goreleaser/goreleaser-action
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser-action synced 2026-06-29 23:27:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
505 Commits 8 Branches 67 Tags
7673f7fb5b203bc2f700660d08a8800a8c592b05
Commit Graph

59 Commits

Author SHA1 Message Date
Carlos Alexandro Becker 7673f7fb5b fix: accept nightly tags without 'v' prefix 
goreleaser-pro publishes nightly releases as e.g. 2.16.0-eaeb08c50-nightly
(no 'v' prefix). Make the nightly tag regex tolerate either form, and
split the integration tests so OSS asserts the legacy fallback while
Pro asserts the new <version>-<sha>-nightly format.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-26 15:32:45 -03:00
Carlos Alexandro Becker 482db5f7c3 feat: keep legacy 'nightly' tag working during transition 
Fall back to the moving 'nightly' tag when no immutable
vX.Y.Z-<sha>-nightly release is found, so the action keeps working
between this release and the goreleaser nightly switchover.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-26 15:27:03 -03:00
Carlos Alexandro Becker 6606af0cbb Merge remote-tracking branch 'origin/master' into nightly 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2026-04-26 15:26:28 -03:00
Carlos Alexandro Becker 4f96abf297 feat: add version-file input (#556) 
Resolves the GoReleaser version from a file. Currently supports the
asdf/mise `.tool-versions` format; resolved value takes precedence
over the `version` input.

  # .tool-versions
  goreleaser 2.13.0

  - uses: goreleaser/goreleaser-action@v7
    with:
      version-file: .tool-versions
      args: release --clean

Path is resolved relative to `workdir` unless absolute. Bare semvers
are auto-prefixed with `v`; constraint expressions and `latest` are
returned as-is. Multiple fallback versions per asdf convention are
accepted but only the first is used.

Refs #541
Closes #542

Co-authored-by: Anthony Couvreur <22034450+acouvreur@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-23 23:05:24 -03:00
Carlos Alexandro Becker 54268d5e7e feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release 
Query GitHub releases API to resolve the 'nightly' version input to the
latest immutable nightly tag, replacing the moving 'nightly' tag that is
being removed for supply-chain hardening.

Refs goreleaser/goreleaser#6550

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-23 00:48:06 -03:00
Carlos Alexandro Becker 4b462d3d1d feat: verify release checksum and cosign signature (#550) 
* feat: verify release checksum and cosign signature

Download checksums.txt for the release and verify the SHA-256 of the
downloaded archive against it. When cosign is available in PATH, also
download checksums.txt.sigstore.json and verify the signature against
the goreleaser/goreleaser-pro release workflow identity. Both steps
degrade gracefully (with a warning) when the corresponding artifacts
or tooling are missing.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* test: use install() for checksum e2e tests

Drop the http-client download helper from verifyChecksum integration
tests; call goreleaser.install() instead so the test exercises the
public API path and avoids duplicating download logic.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-18 14:34:46 -03:00
Carlos Alexandro Becker 9881cc5376 fix: use new static URL 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2026-03-22 23:43:18 -03:00
Carlos Alexandro Becker ec59f474b9 fix: yargs usage 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2026-02-09 09:21:42 -03:00
Carlos Alexandro Becker 78265e466a feat!: node 24, update deps, rm yarn, ESM (#533) 
* chore(deps): bump the npm group across 1 directory with 7 updates

Bumps the npm group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.11.1` | `2.0.2` |
| [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec) | `1.1.1` | `2.0.0` |
| [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `2.2.3` | `3.0.1` |
| [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) | `2.0.2` | `3.0.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` |
| [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.7.3` |
| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` |



Updates `@actions/core` from 1.11.1 to 2.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/exec` from 1.1.1 to 2.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec)

Updates `@actions/http-client` from 2.2.3 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)

Updates `@actions/tool-cache` from 2.0.2 to 3.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

Updates `semver` from 7.7.2 to 7.7.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.2...v7.7.3)

Updates `yargs` from 17.7.2 to 18.0.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yargs/yargs/compare/v17.7.2...v18.0.0)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@actions/exec"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@actions/http-client"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@actions/tool-cache"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: semver
  dependency-version: 7.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: yargs
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>

* refactor: remove yarn, update to node 24

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* chore: review

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: stable

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-29 21:22:39 -03:00
Carlos Alexandro Becker e435ccd777 feat: retry downloading releases json (#503) 
refs https://github.com/orgs/goreleaser/discussions/5954
 2025-08-06 22:28:41 -03:00
Carlos Alexandro Becker 9a6cd01b33 fix: do not get releases.json if version is specific (#502) 
closes #489
 2025-08-02 10:24:12 +02:00
haya14busa 0931acf1f7 fix: support .config directory for goreleaser config files (#500) 
* fix: support .config directory for goreleaser config files

Add support for .config/goreleaser.yaml and .config/goreleaser.yml
configuration files to match GoReleaser's official search order.

* run $ docker buildx bake build
 2025-07-04 18:16:46 +00:00
Carlos Alexandro Becker 842e7ccd3e feat: update for goreleaser v2.7 2025-02-10 23:38:58 -03:00
Carlos Alexandro Becker 18bbabc70c feat!: use "~> v2" as default (#463) 
* feat!: use "~> v2" as default

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: more changes

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* gen

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* docs: update

* docs: update

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-06-04 21:50:33 -03:00
Carlos Alexandro Becker f1dbd532c3 feat: lock this major version of the action to use '~> v1' as 'latest' (#461) 
* feat: warn about using 'latest'

* feat: use "~> v1" as latest

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* feat: default to "~> v1" instead of "latest"

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2024-05-10 13:30:10 -03:00
Carlos Alexandro Becker c7c9447c79 feat: support oss nightlies (#424) 
* feat: support oss nightlies

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* fix: test

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-08-09 13:57:58 -03:00
Carlos Alexandro Becker 336e29918d feat: support nightly (#419) 
* feat: support nightly

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* chore: nightly test

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

* chore: typo

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-06-12 09:16:56 -03:00
CrazyMax f424e9de13 chore: update yarn to 3.5.1 (#412) 
* chore: update yarn to 3.5.1

* chore: add plugin-interactive-tools yarn pkg

* chore: update dev dependencies

* chore: eslint fixes

* chore: update generated content

---------

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-05-07 16:13:08 +02:00
CrazyMax f82d6c1c34 fix: don't depend on the GitHub API to check release (#391) 
* fix: don't depend on the GitHub API to check release

* chore: update generated content

---------

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2023-01-30 14:11:41 +01:00
Carlos Alexandro Becker 9754a253a8 fix: use @action/github (#390) 
* fix: use @action/github

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* Update README.md

Co-authored-by: CrazyMax <github@crazymax.dev>

* Update action.yml

Co-authored-by: CrazyMax <github@crazymax.dev>

---------

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
Co-authored-by: CrazyMax <github@crazymax.dev>
 2023-01-27 23:22:07 -03:00
Carlos A Becker 66134d94a7 Merge remote-tracking branch 'origin/master' into flarco/master 
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-12-13 10:22:52 -03:00
Carlos Alexandro Becker 3b7d1ba946 feat!: remove auto-snapshot on dirty tag (#382) 
* feat!: remove auto-snapshot on dirty tag

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* feat!: remove the entire git thing

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: tests

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* test: fix

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: snapshto tests

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-12-13 10:18:53 -03:00
Carlos Alexandro Becker 23e0ed5919 fix: do not override GORELEASER_CURRENT_TAG (#370) 
* fix: do not override GORELEASER_CURRENT_TAG

