keb
4c822e42f1
feat: lazysecrets list's --starred-icon is --stars
2026-10-14 21:24:01 +02:00
keb
4cb40a1598
feat: lazysecrets list shows stars by default
2026-10-14 21:24:01 +02:00
keb
77e3fcd551
feat: lazysecrets list marks starred and recent entries, and --starred-icon shows the stars
2026-10-14 21:24:01 +02:00
keb
50156d706e
feat: lazysecrets list puts why a list failed in a column of its own
2026-10-14 21:24:01 +02:00
keb
b0ea217d87
docs: get and list move to their own page, integration.md
2026-10-14 21:24:01 +02:00
keb
470f0c11e4
docs: the fzf example copies on ctrl-y and copies and closes on ctrl-x
2026-10-14 21:24:01 +02:00
keb
e8d3a3337a
docs: the fzf example copies and closes on ctrl-y, copies and stays on alt-y
2026-10-14 21:24:01 +02:00
keb
bdf949339b
feat: lazysecrets open --action ends in the secrets list, like Go to
2026-10-14 21:24:01 +02:00
keb
a4002a785c
feat: lazysecrets open --action goes, copies or shows without asking
2026-10-14 21:24:01 +02:00
keb
b05d19209c
feat: lazysecrets list prints the account, and open and get take it (--account)
2026-10-14 21:24:01 +02:00
keb
1f330bc619
feat: lazysecrets list's text lines start with the kind
2026-10-14 21:24:01 +02:00
keb
572cea8351
docs: the fzf example for lazysecrets list hides the link and binds open and copy
2026-10-14 21:24:01 +02:00
keb
3734989b15
fix: lazysecrets list keeps the provider icon on error lines
2026-10-14 21:24:01 +02:00
keb
24b38d7321
fix: lazysecrets list keeps each entry on one line, errors to their first
2026-10-14 21:24:01 +02:00
keb
7b377fd468
feat: lazysecrets list shows unreadable lists as red ✗ lines, and filters by kind
2026-10-14 21:24:01 +02:00
keb
baee1dfe61
fix: lazysecrets list puts the name first, and keeps errors out of fzf
2026-10-14 21:24:01 +02:00
keb
e99462bd21
feat: lazysecrets list colours names from the theme, with icons
2026-10-14 21:24:01 +02:00
keb
b1455451e6
feat: lazysecrets list prints every source, vault and secret, for fzf and editor pickers
2026-10-14 21:24:01 +02:00
keb
dbb0eb2bbd
fix: a wrapped value in the details keeps its colour on every line ( #69 )
...
A long value in the details pane (a ref, a note, a vault's detail, an error) was coloured, then wrapped: the colour's reset only came on the last line, and each line is drawn on its own, so the lines after the first lost the colour. Each wrapped line now starts with the styles still on at the end of the one before.
Reviewed-on: #69
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-14 21:23:53 +02:00
keb
e825a51b30
fix: local builds are dev-<commit> again, not a Go pseudo-version ( #68 )
...
Go now stamps local builds with a module pseudo-version (v0.1.3-0.20261014174204-1c31a75d0507+dirty), so the version showed that instead of dev-<commit> as the docs say. The update check also took it for a pre-release of 0.1.3, a version that doesn't exist, rather than a development build. A pseudo-version is now dev-<its commit>, -dirty with uncommitted changes; real versions are unchanged.
Reviewed-on: #68
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-14 21:23:06 +02:00
keb
4480e8fed0
fix: lazysecrets starts from fzf's become, on a non-blocking terminal ( #67 )
...
fzf's become hands lazysecrets its /dev/tty still non-blocking. Go can't poll /dev/tty on macOS, so it reads it directly, and the TUI's first read failed with "resource temporarily unavailable" (EAGAIN). lazysecrets now makes a terminal on stdin blocking before the TUI starts (Unix; nothing on Windows).
Reviewed-on: #67
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-14 21:22:19 +02:00
keb
3e6db064ab
chore(release): v0.1.2
Release / Build and publish (push) Successful in 53s
2026-10-13 23:40:42 +02:00
keb
a81fcaa5a6
fix: unambiguous repo key names, clearer config and key names, and a newer lazysecrets's files no longer stop an older one ( #66 )
...
Changes that would break configs or links once people use lazysecrets, made while nobody does yet.
- **Repo key names**: a dot or bracket inside a key is escaped (`app\.name`), so links to it resolve to that key and not to `app` → `name`. Dotenv files are flat, so their names stay as they are.
