chore(deps): update buildkite

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws-assume-role-with-web-identity		minor	v1.4.0 → v1.5.0
golang	stage	digest	fcdb3e4 → 5f3787b
goreleaser/goreleaser-pro	stage	patch	v2.15.2 → v2.15.3

---

Release Notes

buildkite-plugins/aws-assume-role-with-web-identity-buildkite-plugin (aws-assume-role-with-web-identity)

v1.5.0

Compare Source

What's Changed

• Update plugin docs to reflect AWS's new sub claim requirement by @​swaller-bk in #​31
• compat table for plugin by @​mcncl in #​30
• Update buildkite plugin plugin-tester to v1.2.0 by @​renovate[bot] in #​32
• Update buildkite/plugin-tester Docker tag to v4.2.0 by @​renovate[bot] in #​33
• feat: ossf scanning by @​mcncl in #​34
• chore(deps): update buildkite plugin ossf-scorecard to v1.0.1 by @​renovate[bot] in #​35
• chore(deps): update buildkite plugin secrets to v1.0.1 by @​renovate[bot] in #​36
• chore(deps): update buildkite plugin secrets to v1.0.2 by @​renovate[bot] in #​37
• chore(deps): update buildkite/plugin-tester docker tag to v4.3.0 by @​renovate[bot] in #​38
• chore(deps): update buildkite plugin plugin-tester to v1.3.0 by @​renovate[bot] in #​39
• Fix typo in readme.md by @​moskyb in #​40
• chore(deps): update buildkite/plugin-linter docker tag to v3 by @​renovate[bot] in #​41
• chore(deps): update buildkite plugin secrets to v2 by @​renovate[bot] in #​42
• chore(deps): update buildkite plugin secrets to v2.1.0 by @​renovate[bot] in #​45
• Fix set -e bug in assume-role error handling and add OIDC token diagnostics by @​Temikus in #​46
• Bump version to v1.5.0 for next release by @​lizrabuya in #​47

New Contributors

• @​swaller-bk made their first contribution in #​31
• @​mcncl made their first contribution in #​30
• @​moskyb made their first contribution in #​40
• @​Temikus made their first contribution in #​46
• @​lizrabuya made their first contribution in #​47

Full Changelog: buildkite-plugins/aws-assume-role-with-web-identity-buildkite-plugin@v1.4.0...v1.5.0

goreleaser/goreleaser-pro (goreleaser/goreleaser-pro)

v2.15.3

Compare Source

Changelog

Pro-only

Bug fixes

• fix(pro): add retryx retry logic to pro-only HTTP/network calls (@​caarlos0)
• fix(pro): PR title and body swapped in OpenPullRequest call for scoop (@​caarlos0)
• fix(pro): changelog abbrev panics on negative values other than -1 (@​caarlos0)
• fix(pro): changelog error for invalid AI provider instead of panicking (@​caarlos0)
• fix(pro): fix "clouldsmiths" typo in skip message (@​caarlos0)
• fix(pro): fix "hdiutl" typo in log output (@​caarlos0)
• fix(pro): fix Debugf call missing format verbs (@​caarlos0)
• fix(pro): fix default template file mode from 0o655 to 0o644 (@​caarlos0)
• fix(pro): fix race condition in reReplaceAll regex replacer (@​caarlos0)
• fix(pro): log correct repo for GitLab/Gitea releases (@​caarlos0)
• fix(pro): missing NSIS, MSI, DMG, etc in http uploads (@​caarlos0)
• fix(pro): missing nsis case in errNoArchivesFound format (@​caarlos0)
• fix(pro): pin versions in package.json as well (@​caarlos0)
• fix(pro): remove debug fmt.Println in If method (@​caarlos0)
• fix(pro): remove debug warning left in production code (@​caarlos0)
• fix(pro): remove duplicate hooks raw extraEnv from process environment (@​caarlos0)
• fix(pro): subgroup debug log shows parent group regex instead of subgroup regex (@​caarlos0)
• fix(pro): use GOMIPS64 env var for mips64/mips64le architectures in partial (@​caarlos0)
• fix(pro): use correct map key in format validation in npm (@​caarlos0)
• fix(pro): use template-expanded values in metadata fallback in makeself (@​caarlos0)
• fix(pro): wrong field in templated_contents mtime parse error in npfm (@​caarlos0)
• fix(pro): wrong field name in templated_files destination error (@​caarlos0)
• refactor(pro): simplify dockerhub and changelog retry wrappers (@​caarlos0)

Other work

• chore(pro): gofumpt (@​caarlos0)
• chore(pro): updates (@​caarlos0)

---

Shared with OSS

Security updates

• sec: prevent secret leaks in logs and improve redaction (@​caarlos0)

Bug fixes

• fix(aur,krew,aursources): apply template to SkipUpload before checking its value (@​caarlos0)
• fix(blob): evaluate template in provider before checking for S3 ACL support (@​caarlos0)
• fix(build): fix broken backtick and missing GOMIPS64 in --single-target help text (@​caarlos0)
• fix(build): prevent panic when command has single element (@​caarlos0)
• fix(bun): show original target in parse error, not trimmed version (@​caarlos0)
• fix(changelog): prevent panic on negative abbrev values other than -1 (@​caarlos0)
• fix(changelog): use %t instead of %b for bool in debug log format (@​caarlos0)
• fix(checksums): prevent panic in sort when line has no double-space (@​caarlos0)
• fix(client): off-by-one in truncateReleaseBody (@​caarlos0)
• fix(docker): check evaluated Dockerfile template for emptiness, not raw template (@​caarlos0)
• fix(docker): fix "did you mean?" suggestion always suggesting the input name itself (@​caarlos0)
• fix(docker): prevent panic in parsePlatform with missing arch (@​caarlos0)
• fix(docker): remove duplicate WithOutput in error wrapping (@​caarlos0)
• fix(dockers/v2): digest log (@​caarlos0)
• fix(gitea): fix misleading 'using master' log when default branch lookup fails (@​caarlos0)
• fix(github): nil-guard resp in updateRelease before accessing Header (@​caarlos0)
• fix(http): remove double-close of response body in executeHTTPRequest (@​caarlos0)
• fix(nfpm): show correct value in content mtime parse error (@​caarlos0)
• fix(opencollective): handle errors, more tests (@​caarlos0)
• fix(partial): add missing ppc64le to archExtraEnvs map (@​caarlos0)
• fix(partial): use GGOMIPS64/GOMIPS64 instead of GGOMIPS/GOMIPS for mips64/mips64le (@​caarlos0)
• fix(redact): return 0 bytes written on underlying write failure (@​caarlos0)
• fix(release): log correct repo name for GitLab and Gitea releases (@​caarlos0)
• fix(rust): glibc version stripping for gnueabi/gnueabihf targets (@​caarlos0)
• fix(rust): show all workspace members in error message, not just first (@​caarlos0)
• fix(rust): strip custom glibc version from target for rustup command (@​mozzieongit)
• fix(sbom): use matched filename for artifact Name instead of glob pattern (@​caarlos0)
• fix(srpm): remove double close of package file (@​caarlos0)
• fix(targz): close gzip reader in Copy (@​caarlos0)
• fix(tmpl): return error instead of panicking on invalid filter regex (@​caarlos0)
• fix(winget): use filepath.Join instead of path.Join for local filesystem paths (@​caarlos0)
• fix: add retries everywhere possible (@​caarlos0)
• fix: better log (@​caarlos0)
• fix: check buildx for dockers v1 (@​caarlos0)
• fix: guard iterator bounds in gerrors Details (@​caarlos0)
• fix: handle io.ReadAll error in bodyOf instead of discarding it (@​caarlos0)
• fix: preserve original error details in git config extraction (@​caarlos0)
• fix: remove duplicate WithField in gitea client push logging (@​caarlos0)
• fix: replace recursive rateLimitChecker with single check and context-aware sleep (@​caarlos0)
• fix: use Mattermost.Color instead of Teams.Color in mattermost pipe (@​caarlos0)
• fix: use typed structs for LinkedIn API responses (@​caarlos0)
• refactor(http): remove global assetOpen mock pattern (@​caarlos0)
• refactor(tests): simplify client tests with helpers (@​caarlos0)
• refactor: use io.WriteString (@​caarlos0)

Documentation updates

• docs(rust): document ability to specify custom glibc version (@​mozzieongit)
• docs: Fix signature verification of checksum file (@​nicholasdille)
• docs: add v2.15 banner (@​caarlos0)
• docs: ai usage guidelines (@​caarlos0)
• docs: fix output (@​caarlos0)
• docs: regenerate favicons with transparent background (@​caarlos0)

Other work

• chore: go 1.26.2 (@​caarlos0)
• revert: remove pro-only test commits already in OSS (@​caarlos0)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.