Carlos Alexandro Becker
8e517cca17
Merge pull request from GHSA-w7jw-q4fg-qc4c
...
* feat(security): adds the umask option
closes https://github.com/goreleaser/nfpm/security/advisories/GHSA-w7jw-q4fg-qc4c
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* fix: correct bitwise op
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-23 22:45:48 -03:00
Carlos Alexandro Becker
9ac328846c
fix: deb arm64
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-22 00:36:55 +00:00
Carlos Alexandro Becker
6dc5db365b
test: fix deb/rpm tests
...
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-21 23:05:10 +00:00
dependabot[bot]
561c39b135
feat(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 ( #661 )
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 11:52:44 -03:00
Carlos Alexandro Becker
2b9864a79e
docs: update SECURITY.md
2023-05-18 14:18:54 -03:00
dependabot[bot]
3e6b70b477
chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 ( #660 )
2023-05-18 09:36:11 -03:00
Carlos Alexandro Becker
312fd85338
fix: improve goarch to pkg conversion
...
also added tests
refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:24:50 +00:00
Carlos Alexandro Becker
c20618cdd3
fix: mips architecture
...
refs https://github.com/goreleaser/goreleaser/issues/3998
2023-05-18 01:16:50 +00:00
Carlos Alexandro Becker
dce0853e63
docs: goarch to packager
2023-05-18 01:15:51 +00:00
dependabot[bot]
40b4d93beb
chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 ( #658 )
2023-05-17 09:04:04 -03:00
Stefan Schubert
b1f3fef606
fix: md5sums entries and lintian errors/warnings ( #656 )
...
Missing trailing ./ in md5sums for changelog.Debian.gz caused
md5sums-lists-nonexistent-file and file-missing-in-md5sums
and is fixed using files.AsExplicitRelativePath.
Adding copyright file fixes no-copyright-file.
Set file_info fixes executable-is-not-world-readable,
non-standard-executable-perm, non-standard-file-perm.
Adding section fixes unknown-section, empty-field.
Using standard compress/gzip module fixes
package-contains-timestamped-gzip,
because klauspost/pgzip does not support empty mod time.
Adding urgency and distribution in changelog fixes
syntax-error-in-debian-changelog.
Adding mail address to maintainer fixes malformed-contact.
Correcting description fixes description-starts-with-package-name
and description-starts-with-leading-spaces.
2023-05-11 09:14:54 -03:00
dependabot[bot]
d8ac10bf67
chore(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 ( #655 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.14.1 to 0.14.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](https://github.com/anchore/sbom-action/compare/v0.14.1...v0.14.2 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-08 08:49:02 -03:00
dependabot[bot]
a1fb0477f0
feat(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 ( #654 )
...
Bumps [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/klauspost/pgzip/releases )
- [Commits](https://github.com/klauspost/pgzip/compare/v1.2.5...v1.2.6 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/pgzip
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-05 10:09:50 -03:00
Carlos Alexandro Becker
ab59aadf23
docs: fix schema.json URL
...
closes #653
2023-04-27 18:44:41 +00:00
dependabot[bot]
2108b8d23e
chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 ( #652 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-26 08:29:02 -03:00
dependabot[bot]
fccdae5dfc
feat(deps): bump github.com/klauspost/compress from 1.16.4 to 1.16.5 ( #651 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.16.4 to 1.16.5.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-18 09:22:54 -03:00
dependabot[bot]
c2f47813a3
feat(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 ( #649 )
...
Bumps [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver ) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/Masterminds/semver/releases )
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1 )
---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-11 14:05:07 -03:00
dependabot[bot]
e2515bf374
chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.2 ( #648 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 08:54:52 -03:00
dependabot[bot]
c24e1b4d99
feat(deps): bump github.com/klauspost/compress from 1.16.3 to 1.16.4 ( #646 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.16.3 to 1.16.4.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-06 14:15:37 -03:00
Carlos Alexandro Becker
590a3ff6f7
docs: fix verify instructions ( #647 )
...
* docs: fix verify instructions
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* docs: space
* docs: update features
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* docs: fix cosign link
---------
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 14:14:47 -03:00
caarlos0
1ba5a445d7
docs: update cmd docs
2023-04-06 03:00:30 +00:00
Carlos Alexandro Becker
3f9527977c
fix(archlinux): .MTREE should have parent dirs as well ( #645 )
...
* fix(archlinux): .MTREE should have parent dirs as well
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
* fix: files
Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* fix: code, test
Co-Authored-By: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
* fix: perm
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
---------
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: Co-authored-by: Erik Geiser <erik.geiser@posteo.net>
v2.28.0
2023-04-05 23:51:27 -03:00
Carlos A Becker
5d251398b5
fix: lint issues
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 01:37:13 +00:00
Carlos A Becker
a67cf556cb
build: run checks on latest go
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 01:35:52 +00:00
Carlos Alexandro Becker
571a32b031
fix(archlinux): .MTREE should have dir permissions too ( #644 )
2023-04-05 10:12:19 -03:00
dependabot[bot]
3174a22d6e
feat(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 ( #643 )
...
