4e4014a0432ed3109ee1911b8bf66ff15517a1ac
26
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
4e4014a043
|
feat: the update changelog covers every version you missed
Latest reads the last 10 releases in one request instead of only the newest, so U and lazysecrets update --check show the changes of every release since the running version, each under its version. Drafts and pre-releases are skipped. A changelog taller than the screen is cut with a pointer to the release pages. |
||
|
|
5cd6d90555 |
chore(deps): update non-major (#59)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
dc99779885 |
docs: the README shows the GitHub install URL too (#58)
Reviewed-on: #58 Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com> |
||
|
|
47ef86293d |
feat: look for repos in the usual folders, not just ~/git (#57)
Without roots in the config, repos are found under whichever of ~/git, ~/repo, ~/repos, ~/projects, ~/code, ~/source and ~/src exist. Missing ones cost a stat each. A root that's a symlink to another is scanned once, and a repo under two roots keeps the first one's name. Reviewed-on: #57 Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com> |
||
|
|
87141cb53b
|
chore(release): v0.1.1
Release / Build and publish (push) Successful in 1m13s
|
||
|
|
e9366faa9b |
chore: the changelog shows #55's key as a key (#56)
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com> |
||
|
|
4377eb98bf |
feat: share env files as encrypted links (#54)
Share `.env` files as an encrypted `lazysecrets://share/…` link. The files are encrypted with a secret's value, so anyone who can read that secret can open the link. **Sharing:** `S` → `f` on a repo (all its plain env files), an env file, or a key in one (its file). - **The key** is `share.key` from the repo's `.lazysecrets.yaml`, else from the config. It can be a `lazysecrets://` link, a Key Vault URL or an `@Microsoft.KeyVault(...)` reference. - **Without `share.key`,** a picker built on Go to opens, titled "Share .env", with "Pick a secret to encrypt with" in its own border. It lists only secrets, leaving out values from plain `.env` files. Pasting a reference picks it. Picking shares at once, and the picker stays open until the link is copied. If the secret can't be used, the reason shows in red in the picker: it can't be read, or it doesn't meet `share.keyRules` (which rule failed is named). `esc` cancels. - **`share.keyRules`** (defaults `minLength: 32`, `minClasses: 2`; never under 16) applies when sharing, not when opening. - **On Azure,** the link pins the key's version, so rotating the key doesn't break old links, and disabling a version revokes them. - **The command line:** `lazysecrets share [--key <secret>] <env files>`. **Opening** works by paste, `ctrl+o`, the clipboard offer, the link handler or `lazysecrets <link>`. 1. It first says which repo the link is from, how many files it holds and which key it uses, and decrypts only after `o`. 2. It saves into the repo's clone, found by its remote, showing which files are new, which would replace one there, and which git doesn't ignore. 3. Without a clone, it asks for a folder and saves straight away. The prompt stays open, with the reason in red, until the files are written. 4. If decryption fails, a popup says why: the first line of the reason, `r` for the whole message, `g` to go to the key's secret. A key that has changed is named by where it lives: a Databricks or SOPS value changed in place, an Azure current version that isn't the one the link was made with, or a pinned version, meaning the link may be damaged. **Format** (`internal/share`): a version byte, then a JSON header with the key, the repo and the file count, then an age file (scrypt 2^15, with the key's value as passphrase) holding the files as deflated JSON, all as unpadded base64url. Links are capped at 16 KB. A future format gets a new version, and old ones stay readable. **Safety:** - A link can only write env files, inside the folder: never in `.git`, never through a symlink. - New files are created with mode 0600. - Opening accepts an scrypt work factor of at most 2^20, and unpacks at most 1 MB. **Along the way:** - Opening a link to a secret ends on its details, as `enter` would. - `o` on an Azure secret opens its portal page, and in the versions view, that version's page. - The details pane follows its secret's list when it reloads in the background. Before, it kept what it showed first, including an old portal address. - `ref.Read` is shared by `get` and sharing, with Azure `VersionedValue` for pinning. - `provider.Contents` lets the demo repos share their env files. `--demo` has a share key (`kv-shared-prod / env-share`), so the whole flow works there. - New dependency: `filippo.io/age`. Tested end to end in the TUI and the demo, the CLI, and the `share` package. In a real vault: version pinning, opening into a clone, and revocation by disabling the version. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #54 |
||
|
|
2044341b20 |
feat: e on the status pane edits the config (#55)
`e` on the status pane (`0`) opens your config file, as in lazygit's status panel. The status footer shows it as `e edit config`. There's no global key. It opens the config the same way `e` opens a local file: - inside nvim, in that nvim (lazysecrets quits); - otherwise in `$VISUAL` or `$EDITOR`, coming back after; - otherwise in the system's default app. It opens the first config file: your own, also when `--config` layers several. A config that doesn't exist yet is created with a comment linking to its docs. Closing the editor says "restart lazysecrets to use it", since the config is read at startup. Docs: keys.md (status pane) and config.md. Tested: the default app with a new config, nvim with an existing one left unchanged, the restart message, and the footer. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #55 Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com> |
||
|
|
1a5e40a012 |
chore(deps): update go module directive to v1.27.2 (#51)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
394dd85105 |
ci: staticcheck v0.8.2, which reads Go 1.27 (#53)
Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com> |
||
|
|
199fa039e4 |
chore(deps): update non-major (#50)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
a2ece5bf4f |
chore(deps): update azure-sdk-for-go monorepo to v2 (#52)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault](https://github.com/Azure/azure-sdk-for-go) | `v1.5.0` → `v2.1.0` |  |  | | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions](https://github.com/Azure/azure-sdk-for-go) | `v1.3.0` → `v2.0.0` |  |  | --- ### Release Notes <details> <summary>Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault)</summary> ### [`v2.1.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.1.0) #### 2.1.0 (2026-10-06) ##### Features Added - New value `JSONWebKeyTypeOctHSM` added to enum type `JSONWebKeyType` - New value `ManagedHsmSKUNameStandardB10V2`, `ManagedHsmSKUNameStandardB15V2`, `ManagedHsmSKUNameStandardB1V2`, `ManagedHsmSKUNameStandardB20V2`, `ManagedHsmSKUNameStandardB5V2` added to enum type `ManagedHsmSKUName` ### [`v2.0.2`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.2) #### 2.0.2 (2026-03-17) ##### Other Changes - Upgrade to service API version 2026-02-01 ### [`v2.0.1`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.1) #### 2.0.1 (2025-11-05) ##### Breaking Changes - Field `RetryAfter` of struct `SecretsClientCreateOrUpdateResponse` has been removed ### [`v2.0.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/resources/armsubscriptions/v2.0.0) #### 2.0.0 (2026-06-24) ##### Breaking Changes - Struct `ErrorAdditionalInfo` has been removed - Struct `ErrorDetail` has been removed - Struct `ErrorResponse` has been removed - Struct `ErrorResponseAutoGenerated` has been removed - Struct `OperationAutoGenerated` has been removed - Struct `OperationDisplayAutoGenerated` has been removed - Struct `OperationListResultAutoGenerated` has been removed ##### Features Added - New field `NextLink` in struct `LocationListResult` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #52 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
6d1c26639e |
chore(deps): update go module directive to v1.26.9 (#49)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
d32bb63a9e |
chore(deps): update azure-sdk-for-go monorepo to v2 (#40)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault](https://github.com/Azure/azure-sdk-for-go) | `v1.5.0` → `v2.1.0` |  |  | | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions](https://github.com/Azure/azure-sdk-for-go) | `v1.3.0` → `v2.0.0` |  |  | --- ### Release Notes <details> <summary>Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault)</summary> ### [`v2.1.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.1.0) #### 2.1.0 (2026-10-06) ##### Features Added - New value `JSONWebKeyTypeOctHSM` added to enum type `JSONWebKeyType` - New value `ManagedHsmSKUNameStandardB10V2`, `ManagedHsmSKUNameStandardB15V2`, `ManagedHsmSKUNameStandardB1V2`, `ManagedHsmSKUNameStandardB20V2`, `ManagedHsmSKUNameStandardB5V2` added to enum type `ManagedHsmSKUName` ### [`v2.0.2`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.2) #### 2.0.2 (2026-03-17) ##### Other Changes - Upgrade to service API version 2026-02-01 ### [`v2.0.1`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/keyvault/armkeyvault/v2.0.1) #### 2.0.1 (2025-11-05) ##### Breaking Changes - Field `RetryAfter` of struct `SecretsClientCreateOrUpdateResponse` has been removed ### [`v2.0.0`](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/resourcemanager/resources/armsubscriptions/v2.0.0) #### 2.0.0 (2026-06-24) ##### Breaking Changes - Struct `ErrorAdditionalInfo` has been removed - Struct `ErrorDetail` has been removed - Struct `ErrorResponse` has been removed - Struct `ErrorResponseAutoGenerated` has been removed - Struct `OperationAutoGenerated` has been removed - Struct `OperationDisplayAutoGenerated` has been removed - Struct `OperationListResultAutoGenerated` has been removed ##### Features Added - New field `NextLink` in struct `LocationListResult` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost> Reviewed-on: #40 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
9de519d515 |
chore(deps): update actions/setup-go action to v7 (#39)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v5` → `v7` | --- ### Release Notes <details> <summary>actions/setup-go</summary> ### [`v7.0.0`](https://github.com/actions/setup-go/releases/tag/v7.0.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.5.0...v7.0.0) ##### What's Changed - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​763](https://github.com/actions/setup-go/pull/763) - chore(deps): bump [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​771](https://github.com/actions/setup-go/pull/771) ##### New Contributors - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​771](https://github.com/actions/setup-go/pull/771) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v7.0.0> ### [`v6.5.0`](https://github.com/actions/setup-go/releases/tag/v6.5.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.4.0...v6.5.0) ##### What's Changed ##### Dependency update - Upgrade actions dependencies by [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) in [#​744](https://github.com/actions/setup-go/pull/744) - Upgrade [@​types/node](https://github.com/types/node) and typescript-eslint dependencies to resolve npm audit findings by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​755](https://github.com/actions/setup-go/pull/755) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@​jasongin](https://github.com/jasongin) in [#​758](https://github.com/actions/setup-go/pull/758) - Upgrade version to 6.5.0 in package.json and package-lock.json by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​762](https://github.com/actions/setup-go/pull/762) ##### New Contributors - [@​priyagupta108](https://github.com/priyagupta108) with [@​Copilot](https://github.com/Copilot) made their first contribution in [#​744](https://github.com/actions/setup-go/pull/744) - [@​jasongin](https://github.com/jasongin) made their first contribution in [#​758](https://github.com/actions/setup-go/pull/758) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.5.0> ### [`v6.4.0`](https://github.com/actions/setup-go/releases/tag/v6.4.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.3.0...v6.4.0) ##### What's Changed ##### Enhancement - Add go-download-base-url input for custom Go distributions by [@​gdams](https://github.com/gdams) in [#​721](https://github.com/actions/setup-go/pull/721) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://github.com/dependabot) in [#​727](https://github.com/actions/setup-go/pull/727) ##### Documentation update - Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://github.com/priyagupta108) in [#​724](https://github.com/actions/setup-go/pull/724) - Fix Microsoft build of Go link by [@​gdams](https://github.com/gdams) in [#​734](https://github.com/actions/setup-go/pull/734) ##### New Contributors - [@​gdams](https://github.com/gdams) made their first contribution in [#​721](https://github.com/actions/setup-go/pull/721) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.4.0> ### [`v6.3.0`](https://github.com/actions/setup-go/releases/tag/v6.3.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.2.0...v6.3.0) ##### What's Changed - Update default Go module caching to use go.mod by [@​priyagupta108](https://github.com/priyagupta108) in [#​705](https://github.com/actions/setup-go/pull/705) - Fix golang download url to go.dev by [@​178inaba](https://github.com/178inaba) in [#​469](https://github.com/actions/setup-go/pull/469) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-go/releases/tag/v6.2.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.1.0...v6.2.0) ##### What's Changed ##### Enhancements - Example for restore-only cache in documentation by [@​aparnajyothi-y](https://github.com/aparnajyothi-y) in [#​696](https://github.com/actions/setup-go/pull/696) - Update Node.js version in action.yml by [@​ccoVeille](https://github.com/ccoVeille) in [#​691](https://github.com/actions/setup-go/pull/691) - Documentation update of actions/checkout by [@​deining](https://github.com/deining) in [#​683](https://github.com/actions/setup-go/pull/683) ##### Dependency updates - Upgrade js-yaml from 3.14.1 to 3.14.2 by [@​dependabot](https://github.com/dependabot) in [#​682](https://github.com/actions/setup-go/pull/682) - Upgrade [@​actions/cache](https://github.com/actions/cache) to v5 by [@​salmanmkc](https://github.com/salmanmkc) in [#​695](https://github.com/actions/setup-go/pull/695) - Upgrade actions/checkout from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [#​686](https://github.com/actions/setup-go/pull/686) - Upgrade qs from 6.14.0 to 6.14.1 by [@​dependabot](https://github.com/dependabot) in [#​703](https://github.com/actions/setup-go/pull/703) ##### New Contributors - [@​ccoVeille](https://github.com/ccoVeille) made their first contribution in [#​691](https://github.com/actions/setup-go/pull/691) - [@​deining](https://github.com/deining) made their first contribution in [#​683](https://github.com/actions/setup-go/pull/683) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-go/releases/tag/v6.1.0) [Compare Source](https://github.com/actions/setup-go/compare/v6.0.0...v6.1.0) ##### What's Changed ##### Enhancements - Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by [@​nicholasngai](https://github.com/nicholasngai) in [#​665](https://github.com/actions/setup-go/pull/665) - Add support for .tool-versions file and update workflow by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​673](https://github.com/actions/setup-go/pull/673) - Add comprehensive breaking changes documentation for v6 by [@​mahabaleshwars](https://github.com/mahabaleshwars) in [#​674](https://github.com/actions/setup-go/pull/674) ##### Dependency updates - Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​617](https://github.com/actions/setup-go/pull/617) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 by [@​dependabot](https://github.com/dependabot) in [#​641](https://github.com/actions/setup-go/pull/641) - Upgrade semver and [@​types/semver](https://github.com/types/semver) by [@​dependabot](https://github.com/dependabot) in [#​652](https://github.com/actions/setup-go/pull/652) ##### New Contributors - [@​nicholasngai](https://github.com/nicholasngai) made their first contribution in [#​665](https://github.com/actions/setup-go/pull/665) - [@​priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#​673](https://github.com/actions/setup-go/pull/673) - [@​mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#​674](https://github.com/actions/setup-go/pull/674) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-go/releases/tag/v6.0.0) [Compare Source](https://github.com/actions/setup-go/compare/v5.6.0...v6.0.0) ##### What's Changed ##### Breaking Changes - Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by [@​matthewhughes934](https://github.com/matthewhughes934) in [#​460](https://github.com/actions/setup-go/pull/460) - Upgrade Nodejs runtime from node20 to node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​624](https://github.com/actions/setup-go/pull/624) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency Upgrades - Upgrade [@​types/jest](https://github.com/types/jest) from 29.5.12 to 29.5.14 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​589](https://github.com/actions/setup-go/pull/589) - Upgrade [@​actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​591](https://github.com/actions/setup-go/pull/591) - Upgrade [@​typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.31.1 to 8.35.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​590](https://github.com/actions/setup-go/pull/590) - Upgrade undici from 5.28.5 to 5.29.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​594](https://github.com/actions/setup-go/pull/594) - Upgrade typescript from 5.4.2 to 5.8.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​538](https://github.com/actions/setup-go/pull/538) - Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​603](https://github.com/actions/setup-go/pull/603) - Upgrade `form-data` to bring in fix for critical vulnerability by [@​matthewhughes934](https://github.com/matthewhughes934) in [#​618](https://github.com/actions/setup-go/pull/618) - Upgrade actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​631](https://github.com/actions/setup-go/pull/631) ##### New Contributors - [@​matthewhughes934](https://github.com/matthewhughes934) made their first contribution in [#​618](https://github.com/actions/setup-go/pull/618) - [@​salmanmkc](https://github.com/salmanmkc) made their first contribution in [#​624](https://github.com/actions/setup-go/pull/624) **Full Changelog**: <https://github.com/actions/setup-go/compare/v5...v6.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost> Reviewed-on: #39 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
548f19b292 |
chore(deps): update actions/checkout action to v7 (#38)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](https://github.com/actions/checkout/pull/2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](https://github.com/actions/checkout/pull/2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](https://github.com/actions/checkout/pull/2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](https://github.com/actions/checkout/pull/2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](https://github.com/actions/checkout/pull/2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](https://github.com/actions/checkout/pull/2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](https://github.com/actions/checkout/pull/2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](https://github.com/actions/checkout/pull/2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](https://github.com/actions/checkout/compare/v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](https://github.com/actions/checkout/pull/2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](https://github.com/actions/checkout/compare/v5.1.0...v6.0.0) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](https://github.com/actions/checkout/pull/2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](https://github.com/actions/checkout/pull/2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](https://github.com/actions/checkout/compare/v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](https://github.com/actions/checkout/pull/2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](https://github.com/actions/checkout/pull/2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://github.com/actions/checkout/compare/v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](https://github.com/actions/checkout/pull/2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](https://github.com/actions/checkout/compare/v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](https://github.com/actions/checkout/pull/2226) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost> Reviewed-on: #38 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
51beea9d78 |
chore(deps): update goreleaser/goreleaser-action action to v7 (#41)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | `v7.3.0` | --- ### Release Notes <details> <summary>goreleaser/goreleaser-action</summary> ### [`v7.2.3`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.3) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​563](https://github.com/goreleaser/goreleaser-action/pull/563) - chore(deps): bump undici from 6.24.1 to 6.27.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​565](https://github.com/goreleaser/goreleaser-action/pull/565) - build: regenerate dist after undici 6.27.0 bump by [@​caarlos0](https://github.com/caarlos0) in [#​567](https://github.com/goreleaser/goreleaser-action/pull/567) - ci: auto-rebuild dist on dependabot PRs by [@​caarlos0](https://github.com/caarlos0) in [#​568](https://github.com/goreleaser/goreleaser-action/pull/568) - ci: use a GitHub App token to rebuild dist on dependabot PRs by [@​caarlos0](https://github.com/caarlos0) in [#​569](https://github.com/goreleaser/goreleaser-action/pull/569) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3> ### [`v7.2.2`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.2) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.1...v7.2.2) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​560](https://github.com/goreleaser/goreleaser-action/pull/560) - fix: nightly resolution to select newest published release by [@​Copilot](https://github.com/Copilot) in [#​562](https://github.com/goreleaser/goreleaser-action/pull/562) #### New Contributors - [@​Copilot](https://github.com/Copilot) made their first contribution in [#​562](https://github.com/goreleaser/goreleaser-action/pull/562) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.2> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@​caarlos0](https://github.com/caarlos0) in [#​555](https://github.com/goreleaser/goreleaser-action/pull/555) - feat: add `version-file` input by [@​caarlos0](https://github.com/caarlos0) in [#​556](https://github.com/goreleaser/goreleaser-action/pull/556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@​caarlos0](https://github.com/caarlos0) in [#​558](https://github.com/goreleaser/goreleaser-action/pull/558) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0> ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.0.0...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@​caarlos0](https://github.com/caarlos0) in [#​550](https://github.com/goreleaser/goreleaser-action/pull/550) - docs: document cosign verification in README by [@​caarlos0](https://github.com/caarlos0) in [#​553](https://github.com/goreleaser/goreleaser-action/pull/553) - docs: Upgrade import GPG action version by [@​flecno](https://github.com/flecno) in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547) - ci: drop docker-bake in favor of plain npm by [@​caarlos0](https://github.com/caarlos0) in [#​551](https://github.com/goreleaser/goreleaser-action/pull/551) - ci: add release-major-tag workflow by [@​caarlos0](https://github.com/caarlos0) in [#​552](https://github.com/goreleaser/goreleaser-action/pull/552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@​caarlos0](https://github.com/caarlos0) in [#​554](https://github.com/goreleaser/goreleaser-action/pull/554) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​543](https://github.com/goreleaser/goreleaser-action/pull/543) - ci(deps): bump the actions group with 5 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​546](https://github.com/goreleaser/goreleaser-action/pull/546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​545](https://github.com/goreleaser/goreleaser-action/pull/545) #### New Contributors - [@​flecno](https://github.com/flecno) made their first contribution in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0> ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.4.0...v7.0.0) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@​caarlos0](https://github.com/caarlos0) in [#​533](https://github.com/goreleaser/goreleaser-action/pull/533) - sec: pin github action versions by [@​caarlos0](https://github.com/caarlos0) in [#​514](https://github.com/goreleaser/goreleaser-action/pull/514) - docs: Upgrade checkout GitHub Action in README.md by [@​dunglas](https://github.com/dunglas) in [#​507](https://github.com/goreleaser/goreleaser-action/pull/507) - chore(deps): bump actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​504](https://github.com/goreleaser/goreleaser-action/pull/504) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​517](https://github.com/goreleaser/goreleaser-action/pull/517) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​523](https://github.com/goreleaser/goreleaser-action/pull/523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​526](https://github.com/goreleaser/goreleaser-action/pull/526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​532](https://github.com/goreleaser/goreleaser-action/pull/532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​534](https://github.com/goreleaser/goreleaser-action/pull/534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​536](https://github.com/goreleaser/goreleaser-action/pull/536) - chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​537](https://github.com/goreleaser/goreleaser-action/pull/537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​538](https://github.com/goreleaser/goreleaser-action/pull/538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​539](https://github.com/goreleaser/goreleaser-action/pull/539) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost> Reviewed-on: #41 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
00924a4a1e |
chore(deps): update module google.golang.org/grpc to v1.83.2 [security] (#48)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
3013d622e4 |
chore(deps): update security fixes [security] (#47)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
f19ac7845a |
chore(deps): update module go.opentelemetry.io/otel to v1.42.0 [security] (#46)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
915d8bf3bd |
chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] (#42)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
392ea41865 |
chore(deps): update non-major (#37)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
da890a92cb |
chore(deps): update non-major (#36)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
01a51da443 |
chore: renovate leaves the golden test helper alone (#34)
github.com/charmbracelet/x/exp/golden is pinned to a commit with no releases, so Renovate can't look it up and warned on every run. --------- Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com> Reviewed-on: #34 |
||
|
|
595bdaad43 |
chore: Configure Renovate (#32)
Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged. 📚 See our [Reading List](https://docs.renovatebot.com/reading-list/) for relevant documentation you may be interested in reading. 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### Detected Package Files * `.gitea/workflows/ci.yml` (github-actions) * `.gitea/workflows/pr-title.yml` (github-actions) * `.gitea/workflows/release.yml` (github-actions) * `go.mod` (gomod) * `renovate.json` (renovate-config) * `.gitea/workflows/release.yml` (regex) * `.gitea/workflows/ci.yml` (regex) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title - Provide a link to octochangelog's improved breakdown for Renovate's changelogs - Use semantic prefixes for commit messages and PR titles. - If Renovate detects semantic commits, it will use semantic commit type `chore` for all commits. - The shared Renovate policy: repos extend it with local>keb/renovate. - Run Renovate on following schedule: before 6am on monday --- ### What to Expect With your current configuration, Renovate will create 3 Pull Requests: <details> <summary>chore(deps): update 0.x minor</summary> - Schedule: ["before 6am on monday"] - Branch name: `renovate/0.x-minor` - Merge into: `main` - Upgrade [golang.org/x/mod](https://go.googlesource.com/mod) to `v0.41.0` - Upgrade [golang.org/x/term](https://go.googlesource.com/term) to `v0.47.0` </details> <details> <summary>chore(deps): update non-major</summary> - Schedule: ["before 6am on monday"] - Branch name: `renovate/non-major` - Merge into: `main` - Upgrade [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) to `v2.1.0` - Upgrade [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) to `v1.23.3` - Upgrade [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) to `v0.11.9` - Upgrade [gopkg.in/ini.v1](https://gopkg.in/ini.v1) to `v1.67.3` </details> <details> <summary>chore(deps): update azure-sdk-for-go monorepo to v2</summary> - Schedule: ["before 6am on monday"] - Branch name: `renovate/major-azure-sdk-for-go-monorepo` - Merge into: `main` - Upgrade [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault](https://github.com/Azure/azure-sdk-for-go) to `v2.1.0` - Upgrade [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions](https://github.com/Azure/azure-sdk-for-go) to `v2.0.0` </details> 🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for `prHourlyLimit`](https://docs.renovatebot.com/configuration-options/#prhourlylimit) for details. --- > > ⚠️ **Warning** > > Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR. > > - `Could not determine new digest for update (go package github.com/charmbracelet/x/exp/golden)` > > Files affected: `go.mod` --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-config-hash:42b8771e0e792cb00b73533dcfa07b6c34d2c882632e57c0db725713586c855e--> Reviewed-on: #32 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
|
edf6e79327 |
Hello world
Release / Build and publish (push) Successful in 38s
|