feat: update goreleaser

Author: christophwitzko

.github/workflows/ci.yml

@@ -10,30 +10,30 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-go@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
         with:
-          go-version: '1.20'
+          go-version: '1.21'
       - uses: golangci/golangci-lint-action@v3
         with:
           args: --timeout=5m
   build:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-go@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
         with:
-          go-version: '1.20'
+          go-version: '1.21'
       - run: go build ./cmd/hooks-goreleaser/
   release:
     runs-on: ubuntu-latest
     needs: build
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-go@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v4
         with:
-          go-version: '1.20'
+          go-version: '1.21'
       - run: ./scripts/build-local.sh
       - uses: go-semantic-release/action@v1
         with:

go.mod

@@ -9,3 +9,7 @@ www/docs/static/schema.json linguist-generated=true
 www/docs/static/schema-pro.json linguist-generated=true
 www/docs/static/releases.json linguist-generated=true
 www/docs/static/releases-pro.json linguist-generated=true
+*.nix.golden linguist-language=Nix
+*.rb.golden linguist-language=Ruby
+*.json.golden linguist-language=JSON
+*.yaml.golden linguist-language=YAML

go.sum

@@ -26,15 +26,15 @@ body:
     id: goreleaser-version
     attributes:
       label: goreleaser version
-      description: '`goreleaser --version` output'
+      description: "`goreleaser --version` output"
       render: bash
     validations:
       required: true
   - type: checkboxes
     id: goreleaser-check
     attributes:
       label: GoReleaser Check
-      description: 'If I run `goreleaser check` it shows no errors'
+      description: "If I run `goreleaser check` it shows no errors"
       options:
         - label: goreleaser check shows no errors
           required: true
@@ -43,8 +43,14 @@ body:
     attributes:
       label: Search
       options:
-        - label: I did search for other open and closed issues before opening this.
+        - label: I did search for other open and closed issues before opening this
           required: true
+  - type: checkboxes
+    id: supporter
+    attributes:
+      label: Supporter
+      options:
+        - label: I am a [sponsor](https://github.com/sponsors/caarlos0/) or a [Pro](https://goreleaser.com/pro) customer
   - type: checkboxes
     id: terms
     attributes:

goreleaser/.gitattributes

@@ -34,8 +34,14 @@ body:
     attributes:
       label: Search
       options:
-        - label: I did search for other open and closed issues before opening this.
+        - label: I did search for other open and closed issues before opening this
           required: true
+  - type: checkboxes
+    id: supporter
+    attributes:
+      label: Supporter
+      options:
+        - label: I am a [sponsor](https://github.com/sponsors/caarlos0/) or a [Pro](https://goreleaser.com/pro) customer
   - type: checkboxes
     id: terms
     attributes:

goreleaser/.github/ISSUE_TEMPLATE/bug.yaml

@@ -3,59 +3,59 @@ name: build
 on:
   push:
     branches:
-      - 'main'
+      - "main"
   pull_request:
     paths:
-      - 'go.*'
-      - '**/*.go'
-      - 'Taskfile.yml'
-      - 'Dockerfile'
-      - '.github/workflows/*.yml'
+      - "go.*"
+      - "**/*.go"
+      - "Taskfile.yml"
+      - "Dockerfile"
+      - ".github/workflows/*.yml"
 
 permissions:
   contents: read
 
 jobs:
   govulncheck:
     uses: caarlos0/meta/.github/workflows/govulncheck.yml@main
-    with:
-      cache: true
-      go-version: '>=1.20.0'
   semgrep:
     uses: caarlos0/meta/.github/workflows/semgrep.yml@main
   ruleguard:
     uses: caarlos0/meta/.github/workflows/ruleguard.yml@main
     with:
-      cache: true
-      go-version: '>=1.20.0'
-      args: '-disable largeloopcopy'
+      args: "-disable largeloopcopy"
   test:
     runs-on: ubuntu-latest
     env:
       DOCKER_CLI_EXPERIMENTAL: "enabled"
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v3
         with:
           fetch-depth: 0
       - uses: arduino/setup-task@e26d8975574116b0097a1161e0fe16ba75d84c1c # v1
         with:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2
-      - uses: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7 # v2
+      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v2
+      - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v2
       - name: setup-snapcraft
         # FIXME: the mkdirs are a hack for https://github.com/goreleaser/goreleaser/issues/1715
         run: |
           sudo apt-get update
           sudo apt-get -yq --no-install-suggests --no-install-recommends install snapcraft
           mkdir -p $HOME/.cache/snapcraft/download
           mkdir -p $HOME/.cache/snapcraft/stage-packages
-      - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
+      - uses: crazy-max/ghaction-upx@v3
+        with:
+          install-only: true
+      - uses: cachix/install-nix-action@v23
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
-          go-version: '>=1.20.0'
-          cache: true
-      - uses: sigstore/[email protected]
-      - uses: anchore/sbom-action/[email protected]
+          go-version: stable
+      - uses: sigstore/[email protected]
+      - uses: anchore/sbom-action/[email protected]
       - name: setup-validate-krew-manifest
         run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
       - name: setup-tparse
@@ -66,7 +66,7 @@ jobs:
           task build
       - name: test
         run: ./scripts/test.sh
-      - uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 # v3
+      - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3
         with:
           file: ./coverage.txt
       - run: ./goreleaser check

goreleaser/.github/ISSUE_TEMPLATE/feature.yaml

@@ -15,11 +15,10 @@ jobs:
       contents: read
 
     steps:
-    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
-    - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
+    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v3
+    - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
       with:
-        go-version: '>=1.20.0'
-        cache: true
-    - uses: github/codeql-action/init@39d8d7e78f59cf6b40ac3b9fbebef0c753d7c9e5 # v2
-    - uses: github/codeql-action/autobuild@39d8d7e78f59cf6b40ac3b9fbebef0c753d7c9e5 # v2
-    - uses: github/codeql-action/analyze@39d8d7e78f59cf6b40ac3b9fbebef0c753d7c9e5 # v2
+        go-version: stable
+    - uses: github/codeql-action/init@cdcdbb579706841c47f7063dda365e292e5cad7a # v2
+    - uses: github/codeql-action/autobuild@cdcdbb579706841c47f7063dda365e292e5cad7a # v2
+    - uses: github/codeql-action/analyze@cdcdbb579706841c47f7063dda365e292e5cad7a # v2

goreleaser/.github/workflows/build.yml

@@ -8,7 +8,7 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v3
       - uses: actions/dependency-review-action@v3
         with:
           allow-licenses: BSD-2-Clause, BSD-3-Clause, MIT, Apache-2.0, MPL-2.0

goreleaser/.github/workflows/codeql.yml

@@ -3,12 +3,14 @@ name: docs
 on:
   push:
     branches:
-      - 'main'
+      - "main"
     paths:
-      - 'www/*'
+      - "www/**/*"
+      - ".github/workflows/docs.yml"
   pull_request:
     paths:
-      - 'www/*'
+      - "www/**/*"
+      - ".github/workflows/docs.yml"
 
 permissions:
   contents: read
@@ -17,13 +19,13 @@ jobs:
   htmltest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v3
       - uses: arduino/setup-task@e26d8975574116b0097a1161e0fe16ba75d84c1c # v1
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
+      - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
-          go-version: '>=1.20.0'
+          go-version: stable
       - run: task docs:build
       - uses: wjdp/htmltest-action@09118714cd26bef56bd3d0819e4f9b1dce6f60a9 # master
         with: