chore(deps): update github actions

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.0 → v6.0.3
actions/setup-go	action	minor	v6.0.0 → v6.4.0
docker/login-action	action	minor	v4.0.0 → v4.2.0
golangci/golangci-lint		minor	v2.5.0 → v2.12.2
golangci/golangci-lint	uses-with	minor	v2.5.0 → v2.12.2
golangci/golangci-lint-action	action	minor	v9.0.0 → v9.2.1
goreleaser/goreleaser		minor	v2.12.7 → v2.16.0
goreleaser/goreleaser-action	action	minor	v7.0.0 → v7.2.2

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

actions/setup-go (actions/setup-go)

v6.4.0

Compare Source

What's Changed

Enhancement

• Add go-download-base-url input for custom Go distributions by @​gdams in #​721

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​727

Documentation update

• Rearrange README.md, add advanced-usage.md by @​priyagupta108 in #​724
• Fix Microsoft build of Go link by @​gdams in #​734

New Contributors

• @​gdams made their first contribution in #​721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

Compare Source

What's Changed

• Update default Go module caching to use go.mod by @​priyagupta108 in #​705
• Fix golang download url to go.dev by @​178inaba in #​469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

Compare Source

What's Changed

Enhancements

• Example for restore-only cache in documentation by @​aparnajyothi-y in #​696
• Update Node.js version in action.yml by @​ccoVeille in #​691
• Documentation update of actions/checkout by @​deining in #​683

Dependency updates

• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot in #​682
• Upgrade @​actions/cache to v5 by @​salmanmkc in #​695
• Upgrade actions/checkout from 5 to 6 by @​dependabot in #​686
• Upgrade qs from 6.14.0 to 6.14.1 by @​dependabot in #​703

New Contributors

• @​ccoVeille made their first contribution in #​691
• @​deining made their first contribution in #​683

Full Changelog: actions/setup-go@v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancements

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​nicholasngai in #​665
• Add support for .tool-versions file and update workflow by @​priya-kinthali in #​673
• Add comprehensive breaking changes documentation for v6 by @​mahabaleshwars in #​674

Dependency updates

• Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @​dependabot in #​617
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot in #​641
• Upgrade semver and @​types/semver by @​dependabot in #​652

New Contributors

• @​nicholasngai made their first contribution in #​665
• @​priya-kinthali made their first contribution in #​673
• @​mahabaleshwars made their first contribution in #​674

Full Changelog: actions/setup-go@v6...v6.1.0

docker/login-action (docker/login-action)

v4.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in #​960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in #​970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #​993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #​963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #​961
• Bump postcss from 8.5.6 to 8.5.10 in #​979
• Bump tar from 6.2.1 to 7.5.15 in #​991
• Bump vite from 7.3.1 to 7.3.3 in #​986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

• Fix scoped Docker Hub cleanup path when registry is omitted by @​crazy-max in #​945
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1020.0 in #​930
• Bump @​docker/actions-toolkit from 0.77.0 to 0.86.0 in #​932 #​936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #​942
• Bump flatted from 3.3.3 to 3.4.2 in #​944
• Bump glob from 10.3.12 to 10.5.0 in #​940
• Bump handlebars from 4.7.8 to 4.7.9 in #​949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #​937
• Bump lodash from 4.17.23 to 4.18.1 in #​958
• Bump minimatch from 3.1.2 to 3.1.5 in #​941
• Bump picomatch from 4.0.3 to 4.0.4 in #​948
• Bump undici from 6.23.0 to 6.24.1 in #​938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

golangci/golangci-lint (golangci/golangci-lint)

v2.12.2

Compare Source

Released on 2026-05-06

1. Linters bug fixes
   • gomodguard_v2: fix blocked configuration
   • gomodguard_v2: from 2.1.0 to 2.1.3
   • iface: from 1.4.1 to 1.4.2

v2.12.1

Compare Source

Released on 2026-05-01

1. Linters bug fixes
   • gomodguard_v2: fix panic with migration suggestion
2. Misc.
   • fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Compare Source

Released on 2026-05-01

1. New linters
   • Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter
2. Linters new features or changes
   • dupl: from f665c8d to c99c5cf (extended detection)
   • funcorder: from 0.5.0 to 0.6.0 (new option: function)
   • goconst: add an option to ignore strings from tests
   • goconst: from 1.8.2 to 1.10.0 (extended detection)
   • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
   • gosec: from 619ce21 to 2.26.1 (new checks: G124, G708, G709, G710)
   • govet: add inline analyzer
   • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
   • paralleltest: expose checkcleanup option
   • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
   • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
3. Linters bug fixes
   • forbidigo: from 2.3.0 to 2.3.1
   • godot: from 1.5.4 to 1.5.6
   • govet-modernize: from 0.43.0 to 0.44.0
   • ireturn: from 0.4.0 to 0.4.1
   • rowserrcheck: from 1.1.1 to c5f79b8
4. Misc.
   • Decrease cache entropy
   • Embed the JSON schema in the binary
   • Filter env vars when cloning the repository with the custom command

v2.11.4

Compare Source

Released on 2026-03-22

1. Linters bug fixes
   • govet-modernize: from 0.42.0 to 0.43.0
   • noctx: from 0.5.0 to 0.5.1
   • sqlclosecheck: from 0.5.1 to 0.6.0

v2.11.3

Compare Source

Released on 2026-03-10

1. Linters bug fixes
   • gosec: from v2.24.7 to 619ce21

v2.11.2

Compare Source

Released on 2026-03-07

1. Fixes
   • fmt: fix error when using the fmt command with explicit paths.

v2.11.1

Compare Source

Released on 2026-03-06

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

v2.11.0

Compare Source

Released on 2026-03-06

1. Linters new features or changes
   • errcheck: from 1.9.0 to 1.10.0 (exclude crypto/rand.Read by default)
   • gosec: from 2.23.0 to 2.24.6 (new rules: G113, G118, G119, G120, G121, G122, G123, G408, G707)
   • noctx: from 0.4.0 to 0.5.0 (new detection: httptest.NewRequestWithContext)
   • prealloc: from 1.0.2 to 1.1.0
   • revive: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from var-naming to a new rule package-naming)
2. Linters bug fixes
   • gocognit: from 1.2.0 to 1.2.1
   • gosec: from 2.24.6 to 2.24.7
   • unqueryvet: from 1.5.3 to 1.5.4

v2.10.1

Compare Source

Released on 2026-02-17

1. Fixes
   • buildssa panic

v2.10.0

Compare Source

Released on 2026-02-17

1. Linters new features or changes
   • ginkgolinter: from 0.22.0 to 0.23.0
   • gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
   • staticcheck: from 0.6.1 to 0.7.0
2. Linters bug fixes
   • godoclint: from 0.11.1 to 0.11.2

v2.9.0

Compare Source

Released on 2026-02-10

1. Enhancements
   • 🎉 go1.26 support
2. Linters new features or changes
   • arangolint: from 0.3.1 to 0.4.0 (new rule: detect potential query injections)
   • ginkgolinter: from 0.21.2 to 0.22.0 (support for wrappers)
   • golines: from 0.14.0 to 0.15.0
   • misspell: from 0.7.0 to 0.8.0
   • unqueryvet: from 1.4.0 to 1.5.3 (new options: check-n1, check-sql-injection, check-tx-leaks, allow, custom-rules)
   • wsl: from 5.3.0 to 5.6.0 (new rule: after-block)
3. Linters bug fixes
   • modernize: from 0.41.0 to 0.42.0
   • prealloc: from 1.0.1 to 1.0.2
   • protogetter: from 0.3.18 to 0.3.20
4. Misc.
   • Log information about files when configuration verification
   • Emit an error when no linters enabled
   • Do not collect VCS information when loading code

v2.8.0

Compare Source

Released on 2026-01-07

1. Linters new features or changes
   • godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
   • golines: from 442fd00 to 0.14.0
   • gomoddirectives: from 0.7.1 to 0.8.0
   • gosec: from daccba6 to 2.22.11 (new rule: G116)
   • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
   • prealloc: from 1.0.0 to 1.0.1 (message changes)
   • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
2. Linters bug fixes
   • go-critic: from 0.14.2 to 0.14.3
   • go-errorlint: from 1.8.0 to 1.9.0
   • govet: from 0.39.0 to 0.40.0
   • protogetter: from 0.3.17 to 0.3.18
   • revive: add missing enable-default-rules setting
3. Documentation
   • docs: split installation page

v2.7.2

Compare Source

Released on 2025-12-07

1. Linter bug fixes
   • gosec: from 2.22.10 to daccba6

v2.7.1

Compare Source

Released on 2025-12-04

1. Linter bug fixes
   • modernize: disable stringscut analyzer

v2.7.0

Compare Source

1. Bug fixes
   • fix: clone args used by custom command
2. Linters new features or changes
   • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
   • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
   • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
   • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
3. Linters bug fixes
   • perfsprint: from 0.10.0 to 0.10.1
   • wrapcheck: from 2.11.0 to 2.12.0
   • godoc-lint: from 0.10.1 to 0.10.2
4. Misc.
   • Add some flags to the custom command
5. Documentation
   • docs: split changelog v1 and v2

v2.6.2

Compare Source

Released on 2025-11-14

1. Bug fixes
   • fmt command with symlinks
   • use file depending on build configuration to invalidate cache
2. Linters bug fixes
   • testableexamples: from 1.0.0 to 1.0.1
   • testpackage: from 1.1.1 to 1.1.2

v2.6.1

Compare Source

v2.6.0

Compare Source

1. New linters
   • Add modernize analyzer suite
2. Linters new features or changes
   • arangolint: from 0.2.0 to 0.3.1
   • dupword: from 0.1.6 to 0.1.7 (new option comments-only)
   • go-critic: from 0.13.0 to 0.14.0 (new rules/checkers: zeroByteRepeat, dupOption)
   • gofumpt: from 0.9.1 to 0.9.2 ("clothe" naked returns is now controlled by the extra-rules option)
   • perfsprint: from 0.9.1 to 0.10.0 (new options: concat-loop, loop-other-ops)
   • wsl: from 5.2.0 to 5.3.0
3. Linters bug fixes
   • dupword: from 0.1.6 to 0.1.7
   • durationcheck: from 0.0.10 to 0.0.11
   • exptostd: from 0.4.4 to 0.4.5
   • fatcontext: from 0.8.1 to 0.9.0
   • forbidigo: from 2.1.0 to 2.3.0
   • ginkgolinter: from 0.21.0 to 0.21.2
   • godoc-lint: from 0.10.0 to 0.10.1
   • gomoddirectives: from 0.7.0 to 0.7.1
   • gosec: from 2.22.8 to 2.22.10
   • makezero: from 2.0.1 to 2.1.0
   • nilerr: from 0.1.1 to 0.1.2
   • paralleltest: from 1.0.14 to 1.0.15
   • protogetter: from 0.3.16 to 0.3.17
   • unparam: from 0df0534 to 5beb8c8
4. Misc.
   • fix: ignore some files to hash the version for custom build

golangci/golangci-lint-action (golangci/golangci-lint-action)

v9.2.1

Compare Source

What's Changed

IMPORTANT: this is the first immutable release.

Changes

• chore: improve workflows by @​ldez in #​1394

Dependencies

• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1325
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1326
• build(deps): bump the dependencies group with 4 updates by @​dependabot[bot] in #​1327
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1328
• build(deps): bump @​types/node from 25.0.2 to 25.0.3 in the dependencies group by @​dependabot[bot] in #​1329
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1330
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1332
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1333
• build(deps): bump the dependencies group with 6 updates by @​dependabot[bot] in #​1334
• build(deps-dev): bump the dev-dependencies group with 4 updates by @​dependabot[bot] in #​1335
• build(deps): bump the dependencies group with 2 updates by @​dependabot[bot] in #​1336
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1337
• build(deps): bump @​types/node from 25.0.9 to 25.0.10 in the dependencies group by @​dependabot[bot] in #​1338
• build(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 by @​dependabot[bot] in #​1339
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1340
• build(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​1344
• build(deps): bump fast-xml-parser from 5.3.4 to 5.3.6 by @​dependabot[bot] in #​1346
• build(deps): bump minimatch by @​dependabot[bot] in #​1348
• build(deps): bump minimatch from 3.1.3 to 3.1.5 by @​dependabot[bot] in #​1350
• build(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 by @​dependabot[bot] in #​1351
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @​dependabot[bot] in #​1357
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @​dependabot[bot] in #​1358
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @​dependabot[bot] in #​1359
• build(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in #​1364
• build(deps): bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​1365
• build(deps): bump brace-expansion by @​dependabot[bot] in #​1370
• build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates by @​ldez in #​1374
• build(deps): bump github/codeql-action from 4 to 4.35.2 by @​dependabot[bot] in #​1384
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by @​dependabot[bot] in #​1386
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @​dependabot[bot] in #​1389
• build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @​dependabot[bot] in #​1391

Full Changelog: golangci/golangci-lint-action@v9.2.0...v9.2.1

v9.2.0

Compare Source

What's Changed

Changes

• feat: add version-file option by @​ldez in #​1320
• chore: move samples into fixtures by @​ldez in #​1321

Dependencies

• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1317
• build(deps): bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​1318
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1323
• build(deps): bump yaml from 2.8.1 to 2.8.2 in the dependencies group by @​dependabot[bot] in #​1324

Full Changelog: golangci/golangci-lint-action@v9.1.0...v9.2.0

v9.1.0

Compare Source

What's Changed

Changes

• feat: automatic module directories by @​ldez in #​1315

Documentation

• docs: organize options by @​ldez in #​1314

Dependencies

• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1307
• build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​1309
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1310
• build(deps): bump the dependencies group with 2 updates by @​dependabot[bot] in #​1311

Full Changelog: golangci/golangci-lint-action@v9.0.0...v9.1.0

goreleaser/goreleaser (goreleaser/goreleaser)

v2.16.0

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.16.

Changelog

New Features

• bb532b6: feat(archive): xz format (#​6520) (@​jaredallard and @​caarlos0)
• 9500ead: feat(builders): add node sea support (#​6579) (@​caarlos0 and @​vedantmgoyal9)
• 851f8f9: feat(deps): update docker in docker image (@​caarlos0)
• 8da70bc: feat(dockers_v2): baseimage and baseimagedigest template variables (#​6625) (@​caarlos0)
• 9e629ad: feat(dockers_v2): pre/post hooks (#​6634) (@​caarlos0)
• e8d5686: feat(dockers_v2): remove experimental warn (@​caarlos0)
• d5c8e4f: feat(dockers_v2): set extra.platforms in the artifact (#​6628) (@​caarlos0)
• 868767b: feat(nix): support meta.mainProgram (#​6627) (@​caarlos0)
• f72cf9d: feat: go1.26.3 (@​caarlos0)
• a4be92b: feat: proper deprecate brews (@​caarlos0)

Bug fixes

• bb9062f: fix(cask): emit generate_completions_from_executable after postflight (#​6594) (@​caarlos0)
• 6ecba31: fix(github): preserve prerelease on publish (#​6591) (@​caarlos0)
• 2e17678: fix(github): preserve prerelease publish fields (@​caarlos0)
• 17315a5: fix(github): remove author lookup by email (#​6601) (@​caarlos0)
• e696cf8: fix(srpm): set format and extension in extra (#​6623) (@​caarlos0)
• 9fd33f5: fix(xz): rm unused field (@​caarlos0)
• 306e37d: fix: change keyword color (@​caarlos0)
• dd02be1: fix: handle secondary rate limits on github (#​6630) (@​caarlos0)
• 49025ca: fix: run script resolves nightly tags (@​caarlos0)
• bba909e: fix: webhook error handling improvements (@​caarlos0)
• 9f2811b: fix: wrong goreleaser URL (#​6584) (@​ldez)
• 0944b0e: fix:linkedin error handling improvements (@​caarlos0)

Documentation updates

• 9081224: docs(actions): note immutable nightly resolution (#​6590) (@​caarlos0)
• 6c2d9e0: docs: add RWX CI guide (#​6597) (@​robinaugh)
• 3514d8d: docs: add slack to users list (#​6605) (@​zimeg)
• 7b6496f: docs: better install page (#​6631) (@​caarlos0)
• 33dfa25: docs: cleanup install (@​caarlos0)
• be689af: docs: dont include nightlies in releases.json (@​caarlos0)
• 6bc06bf: docs: fix invalid 'neq' template function in pkg example (#​6604) (@​SAY-5)
• f7b59d4: docs: fix logos (@​caarlos0)
• ebc8484: docs: fix rendering issue inside tabs (@​caarlos0)
• c6c834c: docs: improve install page (@​caarlos0)
• d05aaa0: docs: missing required version (@​caarlos0)
• b1e5b9a: docs: parallax effect on homepage (#​6596) (@​caarlos0)
• 6e7c917: docs: rm old docs instructions (@​caarlos0)
• dd37302: docs: updat (@​caarlos0)
• 8b21145: docs: update link (@​caarlos0)
• 8976559: docs: update users.md (@​caarlos0)
• bd4e1a5: docs: updates (@​caarlos0)
• b259380: docs: updates (@​caarlos0)

Other work

• 22004f4: chore(www): update hextra (@​caarlos0)
• 0750c1b: chore: fmt (@​caarlos0)
• 61623ca: chore: gofumpt (@​caarlos0)
• 231e274: chore: remove unused struct (@​caarlos0)
• d76fb40: chore: skip one more docker test on windows (@​caarlos0)
• 6fd4db6: chore: update golang.org/x/ (@​caarlos0)

Full Changelog: goreleaser/goreleaser@v2.15.4...v2.16.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord, Twitter, and Telegram!

v2.15.4

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.15.

Changelog

Bug fixes

• d077fe1: fix(build): allow explicit binary with ellipsis when single main (@​caarlos0)
• 3140abb: fix(build): set per-binary artifact IDs for ./... builds (@​caarlos0 and @​Copilot)
• eb11599: fix(deps): quill git-lfs (#​6577) (@​caarlos0)
• 343700b: fix(docker): install syft, cosign, docker, and docker-buildx from upstream releases (#​6576) (@​caarlos0, @​kevinburkesegment, and @​Copilot)
• 87b542b: fix(homebrew_cask): sha256 before url in per-arch blocks (@​kkd16)
• e35ff62: fix(rust): add arm- and armv7-unknown-linux-musleabihf build targets (#​6581) (@​mozzieongit)
• 03735a4: fix(rust): grouping of different arm version when creating archives (#​6582) (@​caarlos0)
• 1f86232: fix: gen-nix-licenses script (@​caarlos0)

Documentation updates

• 0136377: docs: clarify template vars (@​caarlos0 and @​SAY-5)
• b026ca9: docs: fix image URLs (@​caarlos0)
• fcc53cb: docs: fix image urls (#​6578) (@​caarlos0)
• 24df9ce: docs: fix include, prefix shortcodes to avoid collisions (@​caarlos0)
• 5b47f38: docs: fix version link when full version (@​caarlos0)

Full Changelog: goreleaser/goreleaser@v2.15.3...v2.15.4

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord, Twitter, and Telegram!

v2.15.3

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.15.

Changelog

Security updates

• d1cdbb2: sec: prevent secret leaks in logs and improve redaction (@​caarlos0)

Bug fixes

• cba5b9f: fix(aur,krew,aursources): apply template to SkipUpload before checking its value (@​caarlos0)
• 4d1924d: fix(blob): evaluate template in provider before checking for S3 ACL support (@​caarlos0)
• 38577c6: fix(build): fix broken backtick and missing GOMIPS64 in --single-target help text (@​caarlos0)
• ff02d82: fix(build): prevent panic when command has single element (@​caarlos0)
• 2a10e3e: fix(bun): show original target in parse error, not trimmed version (@​caarlos0)
• 88daaf3: fix(changelog): prevent panic on negative abbrev values other than -1 (@​caarlos0)
• 6c7798f: fix(changelog): use %t instead of %b for bool in debug log format (@​caarlos0)
• f39c233: fix(checksums): prevent panic in sort when line has no double-space (@​caarlos0)
• f8e7ec9: fix(client): off-by-one in truncateReleaseBody (#​6534) (@​caarlos0)
• d788340: fix(docker): check evaluated Dockerfile template for emptiness, not raw template (@​caarlos0)
• 921e6cb: fix(docker): fix "did you mean?" suggestion always suggesting the input name itself (@​caarlos0)
• 9e9f87c: fix(docker): prevent panic in parsePlatform with missing arch (@​caarlos0)
• a0875e5: fix(docker): remove duplicate WithOutput in error wrapping (@​caarlos0)
• e7a4afa: fix(dockers/v2): digest log (@​caarlos0)
• 4a9d25f: fix(gitea): fix misleading 'using master' log when default branch lookup fails (@​caarlos0)
• 1ca21f0: fix(github): nil-guard resp in updateRelease before accessing Header (@​caarlos0)
• ff9035a: fix(http): remove double-close of response body in executeHTTPRequest (@​caarlos0)
• 50a034d: fix(nfpm): show correct value in content mtime parse error (@​caarlos0)
• 206120a: fix(opencollective): handle errors, more tests ([#​6512](https://redirect.

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks