[Bug]: username and the ci token variables are shown in the message with the announce integration in Gitlab

[developer-guy]

What happened?

We added slack announcer support to our project with the following definition:

announce:
  slack:
    enabled: true
    message_template: 'Defaults to `{{ .ProjectName }} {{ .Tag }} is out! Check it out at {{ .GitURL }}/releases/tag/{{ .Tag }}'
    channel: '#kink'
    username: 'GoReleaser'
    icon_url: 'https://github.com/goreleaser/goreleaser/raw/939f2b002b29d2c8df6efd2d1f1d0b85c4ac5ee0/www/docs/static/logo.png'

then, we realized that there is a username and the token in the message that was sent by GoReleaser (we are using Gitlab, btw) like the following:

Defaults to `kink v0.1.4 is out! Check it out at https://gitlab-ci-token:SyYhsAghYFTvMoxw7GAg@gitlab.private.com/poc/kink.git/releases/tag/v0.1.4

I think we should avoid that somehow.

How can we reproduce this?

You can use the same announce section within your .goreleaser.yml, then run the release command.

goreleaser version

goreleaser version 0.177.0
commit: eb9950e794e60a8d1e3d7ad4616ccdd579fc2db3
built by: homebrew

https://goreleaser.com

GoReleaser Check

• goreleaser check shows no errors

Search

• I did search for other open and closed issues before opening this.

Code of Conduct

• I agree to follow this project's Code of Conduct

Additional context

No response

[developer-guy]

cc @Dentrax @caarlos0

[caarlos0]

yeah we should probably cleanup URLs, removing the auth from them

[caarlos0]

probably should add a CleanGitURL to the templates, and use it instead of .GitURL as default.

we could clean the url with something like:

u, err := url.Parse(gitURL)
if err != nil {
   // handle
}
u.User = nil
cleanGitURL := u.String()

[developer-guy]

may I do it @caarlos0 ?

[caarlos0]

sure, go ahead :)