[PR #428] [CLOSED] fix(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 #445

New issue

Closed

opened 2026-03-04 00:25:51 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 00:25:51 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/SignTools/SignTools/pull/428
Author: @dependabot[bot]
Created: 5/13/2024
Status: ❌ Closed

Base: master ← Head: dependabot/github_actions/goreleaser/goreleaser-action-5.1.0

📝 Commits (1)

7a2d229 fix(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/release.yml (+1 -1)

📄 Description

Bumps goreleaser/goreleaser-action from 5.0.0 to 5.1.0.

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v5.1.0

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

docs: bump actions to latest major by @crazy-max in goreleaser/goreleaser-action#435

chore(deps): bump docker/bake-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#436

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#437

chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in goreleaser/goreleaser-action#443

chore(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in goreleaser/goreleaser-action#444

Delete .kodiak.toml by @vedantmgoyal9 in goreleaser/goreleaser-action#446

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#448

chore(deps): bump ip from 2.0.0 to 2.0.1 by @dependabot in goreleaser/goreleaser-action#450

Upgrade setup-go action version in README by @kishaningithub in goreleaser/goreleaser-action#455

chore(deps): bump tar from 6.1.14 to 6.2.1 by @dependabot in goreleaser/goreleaser-action#456

chore: use corepack to install yarn by @crazy-max in goreleaser/goreleaser-action#458

feat: lock this major version of the action to use '~> v1' as 'latest' by @caarlos0 in goreleaser/goreleaser-action#461

chore(deps): bump semver from 7.6.0 to 7.6.2 by @dependabot in goreleaser/goreleaser-action#462

chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 by @dependabot in goreleaser/goreleaser-action#451

New Contributors

@vedantmgoyal9 made their first contribution in goreleaser/goreleaser-action#446

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0

Commits

5742e2a chore: re-generate
70ccc5d chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 (#451)
d55bec7 chore(deps): bump semver from 7.6.0 to 7.6.2 (#462)
f1dbd53 feat: lock this major version of the action to use '~> v1' as 'latest' (#461)
2953d07 chore(deps): update http-client
62d4b8a chore: use corepack to install yarn (#458)
f09f1a7 chore(deps): bump tar from 6.1.14 to 6.2.1 (#456)
9937f9b Revert "docs: Upgrade setup-go action version in README (#455)"
b7f6f16 docs: Upgrade setup-go action version in README (#455)
c21f56a docs: update readme
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/SignTools/SignTools/pull/428 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/13/2024 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/github_actions/goreleaser/goreleaser-action-5.1.0` --- ### 📝 Commits (1) - [`7a2d229`](https://github.com/SignTools/SignTools/commit/7a2d2292c042fdeeb2c057ee31e09dd0a0026def) fix(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+1 -1) </details> ### 📄 Description Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 5.0.0 to 5.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's releases</a>.</em></p> <blockquote> <h2>v5.1.0</h2> <h2>Important</h2> <p>This version changes the default behavior of <code>latest</code> to <code>~> v1</code>.</p> <p>The next major of this action (v6), will change this to <code>~> v2</code>, and will be launched together with GoReleaser v2.</p> <h2>What's Changed</h2> <ul> <li>docs: bump actions to latest major by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/435">goreleaser/goreleaser-action#435</a></li> <li>chore(deps): bump docker/bake-action from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/436">goreleaser/goreleaser-action#436</a></li> <li>chore(deps): bump codecov/codecov-action from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/437">goreleaser/goreleaser-action#437</a></li> <li>chore(deps): bump actions/setup-go from 4 to 5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/443">goreleaser/goreleaser-action#443</a></li> <li>chore(deps): bump actions/upload-artifact from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/444">goreleaser/goreleaser-action#444</a></li> <li>Delete .kodiak.toml by <a href="https://github.com/vedantmgoyal9"><code>@vedantmgoyal9</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/446">goreleaser/goreleaser-action#446</a></li> <li>chore(deps): bump codecov/codecov-action from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/448">goreleaser/goreleaser-action#448</a></li> <li>chore(deps): bump ip from 2.0.0 to 2.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/450">goreleaser/goreleaser-action#450</a></li> <li>Upgrade setup-go action version in README by <a href="https://github.com/kishaningithub"><code>@kishaningithub</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/455">goreleaser/goreleaser-action#455</a></li> <li>chore(deps): bump tar from 6.1.14 to 6.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/456">goreleaser/goreleaser-action#456</a></li> <li>chore: use corepack to install yarn by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/458">goreleaser/goreleaser-action#458</a></li> <li>feat: lock this major version of the action to use '~> v1' as 'latest' by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/461">goreleaser/goreleaser-action#461</a></li> <li>chore(deps): bump semver from 7.6.0 to 7.6.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/462">goreleaser/goreleaser-action#462</a></li> <li>chore(deps): bump <code>@actions/http-client</code> from 2.2.0 to 2.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/451">goreleaser/goreleaser-action#451</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/vedantmgoyal9"><code>@vedantmgoyal9</code></a> made their first contribution in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/446">goreleaser/goreleaser-action#446</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0">https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/5742e2a039330cbb23ebf35f046f814d4c6ff811"><code>5742e2a</code></a> chore: re-generate</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/70ccc5d2da2fe051346a9b15a4606eddd1f3b37c"><code>70ccc5d</code></a> chore(deps): bump <code>@actions/http-client</code> from 2.2.0 to 2.2.1 (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/451">#451</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/d55bec790d3538560a4e5817c32841f081b304ee"><code>d55bec7</code></a> chore(deps): bump semver from 7.6.0 to 7.6.2 (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/462">#462</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/f1dbd532c327ca7101fc2c0f22cbe5d5d7c85a06"><code>f1dbd53</code></a> feat: lock this major version of the action to use '~> v1' as 'latest' (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/461">#461</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/2953d07480ed937706865dbfe930e8c3e4135fd2"><code>2953d07</code></a> chore(deps): update http-client</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/62d4b8ad34c1c04c1bcb608540bdd301f43f367a"><code>62d4b8a</code></a> chore: use corepack to install yarn (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/458">#458</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/f09f1a7bee7ae6b5153daf4e8c63cc8ce8c7e7d5"><code>f09f1a7</code></a> chore(deps): bump tar from 6.1.14 to 6.2.1 (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/456">#456</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/9937f9bad91e089c6c6fe1d43dfa7b896ad6da21"><code>9937f9b</code></a> Revert "docs: Upgrade setup-go action version in README (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/455">#455</a>)"</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/b7f6f16d518319f4b032d8641d3adfbbfc008d3c"><code>b7f6f16</code></a> docs: Upgrade setup-go action version in README (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/455">#455</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/c21f56a7bc891b5f73bec61233c4102ef8273150"><code>c21f56a</code></a> docs: update readme</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=goreleaser/goreleaser-action&package-manager=github_actions&previous-version=5.0.0&new-version=5.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>