Skip to content

build(deps): bump github.com/goreleaser/nfpm/v2 from 2.47.0 to 2.48.0 - #521

Merged
thepwagner merged 2 commits into
mainfrom
dependabot/go_modules/github.com/goreleaser/nfpm/v2-2.48.0
Oct 16, 2026
Merged

thepwagner merged 2 commits into
mainfrom
dependabot/go_modules/github.com/goreleaser/nfpm/v2-2.48.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/goreleaser/nfpm/v2 from 2.47.0 to 2.48.0.

Release notes

Sourced from github.com/goreleaser/nfpm/v2's releases.

v2.48.0

Changelog

New Features

  • 6d713625670ecbac5fe97b041204cbe42cbbfdf2: feat(arch): map ppc64 and ppc64le to Arch Linux POWER names (#1138) (@​abemedia)
  • f42c9510c89f6052a044457538e4e2c662a6b8d2: feat: Add "force_implicit_dirs" to dir/tree. (#948) (@​volkadav)
  • e1c7b33e10143cfcd43cfb467a570894596f4ace: feat: replace rpmpack with a more complete implementation (#1104) (@​djgilcrease)

Security updates

  • 84adf13b39dc39201c9bff117e1549caa7019543: sec(deps): bump golang.org/x/ (#1157) (@​caarlos0)

Bug fixes

  • c42462355e5209488787a8eec00a2bc98d45c462: fix(apk): normalize file modes before writing tar headers (#1113) (@​ychampion)
  • a72ab8f3ac34368071812c9a796c830eaaee469f: fix(ci): Separate PR checks from queue acceptance tests (#1158) (@​caarlos0)
  • 93cf82dd375cddb0c2b39609eccf0aef9e61ef3a: fix(ipk): normalize file modes before writing tar headers (#1145) (@​yunaremaia)
  • ae346b54a3142aa993cbfd3202cfd6236caa8822: fix(rpm): emit ISA-qualified self provide (#1141) (@​djgilcrease)
  • d20c0c9937ed37ff34fedf155468a739baa59cf1: fix(rpm): escape % in generated SRPM spec so scriptlets survive rebuild (#1109) (@​caarlos0)
  • 60154f160df7af2b2b405c7bf0fde93292909cb7: fix(rpm): set file colors on executable ELF files (#1155) (@​caarlos0)
  • c2b09957b40d5f4391d46b05263b199ad0370dca: fix: Include optional dependencies in Arch packages (#1131) (@​fredrikblau)
  • db22372bfbddb6b2968ff71e9c25e6bb1a2355c2: fix: add context to deb and rpm errors (#1088) (@​otjdiepluong)
  • 5ec5501425dc2cd4ff41b783095cff3e74ed2ebe: fix: don't panic in Config.Get on an empty override clause (#1114) (@​arpitjain099)
  • ce81cb64a9e1d5abb252ee7a05e8ea897f4ee32d: fix: update to go-msix v1.0.0 (#1105) (@​djgilcrease)

Dependency updates

  • 9da52b452d229bc65d872273a1c598e02b6ef4c2: fix(deps): bump alpine from 3.24.0 to 3.24.1 (#1101) (@​dependabot[bot])
  • 6e553ae9843798642d3de64957f4d9ba2f0a9aaa: fix(deps): bump alpine from 3.24.0 to 3.24.1 in /testdata/acceptance (#1102) (@​dependabot[bot])
  • 551ed7880ba2dcd1101234f5d451826311c9284c: fix(deps): bump alpine from 3.24.1 to 3.24.2 (#1143) (@​dependabot[bot])
  • f65c6cb7a4779d982e69947fd6d1f347b0c1d97c: fix(deps): bump alpine from 3.24.1 to 3.24.2 in /testdata/acceptance (#1144) (@​dependabot[bot])
  • 886e9296b3ba2cf71fb185f9e7c1df1e6e52aaf1: fix(deps): bump fedora from 40 to 44 in /testdata/acceptance (#1084) (@​dependabot[bot])

Build process updates

  • b55fa4da53b6100d70276f26778034f768ece26a: ci(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the actions group (#1100) (@​dependabot[bot])
  • bda9b3f9650b92c5e5aee63009b15f38b4311dfe: ci(deps): bump docker/setup-qemu-action in the actions group (#1134) (@​dependabot[bot])
  • 2263872eee22aabe44a86e3a0d16e8e01fe12816: ci(deps): bump the actions group across 1 directory with 9 updates (#1120) (@​dependabot[bot])
  • 3ab9e89ab895ea8ba47690dd14304017dff55997: ci(deps): bump the actions group with 2 updates (#1107) (@​dependabot[bot])
  • e788e822ccd700d8e6089c1041cb309201639399: ci(deps): bump the actions group with 4 updates (#1126) (@​dependabot[bot])
  • 42066c26933f91e8c5f90d6742b156e40db9c442: ci(deps): bump the actions group with 4 updates (#1137) (@​dependabot[bot])
  • 9215c15b82fb843e047a7685a2c45df45a7fcb62: ci(deps): bump the actions group with 5 updates (#1121) (@​dependabot[bot])
  • bec8ffcdcabbf954933491129bad89e39a67163a: ci(deps): bump the actions group with 5 updates (#1130) (@​dependabot[bot])
  • 2c05c9e1a5cb7150520a92edf0f2bc9bfbc2d672: ci(deps): bump the actions group with 5 updates (#1148) (@​dependabot[bot])
  • 8ce4a3a1026f24d145071d148a04b1362f9f4f6c: ci(deps): bump the actions group with 6 updates (#1115) (@​dependabot[bot])
  • c6abdbaa8b2ff40dcba6e4ec76545038cf264422: ci(deps): bump the actions group with 6 updates (#1128) (@​dependabot[bot])
  • a32b89262e05e2574d82493c9fae378f6b7f00b7: ci(deps): bump the actions group with 6 updates (#1132) (@​dependabot[bot])
  • 962cc403408c60b44486ae7a7ca7728652cdebf4: ci(deps): bump the actions group with 7 updates (#1139) (@​dependabot[bot])
  • 61117664ffea9fa95d8a2ce59e318a6fb34a90d5: ci(deps): bump the actions group with 9 updates (#1111) (@​dependabot[bot])
  • b935cc66813b70180524d6c69ab559957f3a18a5: ci: Enable merge queue checks (@​caarlos0)
  • eb39b13687a3c7ffb857e3316074b01dff400997: ci: remove ruleguard (@​caarlos0)
  • 70b7cb842063dd0da4e552297e2ee28fe3f3454f: ci: remove workflow dispatch (@​caarlos0)

Other work

  • 5794bbd723306c63e0464b5d66787c677f7e234b: docs: update cmd docs (@​caarlos0)
  • 4b020524fb3dd922065c6366826435ce771453d8: docs: update cmd docs (@​caarlos0)
  • b3fc46b36452a66c73aaee8ab50714f224bf58ed: test(rpm): Stabilize default compression comparison (#1156) (@​caarlos0)

Full Changelog: goreleaser/nfpm@v2.47.0...v2.48.0

... (truncated)

Commits
  • db22372 fix: add context to deb and rpm errors (#1088)
  • c2b0995 fix: Include optional dependencies in Arch packages (#1131)
  • 93cf82d fix(ipk): normalize file modes before writing tar headers (#1145)
  • 60154f1 fix(rpm): set file colors on executable ELF files (#1155)
  • 6d71362 feat(arch): map ppc64 and ppc64le to Arch Linux POWER names (#1138)
  • 84adf13 sec(deps): bump golang.org/x/ (#1157)
  • b3fc46b test(rpm): Stabilize default compression comparison (#1156)
  • a72ab8f fix(ci): Separate PR checks from queue acceptance tests (#1158)
  • b935cc6 ci: Enable merge queue checks
  • 17a0e13 chore(deps): bump go.digitalxero.dev/rpm to v0.3.4 (#1154)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.47.0 to 2.48.0.
- [Release notes](https://github.com/goreleaser/nfpm/releases)
- [Commits](goreleaser/nfpm@v2.47.0...v2.48.0)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/nfpm/v2
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 16, 2026 05:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 16, 2026
@thepwagner
thepwagner merged commit b2cb223 into main Oct 16, 2026
4 checks passed
@thepwagner
thepwagner deleted the dependabot/go_modules/github.com/goreleaser/nfpm/v2-2.48.0 branch October 16, 2026 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant