modify gorelease.yaml and release.yml

Author: ZStack-Robot

.github/workflows/release.yml

@@ -1,43 +1,41 @@
-name: release
+# Terraform Provider release workflow.
+name: Release
 
+# This GitHub action creates a release when a tag that matches the pattern
+# "v*" (e.g. v0.1.0) is created.
 on:
   push:
     tags:
       - 'v*'
 
+# Releases need permissions to read and write the repository contents.
+# GitHub considers creating releases and uploading assets as writing contents.
+permissions:
+  contents: write
+
 jobs:
   goreleaser:
-    runs-on: ubuntu-24.04
-
+    runs-on: ubuntu-latest
     steps:
-      # Step 1: Checkout the repository code
-      - name: Checkout Code
-        uses: actions/checkout@v3
-
-      # Step 2: Fetch the full Git history (required for GoReleaser to properly handle versions)
-      - name: Fetch Git History
-        run: git fetch --prune --unshallow
-
-      # Step 3: Set up the Go environment (GoReleaser needs Go to build)
-      - name: Set up Go Environment
-        uses: actions/setup-go@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          go-version: "1.22.0"
-
-      # Step 4: Import GPG Key (for signing releases)
-      - name: Import GPG Key
+          # Allow goreleaser to access older tag information.
+          fetch-depth: 0
+      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        with:
+          go-version-file: 'go.mod'
+          cache: true
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v5
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.PASSPHRASE }}
-
-      # Step 5: Run GoReleaser to build and release the project
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v4
+        uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf # v6.1.0
         with:
-          version: latest
           args: release --clean
         env:
-          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
+          # GitHub sets the GITHUB_TOKEN secret automatically.
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}

.goreleaser.yaml

@@ -1,71 +1,48 @@
+# Visit https://goreleaser.com for documentation on how to customize this
+# behavior.
 version: 2
-
-# Archives section for creating the distribution files
-archives:
-  - files:
-      - src: 'LICENSE'
-        dst: 'LICENSE.txt'
-    format: zip
-    name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
-
-# Before build hooks (optional, used to download dependencies and prepare environment)
 before:
   hooks:
-    - 'go mod download'
-
-# Build configuration for various OS and architecture targets
+    # this is just an example and not a requirement for provider building/publishing
+    - go mod tidy
 builds:
-  - binary: '{{ .ProjectName }}_v{{ .Version }}_x5'  # Binary name format
-    env:
-      - CGO_ENABLED=0  # Disable CGo for cross-platform compatibility
-    flags:
-      - -trimpath  # Remove the file system paths from the final binary
-    goos:
-      - darwin
-      - freebsd
-      - linux
-      - windows
-    goarch:
-      - '386'
-      - amd64
-      - arm
-      - arm64
-    ignore:
-      - goarch: arm
-        goos: windows
-      - goarch: arm64
-        goos: freebsd
-      - goarch: arm64
-        goos: windows
-    ldflags:
-      - -s -w -X main.Version={{.Version}}  # Set the version in the binary
-    mod_timestamp: '{{ .CommitTimestamp }}'  # Timestamp of commit for builds
-
-# Release section moved inside builds (if required in specific GoReleaser version)
-release:
-  extra_files:
-    - glob: 'terraform-registry-manifest.json'
-      name_template: '{{ .ProjectName }}_{{ .Version }}_manifest.json'
-  ids:
-    - none  # Disable auto-ids for releases
-
-# Checksum generation configuration
+- env:
+    # goreleaser does not work with CGO, it could also complicate
+    # usage by users in CI/CD systems like HCP Terraform where
+    # they are unable to install libraries.
+    - CGO_ENABLED=0
+  mod_timestamp: '{{ .CommitTimestamp }}'
+  flags:
+    - -trimpath
+  ldflags:
+    - '-s -w -X main.version={{.Version}} -X main.commit={{.Commit}}'
+  goos:
+    - freebsd
+    - windows
+    - linux
+    - darwin
+  goarch:
+    - amd64
+    - '386'
+    - arm
+    - arm64
+  ignore:
+    - goos: darwin
+      goarch: '386'
+  binary: '{{ .ProjectName }}_v{{ .Version }}'
+archives:
+- format: zip
+  name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
 checksum:
-  algorithm: sha256
   extra_files:
     - glob: 'terraform-registry-manifest.json'
       name_template: '{{ .ProjectName }}_{{ .Version }}_manifest.json'
   name_template: '{{ .ProjectName }}_{{ .Version }}_SHA256SUMS'
-
-# Milestone to close issues or PRs after release
-milestones:
-  - close: true
-
-# Signing configuration for checksums and the release artifacts
+  algorithm: sha256
 signs:
   - artifacts: checksum
     args:
-      # if you are using this is a GitHub action or some other automated pipeline, you
+      # if you are using this in a GitHub action or some other automated pipeline, you 
       # need to pass the batch flag to indicate its not interactive.
       - "--batch"
       - "--local-user"
@@ -74,7 +51,11 @@ signs:
       - "${signature}"
       - "--detach-sign"
       - "${artifact}"
-
-# Snapshot naming template for pre-release builds
-snapshot:
-  name_template: "{{ .Tag }}-next"
+release:
+  extra_files:
+    - glob: 'terraform-registry-manifest.json'
+      name_template: '{{ .ProjectName }}_{{ .Version }}_manifest.json'
+  # If you want to manually examine the release before its live, uncomment this line:
+  # draft: true
+changelog:
+  disable: true