Repository navigation
chore(deps): update dependency goreleaser to v2.20.2 - #35
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Contributor
|
CI fails: mise --locked cannot install goreleaser 2.19.0 because no lockfile URL is available. |
Contributor
|
CI is red: locked mise cannot resolve a download URL for goreleaser 2.19.0 on linux-x64. Please update lock data/tool resolution before retrying. |
Contributor
|
Needs human: CI cannot install goreleaser 2.19.0 in locked mode because mise.lock has no linux-x64 URL. |
Contributor
|
CI fails because mise install --locked cannot find a linux-x64 lockfile URL for goreleaser 2.19.0. |
renovate
Bot
force-pushed
the
renovate/goreleaser-2.x
branch
from
October 26, 2026 21:43
6ae32b7 to
746ba18
Compare
Contributor
|
CI setup fails because goreleaser 2.19.0 is absent from mise.lock; needs human. |
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/goreleaser-2.x
branch
2 times, most recently
from
November 11, 2026 01:43
093c6b1 to
507afb4
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/goreleaser-2.x
branch
from
November 12, 2026 14:15
507afb4 to
299c809
Compare
renovate
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.18.3→2.20.2Release Notes
goreleaser/goreleaser (goreleaser)
v2.20.2Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.20.
Changelog
Security updates
84f5ed6: sec: redact Git publication and SBOM credentials (#7303) (@caarlos0)Bug fixes
b6d7c4e: fix(checksums): do not fail split checksums without artifacts (#7306) (@David-Uka)2a662ce: fix(redact): avoid empty writes for buffered secret prefixes (#7301) (@David-Uka and @caarlos0)89fdc40: fix(telegram): use an HTML-escaped default message with parse_mode HTML (#7285) (@pcbeingused333 and @caarlos0)Other work
fb18621: chore(deps): update Go to 1.27.4 (#7296) (@caarlos0)33e4013: chore: auto-update generated files (#7297) (@goreleaserbot)6eedb82: chore: auto-update generated files (#7302) (@goreleaser[bot])Full Changelog: goreleaser/goreleaser@v2.20.1...v2.20.2
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.20.1Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.20.
Changelog
Security updates
0b1b1ff: sec(git): redact URL credentials from diagnostics (#7294) (@caarlos0) (GHSA-7qv4-9g3j-wvq8)9a037e1: sec(srpm): reject RPM macros in package versions (#7295) (@caarlos0) (GHSA-rjp9-h7gp-wr7q)fb9617b: sec: redact hook and chocolatey secrets from logs (#7293) (@caarlos0) (GHSA-gvxm-cvj4-qwvp)Bug fixes
0946e5e: fix(aur): install every binary of the archive in the default package (#7284) (@lbarrosby)79c8d68: fix(client): defer SSH private-key expansion until publishing (#7273) (@caarlos0)e46cd64: fix(docs): remove duplicate prebuilt redirects (@caarlos0)5f422b1: fix(ko): accept '..' as main path (#7279) (@mrueg)a8f1c1e: fix(ko): prefer remote base images and don't cache failed lookups (#7275) (@mrueg)3432e8d: fix(mcp): retry publish when package version is not yet visible (#7283) (@santhiprakash)119f88f: refactor(ko): simplify template handling (#7277) (@mrueg)Documentation updates
3286c23: docs: .ArtifactPath is not always an absolute path (#7289) (@ZainnQureshii)Other work
ed8efe6: chore: auto-update generated files (#7274) (@goreleaserbot)Full Changelog: goreleaser/goreleaser@v2.20.0...v2.20.1
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.20.0Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.20.
Security
GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to
dist/artifacts.json. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata.See GHSA-9422-8p9m-393x for details.
Changelog
New Features
e1176e6: feat(cask): renderzap :not_requiredwhen no zap directives are set (#7253) (@SimonMiaou)afd8f84: feat(gitlab): add asset type selection (#7255) (@mavogel)b8f79e0: feat(ko): allow templates in platforms (#7233) (@mrueg and @caarlos0)2e260e4: feat(winget): update manifest schema to latest (1.28.0) (#7242) (@abemedia)4a1a1ae: feat: allow skipping the changelog with --skip=changelog (#7234) (@mrueg and @caarlos0)Bug fixes
24ec0fd: fix(bluesky): do not add a link facet when there is no release URL (#7262) (@10kartik)bfa11d9: fix(nodedist): handle prerelease versions in generation (#7263) (@caarlos0)3d5c3a2: fix(tmpl): escape backslashes in mdv2escape (#7261) (@10kartik)e39e2fe: refactor: move marshaljson methods to right place (@caarlos0)Documentation updates
53e5668: docs: add --snapshot to quick start single-target builds (#7232) (@dcadolph)3467d0f: docs: github app (#7271) (@caarlos0)81042d3: docs: update Pro page copy (#7270) (@caarlos0)2d9b4c9: docs: v2.19 announcement and docs (@caarlos0)Other work
6ac2967: Merge commit from fork (@Divsonar and @caarlos0)94bc193: chore: auto-update generated files (#7231) (@goreleaserbot)538a99e: chore: auto-update generated files (#7254) (@goreleaserbot)6e4f864: chore: auto-update generated files (#7264) (@goreleaserbot)9b610a1: chore: auto-update generated files (#7266) (@goreleaserbot)27f55a0: chore: lint (@caarlos0)Full Changelog: goreleaser/goreleaser@v2.19.0...v2.20.0
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.19.0Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.19.
Changelog
New Features
35f2281: feat(archive): configure zstd compression level and window size (#7206) (@caarlos0)4ebadf5: feat(cask): add hooks install_steps, deprecate raw Ruby hooks (#6873) (@caarlos0)f1e16bf: feat(ko): support linux_capabilities (#7225) (@mrueg and @caarlos0)9926cef: feat(nix): drop the nix-hash dependency (#6824) (@caarlos0)6386def: feat: graduate stable features out of experimental (#7126) (@caarlos0)Security updates
6ade066: sec(deps): bump golang.org/x/ (#7201) (@caarlos0)b690fd8: sec: update to Go 1.27.3 (#7220) (@shaanmajid)Bug fixes
09301ea: fix(archive): propagate tar read errors in Copy (#7194) (@Lzcwbcgs)68e5e34: fix(cask): emit brew-valid casks when builds.ignore drops os/arch combos (#7218) (@Mihir-Rabari)e6c4afc: fix(deps): bump moby/sys/user to v0.4.1 (#7202) (@caarlos0)713c236: fix(docker): select baseline CPU variants for Docker v2 platforms (#7189) (@zachary-satterly and @caarlos0)26ffaba: fix(docker/v2): expand global ARG references when resolving the base image (#7203) (@LemonCondor and @caarlos0)1b7b6a4: fix(git): redact credentials from http remote URLs too (#7191) (@Mihir-Rabari)2d708ed: fix(ko): use actual ko version in SPDX SBOM creator (#7226) (@mrueg)2279d65: fix: share HTTP client per upload config (#6919) (#7212) (@manish-9245 and @caarlos0)0c3be49: fix: write cask completion stanzas in Homebrew's order (#7198) (@mustafaakcakaya)Documentation updates
d84a697: docs: fix broken cosign link in rust-zig blog post (#7228) (@jvS0uzx)Other work
ccaac66: chore: auto-update generated files (#7190) (@goreleaserbot)c96c314: chore: auto-update generated files (#7200) (@goreleaserbot)4a71e1e: chore: auto-update generated files (#7204) (@goreleaserbot)b58a061: chore: auto-update generated files (#7223) (@goreleaserbot)a9fb415: chore: auto-update generated files (#7230) (@goreleaserbot)Full Changelog: goreleaser/goreleaser@v2.18.3...v2.19.0
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.