- **Config**: `updates.updateSources` is now `updates.sources`. A negative provider timeout, or `--timeout` of 0 or less, is an error instead of making every request fail.
- **Keybindings**: `lists.share` is now `lists.copyLink`, `lists.search` is `lists.goTo` and `lists.enter` is `lists.open`, matching what they do.
- **Version skew**, e.g. a lazysecrets.nvim theme file made for a newer lazysecrets:
- an unknown theme role is skipped with a warning instead of stopping startup;
- a state file from a newer version is read but not saved to, with a warning;
- a link with an unknown provider suggests `lazysecrets update`.
Reviewed-on: #66
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 23:28:44 +02:00
keb
e28328ef82
docs: SECURITY.md says how to report a vulnerability ( #65 )
...
SECURITY.md asks for vulnerabilities to be reported privately, through GitHub's private vulnerability reporting or by email to karl-einarb@outlook.com .
docs/development.md: the "Pull requests" heading is now "How changes land". The section covers squash merges, PR titles and branch protection, not how to send one.
Reviewed-on: #65
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 23:27:43 +02:00
keb
6b3edd45d8
fix: help and errors name sharing.key and sharing.keyRules, not share.* ( #64 )
...
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 22:57:49 +02:00
keb
5cf9ecc0e2
chore: install segment on readme ( #63 )
...
Reviewed-on: #63
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 20:54:10 +02:00
keb
a46fc9fa19
chore: .mailmap shows Gitea's old noreply.localhost addresses as noreply.git.kebcloud.no ( #62 )
...
Gitea wrote merges as 1+keb@noreply.localhost and 3+renovate-bot@noreply.localhost until NO_REPLY_ADDRESS was set. git log, shortlog and blame now show those as noreply.git.kebcloud.no, without rewriting history.
Reviewed-on: #62
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 20:41:17 +02:00
Karl-Einar Bergstrøm
75bab25286
feat: the update changelog covers every version you missed ( #61 )
...
Latest reads the last 10 releases in one request instead of only the
newest, so U and lazysecrets update --check show the changes of every
release since the running version, each under its version. Drafts and
pre-releases are skipped. A changelog taller than the screen is cut
with a pointer to the release pages.
Reviewed-on: #61
2026-10-13 20:25:28 +02:00
keb
10d1fc63c7
feat: config grouped by area, with per-provider timeouts and an update interval ( #60 )
...
Regroups the config, while there are no users to migrate:
- `ui`: icons, sourcesView, collapseGroups, loadDelay, expiryWarningDays
- `values`: revealTimeout, hideOnBlur, clipboardClear
- `storage`: cache, history
- `updates`: autoCheck (was updateCheck), autoCheckInterval (new, 24h by default), updateSources (was releases)
- `providers.timeout` (was timeout), plus `timeout` on azure, databricks and repos overriding it for that provider; `--timeout` still sets them all
- `sharing` (was share), in the config and in a repo's `.lazysecrets.yaml`
docs/config.md and the pages naming these keys are updated.
Reviewed-on: #60
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 20:23:55 +02:00
renovate-bot Bot
5cd6d90555
chore(deps): update non-major ( #59 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-13 17:19:14 +02:00
keb
dc99779885
docs: the README shows the GitHub install URL too ( #58 )
...
Reviewed-on: #58
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 15:47:21 +02:00
keb
47ef86293d
feat: look for repos in the usual folders, not just ~/git ( #57 )
...
Without roots in the config, repos are found under whichever of ~/git,
~/repo, ~/repos, ~/projects, ~/code, ~/source and ~/src exist. Missing
ones cost a stat each. A root that's a symlink to another is scanned
once, and a repo under two roots keeps the first one's name.
Reviewed-on: #57
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 15:37:55 +02:00
keb
87141cb53b
chore(release): v0.1.1
Release / Build and publish (push) Successful in 1m13s
2026-10-13 14:57:31 +02:00
keb
e9366faa9b
chore: the changelog shows #55 's key as a key ( #56 )
...
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 14:57:24 +02:00
Karl-Einar Bergstrøm
4377eb98bf
feat: share env files as encrypted links ( #54 )
...
Share `.env` files as an encrypted `lazysecrets://share/…` link. The files are encrypted with a secret's value, so anyone who can read that secret can open the link.
**Sharing:** `S` → `f` on a repo (all its plain env files), an env file, or a key in one (its file).
- **The key** is `share.key` from the repo's `.lazysecrets.yaml`, else from the config. It can be a `lazysecrets://` link, a Key Vault URL or an `@Microsoft.KeyVault(...)` reference.
- **Without `share.key`,** a picker built on Go to opens, titled "Share .env", with "Pick a secret to encrypt with" in its own border. It lists only secrets, leaving out values from plain `.env` files. Pasting a reference picks it. Picking shares at once, and the picker stays open until the link is copied. If the secret can't be used, the reason shows in red in the picker: it can't be read, or it doesn't meet `share.keyRules` (which rule failed is named). `esc` cancels.
- **`share.keyRules`** (defaults `minLength: 32`, `minClasses: 2`; never under 16) applies when sharing, not when opening.
- **On Azure,** the link pins the key's version, so rotating the key doesn't break old links, and disabling a version revokes them.
- **The command line:** `lazysecrets share [--key <secret>] <env files>`.
**Opening** works by paste, `ctrl+o`, the clipboard offer, the link handler or `lazysecrets <link>`.
1. It first says which repo the link is from, how many files it holds and which key it uses, and decrypts only after `o`.
2. It saves into the repo's clone, found by its remote, showing which files are new, which would replace one there, and which git doesn't ignore.
3. Without a clone, it asks for a folder and saves straight away. The prompt stays open, with the reason in red, until the files are written.
4. If decryption fails, a popup says why: the first line of the reason, `r` for the whole message, `g` to go to the key's secret. A key that has changed is named by where it lives: a Databricks or SOPS value changed in place, an Azure current version that isn't the one the link was made with, or a pinned version, meaning the link may be damaged.
**Format** (`internal/share`): a version byte, then a JSON header with the key, the repo and the file count, then an age file (scrypt 2^15, with the key's value as passphrase) holding the files as deflated JSON, all as unpadded base64url. Links are capped at 16 KB. A future format gets a new version, and old ones stay readable.
**Safety:**
- A link can only write env files, inside the folder: never in `.git`, never through a symlink.
- New files are created with mode 0600.
- Opening accepts an scrypt work factor of at most 2^20, and unpacks at most 1 MB.
**Along the way:**
- Opening a link to a secret ends on its details, as `enter` would.
- `o` on an Azure secret opens its portal page, and in the versions view, that version's page.
- The details pane follows its secret's list when it reloads in the background. Before, it kept what it showed first, including an old portal address.
- `ref.Read` is shared by `get` and sharing, with Azure `VersionedValue` for pinning.
- `provider.Contents` lets the demo repos share their env files. `--demo` has a share key (`kv-shared-prod / env-share`), so the whole flow works there.
- New dependency: `filippo.io/age`.
Tested end to end in the TUI and the demo, the CLI, and the `share` package. In a real vault: version pinning, opening into a clone, and revocation by disabling the version.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Reviewed-on: #54
2026-10-13 14:55:22 +02:00
keb
2044341b20
feat: e on the status pane edits the config ( #55 )
...
`e` on the status pane (`0`) opens your config file, as in lazygit's status panel. The status footer shows it as `e edit config`. There's no global key. It opens the config the same way `e` opens a local file:
- inside nvim, in that nvim (lazysecrets quits);
- otherwise in `$VISUAL` or `$EDITOR`, coming back after;
- otherwise in the system's default app.
It opens the first config file: your own, also when `--config` layers several. A config that doesn't exist yet is created with a comment linking to its docs. Closing the editor says "restart lazysecrets to use it", since the config is read at startup.
Docs: keys.md (status pane) and config.md. Tested: the default app with a new config, nvim with an existing one left unchanged, the restart message, and the footer.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Reviewed-on: #55
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 13:03:43 +02:00
renovate-bot Bot
1a5e40a012
chore(deps): update go module directive to v1.27.2 ( #51 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-13 10:55:33 +02:00
keb
394dd85105
ci: staticcheck v0.8.2, which reads Go 1.27 ( #53 )
...
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com >
2026-10-13 10:53:01 +02:00
renovate-bot Bot
199fa039e4
chore(deps): update non-major ( #50 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 23:18:55 +02:00
renovate-bot Bot
a2ece5bf4f
chore(deps): update azure-sdk-for-go monorepo to v2 ( #52 )
...
