ci(deps): bump the actions group with 5 updates by dependabot[bot] · Pull Request #546 · goreleaser/goreleaser-action

dependabot · 2026-04-01T21:34:28Z

Bumps the actions group with 5 updates:

Package	From	To
actions/setup-go	`6.3.0`	`6.4.0`
crazy-max/ghaction-import-gpg	`6.3.0`	`7.0.0`
docker/setup-buildx-action	`3.12.0`	`4.0.0`
docker/bake-action	`6.10.0`	`7.0.0`
codecov/codecov-action	`5.5.2`	`6.0.0`

Updates actions/setup-go from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-go's releases.

v6.4.0

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in actions/setup-go#721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-go#727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in actions/setup-go#724

Fix Microsoft build of Go link by @gdams in actions/setup-go#734

New Contributors

@gdams made their first contribution in actions/setup-go#721

Full Changelog: actions/setup-go@v6...v6.4.0

Commits

4a36011 docs: fix Microsoft build of Go link (#734)
8f19afc feat: add go-download-base-url input for custom Go distributions (#721)
27fdb26 Bump minimatch from 3.1.2 to 3.1.5 (#727)
def8c39 Rearrange README.md, add advanced-usage.md (#724)
See full diff in compare view

Updates crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0

Release notes

Sourced from crazy-max/ghaction-import-gpg's releases.

v7.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in crazy-max/ghaction-import-gpg#241

Switch to ESM and update config/test wiring by @crazy-max in crazy-max/ghaction-import-gpg#239

Bump @actions/core from 1.11.1 to 3.0.0 in crazy-max/ghaction-import-gpg#232

Bump @actions/exec from 1.1.1 to 3.0.0 in crazy-max/ghaction-import-gpg#242

Bump brace-expansion from 1.1.11 to 1.1.12 in crazy-max/ghaction-import-gpg#221

Bump minimatch from 3.1.2 to 3.1.5 in crazy-max/ghaction-import-gpg#240

Bump openpgp from 6.1.0 to 6.3.0 in crazy-max/ghaction-import-gpg#233

Full Changelog: crazy-max/ghaction-import-gpg@v6.3.0...v7.0.0

Commits

2dc316d Merge pull request #242 from crazy-max/dependabot/npm_and_yarn/actions/exec-3...
5812792 chore: update generated content
ceb906e build(deps): bump @actions/exec from 1.1.1 to 3.0.0
a9dffd9 Merge pull request #241 from crazy-max/node24
36d49fc node 24 as default runtime
50c4e4f Merge pull request #233 from crazy-max/dependabot/npm_and_yarn/openpgp-6.3.0
c78fe49 chore: update generated content
8dbbb1e Merge pull request #221 from crazy-max/dependabot/npm_and_yarn/brace-expansio...
fc715b0 build(deps): bump openpgp from 6.1.0 to 6.3.0
9946916 build(deps): bump brace-expansion from 1.1.11 to 1.1.12
Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.12.0 to 4.0.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in docker/setup-buildx-action#483

Remove deprecated inputs/outputs by @crazy-max in docker/setup-buildx-action#464

Switch to ESM and update config/test wiring by @crazy-max in docker/setup-buildx-action#481

Bump @actions/core from 1.11.1 to 3.0.0 in docker/setup-buildx-action#475

Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in docker/setup-buildx-action#482 docker/setup-buildx-action#485

Bump js-yaml from 4.1.0 to 4.1.1 in docker/setup-buildx-action#452

Bump lodash from 4.17.21 to 4.17.23 in docker/setup-buildx-action#472

Bump minimatch from 3.1.2 to 3.1.5 in docker/setup-buildx-action#480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

Commits

4d04d5d Merge pull request #485 from docker/dependabot/npm_and_yarn/docker/actions-to...
cd74e05 chore: update generated content
eee38ec build(deps): bump @docker/actions-toolkit from 0.77.0 to 0.79.0
7a83f65 Merge pull request #484 from docker/dependabot/github_actions/docker/setup-qe...
a5aa967 Merge pull request #464 from crazy-max/rm-deprecated
e73d53f build(deps): bump docker/setup-qemu-action from 3 to 4
28a438e Merge pull request #483 from crazy-max/node24
034e9d3 chore: update generated content
b4664d8 remove deprecated inputs/outputs
a8257de node 24 as default runtime
Additional commits viewable in compare view

