feat!: upgrade goreleaser to 2.3.2

Author: christophwitzko

cmd/hooks-goreleaser/main.go

@@ -1,7 +1,7 @@
 package main
 
 import (
-	hooksGoReleaser "github.com/go-semantic-release/hooks-goreleaser/pkg/hooks"
+	hooksGoReleaser "github.com/go-semantic-release/hooks-goreleaser/v2/pkg/hooks"
 	"github.com/go-semantic-release/semantic-release/v2/pkg/hooks"
 	"github.com/go-semantic-release/semantic-release/v2/pkg/plugin"
 )

go.mod

@@ -1,6 +1,8 @@
 blank_issues_enabled: false
 contact_links:
-- name: Ask a question
-  url: https://github.com/goreleaser/goreleaser/discussions
-  about: Ask questions and discuss with other community members
-
+  - name: Ask a question
+    url: https://github.com/goreleaser/goreleaser/discussions
+    about: Please ask questions here.
+  - name: Chat on Discord
+    url: https://goreleaser.com/discord
+    about: Join our discord to chat about GoReleaser.

go.sum

@@ -29,33 +29,30 @@ jobs:
     env:
       DOCKER_CLI_EXPERIMENTAL: "enabled"
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
       - uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v1
         with:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v2
-      - uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3
+      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v2
+      - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
       - name: setup-snapcraft
-        # FIXME: the mkdirs are a hack for https://github.com/goreleaser/goreleaser/issues/1715
         run: |
           sudo apt-get update
           sudo apt-get -yq --no-install-suggests --no-install-recommends install snapcraft
-          mkdir -p $HOME/.cache/snapcraft/download
-          mkdir -p $HOME/.cache/snapcraft/stage-packages
       - uses: crazy-max/ghaction-upx@v3
         with:
           install-only: true
-      - uses: cachix/install-nix-action@V27
+      - uses: cachix/install-nix-action@V28
         with:
           github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v4
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v4
         with:
           go-version: stable
-      - uses: sigstore/cosign-installer@v3.5.0
-      - uses: anchore/sbom-action/download-syft@v0.16.0
+      - uses: sigstore/cosign-installer@v3.6.0
+      - uses: anchore/sbom-action/download-syft@v0.17.2
       - name: setup-validate-krew-manifest
         run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
       - name: setup
@@ -64,8 +61,14 @@ jobs:
           task build
       - name: test
         run: task test
-      - uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4
+      - uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4
         with:
           file: ./coverage.txt
-      - run: ./goreleaser check
       - run: git diff
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        with:
+          fetch-depth: 0
+      - run: go run . check

goreleaser/.github/ISSUE_TEMPLATE/config.yml

@@ -15,10 +15,10 @@ jobs:
       contents: read
 
     steps:
-    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
-    - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v4
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+    - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v4
       with:
         go-version: stable
-    - uses: github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v2
-    - uses: github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v2
-    - uses: github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v2
+    - uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
+    - uses: github/codeql-action/autobuild@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
+    - uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3

goreleaser/.github/workflows/build.yml

@@ -0,0 +1,24 @@
+# see https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request
+
+name: dependabot
+
+on:
+  pull_request:
+
+permissions:
+  pull-requests: write
+
+jobs:
+  automation:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - id: metadata
+        uses: dependabot/fetch-metadata@dbb049abf0d677abbd7f7eee0375145b417fdd34 # v2.2.0
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+      - run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

goreleaser/.github/workflows/codeql.yml

@@ -8,7 +8,7 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/dependency-review-action@v4
         with:
           allow-licenses: BSD-2-Clause, BSD-3-Clause, MIT, Apache-2.0, MPL-2.0, ISC

goreleaser/.github/workflows/dependabot-automation.yml

@@ -19,8 +19,8 @@ jobs:
   htmltest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
-      - uses: cachix/install-nix-action@V27
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: cachix/install-nix-action@V28
         with:
           nix_path: nixpkgs=channel:nixos-unstable
           github_access_token: ${{ secrets.GITHUB_TOKEN }}

goreleaser/.github/workflows/depsreview.yaml

@@ -12,10 +12,10 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           token: ${{ secrets.GH_PAT }}
-      - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v4
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v4
         with:
           go-version: stable
           cache: true
@@ -28,7 +28,7 @@ jobs:
       - run: task docs:releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: cachix/install-nix-action@V27
+      - uses: cachix/install-nix-action@V28
         with:
           github_access_token: ${{ secrets.GITHUB_TOKEN }}
       - run: task docs:generate
@@ -37,6 +37,7 @@ jobs:
       - run: task nix:flake:update
       - run: task nix:flake:update-vendor
       - run: task schema:validate
+      - run: "git pull"
       - uses: stefanzweifel/git-auto-commit-action@8621497c8c39c72f3e2a999a26b4ca1b5058a842 # v5
         with:
           commit_message: "chore: auto-update generated files"