54a601cbcd
Bump softprops/action-gh-release from 3.0.0 to 3.0.1 ( #2758 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...718ea10b132b3b2eba29c1007bb80653f286566b )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 11:26:37 +10:00
2db3a7d158
Bump actions/checkout from 6.0.3 to 7.0.0 ( #2760 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 11:24:54 +10:00
5da9215306
Bump actions/setup-go from 6.4.0 to 6.5.0 ( #2763 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 16:53:18 +10:00
13d340ff51
Bump sigstore/cosign-installer from 3.10.1 to 4.1.2 ( #2744 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.10.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/7e8b541eb2e61bf99390e1afd4be13a184e9ebc5...6f9f17788090df1f26f669e9d70d6ae9567deba6 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 16:28:52 +10:00
Mike Farah
91a166e8d8
Pinning using hashes
2026-06-07 19:57:15 +10:00
fe449b956a
Bump actions/checkout from 6.0.2 to 6.0.3 ( #2732 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-06 15:52:53 +10:00
54a7fc8f0c
Bump softprops/action-gh-release from 2.6.2 to 3.0.0 ( #2672 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.6.2 to 3.0.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/3bb12739c298aeb8a4eeaf626c5b8d85266b0e65...b4309332981a82ec1c5618f44dd2e27cc8bfbfda )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 21:03:55 +10:00
Mike Farah
6dd681a7c0
Fixing release signing
2026-04-17 16:03:18 +10:00
9a0335abb2
fix: restrict GitHub Actions workflow token permissions (OSSF least-privilege) ( #2662 )
...
* Initial plan
* fix: add least-privilege token permissions to GitHub workflows (OSSF)
Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/1b5db5e2-af78-4289-a6e0-2e972fc68ef1
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com >
2026-04-13 19:11:10 +10:00
Mike Farah
c8f6c1a042
Updating release to sign checksums
2026-04-12 19:39:01 +10:00
0e803833fb
chore: pin GitHub Actions and Docker base images to full-length hashes (OSSF scorecard) ( #2658 )
...
* Initial plan
* chore: pin GitHub Actions dependencies to specific commit SHAs (OSSF)
Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/cbd03f0a-f2dc-4da4-b01c-7dd06ad83ee9
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com >
* chore: pin Dockerfile base images to specific SHA digests (OSSF)
Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/7a8f6690-37fb-42ab-b3dc-0dd23c270fbe
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com >
* chore: revert yq pins in test-yq.yml; add release note for github-action/Dockerfile SHA
Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/e1b35d79-92a3-47d5-b4ac-a2efe2fd58ce
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com >
2026-04-12 19:31:32 +10:00
68f0322ba3
Bump softprops/action-gh-release from 1 to 2 ( #1978 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 1 to 2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 18:53:44 +10:00
3a27e39778
Bump actions/setup-go from 5 to 6 ( #2471 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 13:42:54 +11:00
dependabot[bot] and Mike Farah
22510ab8d5
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-06 14:28:39 +11:00
dependabot[bot] and Mike Farah
c34edcf983
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-04 14:18:19 +10:00
Mike Farah
129e597346
Fixing release pipeline
2024-11-16 15:43:21 +11:00
Matheus Macabu and GitHub
c46c1a7128
build: use goreleaser for building cross-compiled binaries and add riscv64 target ( #2135 )
...
* build: use goreleaser to cross-compile binaries for all platforms and archs
The main motivation behind it is because "gox" is unmaintained and archived
and it does not support "linux/riscv64" as a target.
Right now, goreleaser is only building the binaries, and I've tried to replicate
the exact same way the old script does.
In the future, if so desired, goreleaser could be used to further automate the
build and release pipeline by creating the release in GitHub.
* build: create binaries and OCI image for linux/riscv64
2024-08-20 13:09:12 +10:00
Mike Farah
bf2bc29e47
Dont run release build on v4 branch
2024-02-09 10:23:46 +11:00
c7b14eacbd
Bump actions/setup-go from 4 to 5 ( #1894 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 09:55:42 +11:00
0a0182da13
Bump actions/checkout from 3 to 4 ( #1776 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 07:58:30 +10:00
cbe84232a3
Bump actions/setup-go from 3 to 4 ( #1601 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-18 14:22:25 +11:00
Mike Farah
5cb3c876fc
bump to go 1.20
2023-02-11 04:06:16 +11:00
Mike Farah
a6d1a52e33
Fixing versioning code for release
2022-11-15 20:08:58 +11:00
Mike Farah
9edff1f22c
Use new github action syntax
2022-11-14 17:40:12 +11:00
Takumi Sue and GitHub
1fd96e168e
Fix mis-versioning due to hardcoding cmd.Version ( #1431 )
2022-11-14 16:38:43 +11:00
Mike Farah
eac988abdc
Updated release to always use latest go
2022-10-23 14:50:00 +11:00
Mike Farah
b1a40a9fb7
Bumped go compiler; bumped quality tools
2022-08-29 14:13:15 +10:00
22a2ccfdf4
Bump actions/setup-go from 2 to 3 ( #1183 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-15 08:27:51 +10:00
Mike Farah
270d8bd51a
Releasing 4.24.3
2022-04-12 09:49:13 +10:00
Mike Farah
2ef367b2b0
Trying new release process
2022-04-12 09:36:52 +10:00
Mike Farah
454e563a0e
Trying new release process
2022-04-12 09:35:18 +10:00
Mike Farah
217744bc9a
Pulled out docker build
2022-04-12 09:27:35 +10:00
Mike Farah
bc2118736b
v4.24.2
2022-03-28 14:36:27 +11:00
Mike Farah
3cd999bb87
Bumping to go1.18, bumping dev tools
2022-03-28 14:18:55 +11:00
b1fee26a7f
Bump actions/checkout from 2 to 3 ( #1130 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-10 13:43:36 +11:00
Mike Farah
8c2dd1af07
Bump golang compiler #1037
2021-12-21 09:38:28 +11:00
Ben Burke and Mike Farah
3f4bbf748d
add labels, quote some values
...
apply some standard labels from <https://github.com/opencontainers/image-spec/blob/main/annotations.md >
quotes some secrets in case they might contain shell special characters
2021-11-22 09:47:28 +11:00
9f9590d5c0
Bump actions/create-release from 1.0.0 to 1.1.4
...
Bumps [actions/create-release](https://github.com/actions/create-release ) from 1.0.0 to 1.1.4.
- [Release notes](https://github.com/actions/create-release/releases )
- [Commits](https://github.com/actions/create-release/compare/v1.0.0...v1.1.4 )
---
updated-dependencies:
- dependency-name: actions/create-release
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-09 08:25:26 +11:00
Mike Farah
d22de94e8c
Updated github action release to generate man page
2021-10-21 19:59:35 +11:00
Mike Farah
7b92aa0fcf
Bumping go-lang, docker versions
2021-10-20 10:58:54 +11:00
Mike Farah
61f569aebb
fixing docker pipeline for nextime
2021-02-11 10:58:40 +11:00
Mike Farah
9ff51cd066
attempt to fix dockre
2021-02-11 10:58:40 +11:00
Mike Farah
9dd6d11362
Fixed bad docker version
2021-02-11 10:58:40 +11:00
Mike Farah
a6ae33c3f1
Cleaning up release process, fixed github action version
2020-12-29 09:50:21 +11:00
Mike Farah
6a05e517f1
Updated release instructions, remove gate for release
2020-12-23 10:23:09 +11:00
Mike Farah
52ae633cb7
trialing github release actions
2020-12-22 20:05:23 +11:00
Mike Farah
9356ca59bb
trialing github release actions
2020-12-22 20:03:01 +11:00
Mike Farah
6dec167f74
trialing github release actions
2020-12-22 20:01:21 +11:00
Mike Farah
00f6981314
trialing github release actions
2020-12-22 19:56:56 +11:00
Mike Farah
4c60a2a967
trialing github release actions
2020-12-22 19:52:44 +11:00