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra ) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases )
- [Commits](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 09:22:02 -03:00
dependabot[bot]
28170a1e71
chore(deps): bump anchore/sbom-action from 0.13.4 to 0.14.1 ( #642 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.13.4 to 0.14.1.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](https://github.com/anchore/sbom-action/compare/v0.13.4...v0.14.1 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-03 09:21:07 -03:00
Carlos Alexandro Becker
ead6ccffad
build: create scoop manifests inside a bucket folder
...
refs https://github.com/goreleaser/goreleaser/issues/3899
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-03 09:06:34 -03:00
dependabot[bot]
03231979dc
feat(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 ( #639 )
2023-03-27 12:45:43 -03:00
dependabot[bot]
3ebb43aef0
chore(deps): bump anchore/sbom-action from 0.13.3 to 0.13.4 ( #637 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.13.3 to 0.13.4.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](https://github.com/anchore/sbom-action/compare/v0.13.3...v0.13.4 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-21 14:34:35 -03:00
caarlos0
e89522aa89
docs: update cmd docs
2023-03-20 01:51:28 +00:00
Carlos A Becker
d30c22f50d
build: fix goreleaser configuration
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
v2.27.1
2023-03-19 22:43:40 -03:00
dependabot[bot]
c9219cae96
chore(deps): bump actions/setup-go from 3 to 4 ( #634 )
...
* chore(deps): bump actions/setup-go from 3 to 4
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
* Apply suggestions from code review
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
v2.27.0
2023-03-17 15:50:25 -03:00
dependabot[bot]
8fc4217d23
feat(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3 ( #632 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.16.0 to 1.16.3.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.16.0...v1.16.3 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-17 15:42:25 -03:00
dependabot[bot]
004a530b84
feat(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 ( #633 )
...
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo ) from 0.3.13 to 0.3.14.
- [Release notes](https://github.com/imdario/mergo/releases )
- [Commits](https://github.com/imdario/mergo/compare/v0.3.13...v0.3.14 )
---
updated-dependencies:
- dependency-name: github.com/imdario/mergo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-17 00:43:44 -03:00
Carlos A Becker
3db2dbbfdb
chore: inline if
2023-03-09 10:05:56 -03:00
Carlos A Becker
b2755c9dc4
fix(GO-2023-1621): update from go 1.20.1 to 1.20.2
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-09 10:03:15 -03:00
Carlos Alexandro Becker
38f9376d59
refactor: stricter golangci-lint ruleset ( #631 )
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-09 10:02:20 -03:00
Carlos Alexandro Becker
745ad27658
feat: wrap pgp errors ( #630 )
2023-03-04 12:54:42 -03:00
dependabot[bot]
5da6f8d030
chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 ( #629 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 2.8.1 to 3.0.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.1...v3.0.1 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-02 09:38:13 -03:00
dependabot[bot]
cab913a228
feat(deps): bump github.com/klauspost/compress from 1.15.15 to 1.16.0 ( #626 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.15.15 to 1.16.0.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.15.15...v1.16.0 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 09:34:54 -03:00
dependabot[bot]
dc08ddab3c
feat(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 ( #627 )
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 09:34:43 -03:00
dependabot[bot]
d8ef041667
feat(deps): bump github.com/goreleaser/chglog from 0.4.1 to 0.4.2 ( #625 )
...
Bumps [github.com/goreleaser/chglog](https://github.com/goreleaser/chglog ) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/goreleaser/chglog/releases )
- [Changelog](https://github.com/goreleaser/chglog/blob/main/.goreleaser.yml )
- [Commits](https://github.com/goreleaser/chglog/compare/v0.4.1...v0.4.2 )
---
updated-dependencies:
- dependency-name: github.com/goreleaser/chglog
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-23 09:46:46 -03:00
Carlos Alexandro Becker
f7aeeb210b
feat: upgrade go ( #624 )
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-19 10:30:40 -03:00
caarlos0
6bd00b2ea5
docs: update cmd docs
2023-02-19 13:17:42 +00:00
Erik G
bc3e6973ea
feat: refactor contents handling and add tree content type ( #618 )
...
* feat: Refactor contents handling and add tree content type.
* fix: Remove unnecessary deprecation warning.
* doc: Document tree type.
* fix: Remove superfluous error check.
* fix: Fix directory and symlink file info for tree content type.
* fix: Fix archlinux directories and file infos.
* fix: Early out in withChangelogIfRequested
* fix: Remove ExpandContentGlobs.
2023-02-19 10:16:51 -03:00
dependabot[bot]
0ac02bf8ba
feat(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 ( #622 )
2023-02-18 13:08:17 -03:00
caarlos0
3b018d8f86
docs: update cmd docs
2023-02-12 14:19:45 +00:00
dependabot[bot]
34276432d6
feat(deps): bump github.com/goreleaser/chglog from 0.4.0 to 0.4.1 ( #616 )
...
Bumps [github.com/goreleaser/chglog](https://github.com/goreleaser/chglog ) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/goreleaser/chglog/releases )
- [Changelog](https://github.com/goreleaser/chglog/blob/main/.goreleaser.yml )
- [Commits](https://github.com/goreleaser/chglog/compare/v0.4.0...v0.4.1 )
---
updated-dependencies:
- dependency-name: github.com/goreleaser/chglog
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v2.26.0
2023-02-06 08:58:56 -03:00
Carlos A Becker
4d89ab846e
fix: use --clean instead of --rm-dist
...
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-05 14:00:00 -03:00