Security
GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to dist/artifacts.json. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata.
See GHSA-9422-8p9m-393x for details.
Changelog
Pro-only
Documentation updates
- docs(pro): update the Pro feature list (@caarlos0)
Shared with OSS
New features
- feat(cask): render
zap :not_requiredwhen no zap directives are set (@SimonMiaou) - feat(gitlab): add asset type selection (@mavogel)
- feat(ko): allow templates in platforms (@mrueg and @caarlos0)
- feat(winget): update manifest schema to latest (1.28.0) (@abemedia)
- feat: allow skipping the changelog with --skip=changelog (@mrueg and @caarlos0)
Bug fixes
- fix(bluesky): do not add a link facet when there is no release URL (@10kartik)
- fix(nodedist): handle prerelease versions in generation (@caarlos0)
- fix(tmpl): escape backslashes in mdv2escape (@10kartik)
- refactor: move marshaljson methods to right place (@caarlos0)
Documentation updates
- docs: add --snapshot to quick start single-target builds (@dcadolph)
- docs: announce 2.20 (@caarlos0)
- docs: github app (@caarlos0)
- docs: remove -unreleased markers for v2.19 (@caarlos0)
- docs: update Pro page copy (@caarlos0)
- docs: v2.19 announcement and docs (@caarlos0)
Other work
- Merge commit from fork (@Divsonar and @caarlos0)
- chore: auto-update generated files (@goreleaserbot)
- chore: auto-update generated files (@goreleaserbot)
- chore: auto-update generated files (@goreleaserbot)
- chore: auto-update generated files (@goreleaserbot)
- chore: auto-update generated files (@goreleaserbot)
- chore: lint (@caarlos0)