Updates docker/bake-action from 6.10.0 to 7.0.0

Release notes

Sourced from docker/bake-action's releases.

v7.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in docker/bake-action#383

The workdir input is now merged into source; use source for local and remote (docs) by @crazy-max in docker/bake-action#365

Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in docker/bake-action#386

Remove legacy export-build tool support for build summary by @crazy-max in docker/bake-action#387

Remove deprecated list-targets subaction (use matrix subaction instead) by @crazy-max in docker/bake-action#370

Switch to ESM and update config/test wiring by @crazy-max in docker/bake-action#380

Bump @actions/core from 1.11.1 to 3.0.0 in docker/bake-action#382

Bump @docker/actions-toolkit from 0.68.0 to 0.79.0 in docker/bake-action#381 docker/bake-action#384 docker/bake-action#389

Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in docker/bake-action#379

Bump lodash from 4.17.21 to 4.17.23 in docker/bake-action#376

Full Changelog: docker/bake-action@v6.10.0...v7.0.0

Commits

8249049 Merge pull request #365 from crazy-max/context-input
7017b89 chore: update generated content
8e8fbbb merge workdir into source input
471133c Merge pull request #386 from crazy-max/rm-deprecated-envs
f4a2547 chore: update generated content
04d8281 remove deprecated envs
8fdd4fb Merge pull request #388 from docker/dependabot/github_actions/docker/setup-qe...
549b427 Merge pull request #389 from docker/dependabot/npm_and_yarn/docker/actions-to...
a22e8b4 chore: update generated content
325dda5 chore(deps): Bump @docker/actions-toolkit from 0.78.0 to 0.79.0
Additional commits viewable in compare view

Updates codecov/codecov-action from 5.5.2 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in codecov/codecov-action#1929

Th/6.0.0 by @thomasrockhu-codecov in codecov/codecov-action#1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in codecov/codecov-action#1926

chore(release): 5.5.4 by @thomasrockhu-codecov in codecov/codecov-action#1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in codecov/codecov-action#1874

chore(release): bump to 5.5.3 by @thomasrockhu-codecov in codecov/codecov-action#1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in codecov/codecov-action#1871

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in codecov/codecov-action#1868

build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in codecov/codecov-action#1867

fix: update to use local app/ dir by @thomasrockhu-codecov in codecov/codecov-action#1872

docs: fix typo in README by @datalater in codecov/codecov-action#1866

Document a codecov-cli version reference example by @webknjaz in codecov/codecov-action#1774

build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in codecov/codecov-action#1861

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in codecov/codecov-action#1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in codecov/codecov-action#1864

Pin actions/github-script by Git SHA by @martincostello in codecov/codecov-action#1859

fix: check reqs exist by @joseph-sentry in codecov/codecov-action#1835

fix: Typo in README by @spalmurray in codecov/codecov-action#1838

docs: Refine OIDC docs by @spalmurray in codecov/codecov-action#1837

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in codecov/codecov-action#1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in codecov/codecov-action#1822

fix: OIDC on forks by @joseph-sentry in codecov/codecov-action#1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

57e3a13 Th/6.0.0 (#1928)
f67d33d Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...
75cd116 chore(release): 5.5.4 (#1927)
87d39f4 Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" (#1926)
1af5884 chore(release): bump to 5.5.3 (#1922)
c143300 build(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#1874)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-go](https://github.com/actions/setup-go) | `6.3.0` | `6.4.0` | | [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) | `6.3.0` | `7.0.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` | | [docker/bake-action](https://github.com/docker/bake-action) | `6.10.0` | `7.0.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.2` | `6.0.0` | Updates `actions/setup-go` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4b73464...4a36011) Updates `crazy-max/ghaction-import-gpg` from 6.3.0 to 7.0.0 - [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases) - [Commits](crazy-max/ghaction-import-gpg@e89d409...2dc316d) Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@8d2750c...4d04d5d) Updates `docker/bake-action` from 6.10.0 to 7.0.0 - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](docker/bake-action@5be5f02...8249049) Updates `codecov/codecov-action` from 5.5.2 to 6.0.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@671740a...57e3a13) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: crazy-max/ghaction-import-gpg dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/bake-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

caarlos0 · 2026-04-02T19:06:49Z

@crazy-max if you have a minute, looks like something is breaking due to the bake action update? 🤔

crazy-max · 2026-04-02T19:59:24Z

        name: List targets
        id: generate
-        uses: docker/bake-action/subaction/list-targets@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
+        uses: docker/bake-action/subaction/list-targets@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0


Ah yes this should be changed, list-targets action has been removed in latest major. Will push an extra commit to fix this

Pushed extra commit that should fix it.

ah cool, i looked into the release notes but missed that. thanks!