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

* fix: build

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
 2022-12-13 09:52:49 -03:00
Fritz Larco b60ea886c6 improve install 2022-11-12 17:00:09 -03:00
Fritz Larco 4d25ab4fd4 Update goreleaser.ts 2022-11-12 14:52:30 -05:00
CrazyMax b508e2e3ef chore: remove workaround for setOutput (#374) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-10-16 04:33:00 +02:00
CrazyMax ff11ca24a9 fix: dist resolution from config file (#369) 
* ci: add job to check dist output from config

* fix: dist resolution from config file

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-08-26 18:29:38 +02:00
CrazyMax c25888f15f chore: update dev dependencies and workflow (#342) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-04-25 05:17:05 +02:00
CrazyMax b953231f81 fix: current tag not taken into account (#329) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-02-28 11:24:18 -03:00
CrazyMax c127c9be61 feat: add artifacts and metadata outputs (#327) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-02-27 20:01:51 +01:00
CrazyMax 39419c3fac refactor: setup context (#325) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2022-02-27 17:22:06 +01:00
Carlos Alexandro Becker 79d4afbba1 fix: should not force snapshot when nightly is set (#321) 
* fix: should not force snapshot when nightly is set

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>

* fix: build

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
 2022-01-14 17:50:06 +01:00
Carlos Alexandro Becker 5df302e5e9 fix: get darwin universal binary (#312) 
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
 2021-10-15 14:43:54 +02:00
CrazyMax 13b378d620 fix: support arch variant to download GoReleaser (#309) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2021-10-03 23:03:55 +02:00
CrazyMax bc087ef4b9 fix: platform detection v2 (#300) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2021-08-27 12:02:19 +02:00
CrazyMax f9141d00ae fix: platform detection (#299) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2021-08-26 19:23:54 +02:00
CrazyMax b59bff5dc3 refactor: use built-in getExecOutput (#292) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2021-06-10 03:02:52 +02:00
Carlos Alexandro Becker 70eb4e573c feat: support downloading goreleaser pro (#284) 2021-05-27 00:25:31 -03:00
CrazyMax 56f5b77f7f Do not overwrite GORELEASER_CURRENT_TAG if already declared (#260) 2020-12-02 16:50:57 +01:00
CrazyMax 09ce14113d fix: Set GORELEASER_CURRENT_TAG (#259) 
Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2020-11-30 00:00:15 +00:00
CrazyMax 3d57a20621 Add install-only test job and fix action.yml 2020-11-06 21:18:48 +01:00
Arunvel Sriram 7007251a74 feat: Add install-only option for using goreleaser in user scripts 2020-11-06 21:57:01 +05:30
CrazyMax 90d3577f6e fix: Use GITHUB_REF to retrieve tag before checking the most recent tag (#238) 
* fix: Use GITHUB_REF to retrieve tag before checking the most recent tag (#238)

* Update tests

* Check also tags sorted by creatordate for the current GITHUB_SHA

* fix: Check tags length

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2020-08-27 15:28:00 +00:00
CrazyMax 8708f57399 Fix workdir (#224) 2020-06-24 02:24:58 +02:00
Radek Simko 62b67a060c feat: implement (optional) semver parsing of version (#213) 2020-06-15 16:05:51 +00:00
CrazyMax bfee8df61e Mark args input as required 2020-05-10 16:19:42 +02:00
CrazyMax f3c3945401 Remove key input and use Import GPG GitHub Action instead 2020-05-10 16:02:05 +02:00
CrazyMax 6c7b10c265 feat: Use native GitHub Action tools to download assets and use GitHub API (#187) 
* Use native GitHub Action tools to download assets and use GitHub API
* Fix unexpected output when tag not found
* Use GitHub Action exec
* Add screenshot

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>
 2020-05-07 02:15:24 +02:00
CrazyMax 09847f1406 fix: Don't fail on getTag (#98) 2020-02-14 18:25:27 +01:00
CrazyMax e198786300 improvement: Review snapshot behavior (#95) 
* Improve git tag detection (#77)
* Only handle snapshot flag for release cmd (#94)
* Use core.info instead of console.log
* Update gitattributes
 2020-02-11 13:52:06 +01:00