chore(deps): update dependency goreleaser/goreleaser to v2.20.2 #159

Merged
CSRBot merged 1 commits from renovate/goreleaser-goreleaser-2.x into master 2026-11-12 18:13:43 +01:00
Collaborator

This PR contains the following updates:

Package Type Update Change
goreleaser/goreleaser minor v2.19.0 → v2.20.2
goreleaser/goreleaser uses-with minor v2.19.0 → v2.20.2

Release Notes

goreleaser/goreleaser (goreleaser/goreleaser)

v2.20.2

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Changelog
Security updates
Bug fixes
Other work

Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.20.1...v2.20.2

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

v2.20.1

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Changelog
Security updates
Bug fixes
Documentation updates
Other work

Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

v2.20.0

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Security

GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to dist/artifacts.json. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata.

See GHSA-9422-8p9m-393x for details.

Changelog

New Features
Bug fixes
Documentation updates
Other work

Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.19.0...v2.20.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | | minor | `v2.19.0` → `v2.20.2` | | [goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | uses-with | minor | `v2.19.0` → `v2.20.2` | --- ### Release Notes <details> <summary>goreleaser/goreleaser (goreleaser/goreleaser)</summary> ### [`v2.20.2`](https://github.com/goreleaser/goreleaser/releases/tag/v2.20.2) [Compare Source](https://github.com/goreleaser/goreleaser/compare/v2.20.1...v2.20.2) ##### Announcement Read the official announcement: [Announcing GoReleaser v2.20](https://goreleaser.com/blog/goreleaser-v2.20/). ##### Changelog ##### Security updates - [`84f5ed6`](https://github.com/goreleaser/goreleaser/commit/84f5ed6689a1a2b4112f1085d96cf6a6ddb11a5e): sec: redact Git publication and SBOM credentials ([#&#8203;7303](https://github.com/goreleaser/goreleaser/issues/7303)) ([@&#8203;caarlos0](https://github.com/caarlos0)) ##### Bug fixes - [`b6d7c4e`](https://github.com/goreleaser/goreleaser/commit/b6d7c4e4cb095d80c903b1ce66f02db69597cff0): fix(checksums): do not fail split checksums without artifacts ([#&#8203;7306](https://github.com/goreleaser/goreleaser/issues/7306)) ([@&#8203;David-Uka](https://github.com/David-Uka)) - [`2a662ce`](https://github.com/goreleaser/goreleaser/commit/2a662ce09e733ca040ddc3029c428becef4b273d): fix(redact): avoid empty writes for buffered secret prefixes ([#&#8203;7301](https://github.com/goreleaser/goreleaser/issues/7301)) ([@&#8203;David-Uka](https://github.com/David-Uka) and [@&#8203;caarlos0](https://github.com/caarlos0)) - [`89fdc40`](https://github.com/goreleaser/goreleaser/commit/89fdc4036bb6133a08518369bf1ce760281c5dab): fix(telegram): use an HTML-escaped default message with parse\_mode HTML ([#&#8203;7285](https://github.com/goreleaser/goreleaser/issues/7285)) ([@&#8203;pcbeingused333](https://github.com/pcbeingused333) and [@&#8203;caarlos0](https://github.com/caarlos0)) ##### Other work - [`fb18621`](https://github.com/goreleaser/goreleaser/commit/fb186216f22b0dce0c9e95ee190a15dc5734afc5): chore(deps): update Go to 1.27.4 ([#&#8203;7296](https://github.com/goreleaser/goreleaser/issues/7296)) ([@&#8203;caarlos0](https://github.com/caarlos0)) - [`33e4013`](https://github.com/goreleaser/goreleaser/commit/33e401312a58d063e6e086dc54737db10d83a0bf): chore: auto-update generated files ([#&#8203;7297](https://github.com/goreleaser/goreleaser/issues/7297)) ([@&#8203;goreleaserbot](https://github.com/goreleaserbot)) - [`6eedb82`](https://github.com/goreleaser/goreleaser/commit/6eedb82fdcb9f6a40d7e065e4c249ac2bc00f50b): chore: auto-update generated files ([#&#8203;7302](https://github.com/goreleaser/goreleaser/issues/7302)) ([@&#8203;goreleaser](https://github.com/goreleaser)\[bot]) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.20.1...v2.20.2> ##### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). ##### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> ### [`v2.20.1`](https://github.com/goreleaser/goreleaser/releases/tag/v2.20.1) [Compare Source](https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1) ##### Announcement Read the official announcement: [Announcing GoReleaser v2.20](https://goreleaser.com/blog/goreleaser-v2.20/). ##### Changelog ##### Security updates - [`0b1b1ff`](https://github.com/goreleaser/goreleaser/commit/0b1b1fff41ab7113cdb6858ac45a1cf7f9bebc92): sec(git): redact URL credentials from diagnostics ([#&#8203;7294](https://github.com/goreleaser/goreleaser/issues/7294)) ([@&#8203;caarlos0](https://github.com/caarlos0)) ([GHSA-7qv4-9g3j-wvq8](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-7qv4-9g3j-wvq8)) - [`9a037e1`](https://github.com/goreleaser/goreleaser/commit/9a037e1fd427402b52c117f0de38614972b909bb): sec(srpm): reject RPM macros in package versions ([#&#8203;7295](https://github.com/goreleaser/goreleaser/issues/7295)) ([@&#8203;caarlos0](https://github.com/caarlos0)) ([GHSA-rjp9-h7gp-wr7q](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-rjp9-h7gp-wr7q)) - [`fb9617b`](https://github.com/goreleaser/goreleaser/commit/fb9617b200efc33bb7fa63b5a2c005949fc5d566): sec: redact hook and chocolatey secrets from logs ([#&#8203;7293](https://github.com/goreleaser/goreleaser/issues/7293)) ([@&#8203;caarlos0](https://github.com/caarlos0)) ([GHSA-gvxm-cvj4-qwvp](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-gvxm-cvj4-qwvp)) ##### Bug fixes - [`0946e5e`](https://github.com/goreleaser/goreleaser/commit/0946e5ed0111de64e577d16f6802e755c956e366): fix(aur): install every binary of the archive in the default package ([#&#8203;7284](https://github.com/goreleaser/goreleaser/issues/7284)) ([@&#8203;lbarrosby](https://github.com/lbarrosby)) - [`79c8d68`](https://github.com/goreleaser/goreleaser/commit/79c8d685b968bb083c73c2ed72ac8ede54d2192d): fix(client): defer SSH private-key expansion until publishing ([#&#8203;7273](https://github.com/goreleaser/goreleaser/issues/7273)) ([@&#8203;caarlos0](https://github.com/caarlos0)) - [`e46cd64`](https://github.com/goreleaser/goreleaser/commit/e46cd64808b1fde7d770b2ec64b80f052560c943): fix(docs): remove duplicate prebuilt redirects ([@&#8203;caarlos0](https://github.com/caarlos0)) - [`5f422b1`](https://github.com/goreleaser/goreleaser/commit/5f422b18d5245cbece678da34eefdb542e0a08f6): fix(ko): accept '..' as main path ([#&#8203;7279](https://github.com/goreleaser/goreleaser/issues/7279)) ([@&#8203;mrueg](https://github.com/mrueg)) - [`a8f1c1e`](https://github.com/goreleaser/goreleaser/commit/a8f1c1ec8f3991588f8c41abf22eb5c80aeb740c): fix(ko): prefer remote base images and don't cache failed lookups ([#&#8203;7275](https://github.com/goreleaser/goreleaser/issues/7275)) ([@&#8203;mrueg](https://github.com/mrueg)) - [`3432e8d`](https://github.com/goreleaser/goreleaser/commit/3432e8d530ceeabf38edf26b5399006baad9f4e2): fix(mcp): retry publish when package version is not yet visible ([#&#8203;7283](https://github.com/goreleaser/goreleaser/issues/7283)) ([@&#8203;santhiprakash](https://github.com/santhiprakash)) - [`119f88f`](https://github.com/goreleaser/goreleaser/commit/119f88f695dc34e4b6f04c34e22005955d5675f8): refactor(ko): simplify template handling ([#&#8203;7277](https://github.com/goreleaser/goreleaser/issues/7277)) ([@&#8203;mrueg](https://github.com/mrueg)) ##### Documentation updates - [`3286c23`](https://github.com/goreleaser/goreleaser/commit/3286c23e755afa57959c32dda751a8b169736d97): docs: .ArtifactPath is not always an absolute path ([#&#8203;7289](https://github.com/goreleaser/goreleaser/issues/7289)) ([@&#8203;ZainnQureshii](https://github.com/ZainnQureshii)) ##### Other work - [`ed8efe6`](https://github.com/goreleaser/goreleaser/commit/ed8efe6a52def7b44443e0779021c3439b24ca5b): chore: auto-update generated files ([#&#8203;7274](https://github.com/goreleaser/goreleaser/issues/7274)) ([@&#8203;goreleaserbot](https://github.com/goreleaserbot)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1> ##### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). ##### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> ### [`v2.20.0`](https://github.com/goreleaser/goreleaser/releases/tag/v2.20.0) [Compare Source](https://github.com/goreleaser/goreleaser/compare/v2.19.0...v2.20.0) #### Announcement Read the official announcement: [Announcing GoReleaser v2.20](https://goreleaser.com/blog/goreleaser-v2.20/). #### Security GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to `dist/artifacts.json`. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata. See [GHSA-9422-8p9m-393x](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-9422-8p9m-393x) for details. #### Changelog ##### New Features - [`e1176e6`](https://github.com/goreleaser/goreleaser/commit/e1176e6189ddc4136161a2d00efa0ce0bd43b6a7): feat(cask): render `zap :not_required` when no zap directives are set ([#&#8203;7253](https://github.com/goreleaser/goreleaser/issues/7253)) ([@&#8203;SimonMiaou](https://github.com/SimonMiaou)) - [`afd8f84`](https://github.com/goreleaser/goreleaser/commit/afd8f84e21e5a26d8dcc215b9e94c2433d6c4bff): feat(gitlab): add asset type selection ([#&#8203;7255](https://github.com/goreleaser/goreleaser/issues/7255)) ([@&#8203;mavogel](https://github.com/mavogel)) - [`b8f79e0`](https://github.com/goreleaser/goreleaser/commit/b8f79e0399c46895220e8479e24d599576b563a8): feat(ko): allow templates in platforms ([#&#8203;7233](https://github.com/goreleaser/goreleaser/issues/7233)) ([@&#8203;mrueg](https://github.com/mrueg) and [@&#8203;caarlos0](https://github.com/caarlos0)) - [`2e260e4`](https://github.com/goreleaser/goreleaser/commit/2e260e4af35c00e0ad41e479c3830f9cfe858e36): feat(winget): update manifest schema to latest (1.28.0) ([#&#8203;7242](https://github.com/goreleaser/goreleaser/issues/7242)) ([@&#8203;abemedia](https://github.com/abemedia)) - [`4a1a1ae`](https://github.com/goreleaser/goreleaser/commit/4a1a1aecad78b7de77879e6b5e3809b578db000b): feat: allow skipping the changelog with --skip=changelog ([#&#8203;7234](https://github.com/goreleaser/goreleaser/issues/7234)) ([@&#8203;mrueg](https://github.com/mrueg) and [@&#8203;caarlos0](https://github.com/caarlos0)) ##### Bug fixes - [`24ec0fd`](https://github.com/goreleaser/goreleaser/commit/24ec0fd478872716fa2665eafa3380191240359a): fix(bluesky): do not add a link facet when there is no release URL ([#&#8203;7262](https://github.com/goreleaser/goreleaser/issues/7262)) ([@&#8203;10kartik](https://github.com/10kartik)) - [`bfa11d9`](https://github.com/goreleaser/goreleaser/commit/bfa11d921eabfe07480012b5e8d8c5a40f566508): fix(nodedist): handle prerelease versions in generation ([#&#8203;7263](https://github.com/goreleaser/goreleaser/issues/7263)) ([@&#8203;caarlos0](https://github.com/caarlos0)) - [`3d5c3a2`](https://github.com/goreleaser/goreleaser/commit/3d5c3a2efe1544b8f7d24a8c2ed10dab45b89a61): fix(tmpl): escape backslashes in mdv2escape ([#&#8203;7261](https://github.com/goreleaser/goreleaser/issues/7261)) ([@&#8203;10kartik](https://github.com/10kartik)) - [`e39e2fe`](https://github.com/goreleaser/goreleaser/commit/e39e2fe8b3b57b589bf89d2e8e1916012846434e): refactor: move marshaljson methods to right place ([@&#8203;caarlos0](https://github.com/caarlos0)) ##### Documentation updates - [`53e5668`](https://github.com/goreleaser/goreleaser/commit/53e5668e405484ca6df9d189edd3a4be47097a63): docs: add --snapshot to quick start single-target builds ([#&#8203;7232](https://github.com/goreleaser/goreleaser/issues/7232)) ([@&#8203;dcadolph](https://github.com/dcadolph)) - [`3467d0f`](https://github.com/goreleaser/goreleaser/commit/3467d0fee89e5a99d1a12ab9204361bfbbd03896): docs: github app ([#&#8203;7271](https://github.com/goreleaser/goreleaser/issues/7271)) ([@&#8203;caarlos0](https://github.com/caarlos0)) - [`81042d3`](https://github.com/goreleaser/goreleaser/commit/81042d32245657ba3e5c29215fa3adbb716bb35d): docs: update Pro page copy ([#&#8203;7270](https://github.com/goreleaser/goreleaser/issues/7270)) ([@&#8203;caarlos0](https://github.com/caarlos0)) - [`2d9b4c9`](https://github.com/goreleaser/goreleaser/commit/2d9b4c9ae3a1998975f89be160346255bbdbfbfe): docs: v2.19 announcement and docs ([@&#8203;caarlos0](https://github.com/caarlos0)) ##### Other work - [`6ac2967`](https://github.com/goreleaser/goreleaser/commit/6ac29673ac708d7f5a95b37639ff6ad6b8e1c835): Merge commit from fork ([@&#8203;Divsonar](https://github.com/Divsonar) and [@&#8203;caarlos0](https://github.com/caarlos0)) - [`94bc193`](https://github.com/goreleaser/goreleaser/commit/94bc1931912b5e25d40ba44aa6172584eef9af7b): chore: auto-update generated files ([#&#8203;7231](https://github.com/goreleaser/goreleaser/issues/7231)) ([@&#8203;goreleaserbot](https://github.com/goreleaserbot)) - [`538a99e`](https://github.com/goreleaser/goreleaser/commit/538a99ed8f8283ed4b47f7f5ba2ab59df049cd64): chore: auto-update generated files ([#&#8203;7254](https://github.com/goreleaser/goreleaser/issues/7254)) ([@&#8203;goreleaserbot](https://github.com/goreleaserbot)) - [`6e4f864`](https://github.com/goreleaser/goreleaser/commit/6e4f864373b19007d2bda3ae091721d82750f6fc): chore: auto-update generated files ([#&#8203;7264](https://github.com/goreleaser/goreleaser/issues/7264)) ([@&#8203;goreleaserbot](https://github.com/goreleaserbot)) - [`9b610a1`](https://github.com/goreleaser/goreleaser/commit/9b610a1a2a394c3480edb96ae437eff042695b94): chore: auto-update generated files ([#&#8203;7266](https://github.com/goreleaser/goreleaser/issues/7266)) ([@&#8203;goreleaserbot](https://github.com/goreleaserbot)) - [`27f55a0`](https://github.com/goreleaser/goreleaser/commit/27f55a04b7c7446612267346c110659bd59f4fbb): chore: lint ([@&#8203;caarlos0](https://github.com/caarlos0)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.19.0...v2.20.0> #### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). #### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTYuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjExNi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-11-09 18:38:11 +01:00
CSRBot changed title from chore(deps): update dependency goreleaser/goreleaser to v2.20.0 to chore(deps): update dependency goreleaser/goreleaser to v2.20.1 2026-11-11 03:12:20 +01:00
CSRBot added 1 commit 2026-11-12 18:02:55 +01:00
chore(deps): update dependency goreleaser/goreleaser to v2.20.2
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 1m21s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 28s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 18s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 26s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 2m22s
Lint Markdown files / Run markdown linter (pull_request) Successful in 6s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 1m7s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 35s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 1m9s
b55329a845
CSRBot force-pushed renovate/goreleaser-goreleaser-2.x from 47feb2aa91 to b55329a845 2026-11-12 18:02:55 +01:00 Compare
CSRBot changed title from chore(deps): update dependency goreleaser/goreleaser to v2.20.1 to chore(deps): update dependency goreleaser/goreleaser to v2.20.2 2026-11-12 18:02:55 +01:00
CSRBot merged commit 6d7b252f21 into master 2026-11-12 18:13:43 +01:00
CSRBot deleted branch renovate/goreleaser-goreleaser-2.x 2026-11-12 18:13:43 +01:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/civ#159