ci: pin GoReleaser to nightly #4

	name: Release

	on:
	push:
	tags:
	- "v*"

	permissions:
	contents: write

	jobs:
	# Guard: ensure the tagged commit builds and vets cleanly before releasing.
	check:
	name: Build and verify
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6
	- uses: actions/setup-go@v6
	with:
	go-version-file: go.mod
	- run: go mod tidy && git diff --exit-code go.mod go.sum
	- run: go build ./...
	- run: go vet ./...

	# Build cross-platform archives, publish the GitHub Release, and update the
	# Homebrew formula in NimbleMarkets/homebrew-tap.
	release:
	name: Release
	needs: check
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@v6
	with:
	fetch-depth: 0

	- uses: actions/setup-go@v6
	with:
	go-version-file: go.mod

	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v7
	with:
	version: "v2.16.0-2827930b-nightly" # Redirect bug?
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	# PAT with write access to NimbleMarkets/homebrew-tap.
	HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
	# Apple signing + notarization of the macOS binaries. When these
	# are unset (e.g. forks), GoReleaser skips notarization.
	MACOS_SIGN_P12: ${{ secrets.MACOS_SIGN_P12 }}
	MACOS_SIGN_PASSWORD: ${{ secrets.MACOS_SIGN_PASSWORD }}
	MACOS_NOTARY_ISSUER_ID: ${{ secrets.MACOS_NOTARY_ISSUER_ID }}
	MACOS_NOTARY_KEY_ID: ${{ secrets.MACOS_NOTARY_KEY_ID }}
	MACOS_NOTARY_KEY: ${{ secrets.MACOS_NOTARY_KEY }}

Navigation Menu