[PR #645] fix(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 #643

New issue

Open

opened 2026-03-04 00:26:59 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 00:26:59 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/SignTools/SignTools/pull/645
Author: @dependabot[bot]
Created: 2/23/2026
Status: 🔄 Open

Base: master ← Head: dependabot/github_actions/goreleaser/goreleaser-action-7.0.0

📝 Commits (1)

225c5b9 fix(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/release.yml (+1 -1)

📄 Description

Bumps goreleaser/goreleaser-action from 6.4.0 to 7.0.0.

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v7.0.0

What's Changed

feat!: node 24, update deps, rm yarn, ESM by @caarlos0 in goreleaser/goreleaser-action#533

sec: pin github action versions by @caarlos0 in goreleaser/goreleaser-action#514

docs: Upgrade checkout GitHub Action in README.md by @dunglas in goreleaser/goreleaser-action#507

chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in goreleaser/goreleaser-action#504

ci(deps): bump the actions group with 2 updates by @dependabot[bot] in goreleaser/goreleaser-action#517

ci(deps): bump the actions group with 2 updates by @dependabot[bot] in goreleaser/goreleaser-action#523

ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by @dependabot[bot] in goreleaser/goreleaser-action#526

ci(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in goreleaser/goreleaser-action#532

ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @dependabot[bot] in goreleaser/goreleaser-action#534

chore(deps): bump the npm group across 1 directory with 4 updates by @dependabot[bot] in goreleaser/goreleaser-action#536

chore(deps): bump @actions/http-client from 3.0.2 to 4.0.0 in the npm group by @dependabot[bot] in goreleaser/goreleaser-action#537

ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by @dependabot[bot] in goreleaser/goreleaser-action#538

chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by @dependabot[bot] in goreleaser/goreleaser-action#539

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0

Commits

ec59f47 fix: yargs usage
752dede fix: gitignore
1881ae0 ci: update dependabot settings
fdc5e66 chore: gitignore provenance.json
51b5b35 chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group (#539)
4247c53 ci(deps): bump docker/setup-buildx-action in the actions group (#538)
c169bfd chore(deps): bump @actions/http-client from 3.0.2 to 4.0.0 in the npm group (...
902ab4a chore(deps): bump the npm group across 1 directory with 4 updates (#536)
c59a691 chore: gitignore
56cc8b2 ci: add job to automate dependabot pre-checkin/vendor
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/SignTools/SignTools/pull/645 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/23/2026 **Status:** 🔄 Open **Base:** `master` ← **Head:** `dependabot/github_actions/goreleaser/goreleaser-action-7.0.0` --- ### 📝 Commits (1) - [`225c5b9`](https://github.com/SignTools/SignTools/commit/225c5b9d982fbc8f238723ff379d58c95c9b56d8) fix(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+1 -1) </details> ### 📄 Description Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>feat!: node 24, update deps, rm yarn, ESM by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/533">goreleaser/goreleaser-action#533</a></li> <li>sec: pin github action versions by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/514">goreleaser/goreleaser-action#514</a></li> <li>docs: Upgrade checkout GitHub Action in README.md by <a href="https://github.com/dunglas"><code>@dunglas</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/507">goreleaser/goreleaser-action#507</a></li> <li>chore(deps): bump actions/checkout from 4 to 5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/504">goreleaser/goreleaser-action#504</a></li> <li>ci(deps): bump the actions group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/517">goreleaser/goreleaser-action#517</a></li> <li>ci(deps): bump the actions group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/523">goreleaser/goreleaser-action#523</a></li> <li>ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/526">goreleaser/goreleaser-action#526</a></li> <li>ci(deps): bump the actions group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/532">goreleaser/goreleaser-action#532</a></li> <li>ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/534">goreleaser/goreleaser-action#534</a></li> <li>chore(deps): bump the npm group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/536">goreleaser/goreleaser-action#536</a></li> <li>chore(deps): bump <code>@actions/http-client</code> from 3.0.2 to 4.0.0 in the npm group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/537">goreleaser/goreleaser-action#537</a></li> <li>ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/538">goreleaser/goreleaser-action#538</a></li> <li>chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/539">goreleaser/goreleaser-action#539</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0">https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/ec59f474b9834571250b370d4735c50f8e2d1e29"><code>ec59f47</code></a> fix: yargs usage</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/752dedee3d734a650f4cc280f78173f420900df9"><code>752dede</code></a> fix: gitignore</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/1881ae035d414b6146c8228c12290fa3c856f536"><code>1881ae0</code></a> ci: update dependabot settings</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/fdc5e662bb47216e7262db37c92fc968f3853c65"><code>fdc5e66</code></a> chore: gitignore provenance.json</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/51b5b35c3c313b84ba90e097d0ad2cf1bce101bc"><code>51b5b35</code></a> chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/539">#539</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/4247c53b304edb39a4e6a0808f415d3eebad450a"><code>4247c53</code></a> ci(deps): bump docker/setup-buildx-action in the actions group (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/538">#538</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/c169bfd5ae289fddb2e8b0b28a73a4baa2f55466"><code>c169bfd</code></a> chore(deps): bump <code>@actions/http-client</code> from 3.0.2 to 4.0.0 in the npm group (...</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/902ab4a70dd43cbbbe029e9917e939ba355a50dd"><code>902ab4a</code></a> chore(deps): bump the npm group across 1 directory with 4 updates (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/536">#536</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/c59a691319d27b75766143e4cd37a08ac6d400f8"><code>c59a691</code></a> chore: gitignore</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/56cc8b2737e5dd9a4ebdeaf930b51aa0231efd3d"><code>56cc8b2</code></a> ci: add job to automate dependabot pre-checkin/vendor</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/goreleaser-action/compare/v6.4.0...v7.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=goreleaser/goreleaser-action&package-manager=github_actions&previous-version=6.4.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>