also regex is not possible there currenctly, didnt realized it at the
time
refs #4255
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.12.0
to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.13.0</h2>
<p><strong>These are release notes are identical to that of
gopls@v0.13.0-pre.3. Thanks to all who tested the
prerelease!</strong></p>
<pre><code>go install golang.org/x/tools/gopls@v0.13.0
</code></pre>
<p>This release fixes several bugs and mitigates a few performance
regressions. It also somewhat reduces the latency and CPU cost of most
operations, and includes a few small additional features.</p>
<h1>Performance improvements</h1>
<p>While <a href="mailto:gopls@v0.12.x">gopls@v0.12.x</a> drastically
reduced memory usage, several operations got around 50% slower due to
additional I/O reading from the filesystem and time spent decoding
indexes. This release optimizes those additional operations to (in most
cases) achieve parity or better with the equivalent operation in
gopls@v0.11.0. Additionally, this release reduces total CPU while typing
or performing common operations.</p>
<h2>Faster code actions</h2>
<p>This release includes a particularly large performance improvement in
the evaluation of code actions (including formatting/goimports on save).
In the past, there have been several reasons why this operation was
expensive -- VS Code users may recognize the <code>getting code actions
from "Go"</code> pop-up. This release fundamentally changes
the way code actions are evaluated so that almost all of the work is
pre-computed. As a result, formatting and adding or removing imports on
save should be much faster.</p>
<h2>Analysis performance</h2>
<p>A notable exception to CPU performance parity with gopls@v0.11.0 is
running static analysis. In this case, the additional cost incurred by
<a href="mailto:gopls@v0.12.x">gopls@v0.12.x</a> was not a regression,
but rather the cost of analyzing many more packages to enable
"deep" static analysis (see "Improved static
analysis" in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.12.0">gopls@v0.12.0
release notes</a>.</p>
<p>In smaller repositories, the cost of this additional analysis is
negligible -- analysis does not run until you stop typing, and typically
just re-evaluates the changed package. However, it was discovered that
in large workspaces that import low-level packages with a very large API
surface (such as a cloud provider SDK or proto library), certain
quadratic factors involved with the encoding/decoding of analysis
results can dominate the cost of analysis, and result in enormous
resource consumption: overloading the CPU and exhausting all memory.</p>
<p>This release partially mitigates those quadratic factors,
significantly reducing their cost and limiting concurrency so that they
do not exhaust all resources. However, fully eliminating these factors
will require additional work to fix their quadratic nature. Until that
is done, analysis may continue to be costly on certain repos, especially
if <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#staticcheck-bool"><code>"staticcheck"</code></a>
is enabled (because staticcheck does more deep analysis than the default
set of analyzers).</p>
<p>In the meantime, a notification is added to make you aware when
analysis is slow, and provide an update on the progress of indexing
"deep" analysis results. Canceling this notification will
cancel the ongoing analysis, but it will resume after the next change.
If you don't want to see these notifications, you can set the new <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#analysisprogressreporting-bool"><code>"analysisProgressReporting"</code></a>
setting to <code>"false"</code>.
<img
src="https://github.com/golang/tools/assets/57144380/4335a3c9-245b-409d-ab5c-5bbb650b7234"
alt="image" />.</p>
<h1>New Features</h1>
<h2>Highlight deprecated symbols</h2>
<p>Deprecated symbols and packages are now marked as such. To turn off
this feature, disable the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#deprecated"><code>"deprecated"</code></a>
analysis.</p>
<p><img
src="https://github.com/golang/tools/assets/57144380/f6714035-f37b-487a-a110-591388bb5677"
alt="image" /></p>
<h2>Stub methods to fix missing method errors</h2>
<p>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#stubmethods"><code>"stubmethods"</code></a>
refactoring is now available as a quick-fix for errors related to
missing methods.
<img
src="https://github.com/golang/tools/assets/57144380/715c3025-8beb-4cd5-bb8c-970be197b897"
alt="image" /></p>
<h2>Improvements to function extraction</h2>
<p>Function extraction now puts <code>context.Context</code> parameters
first in the resulting extracted function. See <a
href="https://redirect.github.com/golang/go/issues/60738">golang/go#60738</a>
for details.</p>
<h2>Improvements to the embeddirective analyzer</h2>
<p>The embed directive analyzer now verifies the location of
<code>//go:embed</code> directives, and provides a quick-fix to add
missing <code>"embed"</code> imports.
<img
src="https://github.com/golang/tools/assets/57144380/acbe8599-3a2d-40cd-856e-3451ea03c939"
alt="image" /></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b5e55d1984"><code>b5e55d1</code></a>
go/analysis/analysistest: give better hint in SuggestedFix
assertion</li>
<li><a
href="a807ccf39a"><code>a807ccf</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="21090a2aa8"><code>21090a2</code></a>
gopls/internal/lsp/cache: use persistent.Set in a couple places</li>
<li><a
href="38b898b246"><code>38b898b</code></a>
internal/persistent: add Set</li>
<li><a
href="44f7796438"><code>44f7796</code></a>
gopls: add and enable the slog analyzer</li>
<li><a
href="2c6ba93996"><code>2c6ba93</code></a>
gopls: tidy for 1.17+</li>
<li><a
href="5a9656936d"><code>5a96569</code></a>
gopls/internal/lsp/cmd: don't use x/exp/slices</li>
<li><a
href="77c6ac601f"><code>77c6ac6</code></a>
gopls/internal/telemetry: don't schedule the next upload</li>
<li><a
href="010e045c4e"><code>010e045</code></a>
internal/persistent: use generics</li>
<li><a
href="a1a928ddbe"><code>a1a928d</code></a>
gopls: remove dead code</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Add a new function `map` to template functions.
`map` creates a map from a list of pairs of key values, then you can
convert a key to a value using `.Get`. This simplifies writing
key-mapping templates. For example, the defaule `archives.name_template`
```yaml
name_template: >-
{{ .ProjectName }}_
{{- title .Os }}_
{{- if eq .Arch "amd64" }}x86_64
{{- else if eq .Arch "386" }}i386
{{- else }}{{ .Arch }}{{ end }}
{{- if .Arm }}v{{ .Arm }}{{ end }}
```
becomes
```yaml
name_template: >-
{{ $arch := map "amd64" "x86_64" "386" "i386" -}}
{{ .ProjectName }}_
{{- title .OS }}_
{{- $arch.Get .Arch .Arch }}
{{- if .Arm }}v{{ .Arm }}{{ end }}
```
---------
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
this will log everything that's being skipped in the beginning of the
release process.
also added some tests to `skips`
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.11.0 to 0.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07085280e4"><code>0708528</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="a835fc4358"><code>a835fc4</code></a>
oauth2: move global auth style cache to be per-Config</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.11.0...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0.
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.15.1&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from
0.12.0 to 0.13.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0d375be9b6"><code>0d375be</code></a>
go.mod: update golang.org/x dependencies</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.33.0 to
0.34.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.34.0</h2>
<ul>
<li>
<p><strong>blob</strong></p>
<ul>
<li><strong>fileblob</strong>: Added an option to avoid using
<code>os.TempDir</code> for temp files.</li>
<li><strong>gcsblob</strong>: Don't hard-fail if no DefaultCredentials
are found.</li>
</ul>
</li>
<li>
<p><strong>aws/rds</strong>: Switch AWS RDS CA bundle to the officially
documented URL</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="22c0c79912"><code>22c0c79</code></a>
all: prelease (<a
href="https://redirect.github.com/google/go-cloud/issues/3308">#3308</a>)</li>
<li><a
href="55ed7f7110"><code>55ed7f7</code></a>
aws/rds: Switch AWS RDS CA bundle to the officially documented URL (<a
href="https://redirect.github.com/google/go-cloud/issues/3307">#3307</a>)</li>
<li><a
href="d6f90a4d2b"><code>d6f90a4</code></a>
Clean up deployment instructions a bit more</li>
<li><a
href="dfd6143fbc"><code>dfd6143</code></a>
Update website deployment instructions</li>
<li><a
href="62841e782d"><code>62841e7</code></a>
blob/gcsblob: Don't hard-fail if no DefaultCredentials are found (<a
href="https://redirect.github.com/google/go-cloud/issues/3306">#3306</a>)</li>
<li><a
href="1b4bd150ca"><code>1b4bd15</code></a>
blob/s3blob: Fix example (<a
href="https://redirect.github.com/google/go-cloud/issues/3305">#3305</a>)</li>
<li><a
href="7298f99c27"><code>7298f99</code></a>
all: update to go 1.21 (<a
href="https://redirect.github.com/google/go-cloud/issues/3301">#3301</a>)</li>
<li><a
href="dee61a596a"><code>dee61a5</code></a>
blob/fileblob: Fix for URL parameter for no_tmp_dir option. (<a
href="https://redirect.github.com/google/go-cloud/issues/3300">#3300</a>)</li>
<li><a
href="cfe20caf3c"><code>cfe20ca</code></a>
blob/fileblob: Add docstring about tempdirs (<a
href="https://redirect.github.com/google/go-cloud/issues/3296">#3296</a>)</li>
<li><a
href="9b62f468b3"><code>9b62f46</code></a>
blob/fileblob: Add an option to avoid using os.TempDir for temp files
(<a
href="https://redirect.github.com/google/go-cloud/issues/3295">#3295</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.33.0...v0.34.0">compare
view</a></li>
</ul>
</details>
<br />
<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>
| Dependency Name | Ignore Conditions |
| --- | --- |
| gocloud.dev | [>= 0.25.a, < 0.26] |
</details>
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.33.0&new-version=0.34.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.12.0 to
0.13.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f488e191e6"><code>f488e19</code></a>
unicode/norm: fix function name on comment</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps
[github.com/invopop/jsonschema](https://github.com/invopop/jsonschema)
from 0.7.0 to 0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0382c8ee65"><code>0382c8e</code></a>
Updating release github action definition</li>
<li><a
href="0f7909057f"><code>0f79090</code></a>
Updating readme example</li>
<li><a
href="b954aa23f1"><code>b954aa2</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/39">#39</a>
from arvidfm/additional-properties</li>
<li><a
href="0d62e119b7"><code>0d62e11</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/93">#93</a>
from invopop/default-number-fix</li>
<li><a
href="a4408ec0e9"><code>a4408ec</code></a>
Ensure default floats or ints are converted correctly</li>
<li><a
href="0ff6727c86"><code>0ff6727</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/92">#92</a>
from invopop/anyof-ref</li>
<li><a
href="4c3020b1ad"><code>4c3020b</code></a>
Adding anyof_ref tag, moving oneof_ref out of examples</li>
<li><a
href="88a348b426"><code>88a348b</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/69">#69</a>
from gmlewis/i68-oneof-ref</li>
<li><a
href="aadda03996"><code>aadda03</code></a>
tiny refactor to get field name tag from a method</li>
<li><a
href="2d282ecc80"><code>2d282ec</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/75">#75</a>
from balki/yamltag</li>
<li>Additional commits viewable in <a
href="https://github.com/invopop/jsonschema/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/invopop/jsonschema&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.90.0 to 0.91.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0d372da030"><code>0d372da</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1787">#1787</a>
from GaikwadPratik/merge_trains_fix</li>
<li><a
href="e4640349a8"><code>e464034</code></a>
fix: squash is bool parameter not string</li>
<li><a
href="da51eb19f3"><code>da51eb1</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1786">#1786</a>
from xanzy/bugfix/label-details</li>
<li><a
href="2205d5b7ca"><code>2205d5b</code></a>
Add custom MergRequest unmarshal logic for label details</li>
<li><a
href="cf347744dc"><code>cf34774</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1778">#1778</a>
from dannydd88/feature/job_token_access_settings</li>
<li><a
href="170162387f"><code>1701623</code></a>
Minor tweaks…</li>
<li><a
href="8b167f4982"><code>8b167f4</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1780">#1780</a>
from beekeep/feat/update-project-protected-envs</li>
<li><a
href="facdd3cc69"><code>facdd3c</code></a>
Keep comment line width below 80 chars</li>
<li><a
href="a3c81a73bd"><code>a3c81a7</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1779">#1779</a>
from beekeep/feat/group-protected-envs</li>
<li><a
href="fab9f865d0"><code>fab9f86</code></a>
Keep comment line width below 80 chars</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.90.0...v0.91.1">compare
view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.90.0&new-version=0.91.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
the paths of the artifacts always use forward slashes, and the logic to
handle the relative path stuff inside the sbom pipe did not account for
that.
running the paths through `filepath.Clean` beforehand fixes it.
also improved yamlschema a little bit :)
closes#4289
Laying the ground work to allow skipping more pipes without adding new
flags et al.
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
tested this on a fake repo, and it seems to fix the problem...
seems like choco does not like when the path has `/` in it, so passing
it through `filepath.Clean` fixes it.
also improved tests a bit, and made a small docs fix.
closes https://github.com/goreleaser/goreleaser/issues/4292