ci(deps): bump the actions group with 2 updates by dependabot[bot] · Pull Request #543 · goreleaser/goreleaser-action

dependabot · 2026-03-01T16:52:24Z

Bumps the actions group with 2 updates: actions/setup-go and actions/upload-artifact.

Updates actions/setup-go from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-go's releases.

v6.3.0

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in actions/setup-go#705

Fix golang download url to go.dev by @178inaba in actions/setup-go#469

Full Changelog: actions/setup-go@v6...v6.3.0

Commits

4b73464 Fix golang download url to go.dev (#469)
a5f9b05 Update default Go module caching to use go.mod (#705)
See full diff in compare view

Updates actions/upload-artifact from 6.0.0 to 7.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in actions/upload-artifact#754

Upgrade the module to ESM and bump dependencies by @danwkennedy in actions/upload-artifact#762

Support direct file uploads by @danwkennedy in actions/upload-artifact#764

New Contributors

@Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

bbbca2d Support direct file uploads (#764)
589182c Upgrade the module to ESM and bump dependencies (#762)
47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
02a8460 Add proxy integration test
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 2 updates: [actions/setup-go](https://github.com/actions/setup-go) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `actions/setup-go` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@7a3fe6c...4b73464) Updates `actions/upload-artifact` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@b7c566a...bbbca2d) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](goreleaser/goreleaser-action@v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <goreleaser/goreleaser-action@v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](goreleaser/goreleaser-action@v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@caarlos0](https://github.com/caarlos0) in [#555](goreleaser/goreleaser-action#555) - feat: add `version-file` input by [@caarlos0](https://github.com/caarlos0) in [#556](goreleaser/goreleaser-action#556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@caarlos0](https://github.com/caarlos0) in [#558](goreleaser/goreleaser-action#558) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.2.0> ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](goreleaser/goreleaser-action@v7...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@caarlos0](https://github.com/caarlos0) in [#550](goreleaser/goreleaser-action#550) - docs: document cosign verification in README by [@caarlos0](https://github.com/caarlos0) in [#553](goreleaser/goreleaser-action#553) - docs: Upgrade import GPG action version by [@flecno](https://github.com/flecno) in [#547](goreleaser/goreleaser-action#547) - ci: drop docker-bake in favor of plain npm by [@caarlos0](https://github.com/caarlos0) in [#551](goreleaser/goreleaser-action#551) - ci: add release-major-tag workflow by [@caarlos0](https://github.com/caarlos0) in [#552](goreleaser/goreleaser-action#552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@caarlos0](https://github.com/caarlos0) in [#554](goreleaser/goreleaser-action#554) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#543](goreleaser/goreleaser-action#543) - ci(deps): bump the actions group with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#546](goreleaser/goreleaser-action#546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#545](goreleaser/goreleaser-action#545) #### New Contributors - [@flecno](https://github.com/flecno) made their first contribution in [#547](goreleaser/goreleaser-action#547) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.1.0> ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](goreleaser/goreleaser-action@v7...v7) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@caarlos0](https://github.com/caarlos0) in [#533](goreleaser/goreleaser-action#533) - sec: pin github action versions by [@caarlos0](https://github.com/caarlos0) in [#514](goreleaser/goreleaser-action#514) - docs: Upgrade checkout GitHub Action in README.md by [@dunglas](https://github.com/dunglas) in [#507](goreleaser/goreleaser-action#507) - chore(deps): bump actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#504](goreleaser/goreleaser-action#504) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#517](goreleaser/goreleaser-action#517) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#523](goreleaser/goreleaser-action#523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#526](goreleaser/goreleaser-action#526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#532](goreleaser/goreleaser-action#532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#534](goreleaser/goreleaser-action#534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#536](goreleaser/goreleaser-action#536) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#537](goreleaser/goreleaser-action#537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#538](goreleaser/goreleaser-action#538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#539](goreleaser/goreleaser-action#539) **Full Changelog**: <goreleaser/goreleaser-action@v6...v7.0.0> ### [`v7`](goreleaser/goreleaser-action@v6.4.0...v7) [Compare Source](goreleaser/goreleaser-action@v6.4.0...v7) ### [`v6.4.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.4.0) [Compare Source](goreleaser/goreleaser-action@v6.3.0...v6.4.0) #### What's Changed - ci: set contents read as default workflow permissions by [@crazy-max](https://github.com/crazy-max) in [#494](goreleaser/goreleaser-action#494) - fix: support .config directory for goreleaser config files by [@haya14busa](https://github.com/haya14busa) in [#500](goreleaser/goreleaser-action#500) - chore(deps): bump semver from 7.7.1 to 7.7.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#495](goreleaser/goreleaser-action#495) - chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by [@dependabot](https://github.com/dependabot)\[bot] in [#498](goreleaser/goreleaser-action#498) - fix: do not get releases.json if version is specific by [@caarlos0](https://github.com/caarlos0) in [#502](goreleaser/goreleaser-action#502) - chore(deps): bump undici from 5.28.5 to 5.29.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#496](goreleaser/goreleaser-action#496) - feat: retry downloading releases json by [@caarlos0](https://github.com/caarlos0) in [#503](goreleaser/goreleaser-action#503) #### New Contributors - [@haya14busa](https://github.com/haya14busa) made their first contribution in [#500](goreleaser/goreleaser-action#500) **Full Changelog**: <goreleaser/goreleaser-action@v6.3.0...v6.4.0> ### [`v6.3.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.3.0) [Compare Source](goreleaser/goreleaser-action@v6.2.1...v6.3.0) - Bump undici from 5.28.3 to 5.28.5 in [#488](goreleaser/goreleaser-action#488) **Full Changelog**: <goreleaser/goreleaser-action@v6.2.1...v6.3.0> ### [`v6.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.2.1) [Compare Source](goreleaser/goreleaser-action@v6.2.0...v6.2.1) #### What's Changed This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the `-pro` suffix). Older versions should work fine. > \[!WARNING] > This version is **required** for GoReleaser Pro v2.7.0+. > Read more [here](https://goreleaser.com/blog/goreleaser-v2.7/). **Full Changelog**: <goreleaser/goreleaser-action@v6.2.0...v6.2.1> ### [`v6.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.2.0) [Compare Source](goreleaser/goreleaser-action@v6.1.0...v6.2.0) #### What's Changed This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the `-pro` suffix). Older versions should work fine. > \[!WARNING] > This version is **required** for GoReleaser Pro v2.7.0+. > Read more [here](https://goreleaser.com/blog/goreleaser-v2.7/). **Full Changelog**: <goreleaser/goreleaser-action@v6.1.0...v6.2.0> ### [`v6.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.1.0) [Compare Source](goreleaser/goreleaser-action@v6...v6.1.0) #### What's Changed - chore(deps): bump braces from 3.0.2 to 3.0.3 by [@dependabot](https://github.com/dependabot) in [#467](goreleaser/goreleaser-action#467) - chore(deps): bump docker/bake-action from 4 to 5 by [@dependabot](https://github.com/dependabot) in [#468](goreleaser/goreleaser-action#468) - chore(deps): bump semver from 7.6.2 to 7.6.3 by [@dependabot](https://github.com/dependabot) in [#470](goreleaser/goreleaser-action#470) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 2.2.1 to 2.2.2 by [@dependabot](https://github.com/dependabot) in [#473](goreleaser/goreleaser-action#473) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 2.2.2 to 2.2.3 by [@dependabot](https://github.com/dependabot) in [#474](goreleaser/goreleaser-action#474) - chore(deps): bump micromatch from 4.0.5 to 4.0.8 by [@dependabot](https://github.com/dependabot) in [#475](goreleaser/goreleaser-action#475) - chore(deps): bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 by [@dependabot](https://github.com/dependabot) in [#478](goreleaser/goreleaser-action#478) - docs: bump upload-artifact version by [@dunglas](https://github.com/dunglas) in [#479](goreleaser/goreleaser-action#479) - chore: update generated content by [@crazy-max](https://github.com/crazy-max) in [#480](goreleaser/goreleaser-action#480) #### New Contributors - [@dunglas](https://github.com/dunglas) made their first contribution in [#479](goreleaser/goreleaser-action#479) **Full Changelog**: <goreleaser/goreleaser-action@v6.0.0...v6.1.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.simoncor.net/golang/gogitlabber/pulls/2