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/ ) | [Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault](https://github.com/Azure/azure-sdk-for-go ) | `v1.5.0` → `v2.1.0` |  |  |
| [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions](https://github.com/Azure/azure-sdk-for-go ) | `v1.3.0` → `v2.0.0` |  |  |
---
### Release Notes
<details>
<summary>Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault)</summary>
### [`v2.1.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.1.0 )
#### 2.1.0 (2026-10-06)
##### Features Added
- New value `JSONWebKeyTypeOctHSM` added to enum type `JSONWebKeyType`
- New value `ManagedHsmSKUNameStandardB10V2`, `ManagedHsmSKUNameStandardB15V2`, `ManagedHsmSKUNameStandardB1V2`, `ManagedHsmSKUNameStandardB20V2`, `ManagedHsmSKUNameStandardB5V2` added to enum type `ManagedHsmSKUName`
### [`v2.0.2`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.2 )
#### 2.0.2 (2026-03-17)
##### Other Changes
- Upgrade to service API version 2026-02-01
### [`v2.0.1`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.1 )
#### 2.0.1 (2025-11-05)
##### Breaking Changes
- Field `RetryAfter` of struct `SecretsClientCreateOrUpdateResponse` has been removed
### [`v2.0.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/resources/armsubscriptions/v2.0.0 )
#### 2.0.0 (2026-06-24)
##### Breaking Changes
- Struct `ErrorAdditionalInfo` has been removed
- Struct `ErrorDetail` has been removed
- Struct `ErrorResponse` has been removed
- Struct `ErrorResponseAutoGenerated` has been removed
- Struct `OperationAutoGenerated` has been removed
- Struct `OperationDisplayAutoGenerated` has been removed
- Struct `OperationListResultAutoGenerated` has been removed
##### Features Added
- New field `NextLink` in struct `LocationListResult`
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Reviewed-on: #52
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 22:29:31 +02:00
renovate-bot Bot
6d1c26639e
chore(deps): update go module directive to v1.26.9 ( #49 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 22:10:21 +02:00
renovate-bot Bot and Karl-Einar Bergstrøm
d32bb63a9e
chore(deps): update azure-sdk-for-go monorepo to v2 ( #40 )
...
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/ ) | [Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault](https://github.com/Azure/azure-sdk-for-go ) | `v1.5.0` → `v2.1.0` |  |  |
| [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions](https://github.com/Azure/azure-sdk-for-go ) | `v1.3.0` → `v2.0.0` |  |  |
---
### Release Notes
<details>
<summary>Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault)</summary>
### [`v2.1.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.1.0 )
#### 2.1.0 (2026-10-06)
##### Features Added
- New value `JSONWebKeyTypeOctHSM` added to enum type `JSONWebKeyType`
- New value `ManagedHsmSKUNameStandardB10V2`, `ManagedHsmSKUNameStandardB15V2`, `ManagedHsmSKUNameStandardB1V2`, `ManagedHsmSKUNameStandardB20V2`, `ManagedHsmSKUNameStandardB5V2` added to enum type `ManagedHsmSKUName`
### [`v2.0.2`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.2 )
#### 2.0.2 (2026-03-17)
##### Other Changes
- Upgrade to service API version 2026-02-01
### [`v2.0.1`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.1 )
#### 2.0.1 (2025-11-05)
##### Breaking Changes
- Field `RetryAfter` of struct `SecretsClientCreateOrUpdateResponse` has been removed
### [`v2.0.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/resources/armsubscriptions/v2.0.0 )
#### 2.0.0 (2026-06-24)
##### Breaking Changes
- Struct `ErrorAdditionalInfo` has been removed
- Struct `ErrorDetail` has been removed
- Struct `ErrorResponse` has been removed
- Struct `ErrorResponseAutoGenerated` has been removed
- Struct `OperationAutoGenerated` has been removed
- Struct `OperationDisplayAutoGenerated` has been removed
- Struct `OperationListResultAutoGenerated` has been removed
##### Features Added
- New field `NextLink` in struct `LocationListResult`
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "before 6am on monday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost >
Reviewed-on: #40
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 21:15:45 +02:00
renovate-bot Bot and Karl-Einar Bergstrøm
9de519d515
chore(deps): update actions/setup-go action to v7 ( #39 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://github.com/actions/setup-go ) | action | major | `v5` → `v7` |
---
### Release Notes
<details>
<summary>actions/setup-go</summary>
### [`v7.0.0`](https://github.com/actions/setup-go/releases/tag/v7.0.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v6.5.0...v7.0.0 )
##### What's Changed
- Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108 ) in [#​763](https://github.com/actions/setup-go/pull/763 )
- chore(deps): bump [@​actions/cache](https://github.com/actions/cache ) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai ) in [#​771](https://github.com/actions/setup-go/pull/771 )
##### New Contributors
- [@​philip-gai](https://github.com/philip-gai ) made their first contribution in [#​771](https://github.com/actions/setup-go/pull/771 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v7.0.0 >
