go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-03-17 20:47:50 +02:00
Code Issues Releases Activity
4,615 Commits 14 Branches 563 Tags
Go to file
Clone
Open with VS Code Open with VSCodium
Download ZIP Download TAR.GZ Download BUNDLE
dependabot[bot] 38b82f1117
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979) 
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor)
from 1.0.1 to 1.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's
releases</a>.</em></p>
<blockquote>
<h1>v1.1.1</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li>Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li>Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li>Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>remove legacy encrypted cosign key (<a
href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li>
<li>swap cjson dependency (<a
href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li>
<li>Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-2h5h-59f5-c5x9</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Hayden B</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p>
<h1>v1.1.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>improve validation on intoto v0.0.2 type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li>
<li>add feature to limit HTTP request body length to process (<a
href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li>
<li>add information about the file size limit (<a
href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li>
<li>Add script to backfill Redis from Rekor (<a
href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li>
<li>Feature: add search support for sha512 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>fuzzing: refactor OSS-Fuzz build script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li>
<li>Update cloudbuild for cosign 2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li>
<li>Tests - Additional sharding tests (<a
href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li>
<li>jar type: add fuzzer for 3rd-party dep (<a
href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li>
<li>update cosign to 2.0.0 and builder image and also cosign flags (<a
href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li>
<li>fuzzing: move alpine utils to fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li>
<li>fuzzing: add seed for alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li>
<li>jar: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li>
<li>fuzzing: open writer later in fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li>
<li>fuzzing: remove tar operations in alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li>
<li>alpine: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li>
<li>hashedrekord: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li>
<li>fuzzing: add call to IndexKeys in multiple fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li>
<li>fuzzing: improve cose fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li>
<li>fuzzing: improve fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's
changelog</a>.</em></p>
<blockquote>
<h1>v1.1.1</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li>Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li>Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li>Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>remove legacy encrypted cosign key (<a
href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li>
<li>swap cjson dependency (<a
href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li>
<li>Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-2h5h-59f5-c5x9</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Hayden B</li>
</ul>
<h1>v1.1.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>improve validation on intoto v0.0.2 type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li>
<li>add feature to limit HTTP request body length to process (<a
href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li>
<li>add information about the file size limit (<a
href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li>
<li>Add script to backfill Redis from Rekor (<a
href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li>
<li>Feature: add search support for sha512 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>fuzzing: refactor OSS-Fuzz build script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li>
<li>Update cloudbuild for cosign 2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li>
<li>Tests - Additional sharding tests (<a
href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li>
<li>jar type: add fuzzer for 3rd-party dep (<a
href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li>
<li>update cosign to 2.0.0 and builder image and also cosign flags (<a
href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li>
<li>fuzzing: move alpine utils to fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li>
<li>fuzzing: add seed for alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li>
<li>jar: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li>
<li>fuzzing: open writer later in fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li>
<li>fuzzing: remove tar operations in alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li>
<li>alpine: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li>
<li>hashedrekord: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li>
<li>fuzzing: add call to IndexKeys in multiple fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li>
<li>fuzzing: improve cose fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li>
<li>fuzzing: improve fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li>
<li>fuzzing: improve alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li>
<li>fuzzing: go mod edit go-fuzz-headers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0c1914e5e9"><code>0c1914e</code></a>
update CHANGELOG for v1.1.1 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li>
<li><a
href="cf42ace826"><code>cf42ace</code></a>
Merge pull request from GHSA-2h5h-59f5-c5x9</li>
<li><a
href="46ac0b224e"><code>46ac0b2</code></a>
Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li><a
href="5d6e9723b1"><code>5d6e972</code></a>
build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li>
<li><a
href="baa14ce4eb"><code>baa14ce</code></a>
Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li><a
href="059e097a0b"><code>059e097</code></a>
build(deps): bump github.com/go-playground/validator/v10 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li>
<li><a
href="1f75c79256"><code>1f75c79</code></a>
Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
<li><a
href="98163f336c"><code>98163f3</code></a>
build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li>
<li><a
href="24cb647106"><code>24cb647</code></a>
Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li><a
href="39bd69bc7c"><code>39bd69b</code></a>
Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-03 23:11:29 -03:00
.github
build: use ghaction-upx
2023-05-03 17:06:46 +00:00
cmd
chore: thanks for using goreleaser!
2023-04-30 17:48:36 +00:00
internal
fix: typo in a brew error message
2023-05-02 12:18:36 +00:00
pkg
feat: IsGitDirty template variable (#3967)
2023-05-02 01:04:18 -03:00
scripts
docs: fix releases.json
2023-01-02 15:16:33 -03:00
testdata/TestVersion
feat: new --version output (#3962)
2023-04-30 14:19:55 -03:00
www
docs: note about upx not in path
2023-05-03 17:59:59 +00:00
.editorconfig
feat: arch user repository integration (#2838)
2022-01-20 14:59:39 -03:00
.gitattributes
docs: improve build (#3674)
2022-12-29 14:55:45 -03:00
.gitignore
docs: improve build (#3674)
2022-12-29 14:55:45 -03:00
.gitleaks.toml
fix: run gitleaks and grype on prs (#3332)
2022-08-21 15:20:31 -03:00
.golangci.yaml
build: use go1.20 (#3757)
2023-02-05 13:39:39 -03:00
.goreleaser.yaml
fix: pass tree state as ldflag (#3968)
2023-05-02 01:04:48 -03:00
.grype.yaml
fix(grype): ignore unfixed vulns
2022-08-21 15:36:37 -03:00
.mailmap
chore: update mailmap
2022-10-31 16:06:50 -03:00
art.txt
feat: new --version output (#3962)
2023-04-30 14:19:55 -03:00
CONTRIBUTING.md
build: use go1.20 (#3757)
2023-02-05 13:39:39 -03:00
Dockerfile
feat(deps): bump golang from 1.20.3-alpine to 1.20.4-alpine (#3976)
2023-05-03 09:53:08 -03:00
EULA.md
docs: make co-marketing more strict on eula (#3583)
2022-11-22 23:54:11 -03:00
go.mod
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979)
2023-05-03 23:11:29 -03:00
go.sum
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979)
2023-05-03 23:11:29 -03:00
LICENSE.md
docs: update license year
2022-02-08 14:21:36 -03:00
main_test.go
test: force constant goversion et al on tests
2023-05-03 18:00:13 +00:00
main.go
fix: pass tree state as ldflag (#3968)
2023-05-02 01:04:48 -03:00
README.md
docs: fix README badge (#3652)
2022-12-20 16:09:19 -03:00
SECURITY.md
docs: update email addresses
2022-05-18 12:12:42 -03:00
Taskfile.yml
build: increase release timeout (#3734)
2023-01-30 23:07:12 -03:00
USERS.md
docs: update USERS.md (#3921)
2023-04-10 08:54:26 -03:00

README.md

GoReleaser Logo

GoReleaser

Deliver Go binaries as fast and easily as possible.

GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. All that wrapped in your favorite CI.

Get GoReleaser

Documentation

Documentation is hosted live at https://goreleaser.com

Community

You have questions, need support and or just want to talk about GoReleaser?

Here are ways to get in touch with the GoReleaser community:

Join Discord Follow Twitter GitHub Discussions

You can find the links above and all others here.

Code of Conduct

This project adheres to the Contributor Covenant code of conduct. By participating, you are expected to uphold this code. We appreciate your contribution. Please refer to our contributing guidelines for further information.

Badges

Release Software License Build status Codecov branch Artifact Hub Go Doc Powered By: GoReleaser Backers on Open Collective Sponsors on Open Collective Conventional Commits CII Best Practices

Sponsors

Does your company use goreleaser? Help keep the project bug-free and feature rich by sponsoring the project.

Backers

Love our work and community? Become a backer.

Contributors

This project exists thanks to all the people who contribute. [Contribute].

Stargazers over time

Stargazers over time

Description
Deliver Go binaries as fast and easily as possible
https://goreleaser.com/
apkdebdockergithub-actionsgogolanghacktoberfesthomebrewpackagerelease-automationrpmsnapcrafttravis
Readme 45 MiB
Languages
Go 93.4%
Nix 2.1%
Ruby 2%
YAML 1%
HTML 0.6%
Other 0.9%