Announcing GoReleaser v1.2 - Santa/5 year anniversary edition

Cascavel -

GoReleaser v1.2 is out - and it will likely be the last feature release of 2021. It also marks the first 5 years since its first commit, and its packed with some great features and fixes by several people!

Christmas GoReleaser gopher!

Christmas GoReleaser gopher!

Here are some highlights:

  1. GoRelaser now generates a dist/artifacts.json file - this might help integrating with other tools (e.g. you can jq it to find stuff). Link.
  2. We now have a “Common Errors” section in our docs. This should help troubleshooting common issues and provide more context to why some errors happen. More errors should be added as we evolve. Links: 123.
  3. Docker images are no longer listed in the changelog. It was mostly noise, making its way between the changelog and the footer, which in turn makes having custom release notes a bit harder. Users can still add them using the footer option. Link.
  4. Auto-refresh checksums - now if you sign your binaries with something that actually changes the file, checksums will be regenerated and thus correct. Link.
  5. Improved universal binaries usage on Homebrew taps, Gofish rigs and Krew manifests. Link.
  6. SBOM generation - using Syft by default. GoReleaser v1.2 itself is now publishing its own sBOMs! Link.
  7. Better support for cosign’s keyless signing. Links: 1, 2, 3.
  8. Git tag annotations are now available as template variables. Links: 123.
  9. Improved debug log output. Link.

You can also see the full changelog here.

Other news

Supply Chain

A common subject in the recent releases has been supply chain security. You can notice that by the recent improvements and collaboration with Sigstore’s Cosign and the SBOM generation feature with Anchore’s Syft.

We intend to keep improving in this area in order to make it easier for everyone to sign their work and publish SBOMs.Here’s to safer internet in the future!

Here's to safer internet in the future!

Here's to safer internet in the future!

Houston, we have a blog!

We now have an official blog!

Before I was posting everything here in my personal blog, and will likely still post some things here, but here the idea is to collaborate with all GoReleaser contributors to post news and etc on the official blog.

Community calls and YouTube channel

We have also scheduled our first community call! Feel free to join and suggest topics. Link.

The call should be streamed in our YouTube channel. Feel free to subscribe! 😀

Next steps

We’ll continue to evolve GoReleaser to make it even better and easier to do the best thing possible.

If you’d like to participate, stay tuned for our first community call in January!

See y’all next year!


This is a cross-post from GoReleaser’s new blog!

goreleaser golang goreleaser-pro security
Avatar photo Carlos is a Site Reliability Engineer who enjoys working on OpenSource. Twitter Tweet