Skip to content

build(deps): bump @octokit/endpoint in /ui in the npm_and_yarn group #37

build(deps): bump @octokit/endpoint in /ui in the npm_and_yarn group

build(deps): bump @octokit/endpoint in /ui in the npm_and_yarn group #37

Workflow file for this run

name: Goreleaser
on:
push:
tags:
- "*"
permissions: read-all
env:
GOTOOLCHAIN: "local"
jobs:
build-ui:
name: Build Treemap WebUI
permissions:
contents: write
uses: ./.github/workflows/build-webui.yml
with:
release: false
goreleaser:
name: Release
permissions:
contents: write
id-token: write
attestations: write
needs: build-ui
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
- name: Get tags
run: git fetch --tags
- name: Setup Go
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
with:
go-version: '1.24.0'
cache: true
check-latest: true
- name: Download UI file
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
with:
name: ui
path: internal/webui
- name: Collect profiles
uses: ./.github/actions/setup-script
with:
cache: 'integration-real'
script: 'pgo.py'
coverage: 'true'
- name: Download deps
run: go mod download
- name: Build and release
uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # v6.2.1
with:
distribution: goreleaser
version: latest
args: release --clean
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Attest build provenance
id: attest
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
with:
subject-path: 'dist/go-size-analyzer*.*'
- name: Upload build provenance
uses: svenstaro/upload-release-action@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd # v2.9.0
with:
asset_name: attestations.intoto.jsonl
file: ${{ steps.attest.outputs.bundle-path }}
overwrite: false