chore(deps): update dependency goreleaser/goreleaser to v2.20.1 #135

2026-11-11T03:05:05+01:00

CSRBot commented

2026-11-11 03:05:05 +01:00

This PR contains the following updates:

Package	Type	Update	Change
goreleaser/goreleaser		patch	`v2.20.0` → `v2.20.1`
goreleaser/goreleaser	uses-with	patch	`v2.20.0` → `v2.20.1`

Release Notes

goreleaser/goreleaser (goreleaser/goreleaser)

`v2.20.1`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Changelog

Security updates

0b1b1ff: sec(git): redact URL credentials from diagnostics (#7294) (@caarlos0) (GHSA-7qv4-9g3j-wvq8)
9a037e1: sec(srpm): reject RPM macros in package versions (#7295) (@caarlos0) (GHSA-rjp9-h7gp-wr7q)
fb9617b: sec: redact hook and chocolatey secrets from logs (#7293) (@caarlos0) (GHSA-gvxm-cvj4-qwvp)

Bug fixes

0946e5e: fix(aur): install every binary of the archive in the default package (#7284) (@lbarrosby)
79c8d68: fix(client): defer SSH private-key expansion until publishing (#7273) (@caarlos0)
e46cd64: fix(docs): remove duplicate prebuilt redirects (@caarlos0)
5f422b1: fix(ko): accept '..' as main path (#7279) (@mrueg)
a8f1c1e: fix(ko): prefer remote base images and don't cache failed lookups (#7275) (@mrueg)
3432e8d: fix(mcp): retry publish when package version is not yet visible (#7283) (@santhiprakash)
119f88f: refactor(ko): simplify template handling (#7277) (@mrueg)

Documentation updates

3286c23: docs: .ArtifactPath is not always an absolute path (#7289) (@ZainnQureshii)

Other work

ed8efe6: chore: auto-update generated files (#7274) (@goreleaserbot)

Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.
Reach out on Discord, Twitter, and Telegram!

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | | patch | `v2.20.0` → `v2.20.1` | | [goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | uses-with | patch | `v2.20.0` → `v2.20.1` | --- ### Release Notes <details> <summary>goreleaser/goreleaser (goreleaser/goreleaser)</summary> ### [`v2.20.1`](https://github.com/goreleaser/goreleaser/releases/tag/v2.20.1) [Compare Source](https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1) ##### Announcement Read the official announcement: [Announcing GoReleaser v2.20](https://goreleaser.com/blog/goreleaser-v2.20/). ##### Changelog ##### Security updates - [`0b1b1ff`](https://github.com/goreleaser/goreleaser/commit/0b1b1fff41ab7113cdb6858ac45a1cf7f9bebc92): sec(git): redact URL credentials from diagnostics ([#7294](https://github.com/goreleaser/goreleaser/issues/7294)) ([@caarlos0](https://github.com/caarlos0)) ([GHSA-7qv4-9g3j-wvq8](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-7qv4-9g3j-wvq8)) - [`9a037e1`](https://github.com/goreleaser/goreleaser/commit/9a037e1fd427402b52c117f0de38614972b909bb): sec(srpm): reject RPM macros in package versions ([#7295](https://github.com/goreleaser/goreleaser/issues/7295)) ([@caarlos0](https://github.com/caarlos0)) ([GHSA-rjp9-h7gp-wr7q](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-rjp9-h7gp-wr7q)) - [`fb9617b`](https://github.com/goreleaser/goreleaser/commit/fb9617b200efc33bb7fa63b5a2c005949fc5d566): sec: redact hook and chocolatey secrets from logs ([#7293](https://github.com/goreleaser/goreleaser/issues/7293)) ([@caarlos0](https://github.com/caarlos0)) ([GHSA-gvxm-cvj4-qwvp](https://github.com/goreleaser/goreleaser/security/advisories/GHSA-gvxm-cvj4-qwvp)) ##### Bug fixes - [`0946e5e`](https://github.com/goreleaser/goreleaser/commit/0946e5ed0111de64e577d16f6802e755c956e366): fix(aur): install every binary of the archive in the default package ([#7284](https://github.com/goreleaser/goreleaser/issues/7284)) ([@lbarrosby](https://github.com/lbarrosby)) - [`79c8d68`](https://github.com/goreleaser/goreleaser/commit/79c8d685b968bb083c73c2ed72ac8ede54d2192d): fix(client): defer SSH private-key expansion until publishing ([#7273](https://github.com/goreleaser/goreleaser/issues/7273)) ([@caarlos0](https://github.com/caarlos0)) - [`e46cd64`](https://github.com/goreleaser/goreleaser/commit/e46cd64808b1fde7d770b2ec64b80f052560c943): fix(docs): remove duplicate prebuilt redirects ([@caarlos0](https://github.com/caarlos0)) - [`5f422b1`](https://github.com/goreleaser/goreleaser/commit/5f422b18d5245cbece678da34eefdb542e0a08f6): fix(ko): accept '..' as main path ([#7279](https://github.com/goreleaser/goreleaser/issues/7279)) ([@mrueg](https://github.com/mrueg)) - [`a8f1c1e`](https://github.com/goreleaser/goreleaser/commit/a8f1c1ec8f3991588f8c41abf22eb5c80aeb740c): fix(ko): prefer remote base images and don't cache failed lookups ([#7275](https://github.com/goreleaser/goreleaser/issues/7275)) ([@mrueg](https://github.com/mrueg)) - [`3432e8d`](https://github.com/goreleaser/goreleaser/commit/3432e8d530ceeabf38edf26b5399006baad9f4e2): fix(mcp): retry publish when package version is not yet visible ([#7283](https://github.com/goreleaser/goreleaser/issues/7283)) ([@santhiprakash](https://github.com/santhiprakash)) - [`119f88f`](https://github.com/goreleaser/goreleaser/commit/119f88f695dc34e4b6f04c34e22005955d5675f8): refactor(ko): simplify template handling ([#7277](https://github.com/goreleaser/goreleaser/issues/7277)) ([@mrueg](https://github.com/mrueg)) ##### Documentation updates - [`3286c23`](https://github.com/goreleaser/goreleaser/commit/3286c23e755afa57959c32dda751a8b169736d97): docs: .ArtifactPath is not always an absolute path ([#7289](https://github.com/goreleaser/goreleaser/issues/7289)) ([@ZainnQureshii](https://github.com/ZainnQureshii)) ##### Other work - [`ed8efe6`](https://github.com/goreleaser/goreleaser/commit/ed8efe6a52def7b44443e0779021c3439b24ca5b): chore: auto-update generated files ([#7274](https://github.com/goreleaser/goreleaser/issues/7274)) ([@goreleaserbot](https://github.com/goreleaserbot)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.20.0...v2.20.1> ##### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). ##### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6), [Twitter](https://twitter.com/goreleaser), and [Telegram](https://t.me/goreleasernews)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

CSRBot added 1 commit 2026-11-11 03:05:05 +01:00

chore(deps): update dependency goreleaser/goreleaser to v2.20.1

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Waiting to run

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Waiting to run

Details

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 25s

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 40s

Details

Lint Markdown files / Run markdown linter (pull_request) Successful in 11s

Details

cb5b2d96ab

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-11-11 03:05:07 +01:00

Some checks are pending

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Waiting to run

Required

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Waiting to run

Required

Details

Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 25s

Required

Details

Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 40s

Required

Details

Lint Markdown files / Run markdown linter (pull_request) Successful in 11s

Required

Details

Some required checks are missing.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/goreleaser-goreleaser-2.x:renovate/goreleaser-goreleaser-2.x

git checkout renovate/goreleaser-goreleaser-2.x

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/getpsrc#135