Carlos Alexandro Becker
fd63f71ad6
build: test on debian 11
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-21 22:17:59 +00:00
Carlos Alexandro Becker
3e892a7551
test: signatures on centos 7 and 8 ( #678 )
...
* test: signatures on centos 7 and 8
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* fix: remove test for centos7, added for centos9
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* chore: add back build tags
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* chore: revert unneeded changes
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-21 19:11:51 -03:00
dependabot[bot]
9aea44824f
chore(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 ( #677 )
2023-06-21 19:01:57 +00:00
dependabot[bot]
707c969082
feat(deps): bump github.com/klauspost/compress from 1.16.5 to 1.16.6 ( #676 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.16.5 to 1.16.6.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.16.5...v1.16.6 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-14 10:33:30 -03:00
caarlos0
18db0ecefe
docs: update cmd docs
2023-06-07 02:47:19 +00:00
Shunsuke Suzuki
3e5d930439
chore: remove space from asset name ( #674 )
2023-06-06 23:36:59 -03:00
caarlos0
a72ecd200b
docs: update cmd docs
2023-06-05 18:31:09 +00:00
Carlos Alexandro Becker
af65ba8a60
chore: remove some panics
...
It'll only error if the flag doesn't exist, which is not that bad, so
I just removed the panics for now... like the other options set the same
way.
2023-06-05 17:45:31 +00:00
Ville Skyttä
5820ab17f6
feat: expand environment variables in deb fields values ( #667 )
2023-06-05 13:04:43 -03:00
Ville Skyttä
8b1af19c32
feat: completion improvements ( #668 )
...
* feat: add flag argument completions
* feat: do not offer completions for commands taking no args
2023-06-05 13:01:30 -03:00
Ville Skyttä
0be01236fe
fix(build): depguard (v2) config for >= 1.53 ( #669 )
2023-06-05 13:00:16 -03:00
dependabot[bot]
14ce368f13
feat(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 ( #666 )
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:51:56 -03:00
dependabot[bot]
1775791519
feat(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 ( #664 )
...
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo ) from 0.3.15 to 0.3.16.
- [Release notes](https://github.com/imdario/mergo/releases )
- [Commits](https://github.com/imdario/mergo/compare/v0.3.15...v0.3.16 )
---
updated-dependencies:
- dependency-name: github.com/imdario/mergo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-29 10:01:34 -03:00
Carlos Alexandro Becker
b6798f6b03
fix: add filename to error log
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-26 14:31:34 +00:00
Carlos Alexandro Becker
cd2c3e41cc
build: fix url
2023-05-24 03:36:42 +00:00
Carlos Alexandro Becker
cbc2603536
build: fix goreleaser deprecations
2023-05-24 03:22:40 +00:00
caarlos0
96f5d5c2ce
docs: update cmd docs
2023-05-24 03:19:26 +00:00
Carlos Alexandro Becker
ed9abdf63d
sec: fix for CVE-2023-32698
...
This commit merely documents all commits related to fixing
CVE-2023-32698, as they were a bit spread.
It also has the intent of showing up properly in our changelog.
Here's the commit list:
* 8e517cca17
* f64a311eef
* 66c3d277cf
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:57:09 +00:00
Carlos Alexandro Becker
4593dcb36a
build: improve changelog
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:56:43 +00:00
Carlos Alexandro Becker
e01884ecba
build: improve release notes
2023-05-24 02:54:42 +00:00
Carlos Alexandro Becker
f6f8048d47
test: stabilize arch test
2023-05-24 02:45:49 +00:00
Carlos Alexandro Becker
7d6a77bee6
test: fix arch tests
2023-05-24 02:42:13 +00:00
Carlos Alexandro Becker
815b388464
test: fix
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:39:13 +00:00
Carlos Alexandro Becker
9524bb8a26
fix: mips softfloat/hardfloat handling
2023-05-24 02:34:03 +00:00
Carlos Alexandro Becker
a8c16744a1
test: fix files test
2023-05-24 02:33:54 +00:00
Carlos Alexandro Becker
66c3d277cf
test: fixes
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 02:14:30 +00:00
Carlos Alexandro Becker
f64a311eef
fix: improve umask tests and documentation
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-24 01:48:56 +00:00
caarlos0
858b78b7c1
docs: update cmd docs
2023-05-24 01:48:01 +00:00
Carlos Alexandro Becker
8e517cca17
Merge pull request from GHSA-w7jw-q4fg-qc4c
...
* feat(security): adds the umask option
closes https://github.com/goreleaser/nfpm/security/advisories/GHSA-w7jw-q4fg-qc4c
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* fix: correct bitwise op
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-23 22:45:48 -03:00
Carlos Alexandro Becker
9ac328846c
fix: deb arm64
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-22 00:36:55 +00:00
Carlos Alexandro Becker
6dc5db365b
test: fix deb/rpm tests
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-21 23:05:10 +00:00
dependabot[bot]
561c39b135
feat(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 ( #661 )
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 11:52:44 -03:00
Carlos Alexandro Becker
2b9864a79e
docs: update SECURITY.md
2023-05-18 14:18:54 -03:00
dependabot[bot]
3e6b70b477
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 ( #660 )
2023-05-18 09:36:11 -03:00
Carlos Alexandro Becker
312fd85338
fix: improve goarch to pkg conversion
...
also added tests
refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:24:50 +00:00
Carlos Alexandro Becker
c20618cdd3
fix: mips architecture
...
refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:16:50 +00:00
Carlos Alexandro Becker
dce0853e63
docs: goarch to packager
2023-05-18 01:15:51 +00:00
dependabot[bot]
40b4d93beb
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 ( #658 )
2023-05-17 09:04:04 -03:00
Stefan Schubert
b1f3fef606
fix: md5sums entries and lintian errors/warnings ( #656 )
...
Missing trailing ./ in md5sums for changelog.Debian.gz caused
md5sums-lists-nonexistent-file and file-missing-in-md5sums
and is fixed using files.AsExplicitRelativePath.
Adding copyright file fixes no-copyright-file.
Set file_info fixes executable-is-not-world-readable,
non-standard-executable-perm, non-standard-file-perm.
Adding section fixes unknown-section, empty-field.
Using standard compress/gzip module fixes
package-contains-timestamped-gzip,
because klauspost/pgzip does not support empty mod time.
Adding urgency and distribution in changelog fixes
syntax-error-in-debian-changelog.
Adding mail address to maintainer fixes malformed-contact.
Correcting description fixes description-starts-with-package-name
and description-starts-with-leading-spaces.
2023-05-11 09:14:54 -03:00
dependabot[bot]
d8ac10bf67
chore(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 ( #655 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.14.1 to 0.14.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](https://github.com/anchore/sbom-action/compare/v0.14.1...v0.14.2 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-08 08:49:02 -03:00
dependabot[bot]
a1fb0477f0
feat(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 ( #654 )
...
Bumps [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/klauspost/pgzip/releases )
- [Commits](https://github.com/klauspost/pgzip/compare/v1.2.5...v1.2.6 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/pgzip
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-05 10:09:50 -03:00
Carlos Alexandro Becker
ab59aadf23
docs: fix schema.json URL
...
closes #653
2023-04-27 18:44:41 +00:00
dependabot[bot]
2108b8d23e
chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 ( #652 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-26 08:29:02 -03:00
dependabot[bot]
fccdae5dfc
feat(deps): bump github.com/klauspost/compress from 1.16.4 to 1.16.5 ( #651 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.16.4 to 1.16.5.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-18 09:22:54 -03:00
dependabot[bot]
c2f47813a3
feat(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 ( #649 )
...
Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver ) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/Masterminds/semver/releases )
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1 )
---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-11 14:05:07 -03:00
dependabot[bot]
e2515bf374
chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.2 ( #648 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 08:54:52 -03:00
dependabot[bot]
c24e1b4d99
feat(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.4 ( #646 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.16.3 to 1.16.4.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-06 14:15:37 -03:00
Carlos Alexandro Becker
590a3ff6f7
docs: fix verify instructions ( #647 )
...
* docs: fix verify instructions
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* docs: space
* docs: update features
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* docs: fix cosign link
---------
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 14:14:47 -03:00
caarlos0
1ba5a445d7
docs: update cmd docs
2023-04-06 03:00:30 +00:00
Carlos Alexandro Becker
3f9527977c
fix(archlinux): .MTREE should have parent dirs as well ( #645 )
...
* fix(archlinux): .MTREE should have parent dirs as well
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* fix: files
Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* fix: code, test
Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* fix: perm
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
2023-04-05 23:51:27 -03:00