build(deps): bump the ui-prod-deps group in /ui with 3 updates #35

	name: Goreleaser

	on:
	push:
	tags:
	- "*"

	permissions: read-all

	jobs:
	build-ui:
	name: Build Treemap WebUI
	permissions:
	contents: write
	uses: ./.github/workflows/build-webui.yml
	with:
	release: false

	goreleaser:
	name: Release
	permissions:
	contents: write
	id-token: write
	attestations: write
	needs: build-ui
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0

	- name: Get tags
	run: git fetch --tags

	- name: Setup Go
	uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
	with:
	go-version: '1.23.2'
	cache: true
	check-latest: true

	- name: Download UI file
	uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
	with:
	name: ui
	path: internal/webui

	- name: Collect profiles
	uses: ./.github/actions/setup-script
	with:
	cache: 'integration-real'
	script: 'pgo.py'
	coverage: 'true'

	- name: Download deps
	run: go mod download

	- name: Build and release
	uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
	with:
	distribution: goreleaser
	version: latest
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Attest build provenance
	id: attest
	uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
	with:
	subject-path: 'dist/go-size-analyzer.'

	- name: Upload build provenance
	uses: svenstaro/upload-release-action@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd # v2.9.0
	with:
	asset_name: attestations.intoto.jsonl
	file: ${{ steps.attest.outputs.bundle-path }}
	overwrite: false

Provide feedback