From 290634bd9027359662a5b64ff51f090e3608f2cf Mon Sep 17 00:00:00 2001 From: Manas Srivastava Date: Fri, 29 May 2026 14:18:50 +0530 Subject: [PATCH] fix(release): goreleaser v2 expects 'checksum' (singular) for sign artifacts MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The first v0.2.0 tag failed with: invalid list of artifacts to sign: checksums GoReleaser v2's schema enum is 'checksum' — the plural form was a v1 holdover that v2 explicitly rejects. Same Sigstore cosign keyless flow, just the YAML key fixed. Co-Authored-By: Claude Opus 4.7 (1M context) --- .goreleaser.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.goreleaser.yml b/.goreleaser.yml index 4ee3fba..41850c7 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -101,7 +101,10 @@ checksum: signs: - id: cosign-checksums cmd: cosign - artifacts: checksums + # GoReleaser v2 uses the singular `checksum` (the schema's enum), not + # `checksums`. The earlier v1 docs floated both — the v2 release + # rejected the plural form with `invalid list of artifacts to sign`. + artifacts: checksum signature: "${artifact}.sig" certificate: "${artifact}.pem" args: