Update github/codeql-action action to v3.30.8 (#949)

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Elliot Murphy <statik@users.noreply.github.com>

Author: 3 people

.github/workflows/ci.yaml

@@ -61,5 +61,5 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
         with:
-          version: latest
+          version: v2
           args: release --snapshot --skip=publish

.github/workflows/scorecards.yml

@@ -57,6 +57,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/upload-sarif@755f44910c12a3d7ca0d8c6e42c048b3362f7cec # v3.30.8
         with:
           sarif_file: results.sarif

.goreleaser.yml

@@ -1,17 +1,43 @@
 # .goreleaser.yml
+version: 2
 project_name: deleterious
+
 builds:
-  -
+  - id: darwin-amd64
+    main: dummy.go
+    goos: [darwin]
+    goarch: [amd64]
+    binary: deleterious
+    hooks:
+      post: cp -fv bdist/deleterious-darwin "{{ .Path }}"
+  - id: darwin-arm64
+    main: dummy.go
+    goos: [darwin]
+    goarch: [arm64]
+    binary: deleterious
+    hooks:
+      post: cp -fv bdist/deleterious-darwin-m1 "{{ .Path }}"
+  - id: linux-amd64
+    main: dummy.go
+    goos: [linux]
+    goarch: [amd64]
+    binary: deleterious
+    hooks:
+      post: cp -fv bdist/deleterious-linux "{{ .Path }}"
+  - id: linux-arm64
+    main: dummy.go
+    goos: [linux]
+    goarch: [arm64]
+    binary: deleterious
+    hooks:
+      post: cp -fv bdist/deleterious-linux-arm "{{ .Path }}"
+  - id: windows-amd64
     main: dummy.go
-    targets:
-      - linux_amd64
-      - linux_arm64
-      - darwin_amd64
-      - darwin_arm64
-      - windows_amd64
+    goos: [windows]
+    goarch: [amd64]
     binary: deleterious
     hooks:
-      post: ./goreleaser-post-hook.sh
+      post: cp -fv bdist/deleterious-windows.exe "{{ .Path }}"
 
 checksum:
   name_template: 'checksums.txt'

goreleaser-post-hook.sh

@@ -8,8 +8,25 @@ mkdir -p dist/deleterious_linux_amd64_v1
 mkdir -p dist/deleterious_linux_arm64
 mkdir -p dist/deleterious_windows_amd64_v1
 
-sudo cp -f bdist/deleterious-darwin dist/deleterious_darwin_amd64_v1/deleterious
-sudo cp -f bdist/deleterious-darwin-m1 dist/deleterious_darwin_arm64/deleterious
-sudo cp -f bdist/deleterious-linux dist/deleterious_linux_amd64_v1/deleterious
-sudo cp -f bdist/deleterious-linux-arm dist/deleterious_linux_arm64/deleterious
-sudo cp -f bdist/deleterious-windows.exe dist/deleterious_windows_amd64_v1/deleterious.exe
+echo "Checking for existing files..."
+ls -la dist/deleterious_darwin_amd64_v1/ || true
+ls -la dist/deleterious_darwin_arm64/ || true
+ls -la dist/deleterious_linux_amd64_v1/ || true
+ls -la dist/deleterious_linux_arm64/ || true
+ls -la dist/deleterious_windows_amd64_v1/ || true
+
+echo "Removing existing binaries..."
+rm -fv dist/deleterious_darwin_amd64_v1/deleterious
+rm -fv dist/deleterious_darwin_arm64/deleterious
+rm -fv dist/deleterious_linux_amd64_v1/deleterious
+rm -fv dist/deleterious_linux_arm64/deleterious
+rm -fv dist/deleterious_windows_amd64_v1/deleterious.exe
+
+echo "Copying bazel-built binaries..."
+cp -fv bdist/deleterious-darwin dist/deleterious_darwin_amd64_v1/deleterious
+cp -fv bdist/deleterious-darwin-m1 dist/deleterious_darwin_arm64/deleterious
+cp -fv bdist/deleterious-linux dist/deleterious_linux_amd64_v1/deleterious
+cp -fv bdist/deleterious-linux-arm dist/deleterious_linux_arm64/deleterious
+cp -fv bdist/deleterious-windows.exe dist/deleterious_windows_amd64_v1/deleterious.exe
+
+echo "Post-hook complete!"