[PR #434] [CLOSED] fix(deps): bump goreleaser/goreleaser-action from 5.0.0 to 6.0.0 #450

New issue

Closed

opened 2026-03-04 00:25:53 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 00:25:53 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/SignTools/SignTools/pull/434
Author: @dependabot[bot]
Created: 6/5/2024
Status: ❌ Closed

Base: master ← Head: dependabot/github_actions/goreleaser/goreleaser-action-6.0.0

📝 Commits (1)

6c440ec fix(deps): bump goreleaser/goreleaser-action from 5.0.0 to 6.0.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/release.yml (+1 -1)

📄 Description

Bumps goreleaser/goreleaser-action from 5.0.0 to 6.0.0.

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v6.0.0

Important

In this version, latest defaults to ~> v2.

Make sure to check the announcement, which contains a migration guide.

What's Changed

feat!: use "~> v2" as default by @caarlos0 in goreleaser/goreleaser-action#463

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0

v5.1.0

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

docs: bump actions to latest major by @crazy-max in goreleaser/goreleaser-action#435

chore(deps): bump docker/bake-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#436

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#437

chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in goreleaser/goreleaser-action#443

chore(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in goreleaser/goreleaser-action#444

Delete .kodiak.toml by @vedantmgoyal9 in goreleaser/goreleaser-action#446

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#448

chore(deps): bump ip from 2.0.0 to 2.0.1 by @dependabot in goreleaser/goreleaser-action#450

Upgrade setup-go action version in README by @kishaningithub in goreleaser/goreleaser-action#455

chore(deps): bump tar from 6.1.14 to 6.2.1 by @dependabot in goreleaser/goreleaser-action#456

chore: use corepack to install yarn by @crazy-max in goreleaser/goreleaser-action#458

feat: lock this major version of the action to use '~> v1' as 'latest' by @caarlos0 in goreleaser/goreleaser-action#461

chore(deps): bump semver from 7.6.0 to 7.6.2 by @dependabot in goreleaser/goreleaser-action#462

chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 by @dependabot in goreleaser/goreleaser-action#451