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](goreleaser/goreleaser-action@v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <goreleaser/goreleaser-action@v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](goreleaser/goreleaser-action@v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@caarlos0](https://github.com/caarlos0) in [#555](goreleaser/goreleaser-action#555) - feat: add `version-file` input by [@caarlos0](https://github.com/caarlos0) in [#556](goreleaser/goreleaser-action#556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@caarlos0](https://github.com/caarlos0) in [#558](goreleaser/goreleaser-action#558) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.2.0> ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](goreleaser/goreleaser-action@v7...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@caarlos0](https://github.com/caarlos0) in [#550](goreleaser/goreleaser-action#550) - docs: document cosign verification in README by [@caarlos0](https://github.com/caarlos0) in [#553](goreleaser/goreleaser-action#553) - docs: Upgrade import GPG action version by [@flecno](https://github.com/flecno) in [#547](goreleaser/goreleaser-action#547) - ci: drop docker-bake in favor of plain npm by [@caarlos0](https://github.com/caarlos0) in [#551](goreleaser/goreleaser-action#551) - ci: add release-major-tag workflow by [@caarlos0](https://github.com/caarlos0) in [#552](goreleaser/goreleaser-action#552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@caarlos0](https://github.com/caarlos0) in [#554](goreleaser/goreleaser-action#554) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#543](goreleaser/goreleaser-action#543) - ci(deps): bump the actions group with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#546](goreleaser/goreleaser-action#546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#545](goreleaser/goreleaser-action#545) #### New Contributors - [@flecno](https://github.com/flecno) made their first contribution in [#547](goreleaser/goreleaser-action#547) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.1.0> ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](goreleaser/goreleaser-action@v7...v7) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@caarlos0](https://github.com/caarlos0) in [#533](goreleaser/goreleaser-action#533) - sec: pin github action versions by [@caarlos0](https://github.com/caarlos0) in [#514](goreleaser/goreleaser-action#514) - docs: Upgrade checkout GitHub Action in README.md by [@dunglas](https://github.com/dunglas) in [#507](goreleaser/goreleaser-action#507) - chore(deps): bump actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#504](goreleaser/goreleaser-action#504) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#517](goreleaser/goreleaser-action#517) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#523](goreleaser/goreleaser-action#523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#526](goreleaser/goreleaser-action#526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#532](goreleaser/goreleaser-action#532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#534](goreleaser/goreleaser-action#534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#536](goreleaser/goreleaser-action#536) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#537](goreleaser/goreleaser-action#537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#538](goreleaser/goreleaser-action#538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#539](goreleaser/goreleaser-action#539) **Full Changelog**: <goreleaser/goreleaser-action@v6...v7.0.0> ### [`v7`](goreleaser/goreleaser-action@v6.4.0...v7) [Compare Source](goreleaser/goreleaser-action@v6.4.0...v7) ### [`v6.4.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.4.0) [Compare Source](goreleaser/goreleaser-action@v6.3.0...v6.4.0) #### What's Changed - ci: set contents read as default workflow permissions by [@crazy-max](https://github.com/crazy-max) in [#494](goreleaser/goreleaser-action#494) - fix: support .config directory for goreleaser config files by [@haya14busa](https://github.com/haya14busa) in [#500](goreleaser/goreleaser-action#500) - chore(deps): bump semver from 7.7.1 to 7.7.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#495](goreleaser/goreleaser-action#495) - chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by [@dependabot](https://github.com/dependabot)\[bot] in [#498](goreleaser/goreleaser-action#498) - fix: do not get releases.json if version is specific by [@caarlos0](https://github.com/caarlos0) in [#502](goreleaser/goreleaser-action#502) - chore(deps): bump undici from 5.28.5 to 5.29.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#496](goreleaser/goreleaser-action#496) - feat: retry downloading releases json by [@caarlos0](https://github.com/caarlos0) in [#503](goreleaser/goreleaser-action#503) #### New Contributors - [@haya14busa](https://github.com/haya14busa) made their first contribution in [#500](goreleaser/goreleaser-action#500) **Full Changelog**: <goreleaser/goreleaser-action@v6.3.0...v6.4.0> ### [`v6.3.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.3.0) [Compare Source](goreleaser/goreleaser-action@v6.2.1...v6.3.0) - Bump undici from 5.28.3 to 5.28.5 in [#488](goreleaser/goreleaser-action#488) **Full Changelog**: <goreleaser/goreleaser-action@v6.2.1...v6.3.0> ### [`v6.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.2.1) [Compare Source](goreleaser/goreleaser-action@v6.2.0...v6.2.1) #### What's Changed This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the `-pro` suffix). Older versions should work fine. > \[!WARNING] > This version is **required** for GoReleaser Pro v2.7.0+. > Read more [here](https://goreleaser.com/blog/goreleaser-v2.7/). **Full Changelog**: <goreleaser/goreleaser-action@v6.2.0...v6.2.1> ### [`v6.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.2.0) [Compare Source](goreleaser/goreleaser-action@v6.1.0...v6.2.0) #### What's Changed This version of the actions adds support for GoReleaser Pro v2.7.0 versioning (which dropped the `-pro` suffix). Older versions should work fine. > \[!WARNING] > This version is **required** for GoReleaser Pro v2.7.0+. > Read more [here](https://goreleaser.com/blog/goreleaser-v2.7/). **Full Changelog**: <goreleaser/goreleaser-action@v6.1.0...v6.2.0> ### [`v6.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v6.1.0) [Compare Source](goreleaser/goreleaser-action@v6...v6.1.0) #### What's Changed - chore(deps): bump braces from 3.0.2 to 3.0.3 by [@dependabot](https://github.com/dependabot) in [#467](goreleaser/goreleaser-action#467) - chore(deps): bump docker/bake-action from 4 to 5 by [@dependabot](https://github.com/dependabot) in [#468](goreleaser/goreleaser-action#468) - chore(deps): bump semver from 7.6.2 to 7.6.3 by [@dependabot](https://github.com/dependabot) in [#470](goreleaser/goreleaser-action#470) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 2.2.1 to 2.2.2 by [@dependabot](https://github.com/dependabot) in [#473](goreleaser/goreleaser-action#473) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 2.2.2 to 2.2.3 by [@dependabot](https://github.com/dependabot) in [#474](goreleaser/goreleaser-action#474) - chore(deps): bump micromatch from 4.0.5 to 4.0.8 by [@dependabot](https://github.com/dependabot) in [#475](goreleaser/goreleaser-action#475) - chore(deps): bump [@actions/core](https://github.com/actions/core) from 1.10.1 to 1.11.1 by [@dependabot](https://github.com/dependabot) in [#478](goreleaser/goreleaser-action#478) - docs: bump upload-artifact version by [@dunglas](https://github.com/dunglas) in [#479](goreleaser/goreleaser-action#479) - chore: update generated content by [@crazy-max](https://github.com/crazy-max) in [#480](goreleaser/goreleaser-action#480) #### New Contributors - [@dunglas](https://github.com/dunglas) made their first contribution in [#479](goreleaser/goreleaser-action#479) **Full Changelog**: <goreleaser/goreleaser-action@v6.0.0...v6.1.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.simoncor.net/golang/gogitlabber/pulls/2

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v7.2.2`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.2) [Compare Source](goreleaser/goreleaser-action@v7.2.1...v7.2.2) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#560](goreleaser/goreleaser-action#560) - fix: nightly resolution to select newest published release by [@Copilot](https://github.com/Copilot) in [#562](goreleaser/goreleaser-action#562) #### New Contributors - [@Copilot](https://github.com/Copilot) made their first contribution in [#562](goreleaser/goreleaser-action#562) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.2.2> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](goreleaser/goreleaser-action@v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <goreleaser/goreleaser-action@v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](goreleaser/goreleaser-action@v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@caarlos0](https://github.com/caarlos0) in [#555](goreleaser/goreleaser-action#555) - feat: add `version-file` input by [@caarlos0](https://github.com/caarlos0) in [#556](goreleaser/goreleaser-action#556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@caarlos0](https://github.com/caarlos0) in [#558](goreleaser/goreleaser-action#558) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.2.0> ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](goreleaser/goreleaser-action@v7...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@caarlos0](https://github.com/caarlos0) in [#550](goreleaser/goreleaser-action#550) - docs: document cosign verification in README by [@caarlos0](https://github.com/caarlos0) in [#553](goreleaser/goreleaser-action#553) - docs: Upgrade import GPG action version by [@flecno](https://github.com/flecno) in [#547](goreleaser/goreleaser-action#547) - ci: drop docker-bake in favor of plain npm by [@caarlos0](https://github.com/caarlos0) in [#551](goreleaser/goreleaser-action#551) - ci: add release-major-tag workflow by [@caarlos0](https://github.com/caarlos0) in [#552](goreleaser/goreleaser-action#552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@caarlos0](https://github.com/caarlos0) in [#554](goreleaser/goreleaser-action#554) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#543](goreleaser/goreleaser-action#543) - ci(deps): bump the actions group with 5 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#546](goreleaser/goreleaser-action#546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#545](goreleaser/goreleaser-action#545) #### New Contributors - [@flecno](https://github.com/flecno) made their first contribution in [#547](goreleaser/goreleaser-action#547) **Full Changelog**: <goreleaser/goreleaser-action@v7...v7.1.0> ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](goreleaser/goreleaser-action@v7...v7) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@caarlos0](https://github.com/caarlos0) in [#533](goreleaser/goreleaser-action#533) - sec: pin github action versions by [@caarlos0](https://github.com/caarlos0) in [#514](goreleaser/goreleaser-action#514) - docs: Upgrade checkout GitHub Action in README.md by [@dunglas](https://github.com/dunglas) in [#507](goreleaser/goreleaser-action#507) - chore(deps): bump actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#504](goreleaser/goreleaser-action#504) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#517](goreleaser/goreleaser-action#517) - ci(deps): bump the actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#523](goreleaser/goreleaser-action#523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#526](goreleaser/goreleaser-action#526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#532](goreleaser/goreleaser-action#532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#534](goreleaser/goreleaser-action#534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#536](goreleaser/goreleaser-action#536) - chore(deps): bump [@actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#537](goreleaser/goreleaser-action#537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@dependabot](https://github.com/dependabot)\[bot] in [#538](goreleaser/goreleaser-action#538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@dependabot](https://github.com/dependabot)\[bot] in [#539](goreleaser/goreleaser-action#539) **Full Changelog**: <goreleaser/goreleaser-action@v6...v7.0.0> ### [`v7`](goreleaser/goreleaser-action@v6.4.0...v7) [Compare Source](goreleaser/goreleaser-action@v6.4.0...v7) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.simoncor.net/golang/logger/pulls/3

dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 1, 2026

dependabot Bot requested review from caarlos0 and crazy-max as code owners April 1, 2026 21:34

crazy-max reviewed Apr 2, 2026

View reviewed changes

ci: switch to matrix subaction for bake

40e9a64

caarlos0 merged commit 2a473d7 into master Apr 3, 2026
39 checks passed

caarlos0 deleted the dependabot/github_actions/actions-37c23f0579 branch April 3, 2026 13:21

flecno mentioned this pull request Apr 4, 2026

docs: Upgrade import GPG action version #547

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ci(deps): bump the actions group with 5 updates#546

ci(deps): bump the actions group with 5 updates#546
caarlos0 merged 2 commits into
masterfrom
dependabot/github_actions/actions-37c23f0579

dependabot Bot commented on behalf of github Apr 1, 2026

Uh oh!

caarlos0 commented Apr 2, 2026

Uh oh!

crazy-max Apr 2, 2026

Uh oh!

crazy-max Apr 2, 2026

Uh oh!

caarlos0 Apr 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 1, 2026

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

v7.0.0

v4.0.0

v7.0.0

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

v5.5.4

What's Changed

v5.5.3

What's Changed

v5.5.2

What's Changed

v5.5.1

What's Changed

v5.5.0

What's Changed

v5.4.3

What's Changed

v5.4.2

Uh oh!

caarlos0 commented Apr 2, 2026

Uh oh!

crazy-max Apr 2, 2026

Choose a reason for hiding this comment

Uh oh!

crazy-max Apr 2, 2026

Choose a reason for hiding this comment

Uh oh!

caarlos0 Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants