</ul>
<h2><a
href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.15.0...v4.15.1">v4.15.1</a>
- 2022-10-10</h2>
<h3>Fixed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3ea6ae190b"><code>3ea6ae1</code></a>
Fix &quot;nothing to commit&quot; error with LF/CRLF changes <a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/241">#241</a>
(<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/265">#265</a>)</li>
<li><a
href="976f22029f"><code>976f220</code></a>
Fix github-actions[bot] email address (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/264">#264</a>)</li>
<li><a
href="ebb5756042"><code>ebb5756</code></a>
Fix link and text for workflow limitation (<a
href="https://github-redirect.dependabot.com/stefanzweifel/git-auto-commit-action/issues/263">#263</a>)</li>
<li><a
href="3dce995a13"><code>3dce995</code></a>
Update CHANGELOG</li>
<li>See full diff in <a
href="0b007fbd11...3ea6ae190b">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stefanzweifel/git-auto-commit-action&package-manager=github_actions&previous-version=4.15.4&new-version=4.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 09:08:33 -03:00
dependabot[bot]
0a59bc4773
chore(deps): bump github/codeql-action from 2.1.33 to 2.1.35 (#3614)
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.1.33 to 2.1.35.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.1.35 - 01 Dec 2022</h2>
<p>No user facing changes.</p>
<h2>2.1.34 - 25 Nov 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.4. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1391">#1391</a></li>
<li>Fixed a bug where some the <code>init</code> action and the
<code>analyze</code> action would have different sets of experimental
feature flags enabled. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1384">#1384</a></li>
</ul>
<h2>2.1.33 - 16 Nov 2022</h2>
<ul>
<li>Go is now analyzed in the same way as other compiled languages such
as C/C++, C#, and Java. This completes the rollout of the feature
described in <a
href="https://github.com/github/codeql-action/blob/main/#2127---06-oct-2022">CodeQL
Action version 2.1.27</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1322">#1322</a></li>
<li>Bump the minimum CodeQL bundle version to 2.6.3. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1358">#1358</a></li>
</ul>
<h2>2.1.32 - 14 Nov 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.3. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1348">#1348</a></li>
<li>Update the ML-powered additional query pack for JavaScript to
version 0.4.0. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1351">#1351</a></li>
</ul>
<h2>2.1.31 - 04 Nov 2022</h2>
<ul>
<li>The <code>rb/weak-cryptographic-algorithm</code> Ruby query has been
updated to no longer report uses of hash functions such as
<code>MD5</code> and <code>SHA1</code> even if they are known to be
weak. These hash algorithms are used very often in non-sensitive
contexts, making the query too imprecise in practice. For more
information, see the corresponding change in the <a
href="https://github-redirect.dependabot.com/github/codeql/pull/11129">github/codeql
repository</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1344">#1344</a></li>
</ul>
<h2>2.1.30 - 02 Nov 2022</h2>
<ul>
<li>Improve the error message when using CodeQL bundle version 2.7.2 and
earlier in a workflow that runs on a runner image such as
<code>ubuntu-22.04</code> that uses glibc version 2.34 and later. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1334">#1334</a></li>
</ul>
<h2>2.1.29 - 26 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.2. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1320">#1320</a></li>
</ul>
<h2>2.1.28 - 18 Oct 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.1. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1294">#1294</a></li>
<li>Replace uses of GitHub Actions command <code>set-output</code>
because it is now deprecated. See more information in the <a
href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">GitHub
Changelog</a>. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1301">#1301</a></li>
</ul>
<h2>2.1.27 - 06 Oct 2022</h2>
<ul>
<li>We are rolling out a feature of the CodeQL Action in October 2022
that changes the way that Go code is analyzed to be more consistent with
other compiled languages like C/C++, C#, and Java. You do not need to
alter your code scanning workflows. If you encounter any problems,
please <a href="https://github.com/github/codeql-action/issues">file an
issue</a> or open a private ticket with GitHub Support and request an
escalation to engineering.</li>
</ul>
<h2>2.1.26 - 29 Sep 2022</h2>
<ul>
<li>Update default CodeQL bundle version to 2.11.0. <a
href="https://github-redirect.dependabot.com/github/codeql-action/pull/1267">#1267</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b2a92eb56d"><code>b2a92eb</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1406">#1406</a>
from github/update-v2.1.35-9af9a11d</li>
<li><a
href="075b74d36e"><code>075b74d</code></a>
Update changelog for v2.1.35</li>
<li><a
href="9af9a11da8"><code>9af9a11</code></a>
Stop running fallback Go autobuild if database is finalized (<a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1405">#1405</a>)</li>
<li><a
href="a631f4b016"><code>a631f4b</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1400">#1400</a>
from github/aeisenberg/fix-test-error</li>
<li><a
href="1384ce4ab3"><code>1384ce4</code></a>
Fixes spurious error messages in tests</li>
<li><a
href="160613c380"><code>160613c</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1402">#1402</a>
from github/rasmuswl/new-virtualenv</li>
<li><a
href="caf1c5057b"><code>caf1c50</code></a>
python-setup: Remove outdated comment</li>
<li><a
href="c62445de22"><code>c62445d</code></a>
python-setup: rely on new <code>virtualenv</code> for venv creation in
Ubuntu 22.04</li>
<li><a
href="9dac9f748a"><code>9dac9f7</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/github/codeql-action/issues/1396">#1396</a>
from github/mergeback/v2.1.34-to-main-312e093a</li>
<li><a
href="c6e756bb39"><code>c6e756b</code></a>
Update checked-in dependencies</li>
<li>Additional commits viewable in <a
href="678fc3afe2...b2a92eb56d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.1.33&new-version=2.1.35)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 09:08:17 -03:00
dependabot[bot]
45868b8e5b
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.22.1 to 2.22.2 (#3613)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.22.1 to 2.22.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.22.2</h2>
<h2>Changelog</h2>
<h3>Bug fixes</h3>
<ul>
<li>61de4b54e0938be65f94ba74d5b90cbb98b628b3: fix(deps): bump
github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/582">#582</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>2918f99b607189c0f4cb70de98d8e294fd9252ba: fix: improve contents.type
(<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/581">#581</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.22.1...v2.22.2">https://github.com/goreleaser/nfpm/compare/v2.22.1...v2.22.2</a></p>
<hr />
<ul>
<li>Check out <a href="https://goreleaser.com">GoReleaser</a>: it
integrates nFPM to the release pipeline of your Go projects.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66760061ee"><code>6676006</code></a>
test: fix apk tests</li>
<li><a
href="61de4b54e0"><code>61de4b5</code></a>
fix(deps): bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/582">#582</a>)</li>
<li><a
href="2918f99b60"><code>2918f99</code></a>
fix: improve contents.type (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/581">#581</a>)</li>
<li><a
href="b30373beb0"><code>b30373b</code></a>
docs: Add more detail to configuration docs (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/579">#579</a>)</li>
<li>See full diff in <a
href="https://github.com/goreleaser/nfpm/compare/v2.22.1...v2.22.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.22.1&new-version=2.22.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-01 09:26:51 -03:00
Carlos A Becker
a3d3ab2058
fix: improve docker warning 2022-11-30 22:47:53 -03:00
dependabot[bot]
a2308ee608
feat(deps): bump github.com/disgoorg/disgo from 0.13.22 to 0.14.0 (#3610)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.13.22 to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add pagination limit as a param for GetMembers() by <a
href="https://github.com/beachasaurus-rex"><code>@​beachasaurus-rex</code></a>
in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/212">disgoorg/disgo#212</a></li>
<li>add support for nsfw application commands by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/207">disgoorg/disgo#207</a></li>
<li>new select menu types by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/205">disgoorg/disgo#205</a></li>
<li>fix rare ratelimit hits due to prioritizing the <code>reset</code>
header over <code>resetAfter</code> header by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="ee9c030662</a></li>
</ul>
<p>…</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.13.22...v0.14.0">https://github.com/disgoorg/disgo/compare/v0.13.22...v0.14.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5e33848282"><code>5e33848</code></a>
new select menu types (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/205">#205</a>)</li>
<li><a
href="376d97e6a6"><code>376d97e</code></a>
add support for nsfw application commands (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/207">#207</a>)</li>
<li><a
href="ad09d87954"><code>ad09d87</code></a>
add String method for Permissions</li>
<li><a
href="821051c700"><code>821051c</code></a>
Add pagination limit as a param for GetMembers() (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/212">#212</a>)</li>
<li><a
href="ee9c030662"><code>ee9c030</code></a>
fix rare ratelimit hits due to prioritizing the reset header over
resetAfter ...</li>
<li><a
href="094442a709"><code>094442a</code></a>
use golangci-lint action</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.13.22...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.13.22&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-30 07:15:50 -03:00
Ori Rawlings
19ab124f1b
fix: retain symlinks added to zip archives (#3585)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

fixes #3584 

When following the reproduction steps in #3584 I now get the following
contents for the zip archive:
```
$ goreleaser --snapshot --skip-publish
...
$ (mkdir thezip && cd thezip && unzip ../dist/test_0.0.0-SNAPSHOT-none_darwin_amd64.zip) && ls -lR thezip
Archive:  ../dist/test_0.0.0-SNAPSHOT-none_darwin_amd64.zip
  inflating: a/x                     -> ../x 
  inflating: a/x2                    -> x 
  inflating: x                       
  inflating: test                    
finishing deferred symbolic links:
  a/x                    -> ../x
  a/x2                   -> x
total 1640
drwxr-xr-x  4 orawlings  staff     128 Nov 22 16:19 a
-rwxr-xr-x  1 orawlings  staff  833104 Nov 22 16:19 test
-rw-r--r--  1 orawlings  staff       2 Nov 22 15:32 x

thezip/a:
total 0
lrwxr-xr-x  1 orawlings  staff  4 Nov 22 16:19 x -> ../x
lrwxr-xr-x  1 orawlings  staff  1 Nov 22 16:19 x2 -> x
```

<!-- Why is this change being made? -->

I'm using goreleaser for a project that packages multiple binaries in
zip archives. We also include symlinks within the zip archives to give
some of the binaries an alternate (usually shorter) spelling so they are
easier to invoke on the command line.

This brings the zip archive behavior regarding symlinks in line with
tar.gz and tar archives.

<!-- # Provide links to any relevant tickets, URLs or other resources
-->
2022-11-29 22:05:18 -03:00
Carlos A Becker
7242733140
test: fix nfpm tests
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-29 21:59:38 -03:00
Carlos A Becker
54341682e0
docs: improve modeline docs
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-29 21:44:56 -03:00
Carlos Alexandro Becker
e72ab30ac8
fix: improve schema for signs (#3603)
adds all the options allowed in the `artifacts` field to the schema

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-29 21:38:51 -03:00
Carlos Alexandro Becker
50bd78439c
fix: log request-id on upload error and release create/update (#3608)
this should help when reporting issues to github, especially the magical
"failed successfully" error

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-29 21:38:39 -03:00
Carlos Alexandro Becker
24d86475b4
fix: warn if list has multiple files with same name (#3607)
`List()` "materializes" the filters, so its used everywhere... if we
have multiple files with the same name there, its likely some filter
wasn't enough, or that the user configuration is faulty. Either way, we
should warn about it to help prevent release issues (like duplicated
assets on github).

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-29 21:37:23 -03:00
Carlos A Becker
6ff89366ca
fix: improve nfpm error
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-29 08:13:53 -03:00
dependabot[bot]
c8f007653c
feat(deps): bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 (#3606)
Bumps
[github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver)
from 3.1.1 to 3.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/releases">github.com/Masterminds/semver/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.2.0</h2>
<h2>Added</h2>
<ul>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/190">#190</a>:
Added text marshaling and unmarshaling</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/167">#167</a>:
Added JSON marshalling for constraints (thanks <a
href="https://github.com/SimonTheLeg"><code>@​SimonTheLeg</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/173">#173</a>:
Implement encoding.TextMarshaler and encoding.TextUnmarshaler on Version
(thanks <a
href="https://github.com/MarkRosemaker"><code>@​MarkRosemaker</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/179">#179</a>:
Added New() version constructor (thanks <a
href="https://github.com/kazhuravlev"><code>@​kazhuravlev</code></a>)</li>
</ul>
<h2>Changed</h2>
<ul>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/182">#182</a>/<a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/183">#183</a>:
Updated CI testing setup</li>
</ul>
<h2>Fixed</h2>
<ul>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/186">#186</a>:
Fixing issue where validation of constraint section gave false
positives</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/176">#176</a>:
Fix constraints check with *-0 (thanks <a
href="https://github.com/mtt0"><code>@​mtt0</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/181">#181</a>:
Fixed Caret operator (^) gives unexpected results when the minor version
in constraint is 0 (thanks <a
href="https://github.com/arshchimni"><code>@​arshchimni</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/161">#161</a>:
Fixed godoc (thanks <a
href="https://github.com/afirth"><code>@​afirth</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/blob/master/CHANGELOG.md">github.com/Masterminds/semver/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.2.0 (2022-11-28)</h2>
<h3>Added</h3>
<ul>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/190">#190</a>:
Added text marshaling and unmarshaling</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/167">#167</a>:
Added JSON marshalling for constraints (thanks <a
href="https://github.com/SimonTheLeg"><code>@​SimonTheLeg</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/173">#173</a>:
Implement encoding.TextMarshaler and encoding.TextUnmarshaler on Version
(thanks <a
href="https://github.com/MarkRosemaker"><code>@​MarkRosemaker</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/179">#179</a>:
Added New() version constructor (thanks <a
href="https://github.com/kazhuravlev"><code>@​kazhuravlev</code></a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/182">#182</a>/<a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/183">#183</a>:
Updated CI testing setup</li>
</ul>
<h3>Fixed</h3>
<ul>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/186">#186</a>:
Fixing issue where validation of constraint section gave false
positives</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/176">#176</a>:
Fix constraints check with *-0 (thanks <a
href="https://github.com/mtt0"><code>@​mtt0</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/181">#181</a>:
Fixed Caret operator (^) gives unexpected results when the minor version
in constraint is 0 (thanks <a
href="https://github.com/arshchimni"><code>@​arshchimni</code></a>)</li>
<li><a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/161">#161</a>:
Fixed godoc (thanks <a
href="https://github.com/afirth"><code>@​afirth</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4694ab0ad3"><code>4694ab0</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/191">#191</a>
from mattfarina/update-changelong-3.2.0</li>
<li><a
href="0ca29f222a"><code>0ca29f2</code></a>
Updating changelong for 3.2.0 release</li>
<li><a
href="3efb84cbde"><code>3efb84c</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/190">#190</a>
from mattfarina/constraints-text-marshal</li>
<li><a
href="3c1d0f28dd"><code>3c1d0f2</code></a>
Adding text marshaling and unmarshaling</li>
<li><a
href="00300c4686"><code>00300c4</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/167">#167</a>
from SimonTheLeg/master</li>
<li><a
href="2084c82535"><code>2084c82</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/173">#173</a>
from MarkRosemaker/implement-encoding.TextMarshaler-a...</li>
<li><a
href="b22e1a4769"><code>b22e1a4</code></a>
Updating the Go version in the go.mod file</li>
<li><a
href="b8121eb457"><code>b8121eb</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/186">#186</a>
from mattfarina/test-bug-fix</li>
<li><a
href="ee95afbd4e"><code>ee95afb</code></a>
Fixing issue where validation of constraint setion gave false
positives</li>
<li><a
href="19590653ca"><code>1959065</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/Masterminds/semver/issues/176">#176</a>
from mtt0/master</li>
<li>Additional commits viewable in <a
href="https://github.com/Masterminds/semver/compare/v3.1.1...v3.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Masterminds/semver/v3&package-manager=go_modules&previous-version=3.1.1&new-version=3.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-29 07:52:29 -03:00
Carlos A Becker
bb6181c1bb
docs: document release upload errors 2022-11-29 07:19:50 -03:00
Carlos A Becker
4955e1296e
Merge branch 'v1.13.1-dev' 2022-11-28 22:44:17 -03:00
Carlos A Becker
7ab711d682
test: fixed some tests
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-28 22:42:29 -03:00
Carlos A Becker
522a60087a
chore: use digest when signing
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-28 22:42:02 -03:00
Carlos A Becker
b0ffc7af05
chore: fix mastodon announce url 2022-11-28 22:03:51 -03:00
Carlos Alexandro Becker
d3cdd96c39
fix: missing digests on manifests (#3602)
it was missing the digest parsing for the manifest, and there were no
tests covering it.

now the tests are there, and so is the fix.

refs #3599
2022-11-28 22:03:26 -03:00
Carlos Alexandro Becker
c2adc1727f
fix: missing digests on manifests (#3602)
it was missing the digest parsing for the manifest, and there were no
tests covering it.

now the tests are there, and so is the fix.

refs #3599
2022-11-28 21:30:16 -03:00
Carlos A Becker
f05f3b5b7f
fix: merge issues 2022-11-28 14:28:38 -03:00
Carlos Alexandro Becker
1b8395d6b6
feat(build): allow to template env (#3592)
GoReleaser evolved a lot since the last time I tried to implement this
>1 year ago.
Now its 100% possible, and way simpler to do it!

closes #3580
refs #2583

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-25 15:26:29 -03:00
Carlos Alexandro Becker
e54656438b
feat: deprecate replacements (#3589)
The replacements thing was always a bit weird, especially on archives.

We can solve that with templates, so, removing I'm deprecating it.

Also did the same on other places that had it the same feature.

Closes #3588

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-25 15:26:14 -03:00
dependabot[bot]
f83a942fd5
feat(deps): bump golang.org/x/text from 0.3.7 to 0.4.0 (#3595) 2022-11-25 09:34:10 -03:00
Carlos Alexandro Becker
541e3dfed9
feat(brew): allow to template brew.install (#3593) 2022-11-25 09:32:43 -03:00
Carlos A Becker
eedf9578a6
docs: clarify cgo
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-24 18:18:29 -03:00
Carlos Alexandro Becker
a1305d3912
fix: validate env templates (#3591)
ignore invalid environment variables (e.g. no key, no value, or no equal
sign)

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2022-11-24 17:12:54 -03:00
dependabot[bot]
9abc613ad1
feat(deps): bump github.com/disgoorg/disgo from 0.13.21 to 0.13.22 (#3577)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.13.21 to 0.13.22.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.22</h2>
<h2>What's Changed</h2>
<ul>
<li>move json package into its own module <a
href="https://github.com/disgoorg/json">https://github.com/disgoorg/json</a>
by <a href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a>
in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/206">disgoorg/disgo#206</a></li>
<li>add <code>RegexPatterns</code> to
<code>AutoModerationTriggerMetadata</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/201">disgoorg/disgo#201</a></li>
<li>add <code>UserFlagActiveDeveloper</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/208">disgoorg/disgo#208</a></li>
<li>add <code>ApplicationID</code> to <code>Message</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="4049f4c3ed</a></li>
<li>remove <code>GuildFeaturePrivateThreads</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="1855c7f01a</a></li>
<li>rename <code>Stickers</code> to <code>StickerItems</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="65d39b859c</a></li>
</ul>
<h2>Breaking</h2>
<ul>
<li><code>GuildFeaturePrivateThreads</code> was removed</li>
<li><code>Stickers</code> in <code>Message</code> were renamed to
<code>StickerItems</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.13.21...v0.13.22">https://github.com/disgoorg/disgo/compare/v0.13.21...v0.13.22</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="65d39b859c"><code>65d39b8</code></a>
rename Stickers to StickerItems</li>
<li><a
href="4049f4c3ed"><code>4049f4c</code></a>
add ApplicationID to Message</li>
<li><a
href="1855c7f01a"><code>1855c7f</code></a>
remove GuildFeaturePrivateThreads</li>
<li><a
href="79251f5123"><code>79251f5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/208">#208</a>
from disgoorg/patch/active-dev</li>
<li><a
href="a1546becb6"><code>a1546be</code></a>
add UserFlagActiveDeveloper</li>
<li><a
href="bd480c2f50"><code>bd480c2</code></a>
use new github.com/disgoorg/json module (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/206">#206</a>)</li>
<li><a
href="d539fda3f6"><code>d539fda</code></a>
update github actions</li>
<li><a
href="cc0e3a1372"><code>cc0e3a1</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/201">#201</a>
from disgoorg/patch/automod-regex</li>
<li><a
href="d64d5ebf77"><code>d64d5eb</code></a>
fix automod example</li>
<li><a
href="c9af872e5f"><code>c9af872</code></a>
add RegexPatterns to automod metadata</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.13.21...v0.13.22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.13.21&new-version=0.13.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 15:49:16 -03:00
dependabot[bot]
85f4be900e
feat(deps): bump github.com/xanzy/go-gitlab from 0.74.0 to 0.76.0 (#3578)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.74.0 to 0.76.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ffa70b0849"><code>ffa70b0</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1573">#1573</a>
from timofurrer/feature/metadata</li>
<li><a
href="4c641dfb87"><code>4c641df</code></a>
Implement Metadata API</li>
<li><a
href="d21dc36e99"><code>d21dc36</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1575">#1575</a>
from mycrEEpy/email-confirmed-at</li>
<li><a
href="710f2879e9"><code>710f287</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1576">#1576</a>
from r8ygun/master</li>
<li><a
href="fce97724a0"><code>fce9772</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1506">#1506</a>
from timofurrer/feature/avatars</li>
<li><a
href="02292fff2c"><code>02292ff</code></a>
Fully support project and group avatars</li>
<li><a
href="677a0fa2f7"><code>677a0fa</code></a>
Add ID parameter to FeatureFlagStrategyOptions</li>
<li><a
href="a258c409a9"><code>a258c40</code></a>
add ConfirmedAt to Email</li>
<li><a
href="3ef2120d1f"><code>3ef2120</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1570">#1570</a>
from FelixKampfer/add_field_to_projects_struct</li>
<li><a
href="4172c04a90"><code>4172c04</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1572">#1572</a>
from timofurrer/feature/settings-can-create-group</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.74.0...v0.76.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.74.0&new-version=0.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 15:49:02 -03:00