New Contributors

@vedantmgoyal9 made their first contribution in goreleaser/goreleaser-action#446

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0

Commits

286f3b1 ci: fix tests
beac410 ci: update workflow and .goreleaser.yml
18bbabc feat!: use "~> v2" as default (#463)
5742e2a chore: re-generate
70ccc5d chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 (#451)
d55bec7 chore(deps): bump semver from 7.6.0 to 7.6.2 (#462)
f1dbd53 feat: lock this major version of the action to use '~> v1' as 'latest' (#461)
2953d07 chore(deps): update http-client
62d4b8a chore: use corepack to install yarn (#458)
f09f1a7 chore(deps): bump tar from 6.1.14 to 6.2.1 (#456)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/SignTools/SignTools/pull/434 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/5/2024 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/github_actions/goreleaser/goreleaser-action-6.0.0` --- ### 📝 Commits (1) - [`6c440ec`](https://github.com/SignTools/SignTools/commit/6c440ec2e302bab5c1a96f1b478d698f4c63fef6) fix(deps): bump goreleaser/goreleaser-action from 5.0.0 to 6.0.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+1 -1) </details> ### 📄 Description Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 5.0.0 to 6.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>Important</h2> <p>In this version, <code>latest</code> defaults to <code>~> v2</code>.</p> <p><strong>Make sure to check the <a href="https://goreleaser.com/blog/goreleaser-v2">announcement</a>, which contains a migration guide.</strong></p> <h2>What's Changed</h2> <ul> <li>feat!: use "~> v2" as default by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/463">goreleaser/goreleaser-action#463</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0">https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0</a></p> <h2>v5.1.0</h2> <h2>Important</h2> <p>This version changes the default behavior of <code>latest</code> to <code>~> v1</code>.</p> <p>The next major of this action (v6), will change this to <code>~> v2</code>, and will be launched together with GoReleaser v2.</p> <h2>What's Changed</h2> <ul> <li>docs: bump actions to latest major by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/435">goreleaser/goreleaser-action#435</a></li> <li>chore(deps): bump docker/bake-action from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/436">goreleaser/goreleaser-action#436</a></li> <li>chore(deps): bump codecov/codecov-action from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/437">goreleaser/goreleaser-action#437</a></li> <li>chore(deps): bump actions/setup-go from 4 to 5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/443">goreleaser/goreleaser-action#443</a></li> <li>chore(deps): bump actions/upload-artifact from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/444">goreleaser/goreleaser-action#444</a></li> <li>Delete .kodiak.toml by <a href="https://github.com/vedantmgoyal9"><code>@vedantmgoyal9</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/446">goreleaser/goreleaser-action#446</a></li> <li>chore(deps): bump codecov/codecov-action from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/448">goreleaser/goreleaser-action#448</a></li> <li>chore(deps): bump ip from 2.0.0 to 2.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/450">goreleaser/goreleaser-action#450</a></li> <li>Upgrade setup-go action version in README by <a href="https://github.com/kishaningithub"><code>@kishaningithub</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/455">goreleaser/goreleaser-action#455</a></li> <li>chore(deps): bump tar from 6.1.14 to 6.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/456">goreleaser/goreleaser-action#456</a></li> <li>chore: use corepack to install yarn by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/458">goreleaser/goreleaser-action#458</a></li> <li>feat: lock this major version of the action to use '~> v1' as 'latest' by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/461">goreleaser/goreleaser-action#461</a></li> <li>chore(deps): bump semver from 7.6.0 to 7.6.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/462">goreleaser/goreleaser-action#462</a></li> <li>chore(deps): bump <code>@actions/http-client</code> from 2.2.0 to 2.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/451">goreleaser/goreleaser-action#451</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/vedantmgoyal9"><code>@vedantmgoyal9</code></a> made their first contribution in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/446">goreleaser/goreleaser-action#446</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0">https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/286f3b13b1b49da4ac219696163fb8c1c93e1200"><code>286f3b1</code></a> ci: fix tests</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/beac41031402cb955b6b1325b39dc6a3aaddfa61"><code>beac410</code></a> ci: update workflow and .goreleaser.yml</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/18bbabc70c50bcffbadb2dc68d6d5266056978cb"><code>18bbabc</code></a> feat!: use "~> v2" as default (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/463">#463</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/5742e2a039330cbb23ebf35f046f814d4c6ff811"><code>5742e2a</code></a> chore: re-generate</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/70ccc5d2da2fe051346a9b15a4606eddd1f3b37c"><code>70ccc5d</code></a> chore(deps): bump <code>@actions/http-client</code> from 2.2.0 to 2.2.1 (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/451">#451</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/d55bec790d3538560a4e5817c32841f081b304ee"><code>d55bec7</code></a> chore(deps): bump semver from 7.6.0 to 7.6.2 (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/462">#462</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/f1dbd532c327ca7101fc2c0f22cbe5d5d7c85a06"><code>f1dbd53</code></a> feat: lock this major version of the action to use '~> v1' as 'latest' (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/461">#461</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/2953d07480ed937706865dbfe930e8c3e4135fd2"><code>2953d07</code></a> chore(deps): update http-client</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/62d4b8ad34c1c04c1bcb608540bdd301f43f367a"><code>62d4b8a</code></a> chore: use corepack to install yarn (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/458">#458</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/f09f1a7bee7ae6b5153daf4e8c63cc8ce8c7e7d5"><code>f09f1a7</code></a> chore(deps): bump tar from 6.1.14 to 6.2.1 (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/456">#456</a>)</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v6.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=goreleaser/goreleaser-action&package-manager=github_actions&previous-version=5.0.0&new-version=6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>