1
1
mirror of https://github.com/goreleaser/nfpm synced 2024-11-18 19:04:07 +01:00
Commit Graph

779 Commits

Author SHA1 Message Date
Carlos Alexandro Becker
8e517cca17
Merge pull request from GHSA-w7jw-q4fg-qc4c
* feat(security): adds the umask option

closes https://github.com/goreleaser/nfpm/security/advisories/GHSA-w7jw-q4fg-qc4c

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: correct bitwise op

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-23 22:45:48 -03:00
Carlos Alexandro Becker
9ac328846c
fix: deb arm64
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-22 00:36:55 +00:00
Carlos Alexandro Becker
6dc5db365b
test: fix deb/rpm tests
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-21 23:05:10 +00:00
dependabot[bot]
561c39b135
feat(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#661)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 11:52:44 -03:00
Carlos Alexandro Becker
2b9864a79e
docs: update SECURITY.md 2023-05-18 14:18:54 -03:00
dependabot[bot]
3e6b70b477
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#660) 2023-05-18 09:36:11 -03:00
Carlos Alexandro Becker
312fd85338
fix: improve goarch to pkg conversion
also added tests

refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:24:50 +00:00
Carlos Alexandro Becker
c20618cdd3
fix: mips architecture
refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:16:50 +00:00
Carlos Alexandro Becker
dce0853e63
docs: goarch to packager 2023-05-18 01:15:51 +00:00
dependabot[bot]
40b4d93beb
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#658) 2023-05-17 09:04:04 -03:00
Stefan Schubert
b1f3fef606
fix: md5sums entries and lintian errors/warnings (#656)
Missing trailing ./ in md5sums for changelog.Debian.gz caused
md5sums-lists-nonexistent-file and file-missing-in-md5sums
and is fixed using files.AsExplicitRelativePath.
Adding copyright file fixes no-copyright-file.
Set file_info fixes executable-is-not-world-readable,
non-standard-executable-perm, non-standard-file-perm.
Adding section fixes unknown-section, empty-field.
Using standard compress/gzip module fixes
package-contains-timestamped-gzip,
because klauspost/pgzip does not support empty mod time.
Adding urgency and distribution in changelog fixes
syntax-error-in-debian-changelog.
Adding mail address to maintainer fixes malformed-contact.
Correcting description fixes description-starts-with-package-name
and description-starts-with-leading-spaces.
2023-05-11 09:14:54 -03:00
dependabot[bot]
d8ac10bf67
chore(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 (#655)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.14.1 to 0.14.2.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/v0.14.1...v0.14.2)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-08 08:49:02 -03:00
dependabot[bot]
a1fb0477f0
feat(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (#654)
Bumps [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/klauspost/pgzip/releases)
- [Commits](https://github.com/klauspost/pgzip/compare/v1.2.5...v1.2.6)

---
updated-dependencies:
- dependency-name: github.com/klauspost/pgzip
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-05 10:09:50 -03:00
Carlos Alexandro Becker
ab59aadf23
docs: fix schema.json URL
closes #653
2023-04-27 18:44:41 +00:00
dependabot[bot]
2108b8d23e
chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 (#652)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-26 08:29:02 -03:00
dependabot[bot]
fccdae5dfc
feat(deps): bump github.com/klauspost/compress from 1.16.4 to 1.16.5 (#651)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.4 to 1.16.5.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-18 09:22:54 -03:00
dependabot[bot]
c2f47813a3
feat(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (#649)
Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-11 14:05:07 -03:00
dependabot[bot]
e2515bf374
chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.2 (#648)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 08:54:52 -03:00
dependabot[bot]
c24e1b4d99
feat(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.4 (#646)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.3 to 1.16.4.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-06 14:15:37 -03:00
Carlos Alexandro Becker
590a3ff6f7
docs: fix verify instructions (#647)
* docs: fix verify instructions

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* docs: space

* docs: update features

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* docs: fix cosign link

---------

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 14:14:47 -03:00
caarlos0
1ba5a445d7 docs: update cmd docs 2023-04-06 03:00:30 +00:00
Carlos Alexandro Becker
3f9527977c
fix(archlinux): .MTREE should have parent dirs as well (#645)
* fix(archlinux): .MTREE should have parent dirs as well

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: files

Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: code, test

Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: perm

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
v2.28.0
2023-04-05 23:51:27 -03:00
Carlos A Becker
5d251398b5
fix: lint issues
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 01:37:13 +00:00
Carlos A Becker
a67cf556cb
build: run checks on latest go
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 01:35:52 +00:00
Carlos Alexandro Becker
571a32b031
fix(archlinux): .MTREE should have dir permissions too (#644) 2023-04-05 10:12:19 -03:00
dependabot[bot]
3174a22d6e
feat(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#643)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 09:22:02 -03:00
dependabot[bot]
28170a1e71
chore(deps): bump anchore/sbom-action from 0.13.4 to 0.14.1 (#642)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.13.4 to 0.14.1.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/v0.13.4...v0.14.1)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-03 09:21:07 -03:00
Carlos Alexandro Becker
ead6ccffad
build: create scoop manifests inside a bucket folder
refs https://github.com/goreleaser/goreleaser/issues/3899

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-03 09:06:34 -03:00
dependabot[bot]
03231979dc
feat(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#639) 2023-03-27 12:45:43 -03:00
dependabot[bot]
3ebb43aef0
chore(deps): bump anchore/sbom-action from 0.13.3 to 0.13.4 (#637)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.13.3 to 0.13.4.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](https://github.com/anchore/sbom-action/compare/v0.13.3...v0.13.4)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-21 14:34:35 -03:00
caarlos0
e89522aa89 docs: update cmd docs 2023-03-20 01:51:28 +00:00
Carlos A Becker
d30c22f50d
build: fix goreleaser configuration
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
v2.27.1
2023-03-19 22:43:40 -03:00
dependabot[bot]
c9219cae96
chore(deps): bump actions/setup-go from 3 to 4 (#634)
* chore(deps): bump actions/setup-go from 3 to 4

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Apply suggestions from code review

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
v2.27.0
2023-03-17 15:50:25 -03:00
dependabot[bot]
8fc4217d23
feat(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3 (#632)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.0 to 1.16.3.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.16.0...v1.16.3)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-17 15:42:25 -03:00
dependabot[bot]
004a530b84
feat(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#633)
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.13 to 0.3.14.
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](https://github.com/imdario/mergo/compare/v0.3.13...v0.3.14)

---
updated-dependencies:
- dependency-name: github.com/imdario/mergo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-17 00:43:44 -03:00
Carlos A Becker
3db2dbbfdb
chore: inline if 2023-03-09 10:05:56 -03:00
Carlos A Becker
b2755c9dc4
fix(GO-2023-1621): update from go 1.20.1 to 1.20.2
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-09 10:03:15 -03:00
Carlos Alexandro Becker
38f9376d59
refactor: stricter golangci-lint ruleset (#631)
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-09 10:02:20 -03:00
Carlos Alexandro Becker
745ad27658 feat: wrap pgp errors (#630) 2023-03-04 12:54:42 -03:00
dependabot[bot]
5da6f8d030
chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#629)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.8.1 to 3.0.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.1...v3.0.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-02 09:38:13 -03:00
dependabot[bot]
cab913a228
feat(deps): bump github.com/klauspost/compress from 1.15.15 to 1.16.0 (#626)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.15.15 to 1.16.0.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.15.15...v1.16.0)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 09:34:54 -03:00
dependabot[bot]
dc08ddab3c
feat(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#627)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 09:34:43 -03:00
dependabot[bot]
d8ef041667
feat(deps): bump github.com/goreleaser/chglog from 0.4.1 to 0.4.2 (#625)
Bumps [github.com/goreleaser/chglog](https://github.com/goreleaser/chglog) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/goreleaser/chglog/releases)
- [Changelog](https://github.com/goreleaser/chglog/blob/main/.goreleaser.yml)
- [Commits](https://github.com/goreleaser/chglog/compare/v0.4.1...v0.4.2)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/chglog
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-23 09:46:46 -03:00
Carlos Alexandro Becker
f7aeeb210b
feat: upgrade go (#624)
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-19 10:30:40 -03:00
caarlos0
6bd00b2ea5 docs: update cmd docs 2023-02-19 13:17:42 +00:00
Erik G
bc3e6973ea
feat: refactor contents handling and add tree content type (#618)
* feat: Refactor contents handling and add tree content type.

* fix:  Remove unnecessary deprecation warning.

* doc: Document tree type.

* fix: Remove superfluous error check.

* fix: Fix directory and symlink file info for tree content type.

* fix: Fix archlinux directories and file infos.

* fix: Early out in withChangelogIfRequested

* fix: Remove ExpandContentGlobs.
2023-02-19 10:16:51 -03:00
dependabot[bot]
0ac02bf8ba
feat(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#622) 2023-02-18 13:08:17 -03:00
caarlos0
3b018d8f86 docs: update cmd docs 2023-02-12 14:19:45 +00:00
dependabot[bot]
34276432d6
feat(deps): bump github.com/goreleaser/chglog from 0.4.0 to 0.4.1 (#616)
Bumps [github.com/goreleaser/chglog](https://github.com/goreleaser/chglog) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/goreleaser/chglog/releases)
- [Changelog](https://github.com/goreleaser/chglog/blob/main/.goreleaser.yml)
- [Commits](https://github.com/goreleaser/chglog/compare/v0.4.0...v0.4.1)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/chglog
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v2.26.0
2023-02-06 08:58:56 -03:00
Carlos A Becker
4d89ab846e
fix: use --clean instead of --rm-dist
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-05 14:00:00 -03:00