chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
golangci-lint	minor	2.7.2 → 2.8.0
goreleaser	patch	2.13.2 → 2.13.3
just	minor	1.45.0 → 1.46.0

---

Release Notes

golangci/golangci-lint (golangci-lint)

v2.8.0

Released on 2026-01-07

1. Linters new features or changes
   • godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
   • golines: from 442fd00 to 0.14.0
   • gomoddirectives: from 0.7.1 to 0.8.0
   • gosec: from daccba6 to 2.22.11 (new rule: G116)
   • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
   • prealloc: from 1.0.0 to 1.0.1 (message changes)
   • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
2. Linters bug fixes
   • go-critic: from 0.14.2 to 0.14.3
   • go-errorlint: from 1.8.0 to 1.9.0
   • govet: from 0.39.0 to 0.40.0
   • protogetter: from 0.3.17 to 0.3.18
   • revive: add missing enable-default-rules setting
3. Documentation
   • docs: split installation page

goreleaser/goreleaser (goreleaser)

v2.13.3

Announcement

Read the official announcement: Announcing GoReleaser v2.13.

Changelog

Bug fixes

• 4e6cd46: fix(deps): update ko and docker/cli (#​6323) (@​caarlos0)
• 11f2d52: fix: move log to debug (@​caarlos0)
• 2f44fb4: refactor: fix deprecated method usage in tests (#​6325) (@​caarlos0)

Documentation updates

• 444acaa: docs(deps): bump the docs group in /www with 2 updates (#​6336) (@​dependabot[bot])
• 7ebc59a: docs: Revert sponsor list removal and enforce error handling in update-sponsors.py (#​6331) (@​Copilot)
• 97bea15: docs: better sponsors (#​6330) (@​caarlos0)
• 2e1159b: docs: fix auto-rebuild local (@​caarlos0)
• 8b8a4d0: docs: small updates (@​caarlos0)
• 089605e: docs: update license year (@​caarlos0)

Other work

• 1945d74: ci(deps): bump cargo-bins/cargo-binstall from 1.16.5 to 1.16.6 in the actions group (#​6329) (@​dependabot[bot])
• 091eb95: ci(deps): bump the actions group with 3 updates (#​6320) (@​dependabot[bot])
• 2eae0db: ci(deps): bump the actions group with 4 updates (#​6335) (@​dependabot[bot])

Full Changelog: goreleaser/goreleaser@v2.13.2...v2.13.3

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord and Twitter!

casey/just (just)

v1.46.0

Compare Source

Fixed

• Don't leak signal handler pipe into child processes (#​3035 by rjmac)

Added

• Allow long to default to to parameter name (#​3041 by casey)
• Allow const expressions in all settings (#​3037 by casey)
• Allow const expressions in working-directory (#​3033 by casey)
• Add --usage subcommand and argument help strings (#​3031 by casey)
• Add flags without values (#​3029 by casey)
• Allow passing arguments as short -x options (#​3028 by casey)
• Allow recipes to take --long options (#​3026 by casey)

Misc

• Add original token to string literal (#​3042 by casey)
• Remove string literal lifetime (#​3036 by casey)
• Move overrides into config (#​3032 by casey)
• Test that options are passed as positional arguments (#​3030 by casey)
• Group arguments by parameter (#​3025 by casey)
• Add OpenBSD package to readme (#​2900 by vext01)
• Re-enable mdbook-linkcheck (#​3011 by casey)
• Disable dependabot (#​3010 by casey)
• Fix pre-release check in pages deploy job (#​3009 by casey)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.