chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 (#337)

dependabot[bot] · web-flow · commit 017cc2d1909d · 2026-05-07T12:49:41.000+10:00
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 7.0.0 to 7.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's releases</a>.</em></p> <blockquote> <h2>v7.2.1</h2> <p>This fully removes the usage of the old <code>nightly</code> moving tag.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1">https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1</a></p> <h2>v7.2.0</h2> <h2>What's Changed</h2> <ul> <li>test: cover install across release eras by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/555">goreleaser/goreleaser-action#555</a></li> <li>feat: add <code>version-file</code> input by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/556">goreleaser/goreleaser-action#556</a></li> <li>feat: resolve nightly to latest vX.Y.Z--nightly release by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/558">goreleaser/goreleaser-action#558</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0">https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0</a></p> <h2>v7.1.0</h2> <h2>What's Changed</h2> <ul> <li>feat: verify release checksum and cosign signature by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/550">goreleaser/goreleaser-action#550</a></li> <li>docs: document cosign verification in README by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/553">goreleaser/goreleaser-action#553</a></li> <li>docs: Upgrade import GPG action version by <a href="https://github.com/flecno"><code>@​flecno</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/547">goreleaser/goreleaser-action#547</a></li> <li>ci: drop docker-bake in favor of plain npm by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/551">goreleaser/goreleaser-action#551</a></li> <li>ci: add release-major-tag workflow by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/552">goreleaser/goreleaser-action#552</a></li> <li>ci: drop pre-cosign-v3 goreleaser versions from tests by <a href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/554">goreleaser/goreleaser-action#554</a></li> <li>ci(deps): bump the actions group with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/543">goreleaser/goreleaser-action#543</a></li> <li>ci(deps): bump the actions group with 5 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/546">goreleaser/goreleaser-action#546</a></li> <li>chore(deps): bump undici from 6.23.0 to 6.24.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/545">goreleaser/goreleaser-action#545</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/flecno"><code>@​flecno</code></a> made their first contribution in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/547">goreleaser/goreleaser-action#547</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0">https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8"><code>1a80836</code></a> ci(nightly): pass GITHUB_TOKEN to nightly integration job</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/a71152e8274c84525d8835ba71448d64d2023702"><code>a71152e</code></a> refactor: drop legacy 'nightly' tag fallback</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/4c6ab561adb47e50c45ef534e2155934e91c40c1"><code>4c6ab56</code></a> feat: resolve nightly to latest vX.Y.Z-&lt;sha&gt;-nightly release (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/558">#558</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/4f96abf297f872baa17cd502a9b5ef0725fd1edc"><code>4f96abf</code></a> feat: add <code>version-file</code> input (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/556">#556</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/15fa2a96d4a23f516334bb340969ca4e9c82f0fa"><code>15fa2a9</code></a> test: cover install across release eras (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/555">#555</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c"><code>e24998b</code></a> ci: drop pre-cosign-v3 goreleaser versions from tests (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/554">#554</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/be2e8a39ba2f6daed623e98e8b6662f008cffc8d"><code>be2e8a3</code></a> docs: document cosign verification in README (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/553">#553</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/5e53f8eea2783e9a9b5963dafae20a7e5320618c"><code>5e53f8e</code></a> ci: add release-major-tag workflow (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/552">#552</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/4068afa2f0763491214b56d83686409cb4549b8c"><code>4068afa</code></a> build: drop docker-bake in favor of plain npm (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/551">#551</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/213ec80f5629fd53743a07c81b86deb4c540955f"><code>213ec80</code></a> docs: add CONTRIBUTING with pre-commit workflow</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/goreleaser-action/compare/ec59f474b9834571250b370d4735c50f8e2d1e29...1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=goreleaser/goreleaser-action&package-manager=github_actions&previous-version=7.0.0&new-version=7.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
+        uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
         with:
           version: latest
           args: release --clean