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v7.2.2`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.2) [Compare Source](goreleaser/goreleaser-action@v7.2.1...v7.2.2) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#560](goreleaser/goreleaser-action#560) - fix: nightly resolution to select newest published release by [@Copilot](https://github.com/Copilot) in [#562](goreleaser/goreleaser-action#562) #### New Contributors - [@Copilot](https://github.com/Copilot) made their first contribution in [#562](goreleaser/goreleaser-action#562) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.2.2> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](goreleaser/goreleaser-action@v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <goreleaser/goreleaser-action@v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](goreleaser/goreleaser-action@v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@caarlos0](https://github.com/caarlos0) in [#555](goreleaser/goreleaser-action#555) - feat: add `version-file` input by [@caarlos0](https://github.com/caarlos0) in [#556](goreleaser/goreleaser-action#556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@caarlos0](https://github.com/caarlos0) in [#558](goreleaser/goreleaser-action#558) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.2.0> ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](goreleaser/goreleaser-action@v7...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@caarlos0](https://github.com/caarlos0) in [#550](goreleaser/goreleaser-action#550) - docs: document cosign verification in README by [@caarlos0](https://github.com/caarlos0) in [#553](goreleaser/goreleaser-action#553) - docs: Upgrade import GPG action version by [@flecno](https://github.com/flecno) in [#547](goreleaser/goreleaser-action#547) - ci: drop docker-bake in favor of plain npm by [@caarlos0](https://github.com/caarlos0) in [#551](goreleaser/goreleaser-action#551) - ci: add release-major-tag workflow by [@caarlos0](https://github.com/caarlos0) in [#552](goreleaser/goreleaser-action#552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@caarlos0](https://github.com/caarlos0) in [#554](goreleaser/goreleaser-action#554) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#543](goreleaser/goreleaser-action#543) - ci(deps): bump the actions group with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#546](goreleaser/goreleaser-action#546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#545](goreleaser/goreleaser-action#545) #### New Contributors - [@flecno](https://github.com/flecno) made their first contribution in [#547](goreleaser/goreleaser-action#547) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.1.0> ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](goreleaser/goreleaser-action@v7...v7) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@caarlos0](https://github.com/caarlos0) in [#533](goreleaser/goreleaser-action#533) - sec: pin github action versions by [@caarlos0](https://github.com/caarlos0) in [#514](goreleaser/goreleaser-action#514) - docs: Upgrade checkout GitHub Action in README.md by [@dunglas](https://github.com/dunglas) in [#507](goreleaser/goreleaser-action#507) - chore(deps): bump actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#504](goreleaser/goreleaser-action#504) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#517](goreleaser/goreleaser-action#517) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#523](goreleaser/goreleaser-action#523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#526](goreleaser/goreleaser-action#526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#532](goreleaser/goreleaser-action#532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#534](goreleaser/goreleaser-action#534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#536](goreleaser/goreleaser-action#536) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#537](goreleaser/goreleaser-action#537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#538](goreleaser/goreleaser-action#538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#539](goreleaser/goreleaser-action#539) **Full Changelog**: <goreleaser/goreleaser-action@v6...v7.0.0> ### [`v7`](goreleaser/goreleaser-action@v6.4.0...v7) [Compare Source](goreleaser/goreleaser-action@v6.4.0...v7) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.simoncor.net/golang/logger/pulls/3

dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 1, 2026

dependabot Bot requested review from caarlos0 and crazy-max as code owners March 1, 2026 16:52

dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 1, 2026

caarlos0 enabled auto-merge (squash) March 1, 2026 16:54

caarlos0 approved these changes Mar 1, 2026

View reviewed changes

caarlos0 merged commit 4be059c into master Mar 1, 2026
39 checks passed

caarlos0 deleted the dependabot/github_actions/actions-24e8fea45c branch March 1, 2026 16:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ci(deps): bump the actions group with 2 updates#543

ci(deps): bump the actions group with 2 updates#543
caarlos0 merged 1 commit into
masterfrom
dependabot/github_actions/actions-24e8fea45c

dependabot Bot commented on behalf of github Mar 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 1, 2026

v6.3.0

What's Changed

v7.0.0

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant