[renovate]

This PR contains the following updates:

Package	Type	Update	Change
goreleaser/goreleaser-action	action	major	v4 → v7

---

Release Notes

goreleaser/goreleaser-action

v7.3.0

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​570
• chore(deps): bump the npm group with 4 updates by @​dependabot[bot] in #​571
• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​575
• chore(deps): bump the npm group with 2 updates by @​dependabot[bot] in #​574
• chore(deps): bump undici from 6.27.0 to 6.28.0 by @​dependabot[bot] in #​576
• chore(deps): bump js-yaml from 5.2.2 to 5.2.3 by @​dependabot[bot] in #​573
• chore(deps): bump js-yaml from 5.2.3 to 5.4.1 in the npm group by @​dependabot[bot] in #​578
• feat: reuse the goreleaser binary from the runner tool cache by @​caarlos0 in #​577
• ci(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 in the actions group by @​dependabot[bot] in #​581
• chore(deps): bump undici from 6.28.0 to 6.29.0 by @​dependabot[bot] in #​579
• chore(deps): bump the npm group with 2 updates by @​dependabot[bot] in #​580

Full Changelog: goreleaser/goreleaser-action@v7.2.3...v7.3.0

v7.2.3

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​563
• chore(deps): bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in #​565
• build: regenerate dist after undici 6.27.0 bump by @​caarlos0 in #​567
• ci: auto-rebuild dist on dependabot PRs by @​caarlos0 in #​568
• ci: use a GitHub App token to rebuild dist on dependabot PRs by @​caarlos0 in #​569

Full Changelog: goreleaser/goreleaser-action@v7.2.2...v7.2.3

v7.2.2

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​560
• fix: nightly resolution to select newest published release by @​Copilot in #​562

New Contributors

• @​Copilot made their first contribution in #​562

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.2

v7.2.1

Compare Source

This fully removes the usage of the old nightly moving tag.

Full Changelog: goreleaser/goreleaser-action@v7.2.0...v7.2.1

v7.2.0

Compare Source

What's Changed

• test: cover install across release eras by @​caarlos0 in #​555
• feat: add version-file input by @​caarlos0 in #​556
• feat: resolve nightly to latest vX.Y.Z--nightly release by @​caarlos0 in #​558

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.0

v7.1.0

Compare Source

What's Changed

• feat: verify release checksum and cosign signature by @​caarlos0 in #​550
• docs: document cosign verification in README by @​caarlos0 in #​553
• docs: Upgrade import GPG action version by @​flecno in #​547
• ci: drop docker-bake in favor of plain npm by @​caarlos0 in #​551
• ci: add release-major-tag workflow by @​caarlos0 in #​552
• ci: drop pre-cosign-v3 goreleaser versions from tests by @​caarlos0 in #​554
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​543
• ci(deps): bump the actions group with 5 updates by @​dependabot[bot] in #​546
• chore(deps): bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​545

New Contributors

• @​flecno made their first contribution in #​547

Full Changelog: goreleaser/goreleaser-action@v7...v7.1.0

v7.0.0

Compare Source

What's Changed

• feat!: node 24, update deps, rm yarn, ESM by @​caarlos0 in #​533
• sec: pin github action versions by @​caarlos0 in #​514
• docs: Upgrade checkout GitHub Action in README.md by @​dunglas in #​507
• chore(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​504
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​517
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​523
• ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by @​dependabot[bot] in #​526
• ci(deps): bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​532
• ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @​dependabot[bot] in #​534
• chore(deps): bump the npm group across 1 directory with 4 updates by @​dependabot[bot] in #​536
• chore(deps): bump @​actions/http-client from 3.0.2 to 4.0.0 in the npm group by @​dependabot[bot] in #​537
• ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by @​dependabot[bot] in #​538
• chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by @​dependabot[bot] in #​539

Full Changelog: goreleaser/goreleaser-action@v6...v7.0.0

v6.4.0

Compare Source

What's Changed

• ci: set contents read as default workflow permissions by @​crazy-max in #​494
• fix: support .config directory for goreleaser config files by @​haya14busa in #​500
• chore(deps): bump semver from 7.7.1 to 7.7.2 by @​dependabot[bot] in #​495
• chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by @​dependabot[bot] in #​498
• fix: do not get releases.json if version is specific by @​caarlos0 in #​502
• chore(deps): bump undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​496
• feat: retry downloading releases json by @​caarlos0 in #​503

New Contributors

• @​haya14busa made their first contribution in #​500

Full Changelog: goreleaser/goreleaser-action@v6.3.0...v6.4.0

v6.3.0

Compare Source

• Bump undici from 5.28.3 to 5.28.5 in #​488

Full Changelog: goreleaser/goreleaser-action@v6.2.1...v6.3.0

v6.2.1

Compare Source

What's Changed

This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the -pro suffix).
Older versions should work fine.

[!WARNING]
This version is required for GoReleaser Pro v2.7.0+.
Read more here.

Full Changelog: goreleaser/goreleaser-action@v6.2.0...v6.2.1

v6.2.0

Compare Source

What's Changed

This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the -pro suffix).
Older versions should work fine.

[!WARNING]
This version is required for GoReleaser Pro v2.7.0+.
Read more here.

Full Changelog: goreleaser/goreleaser-action@v6.1.0...v6.2.0

v6.1.0

Compare Source

What's Changed

• chore(deps): bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​467
• chore(deps): bump docker/bake-action from 4 to 5 by @​dependabot in #​468
• chore(deps): bump semver from 7.6.2 to 7.6.3 by @​dependabot in #​470
• chore(deps): bump @​actions/http-client from 2.2.1 to 2.2.2 by @​dependabot in #​473
• chore(deps): bump @​actions/http-client from 2.2.2 to 2.2.3 by @​dependabot in #​474
• chore(deps): bump micromatch from 4.0.5 to 4.0.8 by @​dependabot in #​475
• chore(deps): bump @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in #​478
• docs: bump upload-artifact version by @​dunglas in #​479
• chore: update generated content by @​crazy-max in #​480

New Contributors

• @​dunglas made their first contribution in #​479

Full Changelog: goreleaser/goreleaser-action@v6.0.0...v6.1.0

v6.0.0

Compare Source

[!WARNING]
This is a breaking change!

Follow the instructions here to upgrade!

What's Changed

• feat!: use "~> v2" as default by @​caarlos0 in #​463

Full Changelog: goreleaser/goreleaser-action@v5...v6.0.0

v5.1.0

Compare Source

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

• docs: bump actions to latest major by @​crazy-max in #​435
• chore(deps): bump docker/bake-action from 3 to 4 by @​dependabot in #​436
• chore(deps): bump codecov/codecov-action from 3 to 4 by @​dependabot in #​437
• chore(deps): bump actions/setup-go from 4 to 5 by @​dependabot in #​443
• chore(deps): bump actions/upload-artifact from 3 to 4 by @​dependabot in #​444
• Delete .kodiak.toml by @​vedantmgoyal9 in #​446
• chore(deps): bump codecov/codecov-action from 3 to 4 by @​dependabot in #​448
• chore(deps): bump ip from 2.0.0 to 2.0.1 by @​dependabot in #​450
• Upgrade setup-go action version in README by @​kishaningithub in #​455
• chore(deps): bump tar from 6.1.14 to 6.2.1 by @​dependabot in #​456
• chore: use corepack to install yarn by @​crazy-max in #​458
• feat: lock this major version of the action to use '~> v1' as 'latest' by @​caarlos0 in #​461
• chore(deps): bump semver from 7.6.0 to 7.6.2 by @​dependabot in #​462
• chore(deps): bump @​actions/http-client from 2.2.0 to 2.2.1 by @​dependabot in #​451

New Contributors

• @​vedantmgoyal9 made their first contribution in #​446

Full Changelog: goreleaser/goreleaser-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

What's Changed

• feat: node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @​crazy-max in #​432
• chore(deps): bump @​actions/core from 1.10.0 to 1.10.1 in #​434

Full Changelog: goreleaser/goreleaser-action@v4.6.0...v5.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud