chore(deps): update dependency goreleaser/goreleaser to v2.20.2 #237

2026-11-11T03:07:58+01:00

CSRBot commented

2026-11-11 03:07:58 +01:00

This PR contains the following updates:

Package	Type	Update	Change
goreleaser/goreleaser		patch	`v2.20.0` → `v2.20.2`
goreleaser/goreleaser	uses-with	patch	`v2.20.0` → `v2.20.2`

Release Notes

goreleaser/goreleaser (goreleaser/goreleaser)

`v2.20.2`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Changelog

Security updates

84f5ed6: sec: redact Git publication and SBOM credentials (#7303) (@caarlos0)

Bug fixes

b6d7c4e: fix(checksums): do not fail split checksums without artifacts (#7306) (@David-Uka)
2a662ce: fix(redact): avoid empty writes for buffered secret prefixes (#7301) (@David-Uka and @caarlos0)
89fdc40: fix(telegram): use an HTML-escaped default message with parse_mode HTML (#7285) (@pcbeingused333 and @caarlos0)

Other work

fb18621: chore(deps): update Go to 1.27.4 (#7296) (@caarlos0)
33e4013: chore: auto-update generated files (#7297) (@goreleaserbot)
6eedb82: chore: auto-update generated files (#7302) (@goreleaser[bot])

Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.20.1...v2.20.2

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.
Reach out on Discord, Twitter, and Telegram!

`v2.20.1`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Changelog

Security updates

0b1b1ff: sec(git): redact URL credentials from diagnostics (#7294) (@caarlos0) (GHSA-7qv4-9g3j-wvq8)
9a037e1: sec(srpm): reject RPM macros in package versions (#7295) (@caarlos0) (GHSA-rjp9-h7gp-wr7q)
fb9617b: sec: redact hook and chocolatey secrets from logs (#7293) (@caarlos0) (GHSA-gvxm-cvj4-qwvp)

Bug fixes

0946e5e: fix(aur): install every binary of the archive in the default package (#7284) (@lbarrosby)
79c8d68: fix(client): defer SSH private-key expansion until publishing (#7273) (@caarlos0)
e46cd64: fix(docs): remove duplicate prebuilt redirects (@caarlos0)
5f422b1: fix(ko): accept '..' as main path (#7279) (@mrueg)
a8f1c1e: fix(ko): prefer remote base images and don't cache failed lookups (#7275) (@mrueg)
3432e8d: fix(mcp): retry publish when package version is not yet visible (#7283) (@santhiprakash)
119f88f: refactor(ko): simplify template handling (#7277) (@mrueg)

Documentation updates

3286c23: docs: .ArtifactPath is not always an absolute path (#7289) (@ZainnQureshii)

Other work

ed8efe6: chore: auto-update generated files (#7274) (@goreleaserbot)

Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.
Reach out on Discord, Twitter, and Telegram!

