[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aqua:goreleaser/goreleaser	tools	minor	2.18.3 → 2.19.0

---

Release Notes

goreleaser/goreleaser (aqua:goreleaser/goreleaser)

v2.19.0

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.19.

Changelog

New Features

• 35f2281: feat(archive): configure zstd compression level and window size (#​7206) (@​caarlos0)
• 4ebadf5: feat(cask): add hooks install_steps, deprecate raw Ruby hooks (#​6873) (@​caarlos0)
• f1e16bf: feat(ko): support linux_capabilities (#​7225) (@​mrueg and @​caarlos0)
• 9926cef: feat(nix): drop the nix-hash dependency (#​6824) (@​caarlos0)
• 6386def: feat: graduate stable features out of experimental (#​7126) (@​caarlos0)

Security updates

• 6ade066: sec(deps): bump golang.org/x/ (#​7201) (@​caarlos0)
• b690fd8: sec: update to Go 1.27.3 (#​7220) (@​shaanmajid)

Bug fixes

• 09301ea: fix(archive): propagate tar read errors in Copy (#​7194) (@​Lzcwbcgs)
• 68e5e34: fix(cask): emit brew-valid casks when builds.ignore drops os/arch combos (#​7218) (@​Mihir-Rabari)
• e6c4afc: fix(deps): bump moby/sys/user to v0.4.1 (#​7202) (@​caarlos0)
• 713c236: fix(docker): select baseline CPU variants for Docker v2 platforms (#​7189) (@​zachary-satterly and @​caarlos0)
• 26ffaba: fix(docker/v2): expand global ARG references when resolving the base image (#​7203) (@​LemonCondor and @​caarlos0)
• 1b7b6a4: fix(git): redact credentials from http remote URLs too (#​7191) (@​Mihir-Rabari)
• 2d708ed: fix(ko): use actual ko version in SPDX SBOM creator (#​7226) (@​mrueg)
• 2279d65: fix: share HTTP client per upload config (#​6919) (#​7212) (@​manish-9245 and @​caarlos0)
• 0c3be49: fix: write cask completion stanzas in Homebrew's order (#​7198) (@​mustafaakcakaya)

Documentation updates

• d84a697: docs: fix broken cosign link in rust-zig blog post (#​7228) (@​jvS0uzx)

Other work

• ccaac66: chore: auto-update generated files (#​7190) (@​goreleaserbot)
• c96c314: chore: auto-update generated files (#​7200) (@​goreleaserbot)
• 4a71e1e: chore: auto-update generated files (#​7204) (@​goreleaserbot)
• b58a061: chore: auto-update generated files (#​7223) (@​goreleaserbot)
• a9fb415: chore: auto-update generated files (#​7230) (@​goreleaserbot)

Full Changelog: goreleaser/goreleaser@v2.18.3...v2.19.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord, Twitter, and Telegram!

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "after 4pm on thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 8c21d8c3-0bfb-4167-9962-36328fb7af2c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}