From 606a4ad4c5119e90dee433445454075d981e24d8 Mon Sep 17 00:00:00 2001 From: Simon Cornet Date: Fri, 15 May 2026 19:24:25 +0200 Subject: [PATCH 1/8] ci: add gitleaks woodpecker pipeline --- .woodpecker/linting.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .woodpecker/linting.yml diff --git a/.woodpecker/linting.yml b/.woodpecker/linting.yml new file mode 100644 index 0000000..a4d29b7 --- /dev/null +++ b/.woodpecker/linting.yml @@ -0,0 +1,14 @@ +--- +when: + - event: "push" + branch: "main" + - event: "manual" + +steps: + + # gitleaks + - name: "gitleaks" + # renovate: datasource=github-releases depName=gitleaks/gitleaks + image: "cr.simoncor.net/ghcr/gitleaks/gitleaks:v8.30.1" + commands: + - "gitleaks detect --source . --verbose --redact" From 4e941a89a92cdde67dbb8d4ce1fd5daade3adf29 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 18 May 2026 15:25:14 +0000 Subject: [PATCH 2/8] chore(package): update module github.com/go-git/go-git/v6 to v6.0.0-alpha.3 --- go.mod | 18 +++++++++--------- go.sum | 16 ++++++++++++++++ 2 files changed, 25 insertions(+), 9 deletions(-) diff --git a/go.mod b/go.mod index 1371ae5..363257a 100644 --- a/go.mod +++ b/go.mod @@ -1,9 +1,9 @@ module gogitlabber -go 1.24.0 +go 1.25.0 require ( - github.com/go-git/go-git/v6 v6.0.0-20260331140939-8126d61b3452 + github.com/go-git/go-git/v6 v6.0.0-alpha.3 github.com/k0kubun/go-ansi v0.0.0-20180517002512-3bf9e2903213 github.com/schollz/progressbar/v3 v3.19.0 github.com/scornet256/go-logger v0.0.2 @@ -20,7 +20,7 @@ require ( github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect github.com/go-git/gcfg/v2 v2.0.2 // indirect github.com/go-git/go-billy/v5 v5.6.2 // indirect - github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f // indirect + github.com/go-git/go-billy/v6 v6.0.0-20260424211911-732291493fb8 // indirect github.com/go-git/go-git/v5 v5.16.4 // indirect github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect @@ -28,15 +28,15 @@ require ( github.com/klauspost/cpuid/v2 v2.3.0 // indirect github.com/mattn/go-isatty v0.0.20 // indirect github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db // indirect - github.com/pjbgf/sha1cd v0.5.0 // indirect + github.com/pjbgf/sha1cd v0.6.0 // indirect github.com/rivo/uniseg v0.4.7 // indirect github.com/sergi/go-diff v1.4.0 // indirect github.com/skeema/knownhosts v1.3.1 // indirect github.com/xanzy/ssh-agent v0.3.3 // indirect - golang.org/x/crypto v0.48.0 // indirect - golang.org/x/net v0.50.0 // indirect - golang.org/x/sync v0.19.0 // indirect - golang.org/x/sys v0.41.0 // indirect - golang.org/x/term v0.40.0 // indirect + golang.org/x/crypto v0.50.0 // indirect + golang.org/x/net v0.53.0 // indirect + golang.org/x/sync v0.20.0 // indirect + golang.org/x/sys v0.43.0 // indirect + golang.org/x/term v0.42.0 // indirect gopkg.in/warnings.v0 v0.1.2 // indirect ) diff --git a/go.sum b/go.sum index 36abc64..e6af0cd 100644 --- a/go.sum +++ b/go.sum @@ -40,6 +40,8 @@ github.com/go-git/go-billy/v6 v6.0.0-20260114122816-19306b749ecc h1:rhkjrnRkamkR github.com/go-git/go-billy/v6 v6.0.0-20260114122816-19306b749ecc/go.mod h1:X1oe0Z2qMsa9hkar3AAPuL9hu4Mi3ztXEjdqRhr6fcc= github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f h1:Uvbx7nITO3Sd1GdXarX0TbyYmOaSNIJP0mm4LocEyyA= github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f/go.mod h1:ZW9JC5gionMP1kv5uiaOaV23q0FFmNrVOV8VW+y/acc= +github.com/go-git/go-billy/v6 v6.0.0-20260424211911-732291493fb8 h1:QRpwB1ans3fB3Cmeuog1ATzvXg/xhqubqiQi97xNO6E= +github.com/go-git/go-billy/v6 v6.0.0-20260424211911-732291493fb8/go.mod h1:CdBVp7CXl9l3sOyNEog46cP1Pvx/hjCe9AD0mtaIUYU= github.com/go-git/go-git/v5 v5.16.4 h1:7ajIEZHZJULcyJebDLo99bGgS0jRrOxzZG4uCk2Yb2Y= github.com/go-git/go-git/v5 v5.16.4/go.mod h1:4Ge4alE/5gPs30F2H1esi2gPd69R0C39lolkucHBOp8= github.com/go-git/go-git/v6 v6.0.0-20251210072406-9b5f6428e1da h1:ch21RnknyB1dYlWSpomdW3pXNcQZJtrtDi8wz5up31s= @@ -124,6 +126,8 @@ github.com/go-git/go-git/v6 v6.0.0-20260331110322-46ddd8611674 h1:xBd+VUG4UWXKbm github.com/go-git/go-git/v6 v6.0.0-20260331110322-46ddd8611674/go.mod h1:MD0nNvDdZ1yFG91XCLWTOQI48oqCRnQBMqraGrKV1p4= github.com/go-git/go-git/v6 v6.0.0-20260331140939-8126d61b3452 h1:GK74IG6GXAXA5bBKz62fnjCpHMim3qJljrFGMuVi7T0= github.com/go-git/go-git/v6 v6.0.0-20260331140939-8126d61b3452/go.mod h1:MD0nNvDdZ1yFG91XCLWTOQI48oqCRnQBMqraGrKV1p4= +github.com/go-git/go-git/v6 v6.0.0-alpha.3 h1:lJGritJ5AcC0X7buV0lReZ4cEHqcKB3Ab2ZjD3Ku+Ss= +github.com/go-git/go-git/v6 v6.0.0-alpha.3/go.mod h1:DGnqu+twdAgtDx/4tQTWFrVE1an+2ACph3W9yOfSJZM= github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ= github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8/go.mod h1:wcDNUvekVysuuOpQKo3191zZyTpiI6se1N1ULghS0sw= github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A= @@ -153,6 +157,8 @@ github.com/pjbgf/sha1cd v0.3.2 h1:a9wb0bp1oC2TGwStyn0Umc/IGKQnEgF0vVaZ8QF8eo4= github.com/pjbgf/sha1cd v0.3.2/go.mod h1:zQWigSxVmsHEZow5qaLtPYxpcKMMQpa09ixqBxuCS6A= github.com/pjbgf/sha1cd v0.5.0 h1:a+UkboSi1znleCDUNT3M5YxjOnN1fz2FhN48FlwCxs0= github.com/pjbgf/sha1cd v0.5.0/go.mod h1:lhpGlyHLpQZoxMv8HcgXvZEhcGs0PG/vsZnEJ7H0iCM= +github.com/pjbgf/sha1cd v0.6.0 h1:3WJ8Wz8gvDz29quX1OcEmkAlUg9diU4GxJHqs0/XiwU= +github.com/pjbgf/sha1cd v0.6.0/go.mod h1:lhpGlyHLpQZoxMv8HcgXvZEhcGs0PG/vsZnEJ7H0iCM= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= @@ -191,6 +197,8 @@ golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8= golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A= golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts= golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos= +golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI= +golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q= golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY= golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E= @@ -200,8 +208,12 @@ golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o= golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8= golang.org/x/net v0.50.0 h1:ucWh9eiCGyDR3vtzso0WMQinm2Dnt8cFMuQa9K33J60= golang.org/x/net v0.50.0/go.mod h1:UgoSli3F/pBgdJBHCTc+tp3gmrU4XswgGRgtnwWTfyM= +golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA= +golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs= golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4= golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= +golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4= +golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -219,6 +231,8 @@ golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ= golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k= golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= +golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= +golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.30.0 h1:PQ39fJZ+mfadBm0y5WlL4vlM7Sx1Hgf13sMIY2+QS9Y= golang.org/x/term v0.30.0/go.mod h1:NYYFdzHoI5wRh/h5tDMdMqCqPJZEuNqVR5xJLd/n67g= @@ -229,6 +243,8 @@ golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY= golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww= golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg= golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM= +golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY= +golang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= From bc7051a106681c02b388568d1ce5f1a0994e5cd5 Mon Sep 17 00:00:00 2001 From: Simon Cornet Date: Mon, 18 May 2026 17:40:30 +0200 Subject: [PATCH 3/8] fix: linting issue --- .woodpecker/{linting.yml => gitleaks.yml} | 0 .woodpecker/{.woodpecker.yml => lint-test-release.yml} | 8 +------- 2 files changed, 1 insertion(+), 7 deletions(-) rename .woodpecker/{linting.yml => gitleaks.yml} (100%) rename .woodpecker/{.woodpecker.yml => lint-test-release.yml} (86%) diff --git a/.woodpecker/linting.yml b/.woodpecker/gitleaks.yml similarity index 100% rename from .woodpecker/linting.yml rename to .woodpecker/gitleaks.yml diff --git a/.woodpecker/.woodpecker.yml b/.woodpecker/lint-test-release.yml similarity index 86% rename from .woodpecker/.woodpecker.yml rename to .woodpecker/lint-test-release.yml index 509ee9a..ad8c6be 100644 --- a/.woodpecker/.woodpecker.yml +++ b/.woodpecker/lint-test-release.yml @@ -1,15 +1,9 @@ --- -clone: - - name: "clone" - image: "woodpeckerci/plugin-git" - settings: - depth: 0 - tags: true steps: - name: "linting" - image: "cr.simoncor.net/dockerhub/golangci/golangci-lint:v2.1-alpine" + image: "cr.simoncor.net/dockerhub/golangci/golangci-lint:v2.12.2-alpine" commands: - "golangci-lint run" when: From 6b745044915f4a942790e73281298f8512795265 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 18 May 2026 17:44:05 +0200 Subject: [PATCH 4/8] chore(package): update softprops/action-gh-release action to v3 (#3) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | action | major | `v2` → `v3` | --- ### Release Notes
softprops/action-gh-release (softprops/action-gh-release) ### [`v3.0.0`](https://github.com/softprops/action-gh-release/releases/tag/v3.0.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v3.0.0...v3.0.0) `3.0.0` is a major release that moves the action runtime from Node 20 to Node 24. Use `v3` on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on `v2.6.2`. #### What's Changed ##### Other Changes 🔄 - Move the action runtime and bundle target to Node 24 - Update `@types/node` to the Node 24 line and allow future Dependabot updates - Keep the floating major tag on `v3`; `v2` remains pinned to the latest `2.x` release ### [`v3`](https://github.com/softprops/action-gh-release/compare/v2.6.2...v3.0.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.6.2...v3.0.0) ### [`v2.6.2`](https://github.com/softprops/action-gh-release/releases/tag/v2.6.2) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.6.1...v2.6.2) #### What's Changed ##### Other Changes 🔄 - chore(deps): bump picomatch from 4.0.3 to 4.0.4 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​775](https://github.com/softprops/action-gh-release/pull/775) - chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​777](https://github.com/softprops/action-gh-release/pull/777) - chore(deps): bump vite from 8.0.0 to 8.0.5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​781](https://github.com/softprops/action-gh-release/pull/781) **Full Changelog**: ### [`v2.6.1`](https://github.com/softprops/action-gh-release/releases/tag/v2.6.1) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.6.0...v2.6.1) `2.6.1` is a patch release focused on restoring linked discussion thread creation when `discussion_category_name` is set. It fixes `#764`, where the draft-first publish flow stopped carrying the discussion category through the final publish step. If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible. #### What's Changed ##### Bug fixes 🐛 - fix: preserve discussion category on publish by [@​chenrui333](https://github.com/chenrui333) in [#​765](https://github.com/softprops/action-gh-release/pull/765) ### [`v2.6.0`](https://github.com/softprops/action-gh-release/releases/tag/v2.6.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.5.3...v2.6.0) `2.6.0` is a minor release centered on `previous_tag` support for `generate_release_notes`, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a `working_directory` docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published. If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible. #### What's Changed ##### Exciting New Features 🎉 - feat: support previous\_tag for generate\_release\_notes by [@​pocesar](https://github.com/pocesar) in [#​372](https://github.com/softprops/action-gh-release/pull/372) ##### Bug fixes 🐛 - fix: recover concurrent asset metadata 404s by [@​chenrui333](https://github.com/chenrui333) in [#​760](https://github.com/softprops/action-gh-release/pull/760) ##### Other Changes 🔄 - docs: clarify reused draft release behavior by [@​chenrui333](https://github.com/chenrui333) in [#​759](https://github.com/softprops/action-gh-release/pull/759) - docs: clarify working\_directory input by [@​chenrui333](https://github.com/chenrui333) in [#​761](https://github.com/softprops/action-gh-release/pull/761) - ci: verify dist bundle freshness by [@​chenrui333](https://github.com/chenrui333) in [#​762](https://github.com/softprops/action-gh-release/pull/762) - fix: clarify immutable prerelease uploads by [@​chenrui333](https://github.com/chenrui333) in [#​763](https://github.com/softprops/action-gh-release/pull/763) ### [`v2.5.3`](https://github.com/softprops/action-gh-release/releases/tag/v2.5.3) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.5.2...v2.5.3) `2.5.3` is a patch release focused on the remaining path-handling and release-selection bugs uncovered after `2.5.2`. It fixes `#639`, `#571`, `#280`, `#614`, `#311`, `#403`, and `#368`. It also adds documentation clarifications for `#541`, `#645`, `#542`, `#393`, and `#411`, where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug. If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible. #### What's Changed ##### Bug fixes 🐛 - fix: prefer token input over GITHUB\_TOKEN by [@​chenrui333](https://github.com/chenrui333) in [#​751](https://github.com/softprops/action-gh-release/pull/751) - fix: clean up duplicate drafts after canonicalization by [@​chenrui333](https://github.com/chenrui333) in [#​753](https://github.com/softprops/action-gh-release/pull/753) - fix: support Windows-style file globs by [@​chenrui333](https://github.com/chenrui333) in [#​754](https://github.com/softprops/action-gh-release/pull/754) - fix: normalize refs-tag inputs by [@​chenrui333](https://github.com/chenrui333) in [#​755](https://github.com/softprops/action-gh-release/pull/755) - fix: expand tilde file paths by [@​chenrui333](https://github.com/chenrui333) in [#​756](https://github.com/softprops/action-gh-release/pull/756) ##### Other Changes 🔄 - docs: clarify token precedence by [@​chenrui333](https://github.com/chenrui333) in [#​752](https://github.com/softprops/action-gh-release/pull/752) - docs: clarify GitHub release limits by [@​chenrui333](https://github.com/chenrui333) in [#​758](https://github.com/softprops/action-gh-release/pull/758) - documentation clarifications for empty-token handling, `preserve_order`, and special-character asset filename behavior **Full Changelog**: ### [`v2.5.2`](https://github.com/softprops/action-gh-release/releases/tag/v2.5.2) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.5.1...v2.5.2) `2.5.2` is a patch release focused on the remaining release-creation and prerelease regressions in the `2.5.x` bug-fix cycle. It fixes `#705`, fixes `#708`, fixes `#740`, fixes `#741`, and fixes `#722`. Regression testing covers the shared-tag race, prerelease event behavior, dotfile asset labels, same-filename concurrent uploads, and blocked-tag cleanup behavior. If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible. #### What's Changed ##### Bug fixes 🐛 - fix: canonicalize releases after concurrent create by [@​chenrui333](https://github.com/chenrui333) in [#​746](https://github.com/softprops/action-gh-release/pull/746) - fix: preserve prereleased events for prereleases by [@​chenrui333](https://github.com/chenrui333) in [#​748](https://github.com/softprops/action-gh-release/pull/748) - fix: restore dotfile asset labels by [@​chenrui333](https://github.com/chenrui333) in [#​749](https://github.com/softprops/action-gh-release/pull/749) - fix: handle upload already\_exists races across workflows by [@​api2062](https://github.com/api2062) in [#​745](https://github.com/softprops/action-gh-release/pull/745) - fix: clean up orphan drafts when tag creation is blocked by [@​chenrui333](https://github.com/chenrui333) in [#​750](https://github.com/softprops/action-gh-release/pull/750) #### New Contributors - [@​api2062](https://github.com/api2062) made their first contribution in [#​745](https://github.com/softprops/action-gh-release/pull/745) **Full Changelog**: ### [`v2.5.1`](https://github.com/softprops/action-gh-release/releases/tag/v2.5.1) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.5.0...v2.5.1) `2.5.1` is a patch release focused on regressions introduced in `2.5.0` and on release lookup reliability. It fixes `#713`, addresses `#703`, and fixes `#724`. Regression testing shows that current `master` no longer reproduces the finalize-race behavior reported in `#704` and `#709`. #### What's Changed ##### Bug fixes 🐛 - fix: fetch correct asset URL after finalization; test; some refactoring by [@​pzhlkj6612](https://github.com/pzhlkj6612) in [#​738](https://github.com/softprops/action-gh-release/pull/738) - fix: release marked as 'latest' despite make\_latest: false by [@​Boshen](https://github.com/Boshen) in [#​715](https://github.com/softprops/action-gh-release/pull/715) - fix: use getReleaseByTag API instead of iterating all releases by [@​kim-em](https://github.com/kim-em) in [#​725](https://github.com/softprops/action-gh-release/pull/725) ##### Other Changes 🔄 - dependency updates, including the ESM/runtime compatibility refresh in [#​731](https://github.com/softprops/action-gh-release/pull/731) #### New Contributors - [@​autarch](https://github.com/autarch) made their first contribution in [#​716](https://github.com/softprops/action-gh-release/pull/716) - [@​pzhlkj6612](https://github.com/pzhlkj6612) made their first contribution in [#​738](https://github.com/softprops/action-gh-release/pull/738) - [@​Boshen](https://github.com/Boshen) made their first contribution in [#​715](https://github.com/softprops/action-gh-release/pull/715) - [@​kim-em](https://github.com/kim-em) made their first contribution in [#​725](https://github.com/softprops/action-gh-release/pull/725) **Full Changelog**: ### [`v2.5.0`](https://github.com/softprops/action-gh-release/releases/tag/v2.5.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.4.2...v2.5.0) #### What's Changed ##### Exciting New Features 🎉 - feat: mark release as draft until all artifacts are uploaded by [@​dumbmoron](https://github.com/dumbmoron) in [#​692](https://github.com/softprops/action-gh-release/pull/692) ##### Other Changes 🔄 - chore(deps): bump the npm group across 1 directory with 5 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​697](https://github.com/softprops/action-gh-release/pull/697) - chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​689](https://github.com/softprops/action-gh-release/pull/689) #### New Contributors - [@​dumbmoron](https://github.com/dumbmoron) made their first contribution in [#​692](https://github.com/softprops/action-gh-release/pull/692) **Full Changelog**: ### [`v2.4.2`](https://github.com/softprops/action-gh-release/releases/tag/v2.4.2) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.4.1...v2.4.2) #### What's Changed ##### Exciting New Features 🎉 - feat: Ensure generated release notes cannot be over 125000 characters by [@​BeryJu](https://github.com/BeryJu) in [#​684](https://github.com/softprops/action-gh-release/pull/684) ##### Other Changes 🔄 - dependency updates #### New Contributors - [@​BeryJu](https://github.com/BeryJu) made their first contribution in [#​684](https://github.com/softprops/action-gh-release/pull/684) **Full Changelog**: ### [`v2.4.1`](https://github.com/softprops/action-gh-release/releases/tag/v2.4.1) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.4.0...v2.4.1) #### What's Changed ##### Other Changes 🔄 - fix(util): support brace expansion globs containing commas in parseInputFiles by [@​Copilot](https://github.com/Copilot) in [#​672](https://github.com/softprops/action-gh-release/pull/672) - fix: gracefully fallback to body when body\_path cannot be read by [@​Copilot](https://github.com/Copilot) in [#​671](https://github.com/softprops/action-gh-release/pull/671) **Full Changelog**: ### [`v2.4.0`](https://github.com/softprops/action-gh-release/releases/tag/v2.4.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.3.4...v2.4.0) #### What's Changed ##### Exciting New Features 🎉 - feat(action): respect working\_directory for files globs by [@​stephenway](https://github.com/stephenway) in [#​667](https://github.com/softprops/action-gh-release/pull/667) ##### Other Changes 🔄 - chore(deps): bump the npm group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​668](https://github.com/softprops/action-gh-release/pull/668) **Full Changelog**: ### [`v2.3.4`](https://github.com/softprops/action-gh-release/releases/tag/v2.3.4) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.3.3...v2.3.4) #### What's Changed ##### Bug fixes 🐛 - fix(action): handle 422 already\_exists race condition by [@​stephenway](https://github.com/stephenway) in [#​665](https://github.com/softprops/action-gh-release/pull/665) ##### Other Changes 🔄 - chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 in the github-actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​656](https://github.com/softprops/action-gh-release/pull/656) - chore(deps): bump [@​types/node](https://github.com/types/node) from 20.19.11 to 20.19.13 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​655](https://github.com/softprops/action-gh-release/pull/655) - chore(deps): bump vite from 7.0.0 to 7.1.5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​657](https://github.com/softprops/action-gh-release/pull/657) - chore(deps): bump the npm group across 1 directory with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​662](https://github.com/softprops/action-gh-release/pull/662) - chore(deps): bump the npm group with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​666](https://github.com/softprops/action-gh-release/pull/666) **Full Changelog**: ### [`v2.3.3`](https://github.com/softprops/action-gh-release/releases/tag/v2.3.3) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.3.2...v2.3.3) #### What's Changed ##### Exciting New Features 🎉 - feat: add input option `overwrite_files` by [@​asfernandes](https://github.com/asfernandes) in [#​343](https://github.com/softprops/action-gh-release/pull/343) ##### Other Changes 🔄 - dependency updates #### New Contributors - [@​asfernandes](https://github.com/asfernandes) made their first contribution in [#​343](https://github.com/softprops/action-gh-release/pull/343) **Full Changelog**: ### [`v2.3.2`](https://github.com/softprops/action-gh-release/releases/tag/v2.3.2) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.3.1...v2.3.2) - fix: revert fs `readableWebStream` change ### [`v2.3.1`](https://github.com/softprops/action-gh-release/releases/tag/v2.3.1) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.3.0...v2.3.1) #### What's Changed ##### Bug fixes 🐛 - fix: fix file closing issue by [@​WailGree](https://github.com/WailGree) in [#​629](https://github.com/softprops/action-gh-release/pull/629) #### New Contributors - [@​WailGree](https://github.com/WailGree) made their first contribution in [#​629](https://github.com/softprops/action-gh-release/pull/629) **Full Changelog**: ### [`v2.3.0`](https://github.com/softprops/action-gh-release/releases/tag/v2.3.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.2.2...v2.3.0) - Migrate from jest to vitest - Replace `mime` with `mime-types` - Bump to use node 24 - Dependency updates **Full Changelog**: ### [`v2.2.2`](https://github.com/softprops/action-gh-release/releases/tag/v2.2.2) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.2.1...v2.2.2) #### What's Changed ##### Bug fixes 🐛 - fix: updating release draft status from true to false by [@​galargh](https://github.com/galargh) in [#​316](https://github.com/softprops/action-gh-release/pull/316) ##### Other Changes 🔄 - chore: simplify ref\_type test by [@​steinybot](https://github.com/steinybot) in [#​598](https://github.com/softprops/action-gh-release/pull/598) - fix(docs): clarify the default for tag\_name by [@​muzimuzhi](https://github.com/muzimuzhi) in [#​599](https://github.com/softprops/action-gh-release/pull/599) - test(release): add unit tests when searching for a release by [@​rwaskiewicz](https://github.com/rwaskiewicz) in [#​603](https://github.com/softprops/action-gh-release/pull/603) - dependency updates #### New Contributors - [@​steinybot](https://github.com/steinybot) made their first contribution in [#​598](https://github.com/softprops/action-gh-release/pull/598) - [@​muzimuzhi](https://github.com/muzimuzhi) made their first contribution in [#​599](https://github.com/softprops/action-gh-release/pull/599) - [@​galargh](https://github.com/galargh) made their first contribution in [#​316](https://github.com/softprops/action-gh-release/pull/316) - [@​rwaskiewicz](https://github.com/rwaskiewicz) made their first contribution in [#​603](https://github.com/softprops/action-gh-release/pull/603) **Full Changelog**: ### [`v2.2.1`](https://github.com/softprops/action-gh-release/releases/tag/v2.2.1) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.2.0...v2.2.1) #### What's Changed ##### Bug fixes 🐛 - fix: big file uploads by [@​xen0n](https://github.com/xen0n) in [#​562](https://github.com/softprops/action-gh-release/pull/562) ##### Other Changes 🔄 - chore(deps): bump [@​types/node](https://github.com/types/node) from 22.10.1 to 22.10.2 by [@​dependabot](https://github.com/dependabot) in [#​559](https://github.com/softprops/action-gh-release/pull/559) - chore(deps): bump [@​types/node](https://github.com/types/node) from 22.10.2 to 22.10.5 by [@​dependabot](https://github.com/dependabot) in [#​569](https://github.com/softprops/action-gh-release/pull/569) - chore: update error and warning messages for not matching files in files field by [@​ytimocin](https://github.com/ytimocin) in [#​568](https://github.com/softprops/action-gh-release/pull/568) #### New Contributors - [@​ytimocin](https://github.com/ytimocin) made their first contribution in [#​568](https://github.com/softprops/action-gh-release/pull/568) **Full Changelog**: ### [`v2.2.0`](https://github.com/softprops/action-gh-release/releases/tag/v2.2.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.1.0...v2.2.0) #### What's Changed ##### Exciting New Features 🎉 - feat: read the release assets asynchronously by [@​xen0n](https://github.com/xen0n) in [#​552](https://github.com/softprops/action-gh-release/pull/552) ##### Bug fixes 🐛 - fix(docs): clarify the default for tag\_name by [@​alexeagle](https://github.com/alexeagle) in [#​544](https://github.com/softprops/action-gh-release/pull/544) ##### Other Changes 🔄 - chore(deps): bump typescript from 5.6.3 to 5.7.2 by [@​dependabot](https://github.com/dependabot) in [#​548](https://github.com/softprops/action-gh-release/pull/548) - chore(deps): bump [@​types/node](https://github.com/types/node) from 22.9.0 to 22.9.4 by [@​dependabot](https://github.com/dependabot) in [#​547](https://github.com/softprops/action-gh-release/pull/547) - chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 by [@​dependabot](https://github.com/dependabot) in [#​545](https://github.com/softprops/action-gh-release/pull/545) - chore(deps): bump [@​vercel/ncc](https://github.com/vercel/ncc) from 0.38.2 to 0.38.3 by [@​dependabot](https://github.com/dependabot) in [#​543](https://github.com/softprops/action-gh-release/pull/543) - chore(deps): bump prettier from 3.3.3 to 3.4.1 by [@​dependabot](https://github.com/dependabot) in [#​550](https://github.com/softprops/action-gh-release/pull/550) - chore(deps): bump [@​types/node](https://github.com/types/node) from 22.9.4 to 22.10.1 by [@​dependabot](https://github.com/dependabot) in [#​551](https://github.com/softprops/action-gh-release/pull/551) - chore(deps): bump prettier from 3.4.1 to 3.4.2 by [@​dependabot](https://github.com/dependabot) in [#​554](https://github.com/softprops/action-gh-release/pull/554) #### New Contributors - [@​alexeagle](https://github.com/alexeagle) made their first contribution in [#​544](https://github.com/softprops/action-gh-release/pull/544) - [@​xen0n](https://github.com/xen0n) made their first contribution in [#​552](https://github.com/softprops/action-gh-release/pull/552) **Full Changelog**: ### [`v2.1.0`](https://github.com/softprops/action-gh-release/releases/tag/v2.1.0) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.9...v2.1.0) #### What's Changed ##### Exciting New Features 🎉 - feat: add support for release assets with multiple spaces within the name by [@​dukhine](https://github.com/dukhine) in [#​518](https://github.com/softprops/action-gh-release/pull/518) - feat: preserve upload order by [@​richarddd](https://github.com/richarddd) in [#​500](https://github.com/softprops/action-gh-release/pull/500) ##### Other Changes 🔄 - chore(deps): bump [@​types/node](https://github.com/types/node) from 22.8.2 to 22.8.7 by [@​dependabot](https://github.com/dependabot) in [#​539](https://github.com/softprops/action-gh-release/pull/539) #### New Contributors - [@​dukhine](https://github.com/dukhine) made their first contribution in [#​518](https://github.com/softprops/action-gh-release/pull/518) - [@​richarddd](https://github.com/richarddd) made their first contribution in [#​500](https://github.com/softprops/action-gh-release/pull/500) **Full Changelog**: ### [`v2.0.9`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.9) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.8...v2.0.9) #### What's Changed - maintenance release with updated dependencies #### New Contributors - [@​kbakdev](https://github.com/kbakdev) made their first contribution in [#​521](https://github.com/softprops/action-gh-release/pull/521) **Full Changelog**: ### [`v2.0.8`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.8) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8) #### What's Changed ##### Other Changes 🔄 - chore(deps): bump prettier from 2.8.0 to 3.3.3 by [@​dependabot](https://github.com/dependabot) in [#​480](https://github.com/softprops/action-gh-release/pull/480) - chore(deps): bump [@​types/node](https://github.com/types/node) from 20.14.9 to 20.14.11 by [@​dependabot](https://github.com/dependabot) in [#​483](https://github.com/softprops/action-gh-release/pull/483) - chore(deps): bump [@​octokit/plugin-throttling](https://github.com/octokit/plugin-throttling) from 9.3.0 to 9.3.1 by [@​dependabot](https://github.com/dependabot) in [#​484](https://github.com/softprops/action-gh-release/pull/484) - chore(deps): bump glob from 10.4.2 to 11.0.0 by [@​dependabot](https://github.com/dependabot) in [#​477](https://github.com/softprops/action-gh-release/pull/477) - refactor: write jest config in ts by [@​chenrui333](https://github.com/chenrui333) in [#​485](https://github.com/softprops/action-gh-release/pull/485) - chore(deps): bump [@​actions/github](https://github.com/actions/github) from 5.1.1 to 6.0.0 by [@​dependabot](https://github.com/dependabot) in [#​470](https://github.com/softprops/action-gh-release/pull/470) **Full Changelog**: ### [`v2.0.7`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.7) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7) #### What's Changed ##### Bug fixes 🐛 - Fix missing update release body by [@​FirelightFlagboy](https://github.com/FirelightFlagboy) in [#​365](https://github.com/softprops/action-gh-release/pull/365) ##### Other Changes 🔄 - Bump [@​octokit/plugin-retry](https://github.com/octokit/plugin-retry) from 4.0.3 to 7.1.1 by [@​dependabot](https://github.com/dependabot) in [#​443](https://github.com/softprops/action-gh-release/pull/443) - Bump typescript from 4.9.5 to 5.5.2 by [@​dependabot](https://github.com/dependabot) in [#​467](https://github.com/softprops/action-gh-release/pull/467) - Bump [@​types/node](https://github.com/types/node) from 20.14.6 to 20.14.8 by [@​dependabot](https://github.com/dependabot) in [#​469](https://github.com/softprops/action-gh-release/pull/469) - Bump [@​types/node](https://github.com/types/node) from 20.14.8 to 20.14.9 by [@​dependabot](https://github.com/dependabot) in [#​473](https://github.com/softprops/action-gh-release/pull/473) - Bump typescript from 5.5.2 to 5.5.3 by [@​dependabot](https://github.com/dependabot) in [#​472](https://github.com/softprops/action-gh-release/pull/472) - Bump ts-jest from 29.1.5 to 29.2.2 by [@​dependabot](https://github.com/dependabot) in [#​479](https://github.com/softprops/action-gh-release/pull/479) - docs: document that existing releases are updated by [@​jvanbruegge](https://github.com/jvanbruegge) in [#​474](https://github.com/softprops/action-gh-release/pull/474) #### New Contributors - [@​jvanbruegge](https://github.com/jvanbruegge) made their first contribution in [#​474](https://github.com/softprops/action-gh-release/pull/474) - [@​FirelightFlagboy](https://github.com/FirelightFlagboy) made their first contribution in [#​365](https://github.com/softprops/action-gh-release/pull/365) **Full Changelog**: ### [`v2.0.6`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.6) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.5...v2.0.6) maintenance release with updated dependencies ### [`v2.0.5`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.5) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.4...v2.0.5) - Factor in file names with spaces when upserting files [#​446](https://github.com/softprops/action-gh-release/pull/446) via [@​MystiPanda](https://github.com/MystiPanda) - Improvements to error handling [#​449](https://github.com/softprops/action-gh-release/pull/449) via [@​till](https://github.com/till) ### [`v2.0.4`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.4) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.3...v2.0.4) - Minor follow up to [#​417](https://github.com/softprops/action-gh-release/pull/417). [#​425](https://github.com/softprops/action-gh-release/pull/425) ### [`v2.0.3`](https://github.com/softprops/action-gh-release/compare/v2.0.2...v2.0.3) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.2...v2.0.3) ### [`v2.0.2`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.2) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.1...v2.0.2) - Revisit approach to [#​384](https://github.com/softprops/action-gh-release/pull/384) making unresolved pattern failures opt-in [#​417](https://github.com/softprops/action-gh-release/pull/417) ### [`v2.0.1`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.1) [Compare Source](https://github.com/softprops/action-gh-release/compare/v2...v2.0.1) - Add support for make\_latest property [#​304](https://github.com/softprops/action-gh-release/pull/304) via [@​samueljseay](https://github.com/samueljseay) - Fail run if files setting contains invalid patterns [#​384](https://github.com/softprops/action-gh-release/pull/384) via [@​rpdelaney](https://github.com/rpdelaney) - Add support for proxy env variables (don't use node-fetch) [#​386/](https://github.com/softprops/action-gh-release/pull/386/) via [@​timor-raiman](https://github.com/timor-raiman) - Suppress confusing warning when input\_files is empty [#​389](https://github.com/softprops/action-gh-release/pull/389) via [@​Drowze](https://github.com/Drowze)
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.simoncor.net/golang/gogitlabber/pulls/3 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d79c5cc..a7820ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -47,7 +47,7 @@ jobs: # upload sbom to release - name: "upload sbom to release" - uses: "softprops/action-gh-release@v2" + uses: "softprops/action-gh-release@v3" with: files: | gogitlabber-*-sbom.spdx.json From 9e7a3244fad28c47f2fae85d0a08bc78c78d8f44 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 18 May 2026 17:48:28 +0200 Subject: [PATCH 5/8] chore(package): update goreleaser/goreleaser-action action to v7 (#2) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | --- ### Release Notes
goreleaser/goreleaser-action (goreleaser/goreleaser-action) ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@​caarlos0](https://github.com/caarlos0) in [#​555](https://github.com/goreleaser/goreleaser-action/pull/555) - feat: add `version-file` input by [@​caarlos0](https://github.com/caarlos0) in [#​556](https://github.com/goreleaser/goreleaser-action/pull/556) - feat: resolve nightly to latest vX.Y.Z--nightly release by [@​caarlos0](https://github.com/caarlos0) in [#​558](https://github.com/goreleaser/goreleaser-action/pull/558) **Full Changelog**: ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@​caarlos0](https://github.com/caarlos0) in [#​550](https://github.com/goreleaser/goreleaser-action/pull/550) - docs: document cosign verification in README by [@​caarlos0](https://github.com/caarlos0) in [#​553](https://github.com/goreleaser/goreleaser-action/pull/553) - docs: Upgrade import GPG action version by [@​flecno](https://github.com/flecno) in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547) - ci: drop docker-bake in favor of plain npm by [@​caarlos0](https://github.com/caarlos0) in [#​551](https://github.com/goreleaser/goreleaser-action/pull/551) - ci: add release-major-tag workflow by [@​caarlos0](https://github.com/caarlos0) in [#​552](https://github.com/goreleaser/goreleaser-action/pull/552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@​caarlos0](https://github.com/caarlos0) in [#​554](https://github.com/goreleaser/goreleaser-action/pull/554) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​543](https://github.com/goreleaser/goreleaser-action/pull/543) - ci(deps): bump the actions group with 5 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​546](https://github.com/goreleaser/goreleaser-action/pull/546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​545](https://github.com/goreleaser/goreleaser-action/pull/545) #### New Contributors - [@​flecno](https://github.com/flecno) made their first contribution in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547) **Full Changelog**: ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7...v7) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@​caarlos0](https://github.com/caarlos0) in [#​533](https://github.com/goreleaser/goreleaser-action/pull/533) - sec: pin github action versions by [@​caarlos0](https://github.com/caarlos0) in [#​514](https://github.com/goreleaser/goreleaser-action/pull/514) - docs: Upgrade checkout GitHub Action in README.md by [@​dunglas](https://github.com/dunglas) in [#​507](https://github.com/goreleaser/goreleaser-action/pull/507) - chore(deps): bump actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​504](https://github.com/goreleaser/goreleaser-action/pull/504) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​517](https://github.com/goreleaser/goreleaser-action/pull/517) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​523](https://github.com/goreleaser/goreleaser-action/pull/523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​526](https://github.com/goreleaser/goreleaser-action/pull/526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​532](https://github.com/goreleaser/goreleaser-action/pull/532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​534](https://github.com/goreleaser/goreleaser-action/pull/534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​536](https://github.com/goreleaser/goreleaser-action/pull/536) - chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​537](https://github.com/goreleaser/goreleaser-action/pull/537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​538](https://github.com/goreleaser/goreleaser-action/pull/538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​539](https://github.com/goreleaser/goreleaser-action/pull/539) **Full Changelog**: ### [`v7`](https://github.com/goreleaser/goreleaser-action/compare/v6.4.0...v7) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.4.0...v7) ### [`v6.4.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.4.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.3.0...v6.4.0) #### What's Changed - ci: set contents read as default workflow permissions by [@​crazy-max](https://github.com/crazy-max) in [#​494](https://github.com/goreleaser/goreleaser-action/pull/494) - fix: support .config directory for goreleaser config files by [@​haya14busa](https://github.com/haya14busa) in [#​500](https://github.com/goreleaser/goreleaser-action/pull/500) - chore(deps): bump semver from 7.7.1 to 7.7.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​495](https://github.com/goreleaser/goreleaser-action/pull/495) - chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​498](https://github.com/goreleaser/goreleaser-action/pull/498) - fix: do not get releases.json if version is specific by [@​caarlos0](https://github.com/caarlos0) in [#​502](https://github.com/goreleaser/goreleaser-action/pull/502) - chore(deps): bump undici from 5.28.5 to 5.29.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​496](https://github.com/goreleaser/goreleaser-action/pull/496) - feat: retry downloading releases json by [@​caarlos0](https://github.com/caarlos0) in [#​503](https://github.com/goreleaser/goreleaser-action/pull/503) #### New Contributors - [@​haya14busa](https://github.com/haya14busa) made their first contribution in [#​500](https://github.com/goreleaser/goreleaser-action/pull/500) **Full Changelog**: ### [`v6.3.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.3.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.2.1...v6.3.0) - Bump undici from 5.28.3 to 5.28.5 in [#​488](https://github.com/goreleaser/goreleaser-action/pull/488) **Full Changelog**: ### [`v6.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.2.1) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.2.0...v6.2.1) #### What's Changed This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the `-pro` suffix). Older versions should work fine. > \[!WARNING] > This version is **required** for GoReleaser Pro v2.7.0+. > Read more [here](https://goreleaser.com/blog/goreleaser-v2.7/). **Full Changelog**: ### [`v6.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.2.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.1.0...v6.2.0) #### What's Changed This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the `-pro` suffix). Older versions should work fine. > \[!WARNING] > This version is **required** for GoReleaser Pro v2.7.0+. > Read more [here](https://goreleaser.com/blog/goreleaser-v2.7/). **Full Changelog**: ### [`v6.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.1.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6...v6.1.0) #### What's Changed - chore(deps): bump braces from 3.0.2 to 3.0.3 by [@​dependabot](https://github.com/dependabot) in [#​467](https://github.com/goreleaser/goreleaser-action/pull/467) - chore(deps): bump docker/bake-action from 4 to 5 by [@​dependabot](https://github.com/dependabot) in [#​468](https://github.com/goreleaser/goreleaser-action/pull/468) - chore(deps): bump semver from 7.6.2 to 7.6.3 by [@​dependabot](https://github.com/dependabot) in [#​470](https://github.com/goreleaser/goreleaser-action/pull/470) - chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client) from 2.2.1 to 2.2.2 by [@​dependabot](https://github.com/dependabot) in [#​473](https://github.com/goreleaser/goreleaser-action/pull/473) - chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client) from 2.2.2 to 2.2.3 by [@​dependabot](https://github.com/dependabot) in [#​474](https://github.com/goreleaser/goreleaser-action/pull/474) - chore(deps): bump micromatch from 4.0.5 to 4.0.8 by [@​dependabot](https://github.com/dependabot) in [#​475](https://github.com/goreleaser/goreleaser-action/pull/475) - chore(deps): bump [@​actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 by [@​dependabot](https://github.com/dependabot) in [#​478](https://github.com/goreleaser/goreleaser-action/pull/478) - docs: bump upload-artifact version by [@​dunglas](https://github.com/dunglas) in [#​479](https://github.com/goreleaser/goreleaser-action/pull/479) - chore: update generated content by [@​crazy-max](https://github.com/crazy-max) in [#​480](https://github.com/goreleaser/goreleaser-action/pull/480) #### New Contributors - [@​dunglas](https://github.com/dunglas) made their first contribution in [#​479](https://github.com/goreleaser/goreleaser-action/pull/479) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.simoncor.net/golang/gogitlabber/pulls/2 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a7820ab..c5d8a4e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: # run goreleaser - name: "run goreleaser" - uses: "goreleaser/goreleaser-action@v6" + uses: "goreleaser/goreleaser-action@v7" with: version: "v2.8.2" args: "release --clean --config ./.github/.goreleaser.yaml" From b62814ccd9d63b3967a587a73803dc5ce7c8191a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 19 May 2026 05:46:22 +0000 Subject: [PATCH 6/8] chore(package): update module github.com/go-git/go-git/v6 to v6.0.0-alpha.4 --- go.mod | 12 ++++++------ go.sum | 12 ++++++++++++ 2 files changed, 18 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index 363257a..e407713 100644 --- a/go.mod +++ b/go.mod @@ -3,7 +3,7 @@ module gogitlabber go 1.25.0 require ( - github.com/go-git/go-git/v6 v6.0.0-alpha.3 + github.com/go-git/go-git/v6 v6.0.0-alpha.4 github.com/k0kubun/go-ansi v0.0.0-20180517002512-3bf9e2903213 github.com/schollz/progressbar/v3 v3.19.0 github.com/scornet256/go-logger v0.0.2 @@ -20,7 +20,7 @@ require ( github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect github.com/go-git/gcfg/v2 v2.0.2 // indirect github.com/go-git/go-billy/v5 v5.6.2 // indirect - github.com/go-git/go-billy/v6 v6.0.0-20260424211911-732291493fb8 // indirect + github.com/go-git/go-billy/v6 v6.0.0-alpha.1 // indirect github.com/go-git/go-git/v5 v5.16.4 // indirect github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect @@ -33,10 +33,10 @@ require ( github.com/sergi/go-diff v1.4.0 // indirect github.com/skeema/knownhosts v1.3.1 // indirect github.com/xanzy/ssh-agent v0.3.3 // indirect - golang.org/x/crypto v0.50.0 // indirect - golang.org/x/net v0.53.0 // indirect + golang.org/x/crypto v0.51.0 // indirect + golang.org/x/net v0.54.0 // indirect golang.org/x/sync v0.20.0 // indirect - golang.org/x/sys v0.43.0 // indirect - golang.org/x/term v0.42.0 // indirect + golang.org/x/sys v0.44.0 // indirect + golang.org/x/term v0.43.0 // indirect gopkg.in/warnings.v0 v0.1.2 // indirect ) diff --git a/go.sum b/go.sum index e6af0cd..f244b7e 100644 --- a/go.sum +++ b/go.sum @@ -42,6 +42,8 @@ github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f h1:Uvbx7nITO3Sd github.com/go-git/go-billy/v6 v6.0.0-20260226131633-45bd0956d66f/go.mod h1:ZW9JC5gionMP1kv5uiaOaV23q0FFmNrVOV8VW+y/acc= github.com/go-git/go-billy/v6 v6.0.0-20260424211911-732291493fb8 h1:QRpwB1ans3fB3Cmeuog1ATzvXg/xhqubqiQi97xNO6E= github.com/go-git/go-billy/v6 v6.0.0-20260424211911-732291493fb8/go.mod h1:CdBVp7CXl9l3sOyNEog46cP1Pvx/hjCe9AD0mtaIUYU= +github.com/go-git/go-billy/v6 v6.0.0-alpha.1 h1:xVjAR4oUvrKy7/Xuw/lLlV3gkxR3KO2H8W+MamuVVsQ= +github.com/go-git/go-billy/v6 v6.0.0-alpha.1/go.mod h1:eaCUpHbedW7//EwcYmUDfJe2N6sJC9O12AT0OTqJR1E= github.com/go-git/go-git/v5 v5.16.4 h1:7ajIEZHZJULcyJebDLo99bGgS0jRrOxzZG4uCk2Yb2Y= github.com/go-git/go-git/v5 v5.16.4/go.mod h1:4Ge4alE/5gPs30F2H1esi2gPd69R0C39lolkucHBOp8= github.com/go-git/go-git/v6 v6.0.0-20251210072406-9b5f6428e1da h1:ch21RnknyB1dYlWSpomdW3pXNcQZJtrtDi8wz5up31s= @@ -128,6 +130,8 @@ github.com/go-git/go-git/v6 v6.0.0-20260331140939-8126d61b3452 h1:GK74IG6GXAXA5b github.com/go-git/go-git/v6 v6.0.0-20260331140939-8126d61b3452/go.mod h1:MD0nNvDdZ1yFG91XCLWTOQI48oqCRnQBMqraGrKV1p4= github.com/go-git/go-git/v6 v6.0.0-alpha.3 h1:lJGritJ5AcC0X7buV0lReZ4cEHqcKB3Ab2ZjD3Ku+Ss= github.com/go-git/go-git/v6 v6.0.0-alpha.3/go.mod h1:DGnqu+twdAgtDx/4tQTWFrVE1an+2ACph3W9yOfSJZM= +github.com/go-git/go-git/v6 v6.0.0-alpha.4 h1:aDTc2UGanmaE7FkGLSlBEB9nohMnQ+RKXcfq/D+esDQ= +github.com/go-git/go-git/v6 v6.0.0-alpha.4/go.mod h1:4ODa/G7hPWrh4Y+7lmt59Ij3zW38IEfvRoAZxLYYBhc= github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ= github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8/go.mod h1:wcDNUvekVysuuOpQKo3191zZyTpiI6se1N1ULghS0sw= github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A= @@ -199,6 +203,8 @@ golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts= golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos= golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI= golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q= +golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI= +golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8= golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY= golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E= @@ -210,6 +216,8 @@ golang.org/x/net v0.50.0 h1:ucWh9eiCGyDR3vtzso0WMQinm2Dnt8cFMuQa9K33J60= golang.org/x/net v0.50.0/go.mod h1:UgoSli3F/pBgdJBHCTc+tp3gmrU4XswgGRgtnwWTfyM= golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA= golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs= +golang.org/x/net v0.54.0 h1:2zJIZAxAHV/OHCDTCOHAYehQzLfSXuf/5SoL/Dv6w/w= +golang.org/x/net v0.54.0/go.mod h1:Sj4oj8jK6XmHpBZU/zWHw3BV3abl4Kvi+Ut7cQcY+cQ= golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4= golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4= @@ -233,6 +241,8 @@ golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k= golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.44.0 h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ= +golang.org/x/sys v0.44.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.30.0 h1:PQ39fJZ+mfadBm0y5WlL4vlM7Sx1Hgf13sMIY2+QS9Y= golang.org/x/term v0.30.0/go.mod h1:NYYFdzHoI5wRh/h5tDMdMqCqPJZEuNqVR5xJLd/n67g= @@ -245,6 +255,8 @@ golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg= golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM= golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY= golang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY= +golang.org/x/term v0.43.0 h1:S4RLU2sB31O/NCl+zFN9Aru9A/Cq2aqKpTZJ6B+DwT4= +golang.org/x/term v0.43.0/go.mod h1:lrhlHNdQJHO+1qVYiHfFKVuVioJIheAc3fBSMFYEIsk= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= From 54ee536cbf26ca3bca3f61e12de0e1da424882ac Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 19 May 2026 12:41:18 +0000 Subject: [PATCH 7/8] chore(package): update cr.simoncor.net/dockerhub/goreleaser/goreleaser docker tag to v2.15.4 --- .woodpecker/lint-test-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.woodpecker/lint-test-release.yml b/.woodpecker/lint-test-release.yml index ad8c6be..7540808 100644 --- a/.woodpecker/lint-test-release.yml +++ b/.woodpecker/lint-test-release.yml @@ -25,7 +25,7 @@ steps: - "tag" - name: "releasing" - image: "cr.simoncor.net/dockerhub/goreleaser/goreleaser:v2.10.2" + image: "cr.simoncor.net/dockerhub/goreleaser/goreleaser:v2.15.4" depends_on: - "testing" environment: From 9e3cf6f9221b0ead64dc5ae738b77c414f44dd83 Mon Sep 17 00:00:00 2001 From: Simon Cornet Date: Tue, 19 May 2026 18:00:49 +0200 Subject: [PATCH 8/8] chore: update go-build image to cr.simoncor.net/go-build:latest --- .woodpecker/lint-test-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.woodpecker/lint-test-release.yml b/.woodpecker/lint-test-release.yml index 7540808..dbbb626 100644 --- a/.woodpecker/lint-test-release.yml +++ b/.woodpecker/lint-test-release.yml @@ -13,7 +13,7 @@ steps: - "tag" - name: "testing" - image: "registry.gitlab.simoncor.net/oci/go-build:v25.06.03" + image: "cr.simoncor.net/go-build:latest" depends_on: - "linting" commands: