Announcement
Read the official announcement: Announcing GoReleaser v2.18.
Changelog
Security updates
- 8ec05d6e3633efafc67e41050006bc914549a555: sec(builds): redact secrets from builder subprocess output (@caarlos0)
Bug fixes
- f285d13455fac36c67788fb5030bd3cc0e21f550: fix(archive,sourcearchive,gio): backups, ZIP metadata, mtime and CPU variants (#7089) (@caarlos0)
- d4e9f25f48549a9e251d469ebd39a0e06fec8af1: fix(aur): several PKGBUILD and SRCINFO generation bugs (#7100) (@caarlos0)
- b428c4cb95f65ed7b4b6f8f02dbdc9435b8636bc: fix(aur): tell users how to fix a duplicate architecture (#7141) (@caarlos0)
- 2e991d20c0061eef2351e3516dba3dd3e16ece6b: fix(blob): KMS encryption limits and bucket lifetime on error (#7101) (@caarlos0)
- 7ba40dc5df23de102d7a944a3e75706bd763fc5c: fix(blob): stream unencrypted uploads instead of buffering files (#7134) (@raviayadav and @caarlos0)
- 924f5eb065abb7bc41be5c3818a4e77c54cf419f: fix(brew,cask): formula escaping, token matching and binary stanzas (#7086) (@caarlos0)
- 7c77e11f1fb0300199101b38f135cd7e1f8da1a6: fix(build): resolve dependent hook environment entries and hook dir templates (#7078) (@caarlos0)
- d22c274b184de8d93087c5db7b472a5aa0b8dc45: fix(builder/go): give a single ellipsis main an exact output path (#7114) (@caarlos0)
- be63647e5a27c8ca3c9c85efa1c31df963d977c4: fix(builder/go): keep override env entries in a stable order (#7112) (@caarlos0)
- 4a635abc19befc4875f7e4cb000782742218f382: fix(builder/go): register the generated C header after compiling (#7113) (@caarlos0)
- 34619ef166edccca04b03e1c4b08baed9b6b7a1f: fix(builder/node,builder/bun): per-target SEA config, prebuild templates and target aliases (#7088) (@caarlos0)
- c87158e86743de5b9222e97a915969d194420bfb: fix(builder/rust,builder/zig): toolchain context and wrapped binary copying (#7080) (@caarlos0)
- 566bc69cddb5afe79d749e223adb33353103ea2b: fix(builder/uv,builder/poetry): match built artifact filenames (#7084) (@caarlos0)
- 13ebd4d1fe6aa97e8cc66fbc61cbe63031c832b7: fix(builders,partial): canonical artifact architectures and target matching (#7083) (@caarlos0)
- e1d9f7f06172ee70a0e8c1ffc0682f8739d09c1f: fix(cmd): auto-snapshot ordering, schema error reporting and --output selection (#7103) (@caarlos0)
- 591a0b8a68bf84fb563e67db42ced1379e737ff9: fix(cmd): correct check counting and init gitignore and failure handling (#7081) (@caarlos0)
- 4f4febfadaa9c4ca5dff864c1f1d1b74205d40d6: fix(docker): a bare platform means the baseline CPU variant (#7148) (@caarlos0)
- 000ae78f0c9d681d89c3b252c4abe0e1fbcefc9c: fix(docker): keep arm64 minor variants above the v8 baseline (#7149) (@caarlos0)
- d2f775e6fbd14a7a7bc51fed1795d55d90ffe632: fix(docker): quote entrypoint paths and forward arguments verbatim (#7073) (@caarlos0)
- f2b3611691b2ff8af819bdd70c4c8a0cabb77a3f: fix(docker): v1 wheel build IDs, push flags and empty manifests (#7077) (@caarlos0)
- ea7bc7a98535d404469fe91290a91149ffe0bd33: fix(docker): v2 build context, annotations and ARM64 handling (#7095) (@caarlos0)
- a1f860f5a8dacf0149a3bef045a0acb73e5262f7: fix(env,log): redact secrets across writes and honour force_token (#7104) (@caarlos0)
- 0d4fe16ae3cbde55f9fe73008bef98a7b399a74f: fix(exec,publish): cancellation, empty commands, SRPM artifacts and upload URLs (#7093) (@caarlos0)
- eba5886d2ccb56ba7a2fe743c9b08c753fa16f56: fix(flatpak,docker): quote install paths and respect project environment (#7085) (@caarlos0)
- a95c9a0d5319d501f9491863f3862f8378fa7d0f: fix(git): force column.ui=never so tag output is not columnized (#7127) (@KR-Ravindra)
- 2d7ecb255efe5c37a0673c4c08f4a187b3d4b1bf: fix(git): tag not in the local repository is not an error (#7124) (@caarlos0)
- aebed26f3f578ce53459baa25c6d92cd71544161: fix(git,changelog): metadata quoting, dirty detection, key cleanup and mailmap (#7102) (@caarlos0)
- dce409c023a9dac3eaaea15353355c561756ce75: fix(gitea,gitlab): pagination, subpath URLs, default branch, links and cancellation (#7097) (@caarlos0)
- 0348bfbcbf6cc0cc726c60ee767b3872bd3e749e: fix(github): UTF-8 safe truncation, draft reuse, asset replacement and token override (#7094) (@caarlos0)
- 0087e682cea2471c507826bbb5112e535a455628: fix(github): honor short Retry-After delays (#7110) (@0jaspahwa)
- f45f6298fc0c7258dd9d062aacdc622ca0ccd74c: fix(gomod): scope proxying to Go builds and validate the right module (#7096) (@caarlos0)
- cf292efd0f21c593a5bc58da6615eb1ad7e70b38: fix(healthcheck): handle blank and space-containing signer commands (#7076) (@caarlos0)
- edd3fd0cfd1607e0593b86367ce1c104f94d5193: fix(healthcheck): panic on dependency commands that are only shell syntax (#7106) (@caarlos0)
- 43c0c9420b7bbc9d736291c76b2c60365b5666db: fix(ko): repository image names, digest ordering and signing references (#7079) (@caarlos0)
- 6ceb354cd7e212d7ca65592003564abe7ab65bad: fix(mcp): support package transport URLs (#7090) (@caarlos0)
- acbfcf59ad35931f94d89ce0712c565e16cda986: fix(nfpm): per-format Lintian overrides and colliding filenames (#7099) (@caarlos0)
- 752bacae419bacad4980b3349ddd5a9af64b4d44: fix(nix): formatter output, string escaping and post_install (#7082) (@caarlos0)
- 05ee35f070528c7cba32425b3ac6346f6d156a17: fix(nix): template the description only once (#7146) (@caarlos0)
- a3a89033cc7f71b19919244ee21bb2bb54952c2c: fix(project): evaluate name candidates lazily (#7111) (@0jaspahwa)
- 25a52e520f9c993711b93ea1111ed90c024e0528: fix(sbom,sign): disambiguate every target variant in default names (#7144) (@caarlos0)
- c62e59f22fea43bd79c9cec7e36a0438e85c8615: fix(scripts): correct pre-commit hook exit status, quoting and restaging (#7074) (@caarlos0)
- e0418e8d5fc7cc4180207461f80ec00665def9bf: fix(sign,sbom,universalbinary): universal binary signing, per-variant names and duplicate slices (#7091) (@caarlos0)
- 06bf1501f7522b2f3079669bcaa7e590cf00e2fc: fix(slack,smtp,config): cancellation, message escaping and block round-trips (#7092) (@caarlos0)
- cb8a445982afc51f7822b8f8a2323f625978cd51: fix(tmpl): deduplicate aggregate errors and stop mutating input (#7075) (@caarlos0)
- e99a55782b85f928c9c2c575438d5ba386f84f9a: fix(winget): do not allow multiple wingets with the same name (#7147) (@caarlos0)
- 52e4c58d0348cd48bc0d6fb4aeb0c2f2b04bc1b5: fix(winget,krew): manifest validation and executable paths (#7087) (@caarlos0)
- b15cccec5314ae81595e67a11e454a0c6301c2c7: fix: address regressions since v2.18.1 (#7107) (@caarlos0)
- ac548c1b2133984a80c0c186064b00aec8ccf83b: refactor: simplify internal code and test setup (#7068) (@caarlos0)
Documentation updates
- 385916d8c4cf1c3e03b5d06cbc1073b72e0e7b90: docs(builder/go): explain that ellipsis discovery uses the host context (#7115) (@caarlos0)
- e6d5fc59f52c001ede6f5df3a9e1c6389cd6cc0e: docs: Add Kronk in USERS.md (#7151) (@gandarez)
- 4faacf5476a84b003243f4c4a0f849fd8f52b131: docs: fix configuration examples and reference mismatches (#7066) (@caarlos0)
Other work
- 7d055fd20833cf858067901fefe7215228286fa3: chore: auto-update generated files (#7070) (@goreleaserbot)
- 7748fa75d8e179b4083b6ec0c0a404733f535398: chore: auto-update generated files (#7123) (@goreleaserbot)
- 2ab310007902c215786382916e7e00477de597c4: chore: auto-update generated files (#7129) (@goreleaserbot)
- 46d055b5d2fe358dc392b561d9c16b63ac2e95db: chore: cc maintainer on winget pull requests (#7071) (@caarlos0)
- c3afaa0b57278ecf120ee9db66f4a9f70794d219: chore: fix lint on main (#7105) (@caarlos0)
- 7c4444983a6241604d297368633c9840cf02901f: chore: lint fixes (@caarlos0)
Full Changelog: https://github.com/goreleaser/goreleaser/compare/v2.18.1...v2.18.2
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them? You can sponsor, get a Pro License or contribute with code.
