Update release (#86)

Author: sethvargo

.github/ISSUE_TEMPLATE/feature.yml

@@ -2,7 +2,7 @@ name: 'Feature request'
 description: 'File a feature request'
 
 labels:
-- 'enhancement'
+  - 'enhancement'
 
 body:
   - type: 'markdown'

.github/workflows/release.yml

@@ -6,7 +6,9 @@ on:
       - 'v*'
 
 permissions:
+  attestations: 'write'
   contents: 'write'
+  id-token: 'write'
   packages: 'write'
 
 jobs:
@@ -15,30 +17,30 @@ jobs:
     steps:
       - uses: 'docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3' # ratchet:docker/setup-qemu-action@v3
 
-      - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
+      - uses: 'actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332' # ratchet:actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
+      - uses: 'actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7' # ratchet:actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
 
-      - uses: 'docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20' # ratchet:docker/login-action@v3
+      - uses: 'docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446' # ratchet:docker/login-action@v3
         with:
           registry: 'ghcr.io'
           username: '${{ github.actor }}'
           password: '${{ secrets.GITHUB_TOKEN }}'
 
-      - id: 'import_gpg'
-        uses: 'crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4' # ratchet:crazy-max/ghaction-import-gpg@v6
+      - uses: 'goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200' # ratchet:goreleaser/goreleaser-action@v6
+        id: 'goreleaser'
         with:
-          gpg_private_key: '${{ secrets.GPG_PRIVATE_KEY }}'
-          passphrase: '${{ secrets.GPG_PASSPHRASE }}'
-
-      - uses: 'goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8' # ratchet:goreleaser/goreleaser-action@v5
-        with:
-          version: 'latest'
-          args: 'release --rm-dist'
+          version: '~> 2'
+          args: 'release --clean --fail-fast'
         env:
-          GPG_FINGERPRINT: '${{ steps.import_gpg.outputs.fingerprint }}'
           GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
+
+      - uses: 'actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e' # ratchet:actions/attest-build-provenance@v1
+        with:
+          subject-path: |-
+            dist/*.tar.gz
+            dist/*.zip

.github/workflows/test.yml

@@ -17,9 +17,9 @@ jobs:
   test:
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
+      - uses: 'actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332' # ratchet:actions/checkout@v4
 
-      - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
+      - uses: 'actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7' # ratchet:actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
 

.gitignore

@@ -18,3 +18,6 @@ go.work
 
 # For when someone runs "go build" locally
 ratchet
+
+# For when someone runs goreleaser locally
+dist/

.goreleaser.yml

@@ -1,3 +1,5 @@
+version: 2
+
 before:
   hooks:
     - 'go mod tidy'
@@ -96,17 +98,6 @@ checksum:
   name_template: 'ratchet_{{ .Version }}_SHA512SUMS'
   algorithm: 'sha512'
 
-signs:
-  - artifacts: 'checksum'
-    args:
-      - '--batch'
-      - '--local-user'
-      - '{{ .Env.GPG_FINGERPRINT }}'
-      - '--output'
-      - '${signature}'
-      - '--detach-sign'
-      - '${artifact}'
-
 changelog:
   use: 'github'