ci: bump goreleaser/goreleaser-action from 6.4.0 to 7.1.0 - #61
Merged
EricAndrechek merged 1 commit intoApr 23, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
github-actions
Bot
added
area/infra
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 21, 2026 19:09
09f7406 to
10e0d52
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 21, 2026 19:46
10e0d52 to
0ce2024
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 22, 2026 21:05
0ce2024 to
83ad714
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 22, 2026 21:11
83ad714 to
3cfb7a9
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 23, 2026 04:41
3cfb7a9 to
182ab1a
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 23, 2026 16:38
182ab1a to
44019f4
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
Member
|
@dependabot rebase Accepting the 6.4.0 → 7.1.0 major bump. Rebasing onto post-#71 main so the ruleset's new required-status checks (Lint/Test/Integration Tests/SDK Tests) run fresh on the up-to-date base. — Posted by Claude Code on behalf of @EricAndrechek |
6 tasks
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.1.0. - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@e435ccd...e24998b) --- updated-dependencies: - dependency-name: goreleaser/goreleaser-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
from
April 23, 2026 17:53
44019f4 to
1e0b63a
Compare
|
Major-version bump — holding for human review. Auto-merge is limited to patch and minor updates. See dependency changelog / release notes before merging. |
EricAndrechek
approved these changes
Apr 23, 2026
EricAndrechek
left a comment
EricAndrechek
left a comment
Member
There was a problem hiding this comment.
goreleaser-action 6.4.0 → 7.1.0. Action internals (ESM, Node 24 runtime) change but release.yml's version: "~> v2" pin keeps the GoReleaser CLI itself on v2.x. Required checks all green on rebased head.
— Approved by Claude Code on behalf of @EricAndrechek
EricAndrechek
deleted the
dependabot/github_actions/goreleaser/goreleaser-action-7.1.0
branch
April 23, 2026 18:03
EricAndrechek
added a commit
that referenced
this pull request
Apr 23, 2026
Copilot findings on the Phase 1 PR, all legitimate: 1. reeval path's assign-and-request-review step gated only on bot-clean, not on promote == true. When the PR card Status was already "In progress" / "In review" / "Done," we'd still re-request review from the reviewer on every re-eval cycle — noise. Added the promote guard. 2. workflow_run fires for CI on every push to main too (CI triggers on both push:main and pull_request). A main-push CI run has no associated PR so the orchestrator would early-exit at PR-number resolution, but still spin up a runner. Added a job-level if to short-circuit when workflow_run's triggering event isn't pull_request. 3. board-state-sync's linked-counterpart queries capped at first: 10. Bumped to 50 to match set-linked-issues-status. 4. set-linked-issues-status declared github-token as required but the consolidated single-query version uses project-token for every read. Removed the dead input; callers drop the parameter. Plus a long-standing issue Eric raised — admin-approval staying red after a valid approval. Two root causes: - concurrency.cancel-in-progress: true was producing CANCELLED check runs when events raced. CANCELLED shows as not-passing in the ruleset gate, so a cancelled-mid-flight post-approval run would leave the check red even though the logic would have succeeded. Flipped to cancel-in-progress: false — runs queue and complete sequentially. - The reviews API has observable submit-event lag. Added a fast- path: when the triggering event is itself an admin APPROVED submit, trust the event payload directly (review.state + review.user.login) rather than polling the API. Eliminates the lag-induced false negative for the common case. Slow path (API poll) now retries 3× with 2-second backoff for events that aren't themselves a submit. Also merged origin/main (the #61 goreleaser bump) into the branch to clear the "out of date" merge block.
EricAndrechek
added a commit
that referenced
this pull request
Apr 28, 2026
Copilot findings on the Phase 1 PR, all legitimate: 1. reeval path's assign-and-request-review step gated only on bot-clean, not on promote == true. When the PR card Status was already "In progress" / "In review" / "Done," we'd still re-request review from the reviewer on every re-eval cycle — noise. Added the promote guard. 2. workflow_run fires for CI on every push to main too (CI triggers on both push:main and pull_request). A main-push CI run has no associated PR so the orchestrator would early-exit at PR-number resolution, but still spin up a runner. Added a job-level if to short-circuit when workflow_run's triggering event isn't pull_request. 3. board-state-sync's linked-counterpart queries capped at first: 10. Bumped to 50 to match set-linked-issues-status. 4. set-linked-issues-status declared github-token as required but the consolidated single-query version uses project-token for every read. Removed the dead input; callers drop the parameter. Plus a long-standing issue Eric raised — admin-approval staying red after a valid approval. Two root causes: - concurrency.cancel-in-progress: true was producing CANCELLED check runs when events raced. CANCELLED shows as not-passing in the ruleset gate, so a cancelled-mid-flight post-approval run would leave the check red even though the logic would have succeeded. Flipped to cancel-in-progress: false — runs queue and complete sequentially. - The reviews API has observable submit-event lag. Added a fast- path: when the triggering event is itself an admin APPROVED submit, trust the event payload directly (review.state + review.user.login) rather than polling the API. Eliminates the lag-induced false negative for the common case. Slow path (API poll) now retries 3× with 2-second backoff for events that aren't themselves a submit. Also merged origin/main (the #61 goreleaser bump) into the branch to clear the "out of date" merge block.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps goreleaser/goreleaser-action from 6.4.0 to 7.1.0.
Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
e24998bci: drop pre-cosign-v3 goreleaser versions from tests (#554)be2e8a3docs: document cosign verification in README (#553)5e53f8eci: add release-major-tag workflow (#552)4068afabuild: drop docker-bake in favor of plain npm (#551)213ec80docs: add CONTRIBUTING with pre-commit workflow4b462d3feat: verify release checksum and cosign signature (#550)01cbe07docs: Upgrade import GPG action version (#547)2a473d7ci(deps): bump the actions group with 5 updates (#546)fdcf0b9clean: leftover files from node 22(?)9881cc5fix: use new static URL