1
1
Fork 0
mirror of https://github.com/goreleaser/nfpm synced 2024-05-06 00:26:11 +02:00
Commit Graph

957 Commits

Author SHA1 Message Date
Carlos Alexandro Becker fd63f71ad6
build: test on debian 11
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-21 22:17:59 +00:00
Carlos Alexandro Becker 3e892a7551
test: signatures on centos 7 and 8 (#678)
* test: signatures on centos 7 and 8

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: remove test for centos7, added for centos9

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* chore: add back build tags

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* chore: revert unneeded changes

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-21 19:11:51 -03:00
dependabot[bot] 9aea44824f
chore(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 (#677) 2023-06-21 19:01:57 +00:00
dependabot[bot] 707c969082
feat(deps): bump github.com/klauspost/compress from 1.16.5 to 1.16.6 (#676)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.5 to 1.16.6.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.16.5...v1.16.6)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-14 10:33:30 -03:00
caarlos0 18db0ecefe docs: update cmd docs 2023-06-07 02:47:19 +00:00
Shunsuke Suzuki 3e5d930439
chore: remove space from asset name (#674) 2023-06-06 23:36:59 -03:00
caarlos0 a72ecd200b docs: update cmd docs 2023-06-05 18:31:09 +00:00
Carlos Alexandro Becker af65ba8a60
chore: remove some panics
It'll only error if the flag doesn't exist, which is not that bad, so
I just removed the panics for now... like the other options set the same
way.
2023-06-05 17:45:31 +00:00
Ville Skyttä 5820ab17f6
feat: expand environment variables in deb fields values (#667) 2023-06-05 13:04:43 -03:00
Ville Skyttä 8b1af19c32
feat: completion improvements (#668)
* feat: add flag argument completions

* feat: do not offer completions for commands taking no args
2023-06-05 13:01:30 -03:00
Ville Skyttä 0be01236fe
fix(build): depguard (v2) config for >= 1.53 (#669) 2023-06-05 13:00:16 -03:00
dependabot[bot] 14ce368f13
feat(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#666)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:51:56 -03:00
dependabot[bot] 1775791519
feat(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 (#664)
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.15 to 0.3.16.
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](https://github.com/imdario/mergo/compare/v0.3.15...v0.3.16)

---
updated-dependencies:
- dependency-name: github.com/imdario/mergo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-29 10:01:34 -03:00
Carlos Alexandro Becker b6798f6b03
fix: add filename to error log
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-26 14:31:34 +00:00
Carlos Alexandro Becker cd2c3e41cc
build: fix url 2023-05-24 03:36:42 +00:00
Carlos Alexandro Becker cbc2603536
build: fix goreleaser deprecations 2023-05-24 03:22:40 +00:00
caarlos0 96f5d5c2ce docs: update cmd docs 2023-05-24 03:19:26 +00:00
Carlos Alexandro Becker ed9abdf63d
sec: fix for CVE-2023-32698
This commit merely documents all commits related to fixing
CVE-2023-32698, as they were a bit spread.

It also has the intent of showing up properly in our changelog.

Here's the commit list:

* 8e517cca17
* f64a311eef
* 66c3d277cf

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:57:09 +00:00
Carlos Alexandro Becker 4593dcb36a
build: improve changelog
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:56:43 +00:00
Carlos Alexandro Becker e01884ecba
build: improve release notes 2023-05-24 02:54:42 +00:00
Carlos Alexandro Becker f6f8048d47
test: stabilize arch test 2023-05-24 02:45:49 +00:00
Carlos Alexandro Becker 7d6a77bee6
test: fix arch tests 2023-05-24 02:42:13 +00:00
Carlos Alexandro Becker 815b388464
test: fix
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:39:13 +00:00
Carlos Alexandro Becker 9524bb8a26
fix: mips softfloat/hardfloat handling 2023-05-24 02:34:03 +00:00
Carlos Alexandro Becker a8c16744a1
test: fix files test 2023-05-24 02:33:54 +00:00
Carlos Alexandro Becker 66c3d277cf
test: fixes
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:14:30 +00:00
Carlos Alexandro Becker f64a311eef
fix: improve umask tests and documentation
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 01:48:56 +00:00
caarlos0 858b78b7c1 docs: update cmd docs 2023-05-24 01:48:01 +00:00
Carlos Alexandro Becker 8e517cca17
Merge pull request from GHSA-w7jw-q4fg-qc4c
* feat(security): adds the umask option

closes https://github.com/goreleaser/nfpm/security/advisories/GHSA-w7jw-q4fg-qc4c

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: correct bitwise op

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-23 22:45:48 -03:00
Carlos Alexandro Becker 9ac328846c
fix: deb arm64
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-22 00:36:55 +00:00
Carlos Alexandro Becker 6dc5db365b
test: fix deb/rpm tests
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-21 23:05:10 +00:00
dependabot[bot] 561c39b135
feat(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#661)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 11:52:44 -03:00
Carlos Alexandro Becker 2b9864a79e
docs: update SECURITY.md 2023-05-18 14:18:54 -03:00
dependabot[bot] 3e6b70b477
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#660) 2023-05-18 09:36:11 -03:00
Carlos Alexandro Becker 312fd85338
fix: improve goarch to pkg conversion
also added tests

refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:24:50 +00:00
Carlos Alexandro Becker c20618cdd3
fix: mips architecture
refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:16:50 +00:00
Carlos Alexandro Becker dce0853e63
docs: goarch to packager 2023-05-18 01:15:51 +00:00
dependabot[bot] 40b4d93beb
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#658) 2023-05-17 09:04:04 -03:00
Stefan Schubert b1f3fef606
fix: md5sums entries and lintian errors/warnings (#656)
Missing trailing ./ in md5sums for changelog.Debian.gz caused
md5sums-lists-nonexistent-file and file-missing-in-md5sums
and is fixed using files.AsExplicitRelativePath.
Adding copyright file fixes no-copyright-file.
Set file_info fixes executable-is-not-world-readable,
non-standard-executable-perm, non-standard-file-perm.
Adding section fixes unknown-section, empty-field.
Using standard compress/gzip module fixes
package-contains-timestamped-gzip,
because klauspost/pgzip does not support empty mod time.
Adding urgency and distribution in changelog fixes
syntax-error-in-debian-changelog.
Adding mail address to maintainer fixes malformed-contact.
Correcting description fixes description-starts-with-package-name
and description-starts-with-leading-spaces.
2023-05-11 09:14:54 -03:00
dependabot[bot] d8ac10bf67
chore(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 (#655)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.14.1 to 0.14.2.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/v0.14.1...v0.14.2)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-08 08:49:02 -03:00
dependabot[bot] a1fb0477f0
feat(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (#654)
Bumps [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/klauspost/pgzip/releases)
- [Commits](https://github.com/klauspost/pgzip/compare/v1.2.5...v1.2.6)

---
updated-dependencies:
- dependency-name: github.com/klauspost/pgzip
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-05 10:09:50 -03:00
Carlos Alexandro Becker ab59aadf23
docs: fix schema.json URL
closes #653
2023-04-27 18:44:41 +00:00
dependabot[bot] 2108b8d23e
chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 (#652)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-26 08:29:02 -03:00
dependabot[bot] fccdae5dfc
feat(deps): bump github.com/klauspost/compress from 1.16.4 to 1.16.5 (#651)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.4 to 1.16.5.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-18 09:22:54 -03:00
dependabot[bot] c2f47813a3
feat(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (#649)
Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-11 14:05:07 -03:00
dependabot[bot] e2515bf374
chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.2 (#648)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 08:54:52 -03:00
dependabot[bot] c24e1b4d99
feat(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.4 (#646)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.3 to 1.16.4.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-06 14:15:37 -03:00
Carlos Alexandro Becker 590a3ff6f7
docs: fix verify instructions (#647)
* docs: fix verify instructions

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* docs: space

* docs: update features

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* docs: fix cosign link

---------

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 14:14:47 -03:00
caarlos0 1ba5a445d7 docs: update cmd docs 2023-04-06 03:00:30 +00:00
Carlos Alexandro Becker 3f9527977c
fix(archlinux): .MTREE should have parent dirs as well (#645)
* fix(archlinux): .MTREE should have parent dirs as well

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: files

Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: code, test

Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: perm

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
2023-04-05 23:51:27 -03:00