mirror of
https://github.com/goreleaser/goreleaser.git
synced 2025-01-10 03:47:03 +02:00
8f2daf7f76
Bumps [crazy-max/ghaction-upx](https://github.com/crazy-max/ghaction-upx) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/crazy-max/ghaction-upx/releases">crazy-max/ghaction-upx's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <ul> <li>Node 20 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.308.0">Actions Runner v2.308.0</a> or later) by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/crazy-max/ghaction-upx/pull/215">crazy-max/ghaction-upx#215</a></li> <li>Update yarn to 3.6.3 by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/crazy-max/ghaction-upx/pull/214">crazy-max/ghaction-upx#214</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crazy-max/ghaction-upx/compare/v2.4.0...v3.0.0">https://github.com/crazy-max/ghaction-upx/compare/v2.4.0...v3.0.0</a></p> <h2>v2.4.0</h2> <ul> <li>Bump <code>@actions/http-client</code> from 2.1.0 to 2.1.1 in <a href="https://redirect.github.com/crazy-max/ghaction-upx/pull/206">crazy-max/ghaction-upx#206</a></li> <li>Bump semver from 5.7.1 to 5.7.2 in <a href="https://redirect.github.com/crazy-max/ghaction-upx/pull/204">crazy-max/ghaction-upx#204</a></li> <li>Bump tough-cookie from 4.0.0 to 4.1.3 in <a href="https://redirect.github.com/crazy-max/ghaction-upx/pull/203">crazy-max/ghaction-upx#203</a></li> <li>Bump word-wrap from 1.2.3 to 1.2.5 in <a href="https://redirect.github.com/crazy-max/ghaction-upx/pull/209">crazy-max/ghaction-upx#209</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crazy-max/ghaction-upx/compare/v2.3.0...v2.4.0">https://github.com/crazy-max/ghaction-upx/compare/v2.3.0...v2.4.0</a></p> <h2>v2.3.0</h2> <ul> <li>Add <code>install-only</code> input (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/201">#201</a>)</li> <li>Bump <code>@actions/http-client</code> from 2.0.1 to 2.1.0 (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/195">#195</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crazy-max/ghaction-upx/compare/v2.2.0...v2.3.0">https://github.com/crazy-max/ghaction-upx/compare/v2.2.0...v2.3.0</a></p> <h2>v2.2.0</h2> <ul> <li>Check latest and tagged releases using releases-json (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/192">#192</a>)</li> <li>ci: generate upx-releases.json (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/186">#186</a>)</li> <li>Bump json5 from 2.1.3 to 2.2.3 (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/184">#184</a>)</li> <li>Bump minimatch from 3.0.4 to 3.1.2 (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/185">#185</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crazy-max/ghaction-upx/compare/v2.1.0...v2.2.0">https://github.com/crazy-max/ghaction-upx/compare/v2.1.0...v2.2.0</a></p> <h2>v2.1.0</h2> <ul> <li>Bump <code>@actions/core</code> from 1.6.0 to 1.10.0 (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/181">#181</a> <a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/182">#182</a>)</li> <li>Bump <code>@actions/http-client</code> from 1.0.11 to 2.0.1 (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/179">#179</a>)</li> <li>Bump <code>@actions/tool-cache</code> from 1.7.2 to 2.0.1 (<a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/178">#178</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crazy-max/ghaction-upx/compare/v2.0.0...v2.1.0">https://github.com/crazy-max/ghaction-upx/compare/v2.0.0...v2.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="0fc45e9126"><code>0fc45e9</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/213">#213</a> from crazy-max/dependabot/github_actions/actions/chec...</li> <li><a href="9465f624dd"><code>9465f62</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/215">#215</a> from crazy-max/update-node20</li> <li><a href="9eba60dcc9"><code>9eba60d</code></a> ci: split test and validate workflow</li> <li><a href="4fd68cb082"><code>4fd68cb</code></a> chore: node 20 as default runtime</li> <li><a href="81a846ee13"><code>81a846e</code></a> chore: update generated content</li> <li><a href="6abbb7ec37"><code>6abbb7e</code></a> test: fix after jest update</li> <li><a href="54c2561f69"><code>54c2561</code></a> chore: update dev dependencies</li> <li><a href="d280f9562f"><code>d280f95</code></a> chore: update to node 20</li> <li><a href="4d946a7137"><code>4d946a7</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-upx/issues/214">#214</a> from crazy-max/update-yarn</li> <li><a href="fbfc4f37fe"><code>fbfc4f3</code></a> chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/crazy-max/ghaction-upx/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
74 lines
2.3 KiB
YAML
74 lines
2.3 KiB
YAML
name: build
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "main"
|
|
pull_request:
|
|
paths:
|
|
- "go.*"
|
|
- "**/*.go"
|
|
- "Taskfile.yml"
|
|
- "Dockerfile"
|
|
- ".github/workflows/*.yml"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
govulncheck:
|
|
uses: caarlos0/meta/.github/workflows/govulncheck.yml@main
|
|
semgrep:
|
|
uses: caarlos0/meta/.github/workflows/semgrep.yml@main
|
|
ruleguard:
|
|
uses: caarlos0/meta/.github/workflows/ruleguard.yml@main
|
|
with:
|
|
args: "-disable largeloopcopy"
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
DOCKER_CLI_EXPERIMENTAL: "enabled"
|
|
steps:
|
|
- uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v3
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: arduino/setup-task@e26d8975574116b0097a1161e0fe16ba75d84c1c # v1
|
|
with:
|
|
version: 3.x
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
- uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
|
|
- uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
|
|
- name: setup-snapcraft
|
|
# FIXME: the mkdirs are a hack for https://github.com/goreleaser/goreleaser/issues/1715
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get -yq --no-install-suggests --no-install-recommends install snapcraft
|
|
mkdir -p $HOME/.cache/snapcraft/download
|
|
mkdir -p $HOME/.cache/snapcraft/stage-packages
|
|
- uses: crazy-max/ghaction-upx@v3
|
|
with:
|
|
install-only: true
|
|
- uses: cachix/install-nix-action@v23
|
|
with:
|
|
github_access_token: ${{ secrets.GITHUB_TOKEN }}
|
|
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
|
|
with:
|
|
go-version: stable
|
|
- uses: sigstore/cosign-installer@v3.1.2
|
|
- uses: anchore/sbom-action/download-syft@v0.14.3
|
|
- name: setup-validate-krew-manifest
|
|
run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
|
|
- name: setup-tparse
|
|
run: go install github.com/mfridman/tparse@latest
|
|
- name: setup
|
|
run: |
|
|
task setup
|
|
task build
|
|
- name: test
|
|
run: ./scripts/test.sh
|
|
- uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3
|
|
with:
|
|
file: ./coverage.txt
|
|
- run: ./goreleaser check
|
|
- run: git diff
|