### [`v6.5.0`](https://github.com/actions/setup-go/releases/tag/v6.5.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v6.4.0...v6.5.0 )
##### What's Changed
##### Dependency update
- Upgrade actions dependencies by [@​priyagupta108](https://github.com/priyagupta108 ) with [@​Copilot](https://github.com/Copilot ) in [#​744](https://github.com/actions/setup-go/pull/744 )
- Upgrade [@​types/node](https://github.com/types/node ) and typescript-eslint dependencies to resolve npm audit findings by [@​HarithaVattikuti](https://github.com/HarithaVattikuti ) in [#​755](https://github.com/actions/setup-go/pull/755 )
- Upgrade [@​actions/cache](https://github.com/actions/cache ) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin ) in [#​758](https://github.com/actions/setup-go/pull/758 )
- Upgrade version to 6.5.0 in package.json and package-lock.json by [@​HarithaVattikuti](https://github.com/HarithaVattikuti ) in [#​762](https://github.com/actions/setup-go/pull/762 )
##### New Contributors
- [@​priyagupta108](https://github.com/priyagupta108 ) with [@​Copilot](https://github.com/Copilot ) made their first contribution in [#​744](https://github.com/actions/setup-go/pull/744 )
- [@​jasongin](https://github.com/jasongin ) made their first contribution in [#​758](https://github.com/actions/setup-go/pull/758 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.5.0 >
### [`v6.4.0`](https://github.com/actions/setup-go/releases/tag/v6.4.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v6.3.0...v6.4.0 )
##### What's Changed
##### Enhancement
- Add go-download-base-url input for custom Go distributions by [@​gdams](https://github.com/gdams ) in [#​721](https://github.com/actions/setup-go/pull/721 )
##### Dependency update
- Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot ) in [#​727](https://github.com/actions/setup-go/pull/727 )
##### Documentation update
- Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://github.com/priyagupta108 ) in [#​724](https://github.com/actions/setup-go/pull/724 )
- Fix Microsoft build of Go link by [@​gdams](https://github.com/gdams ) in [#​734](https://github.com/actions/setup-go/pull/734 )
##### New Contributors
- [@​gdams](https://github.com/gdams ) made their first contribution in [#​721](https://github.com/actions/setup-go/pull/721 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.4.0 >
### [`v6.3.0`](https://github.com/actions/setup-go/releases/tag/v6.3.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v6.2.0...v6.3.0 )
##### What's Changed
- Update default Go module caching to use go.mod by [@​priyagupta108](https://github.com/priyagupta108 ) in [#​705](https://github.com/actions/setup-go/pull/705 )
- Fix golang download url to go.dev by [@​178inaba](https://github.com/178inaba ) in [#​469](https://github.com/actions/setup-go/pull/469 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.3.0 >
### [`v6.2.0`](https://github.com/actions/setup-go/releases/tag/v6.2.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v6.1.0...v6.2.0 )
##### What's Changed
##### Enhancements
- Example for restore-only cache in documentation by [@​aparnajyothi-y](https://github.com/aparnajyothi-y ) in [#​696](https://github.com/actions/setup-go/pull/696 )
- Update Node.js version in action.yml by [@​ccoVeille](https://github.com/ccoVeille ) in [#​691](https://github.com/actions/setup-go/pull/691 )
- Documentation update of actions/checkout by [@​deining](https://github.com/deining ) in [#​683](https://github.com/actions/setup-go/pull/683 )
##### Dependency updates
- Upgrade js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot ) in [#​682](https://github.com/actions/setup-go/pull/682 )
- Upgrade [@​actions/cache](https://github.com/actions/cache ) to v5 by [@​salmanmkc](https://github.com/salmanmkc ) in [#​695](https://github.com/actions/setup-go/pull/695 )
- Upgrade actions/checkout from 5 to 6 by [@​dependabot](https://github.com/dependabot ) in [#​686](https://github.com/actions/setup-go/pull/686 )
- Upgrade qs from 6.14.0 to 6.14.1 by [@​dependabot](https://github.com/dependabot ) in [#​703](https://github.com/actions/setup-go/pull/703 )
##### New Contributors
- [@​ccoVeille](https://github.com/ccoVeille ) made their first contribution in [#​691](https://github.com/actions/setup-go/pull/691 )
- [@​deining](https://github.com/deining ) made their first contribution in [#​683](https://github.com/actions/setup-go/pull/683 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.2.0 >
### [`v6.1.0`](https://github.com/actions/setup-go/releases/tag/v6.1.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v6.0.0...v6.1.0 )
##### What's Changed
##### Enhancements
- Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by [@​nicholasngai](https://github.com/nicholasngai ) in [#​665](https://github.com/actions/setup-go/pull/665 )
- Add support for .tool-versions file and update workflow by [@​priya-kinthali](https://github.com/priya-kinthali ) in [#​673](https://github.com/actions/setup-go/pull/673 )
- Add comprehensive breaking changes documentation for v6 by [@​mahabaleshwars](https://github.com/mahabaleshwars ) in [#​674](https://github.com/actions/setup-go/pull/674 )
##### Dependency updates
- Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot ) in [#​617](https://github.com/actions/setup-go/pull/617 )
- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@​dependabot](https://github.com/dependabot ) in [#​641](https://github.com/actions/setup-go/pull/641 )
- Upgrade semver and [@​types/semver](https://github.com/types/semver ) by [@​dependabot](https://github.com/dependabot ) in [#​652](https://github.com/actions/setup-go/pull/652 )
##### New Contributors
- [@​nicholasngai](https://github.com/nicholasngai ) made their first contribution in [#​665](https://github.com/actions/setup-go/pull/665 )
- [@​priya-kinthali](https://github.com/priya-kinthali ) made their first contribution in [#​673](https://github.com/actions/setup-go/pull/673 )
- [@​mahabaleshwars](https://github.com/mahabaleshwars ) made their first contribution in [#​674](https://github.com/actions/setup-go/pull/674 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.1.0 >
### [`v6.0.0`](https://github.com/actions/setup-go/releases/tag/v6.0.0 )
[Compare Source](https://github.com/actions/setup-go/compare/v5.6.0...v6.0.0 )
##### What's Changed
##### Breaking Changes
- Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by [@​matthewhughes934](https://github.com/matthewhughes934 ) in [#​460](https://github.com/actions/setup-go/pull/460 )
- Upgrade Nodejs runtime from node20 to node 24 by [@​salmanmkc](https://github.com/salmanmkc ) in [#​624](https://github.com/actions/setup-go/pull/624 )
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1 )
##### Dependency Upgrades
- Upgrade [@​types/jest](https://github.com/types/jest ) from 29.5.12 to 29.5.14 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​589](https://github.com/actions/setup-go/pull/589 )
- Upgrade [@​actions/tool-cache](https://github.com/actions/tool-cache ) from 2.0.1 to 2.0.2 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​591](https://github.com/actions/setup-go/pull/591 )
- Upgrade [@​typescript-eslint/parser](https://github.com/typescript-eslint/parser ) from 8.31.1 to 8.35.1 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​590](https://github.com/actions/setup-go/pull/590 )
- Upgrade undici from 5.28.5 to 5.29.0 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​594](https://github.com/actions/setup-go/pull/594 )
- Upgrade typescript from 5.4.2 to 5.8.3 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​538](https://github.com/actions/setup-go/pull/538 )
- Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​603](https://github.com/actions/setup-go/pull/603 )
- Upgrade `form-data` to bring in fix for critical vulnerability by [@​matthewhughes934](https://github.com/matthewhughes934 ) in [#​618](https://github.com/actions/setup-go/pull/618 )
- Upgrade actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​631](https://github.com/actions/setup-go/pull/631 )
##### New Contributors
- [@​matthewhughes934](https://github.com/matthewhughes934 ) made their first contribution in [#​618](https://github.com/actions/setup-go/pull/618 )
- [@​salmanmkc](https://github.com/salmanmkc ) made their first contribution in [#​624](https://github.com/actions/setup-go/pull/624 )
**Full Changelog**: <https://github.com/actions/setup-go/compare/v5...v6.0.0 >
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "before 6am on monday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost >
Reviewed-on: #39
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 21:14:42 +02:00
renovate-bot Bot and Karl-Einar Bergstrøm
548f19b292
chore(deps): update actions/checkout action to v7 ( #38 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout ) | action | major | `v4` → `v7` |
---
### Release Notes
<details>
<summary>actions/checkout</summary>
### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701 )
[Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1 )
- Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2518](https://github.com/actions/checkout/pull/2518 )
- Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2521](https://github.com/actions/checkout/pull/2521 )
- Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2530](https://github.com/actions/checkout/pull/2530 )
- Various dependency updates
### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700 )
[Compare Source](https://github.com/actions/checkout/compare/v6.1.0...v7.0.0 )
- Block checking out fork PR for pull_request_target and workflow_run by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2454](https://github.com/actions/checkout/pull/2454 )
- Various dependency updates
### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0 )
[Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v6.1.0 )
##### What's Changed
- **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2500](https://github.com/actions/checkout/pull/2500 )
- backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2527](https://github.com/actions/checkout/pull/2527 )
<https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ > for more details about this breaking change
**Full Changelog**: <https://github.com/actions/checkout/compare/v6.0.3...v6.1.0 >
### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603 )
[Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3 )
- Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth ) in [#​2439](https://github.com/actions/checkout/pull/2439 )
- fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth ) in [#​2414](https://github.com/actions/checkout/pull/2414 )
### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602 )
[Compare Source](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2 )
- Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple ) in [#​2356](https://github.com/actions/checkout/pull/2356 )
### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601 )
[Compare Source](https://github.com/actions/checkout/compare/v6.0.0...v6.0.1 )
- Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple ) in [#​2327](https://github.com/actions/checkout/pull/2327 )
### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600 )
[Compare Source](https://github.com/actions/checkout/compare/v5.1.0...v6.0.0 )
- Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple ) in [#​2286](https://github.com/actions/checkout/pull/2286 )
- Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc ) in [#​2248](https://github.com/actions/checkout/pull/2248 )
### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0 )
[Compare Source](https://github.com/actions/checkout/compare/v5.0.1...v5.1.0 )
##### What's Changed
- **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2501](https://github.com/actions/checkout/pull/2501 )
- backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy ) in [#​2523](https://github.com/actions/checkout/pull/2523 )
<https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ > for more details about this breaking change
**Full Changelog**: <https://github.com/actions/checkout/compare/v5.0.1...v5.1.0 >
### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501 )
[Compare Source](https://github.com/actions/checkout/compare/v5.0.0...v5.0.1 )
- Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple ) in [#​2301](https://github.com/actions/checkout/pull/2301 )
### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500 )
[Compare Source](https://github.com/actions/checkout/compare/v4.4.0...v5.0.0 )
- Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc ) in [#​2226](https://github.com/actions/checkout/pull/2226 )
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "before 6am on monday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost >
Reviewed-on: #38
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 21:12:22 +02:00
renovate-bot Bot and Karl-Einar Bergstrøm
51beea9d78
chore(deps): update goreleaser/goreleaser-action action to v7 ( #41 )
...
This PR contains the following updates:
| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) | action | major | `v6` → `v7` | `v7.3.0` |
---
### Release Notes
<details>
<summary>goreleaser/goreleaser-action</summary>
### [`v7.2.3`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.3 )
[Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3 )
#### What's Changed
- ci(deps): bump the actions group with 3 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​563](https://github.com/goreleaser/goreleaser-action/pull/563 )
- chore(deps): bump undici from 6.24.1 to 6.27.0 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​565](https://github.com/goreleaser/goreleaser-action/pull/565 )
- build: regenerate dist after undici 6.27.0 bump by [@​caarlos0](https://github.com/caarlos0 ) in [#​567](https://github.com/goreleaser/goreleaser-action/pull/567 )
- ci: auto-rebuild dist on dependabot PRs by [@​caarlos0](https://github.com/caarlos0 ) in [#​568](https://github.com/goreleaser/goreleaser-action/pull/568 )
- ci: use a GitHub App token to rebuild dist on dependabot PRs by [@​caarlos0](https://github.com/caarlos0 ) in [#​569](https://github.com/goreleaser/goreleaser-action/pull/569 )
**Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3 >
### [`v7.2.2`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.2 )
[Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.1...v7.2.2 )
#### What's Changed
- ci(deps): bump the actions group with 3 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​560](https://github.com/goreleaser/goreleaser-action/pull/560 )
- fix: nightly resolution to select newest published release by [@​Copilot](https://github.com/Copilot ) in [#​562](https://github.com/goreleaser/goreleaser-action/pull/562 )
#### New Contributors
- [@​Copilot](https://github.com/Copilot ) made their first contribution in [#​562](https://github.com/goreleaser/goreleaser-action/pull/562 )
**Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.2 >
### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1 )
[Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1 )
This fully removes the usage of the old `nightly` moving tag.
**Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1 >
### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0 )
[Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.1.0...v7.2.0 )
#### What's Changed
- test: cover install across release eras by [@​caarlos0](https://github.com/caarlos0 ) in [#​555](https://github.com/goreleaser/goreleaser-action/pull/555 )
- feat: add `version-file` input by [@​caarlos0](https://github.com/caarlos0 ) in [#​556](https://github.com/goreleaser/goreleaser-action/pull/556 )
- feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@​caarlos0](https://github.com/caarlos0 ) in [#​558](https://github.com/goreleaser/goreleaser-action/pull/558 )
**Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0 >
### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0 )
[Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.0.0...v7.1.0 )
#### What's Changed
- feat: verify release checksum and cosign signature by [@​caarlos0](https://github.com/caarlos0 ) in [#​550](https://github.com/goreleaser/goreleaser-action/pull/550 )
- docs: document cosign verification in README by [@​caarlos0](https://github.com/caarlos0 ) in [#​553](https://github.com/goreleaser/goreleaser-action/pull/553 )
- docs: Upgrade import GPG action version by [@​flecno](https://github.com/flecno ) in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547 )
- ci: drop docker-bake in favor of plain npm by [@​caarlos0](https://github.com/caarlos0 ) in [#​551](https://github.com/goreleaser/goreleaser-action/pull/551 )
- ci: add release-major-tag workflow by [@​caarlos0](https://github.com/caarlos0 ) in [#​552](https://github.com/goreleaser/goreleaser-action/pull/552 )
- ci: drop pre-cosign-v3 goreleaser versions from tests by [@​caarlos0](https://github.com/caarlos0 ) in [#​554](https://github.com/goreleaser/goreleaser-action/pull/554 )
- ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​543](https://github.com/goreleaser/goreleaser-action/pull/543 )
- ci(deps): bump the actions group with 5 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​546](https://github.com/goreleaser/goreleaser-action/pull/546 )
- chore(deps): bump undici from 6.23.0 to 6.24.1 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​545](https://github.com/goreleaser/goreleaser-action/pull/545 )
#### New Contributors
- [@​flecno](https://github.com/flecno ) made their first contribution in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547 )
**Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0 >
### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0 )
[Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.4.0...v7.0.0 )
#### What's Changed
- feat!: node 24, update deps, rm yarn, ESM by [@​caarlos0](https://github.com/caarlos0 ) in [#​533](https://github.com/goreleaser/goreleaser-action/pull/533 )
- sec: pin github action versions by [@​caarlos0](https://github.com/caarlos0 ) in [#​514](https://github.com/goreleaser/goreleaser-action/pull/514 )
- docs: Upgrade checkout GitHub Action in README.md by [@​dunglas](https://github.com/dunglas ) in [#​507](https://github.com/goreleaser/goreleaser-action/pull/507 )
- chore(deps): bump actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot )\[bot] in [#​504](https://github.com/goreleaser/goreleaser-action/pull/504 )
- ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​517](https://github.com/goreleaser/goreleaser-action/pull/517 )
- ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​523](https://github.com/goreleaser/goreleaser-action/pull/523 )
- ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@​dependabot](https://github.com/dependabot )\[bot] in [#​526](https://github.com/goreleaser/goreleaser-action/pull/526 )
- ci(deps): bump the actions group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​532](https://github.com/goreleaser/goreleaser-action/pull/532 )
- ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@​dependabot](https://github.com/dependabot )\[bot] in [#​534](https://github.com/goreleaser/goreleaser-action/pull/534 )
- chore(deps): bump the npm group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot )\[bot] in [#​536](https://github.com/goreleaser/goreleaser-action/pull/536 )
- chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client ) from 3.0.2 to 4.0.0 in the npm group by [@​dependabot](https://github.com/dependabot )\[bot] in [#​537](https://github.com/goreleaser/goreleaser-action/pull/537 )
- ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@​dependabot](https://github.com/dependabot )\[bot] in [#​538](https://github.com/goreleaser/goreleaser-action/pull/538 )
- chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@​dependabot](https://github.com/dependabot )\[bot] in [#​539](https://github.com/goreleaser/goreleaser-action/pull/539 )
**Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0 >
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "before 6am on monday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost >
Reviewed-on: #41
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 21:10:27 +02:00
renovate-bot Bot
00924a4a1e
chore(deps): update module google.golang.org/grpc to v1.83.2 [security] ( #48 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 21:02:00 +02:00
renovate-bot Bot
3013d622e4
chore(deps): update security fixes [security] ( #47 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 20:43:38 +02:00
renovate-bot Bot
f19ac7845a
chore(deps): update module go.opentelemetry.io/otel to v1.42.0 [security] ( #46 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 20:40:01 +02:00
renovate-bot Bot
915d8bf3bd
chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] ( #42 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 20:35:47 +02:00
renovate-bot Bot
392ea41865
chore(deps): update non-major ( #37 )
...
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no >
2026-10-12 20:23:44 +02:00
keb
Karl-Einar Bergstrøm
renovate-bot Bot