Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 24, 2025

Bumps github.com/goreleaser/goreleaser/v2 from 2.12.2 to 2.13.1.

Release notes

Sourced from github.com/goreleaser/goreleaser/v2's releases.

v2.13.1

Announcement

Read the official announcement: Announcing GoReleaser v2.13.

Changelog

Security updates

  • 9d07987ccb4b7e49a59b2fd23318708541ff29e7: sec: update to go 1.25.5 (@​caarlos0)

Bug fixes

  • 694eec53d383cef635b9c29ee04308b171f09bdd: fix(github): improve create/update file (#6280) (@​caarlos0)
  • 311253b610d049e5abb8c7b21c84002e47939946: fix(ko): do not fail if docker daemon not available (@​caarlos0)
  • 3f07552ca421e670339686dbf1b6f2b368fc1b55: fix(mcp): its actually the committee mcp registry (#6283) (@​caarlos0)
  • 0b98d10daa5ad6959ce1506d3a2c2757bec33398: fix: lint (@​caarlos0)
  • 7d7986f072c05b96dc839d44a1632bf3196892c4: fix: update run script to new cosign signature check (@​caarlos0)

Documentation updates

  • 95b9db9ee9976939e8dc70206aef3c24142d8cc6: docs: announce v2.13 (#6270) (@​caarlos0)
  • 86368f777644664aeea7596b63f371a63ef3644d: docs: clarify deprecation policy (@​caarlos0)
  • c4fe18bf1a624187a3512d64817954e3a95bd8a1: docs: update sign.md (@​caarlos0)

Other work

  • 2ea7bc93749daeda802ccf596edd0084eaa565ec: chore: issue templates (@​caarlos0)
  • 4eb5b18b739d08da0b4426480cbec207e436d8c7: chore: issue templates (@​caarlos0)
  • 460ebca54853f2d536057b721cd9f92990498b69: chore: update issue templates (@​caarlos0)
  • 6914329ccebabf730d3827783d6cb7ceba414fd7: ci(deps): bump the actions group with 4 updates (#6287) (@​dependabot[bot])
  • 1e190b414026e40670d6ad78aa4de6127e8bf287: ci(sec): fix sbom job (@​caarlos0)
  • 1072df26287a04f74bda264ab51338b51b2d1262: ci(sec): improve sbom scan job (@​caarlos0)
  • bfd04a064174cfe74c93120e702b406308cbdba8: ci(sec): periodically scan last release sboms (#6281) (@​caarlos0)

Full Changelog: goreleaser/goreleaser@v2.13.0...v2.13.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them? You can sponsor, get a Pro License or contribute with code.

Where to go next?

v2.13.0

Announcement

Read the official announcement: Announcing GoReleaser v2.13.

Changelog

... (truncated)

Commits
  • 7069055 chore: auto-update generated files
  • 0b98d10 fix: lint
  • c4fe18b docs: update sign.md
  • 2ea7bc9 chore: issue templates
  • 4eb5b18 chore: issue templates
  • 460ebca chore: update issue templates
  • 311253b fix(ko): do not fail if docker daemon not available
  • 04da593 chore(deps): update 6 dependencies
  • 8c33d25 chore(deps): bump golang from 1.25.4-alpine to 1.25.5-alpine in the docker gr...
  • 6914329 ci(deps): bump the actions group with 4 updates (#6287)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @rhacs-bot.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/goreleaser/goreleaser/v2](https://github.com/goreleaser/goreleaser) from 2.12.2 to 2.13.1.
- [Release notes](https://github.com/goreleaser/goreleaser/releases)
- [Commits](goreleaser/goreleaser@v2.12.2...v2.13.1)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/goreleaser/v2
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 24, 2025
@dependabot dependabot bot requested a review from rhybrillou as a code owner December 24, 2025 16:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 24, 2025
Copy link

@rhacs-bot rhacs-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot squash and merge

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 24, 2025

Beginning January 27, 2026, Dependabot will no longer support the @dependabot squash and merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@dependabot dependabot bot merged commit a6cfcbb into main Dec 24, 2025
5 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/tool-imports/github.com/goreleaser/goreleaser/v2-2.13.1 branch December 24, 2025 16:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant