chore(deps): update dependency aqua:goreleaser/goreleaser to v2.18.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aqua:goreleaser/goreleaser	tools	patch	2.18.1 → 2.18.2

---

Release Notes

goreleaser/goreleaser (aqua:goreleaser/goreleaser)

v2.18.2

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.18.

Changelog

Security updates

• 8ec05d6: sec(builds): redact secrets from builder subprocess output (@​caarlos0)

Bug fixes

• f285d13: fix(archive,sourcearchive,gio): backups, ZIP metadata, mtime and CPU variants (#​7089) (@​caarlos0)
• d4e9f25: fix(aur): several PKGBUILD and SRCINFO generation bugs (#​7100) (@​caarlos0)
• b428c4c: fix(aur): tell users how to fix a duplicate architecture (#​7141) (@​caarlos0)
• 2e991d2: fix(blob): KMS encryption limits and bucket lifetime on error (#​7101) (@​caarlos0)
• 7ba40dc: fix(blob): stream unencrypted uploads instead of buffering files (#​7134) (@​raviayadav and @​caarlos0)
• 924f5eb: fix(brew,cask): formula escaping, token matching and binary stanzas (#​7086) (@​caarlos0)
• 7c77e11: fix(build): resolve dependent hook environment entries and hook dir templates (#​7078) (@​caarlos0)
• d22c274: fix(builder/go): give a single ellipsis main an exact output path (#​7114) (@​caarlos0)
• be63647: fix(builder/go): keep override env entries in a stable order (#​7112) (@​caarlos0)
• 4a635ab: fix(builder/go): register the generated C header after compiling (#​7113) (@​caarlos0)
• 34619ef: fix(builder/node,builder/bun): per-target SEA config, prebuild templates and target aliases (#​7088) (@​caarlos0)
• c87158e: fix(builder/rust,builder/zig): toolchain context and wrapped binary copying (#​7080) (@​caarlos0)
• 566bc69: fix(builder/uv,builder/poetry): match built artifact filenames (#​7084) (@​caarlos0)
• 13ebd4d: fix(builders,partial): canonical artifact architectures and target matching (#​7083) (@​caarlos0)
• e1d9f7f: fix(cmd): auto-snapshot ordering, schema error reporting and --output selection (#​7103) (@​caarlos0)
• 591a0b8: fix(cmd): correct check counting and init gitignore and failure handling (#​7081) (@​caarlos0)
• 4f4febf: fix(docker): a bare platform means the baseline CPU variant (#​7148) (@​caarlos0)
• 000ae78: fix(docker): keep arm64 minor variants above the v8 baseline (#​7149) (@​caarlos0)
• d2f775e: fix(docker): quote entrypoint paths and forward arguments verbatim (#​7073) (@​caarlos0)
• f2b3611: fix(docker): v1 wheel build IDs, push flags and empty manifests (#​7077) (@​caarlos0)
• ea7bc7a: fix(docker): v2 build context, annotations and ARM64 handling (#​7095) (@​caarlos0)
• a1f860f: fix(env,log): redact secrets across writes and honour force_token (#​7104) (@​caarlos0)
• 0d4fe16: fix(exec,publish): cancellation, empty commands, SRPM artifacts and upload URLs (#​7093) (@​caarlos0)
• eba5886: fix(flatpak,docker): quote install paths and respect project environment (#​7085) (@​caarlos0)
• a95c9a0: fix(git): force column.ui=never so tag output is not columnized (#​7127) (@​KR-Ravindra)
• 2d7ecb2: fix(git): tag not in the local repository is not an error (#​7124) (@​caarlos0)
• aebed26: fix(git,changelog): metadata quoting, dirty detection, key cleanup and mailmap (#​7102) (@​caarlos0)
• dce409c: fix(gitea,gitlab): pagination, subpath URLs, default branch, links and cancellation (#​7097) (@​caarlos0)
• 0348bfb: fix(github): UTF-8 safe truncation, draft reuse, asset replacement and token override (#​7094) (@​caarlos0)
• 0087e68: fix(github): honor short Retry-After delays (#​7110) (@​0jaspahwa)
• f45f629: fix(gomod): scope proxying to Go builds and validate the right module (#​7096) (@​caarlos0)
• cf292ef: fix(healthcheck): handle blank and space-containing signer commands (#​7076) (@​caarlos0)
• edd3fd0: fix(healthcheck): panic on dependency commands that are only shell syntax (#​7106) (@​caarlos0)
• 43c0c94: fix(ko): repository image names, digest ordering and signing references (#​7079) (@​caarlos0)
• 6ceb354: fix(mcp): support package transport URLs (#​7090) (@​caarlos0)
• acbfcf5: fix(nfpm): per-format Lintian overrides and colliding filenames (#​7099) (@​caarlos0)
• 752baca: fix(nix): formatter output, string escaping and post_install (#​7082) (@​caarlos0)
• 05ee35f: fix(nix): template the description only once (#​7146) (@​caarlos0)
• a3a8903: fix(project): evaluate name candidates lazily (#​7111) (@​0jaspahwa)
• 25a52e5: fix(sbom,sign): disambiguate every target variant in default names (#​7144) (@​caarlos0)
• c62e59f: fix(scripts): correct pre-commit hook exit status, quoting and restaging (#​7074) (@​caarlos0)
• e0418e8: fix(sign,sbom,universalbinary): universal binary signing, per-variant names and duplicate slices (#​7091) (@​caarlos0)
• 06bf150: fix(slack,smtp,config): cancellation, message escaping and block round-trips (#​7092) (@​caarlos0)
• cb8a445: fix(tmpl): deduplicate aggregate errors and stop mutating input (#​7075) (@​caarlos0)
• e99a557: fix(winget): do not allow multiple wingets with the same name (#​7147) (@​caarlos0)
• 52e4c58: fix(winget,krew): manifest validation and executable paths (#​7087) (@​caarlos0)
• b15ccce: fix: address regressions since v2.18.1 (#​7107) (@​caarlos0)
• ac548c1: refactor: simplify internal code and test setup (#​7068) (@​caarlos0)

Documentation updates

• 385916d: docs(builder/go): explain that ellipsis discovery uses the host context (#​7115) (@​caarlos0)
• e6d5fc5: docs: Add Kronk in USERS.md (#​7151) (@​gandarez)
• 4faacf5: docs: fix configuration examples and reference mismatches (#​7066) (@​caarlos0)

Other work

• 7d055fd: chore: auto-update generated files (#​7070) (@​goreleaserbot)
• 7748fa7: chore: auto-update generated files (#​7123) (@​goreleaserbot)
• 2ab3100: chore: auto-update generated files (#​7129) (@​goreleaserbot)
• 46d055b: chore: cc maintainer on winget pull requests (#​7071) (@​caarlos0)
• c3afaa0: chore: fix lint on main (#​7105) (@​caarlos0)
• 7c44449: chore: lint fixes (@​caarlos0)

Full Changelog: goreleaser/goreleaser@v2.18.1...v2.18.2

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord, Twitter, and Telegram!

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "after 4pm on thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: d2aaa564-3c4e-4298-a153-753099163090

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}