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | | patch | `v2.20.0` → `v2.20.2` | | [goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | uses-with | patch | `v2.20.0` → `v2.20.2` | --- ### Release Notes <details> <summary>goreleaser/goreleaser (goreleaser/goreleaser)</summary> ### [`v2.20.2`](https://github.com/goreleaser/goreleaser/releases/tag/v2.20.2) [Compare Source](https://github.com/goreleaser/goreleaser/compare/v2.20.1...v2.20.2) ##### Announcement Read the official announcement: [Announcing GoReleaser v2.20](https://goreleaser.com/blog/goreleaser-v2.20/). ##### Changelog ##### Security updates - [`84f5ed6`](https://github.com/goreleaser/goreleaser/commit/84f5ed6689a1a2b4112f1085d96cf6a6ddb11a5e): sec: redact Git publication and SBOM credentials ([#7303](https://github.com/goreleaser/goreleaser/issues/7303)) ([@caarlos0](https://github.com/caarlos0)) ##### Bug fixes - [`b6d7c4e`](https://github.com/goreleaser/goreleaser/commit/b6d7c4e4cb095d80c903b1ce66f02db69597cff0): fix(checksums): do not fail split checksums without artifacts ([#7306](https://github.com/goreleaser/goreleaser/issues/7306)) ([@David-Uka](https://github.com/David-Uka)) - [`2a662ce`](https://github.com/goreleaser/goreleaser/commit/2a662ce09e733ca040ddc3029c428becef4b273d): fix(redact): avoid empty writes for buffered secret prefixes ([#7301](https://github.com/goreleaser/goreleaser/issues/7301)) ([@David-Uka](https://github.com/David-Uka) and [@caarlos0](https://github.com/caarlos0)) - [`89fdc40`](https://github.com/goreleaser/goreleaser/commit/89fdc4036bb6133a08518369bf1ce760281c5dab): fix(telegram): use an HTML-escaped default message with parse\_mode HTML ([#7285](https://github.com/goreleaser/goreleaser/issues/7285)) ([@pcbeingused333](https://github.com/pcbeingused333) and [@caarlos0](https://github.com/caarlos0)) ##### Other work - [`fb18621`](https://github.com/goreleaser/goreleaser/commit/fb186216f22b0dce0c9e95ee190a15dc5734afc5): chore(deps): update Go to 1.27.4 ([#7296](https://github.com/goreleaser/goreleaser/issues/7296)) ([@caarlos0](https://github.com/caarlos0)) - [`33e4013`](https://github.com/goreleaser/goreleaser/commit/33e401312a58d063e6e086dc54737db10d83a0bf): chore: auto-update generated files ([#7297](https://github.com/goreleaser/goreleaser/issues/7297)) ([@goreleaserbot](https://github.com/goreleaserbot)) - [`6eedb82`](https://github.com/goreleaser/goreleaser/commit/6eedb82fdcb9f6a40d7e065e4c249ac2bc00f50b): chore: auto-update generated files ([#7302](https://github.com/goreleaser/goreleaser/issues/7302)) ([@goreleaser](https://github.com/goreleaser)\[bot]) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.20.1...v2.20.2> ##### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). ##### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> ### [`v2.20.1`](https://github.com/goreleaser/goreleaser/releases/tag/v2.20.1) [Compare Source](https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1) ##### Announcement Read the official announcement: [Announcing GoReleaser v2.20](https://goreleaser.com/blog/goreleaser-v2.20/). ##### Changelog ##### Security updates - [`0b1b1ff`](https://github.com/goreleaser/goreleaser/commit/0b1b1fff41ab7113cdb6858ac45a1cf7f9bebc92): sec(git): redact URL credentials from diagnostics ([#7294](https://github.com/goreleaser/goreleaser/issues/7294)) ([@caarlos0](https://github.com/caarlos0)) ([GHSA-7qv4-9g3j-wvq8](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-7qv4-9g3j-wvq8)) - [`9a037e1`](https://github.com/goreleaser/goreleaser/commit/9a037e1fd427402b52c117f0de38614972b909bb): sec(srpm): reject RPM macros in package versions ([#7295](https://github.com/goreleaser/goreleaser/issues/7295)) ([@caarlos0](https://github.com/caarlos0)) ([GHSA-rjp9-h7gp-wr7q](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-rjp9-h7gp-wr7q)) - [`fb9617b`](https://github.com/goreleaser/goreleaser/commit/fb9617b200efc33bb7fa63b5a2c005949fc5d566): sec: redact hook and chocolatey secrets from logs ([#7293](https://github.com/goreleaser/goreleaser/issues/7293)) ([@caarlos0](https://github.com/caarlos0)) ([GHSA-gvxm-cvj4-qwvp](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-gvxm-cvj4-qwvp)) ##### Bug fixes - [`0946e5e`](https://github.com/goreleaser/goreleaser/commit/0946e5ed0111de64e577d16f6802e755c956e366): fix(aur): install every binary of the archive in the default package ([#7284](https://github.com/goreleaser/goreleaser/issues/7284)) ([@lbarrosby](https://github.com/lbarrosby)) - [`79c8d68`](https://github.com/goreleaser/goreleaser/commit/79c8d685b968bb083c73c2ed72ac8ede54d2192d): fix(client): defer SSH private-key expansion until publishing ([#7273](https://github.com/goreleaser/goreleaser/issues/7273)) ([@caarlos0](https://github.com/caarlos0)) - [`e46cd64`](https://github.com/goreleaser/goreleaser/commit/e46cd64808b1fde7d770b2ec64b80f052560c943): fix(docs): remove duplicate prebuilt redirects ([@caarlos0](https://github.com/caarlos0)) - [`5f422b1`](https://github.com/goreleaser/goreleaser/commit/5f422b18d5245cbece678da34eefdb542e0a08f6): fix(ko): accept '..' as main path ([#7279](https://github.com/goreleaser/goreleaser/issues/7279)) ([@mrueg](https://github.com/mrueg)) - [`a8f1c1e`](https://github.com/goreleaser/goreleaser/commit/a8f1c1ec8f3991588f8c41abf22eb5c80aeb740c): fix(ko): prefer remote base images and don't cache failed lookups ([#7275](https://github.com/goreleaser/goreleaser/issues/7275)) ([@mrueg](https://github.com/mrueg)) - [`3432e8d`](https://github.com/goreleaser/goreleaser/commit/3432e8d530ceeabf38edf26b5399006baad9f4e2): fix(mcp): retry publish when package version is not yet visible ([#7283](https://github.com/goreleaser/goreleaser/issues/7283)) ([@santhiprakash](https://github.com/santhiprakash)) - [`119f88f`](https://github.com/goreleaser/goreleaser/commit/119f88f695dc34e4b6f04c34e22005955d5675f8): refactor(ko): simplify template handling ([#7277](https://github.com/goreleaser/goreleaser/issues/7277)) ([@mrueg](https://github.com/mrueg)) ##### Documentation updates - [`3286c23`](https://github.com/goreleaser/goreleaser/commit/3286c23e755afa57959c32dda751a8b169736d97): docs: .ArtifactPath is not always an absolute path ([#7289](https://github.com/goreleaser/goreleaser/issues/7289)) ([@ZainnQureshii](https://github.com/ZainnQureshii)) ##### Other work - [`ed8efe6`](https://github.com/goreleaser/goreleaser/commit/ed8efe6a52def7b44443e0779021c3439b24ca5b): chore: auto-update generated files ([#7274](https://github.com/goreleaser/goreleaser/issues/7274)) ([@goreleaserbot](https://github.com/goreleaserbot)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1> ##### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). ##### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-11-11 03:08:03 +01:00

volker.raschek was assigned by CSRBot

2026-11-12 09:11:41 +01:00

CSRBot added 1 commit 2026-11-12 18:04:24 +01:00

chore(deps): update dependency goreleaser/goreleaser to v2.20.2

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 55s

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 25s

Details

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 18s

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 25s

Details

Lint Markdown files / Run markdown linter (pull_request) Successful in 6s

Details

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 2m5s

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 1m0s

Details

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 30s

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 1m1s

Details

c47771e8d6

CSRBot force-pushed renovate/goreleaser-goreleaser-2.x from 652562e2c5 to c47771e8d6

2026-11-12 18:04:24 +01:00

Compare

CSRBot changed title from ~~chore(deps): update dependency goreleaser/goreleaser to v2.20.1~~ to chore(deps): update dependency goreleaser/goreleaser to v2.20.2

2026-11-12 18:04:24 +01:00

CSRBot merged commit 9b24f82d5d into master

2026-11-12 18:19:23 +01:00

CSRBot deleted branch renovate/goreleaser-goreleaser-2.x

2026-11-12 18:19:23 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/dcmerge#237