Bump the ci group across 1 directory with 5 updates (#853)

Bumps the ci group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
|
[DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action)
| `12` | `13` |
|
[docker/build-push-action](https://github.com/docker/build-push-action)
| `5` | `6` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) |
`0.16.0` | `0.17.0` |
|
[goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action)
| `5` | `6` |
| [fsfe/reuse-action](https://github.com/fsfe/reuse-action) | `3` | `4`
|


Updates `DeterminateSystems/nix-installer-action` from 12 to 13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/determinatesystems/nix-installer-action/releases">DeterminateSystems/nix-installer-action's
releases</a>.</em></p>
<blockquote>
<h2>v13</h2>
<h2>What's Changed</h2>
<p>This update primarily improves the docker shim mechanism.</p>
<ul>
<li>science: probes to debug fly on GHA by <a
href="https://github.com/grahamc"><code>@​grahamc</code></a> in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/99">DeterminateSystems/nix-installer-action#99</a></li>
<li>bump by <a
href="https://github.com/grahamc"><code>@​grahamc</code></a> in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/100">DeterminateSystems/nix-installer-action#100</a></li>
<li>Update detsys-ts by <a
href="https://github.com/lucperkins"><code>@​lucperkins</code></a> in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/102">DeterminateSystems/nix-installer-action#102</a></li>
<li>Update detsys-ts: Merge pull request <a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/51">#51</a>
from DeterminateSystems/add-missing-actions-to-update-matrix</li>
</ul>
<p>Add missing Actions to update matrix by <a
href="https://github.com/detsys-pr-bot"><code>@​detsys-pr-bot</code></a>
in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/103">DeterminateSystems/nix-installer-action#103</a></p>
<ul>
<li>Update <code>detsys-ts</code>: Merge pull request <a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/103">#103</a>
from
detsys-pr-bot/detsys-ts-update-515d00bc192ae4460e2122572ebc24020c58ea95
by <a
href="https://github.com/detsys-pr-bot"><code>@​detsys-pr-bot</code></a>
in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/105">DeterminateSystems/nix-installer-action#105</a></li>
<li>Update <code>detsys-ts</code>: by <a
href="https://github.com/detsys-pr-bot"><code>@​detsys-pr-bot</code></a>
in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/104">DeterminateSystems/nix-installer-action#104</a></li>
<li>README: correct the source-url parameter docs by <a
href="https://github.com/grahamc"><code>@​grahamc</code></a> in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/108">DeterminateSystems/nix-installer-action#108</a></li>
<li>Share /lib64 into the container by <a
href="https://github.com/grahamc"><code>@​grahamc</code></a> in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/109">DeterminateSystems/nix-installer-action#109</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/detsys-pr-bot"><code>@​detsys-pr-bot</code></a>
made their first contribution in <a
href="https://redirect.github.com/DeterminateSystems/nix-installer-action/pull/103">DeterminateSystems/nix-installer-action#103</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/DeterminateSystems/nix-installer-action/compare/v12...v13">https://github.com/DeterminateSystems/nix-installer-action/compare/v12...v13</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/ab6bcb2d5af0e904d04aea750e2089e9dc4cbfdd"><code>ab6bcb2</code></a>
Share /lib64 into the container (<a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/109">#109</a>)</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/0d82cb015af8baa746eee588cbd856fd32b753a6"><code>0d82cb0</code></a>
README: correct the source-url parameter docs (<a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/108">#108</a>)</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/2a2ecc1e15b1d1b8c7cf821a738602862edc93af"><code>2a2ecc1</code></a>
Merge pull request <a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/104">#104</a>
from detsys-pr-bot/detsys-ts-update-bc45b6c0a6318ae30...</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/9e19e84fa91498b8fd65c25b83c1fafccd5939ae"><code>9e19e84</code></a>
Regenerate dist</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/dc8972520c3ecb769905b492f2d077ab577e83ee"><code>dc89725</code></a>
Update <code>detsys-ts</code> for: `Merge pull request <a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/103">#103</a>
from detsys-pr-bot/detsys-ts...</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/7ad5c495475f18697c05a77866260802f3c70613"><code>7ad5c49</code></a>
Regenerate dist</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/17a448a97bd967056ca62f6c23961161154de32e"><code>17a448a</code></a>
Merge pull request <a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/103">#103</a>
from detsys-pr-bot/detsys-ts-update-515d00bc192ae4460...</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/45cb2f89caf6ad8ba24938d56d0ef6327f2d6db3"><code>45cb2f8</code></a>
Update <code>detsys-ts</code> for: ``
(<code>bc45b6c0a6318ae30192c4bf23a73dc879bdb632</code>)</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/47dc48605c46ea4f6b454a7984889d674e1664c4"><code>47dc486</code></a>
Update detsys-ts for: Merge pull request <a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/51">#51</a>
from DeterminateSystems/add-miss...</li>
<li><a
href="https://github.com/DeterminateSystems/nix-installer-action/commit/4b8e190ea50b732e151d5d1dfd5b41caed203ffc"><code>4b8e190</code></a>
Update detsys-ts (<a
href="https://redirect.github.com/determinatesystems/nix-installer-action/issues/102">#102</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/determinatesystems/nix-installer-action/compare/v12...v13">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/build-push-action` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/build-push-action/releases">docker/build-push-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<ul>
<li>Export build record and generate <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/">build
summary</a> by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1120">docker/build-push-action#1120</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.24.0 to 0.26.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1132">docker/build-push-action#1132</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1136">docker/build-push-action#1136</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1138">docker/build-push-action#1138</a></li>
<li>Bump braces from 3.0.2 to 3.0.3 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1137">docker/build-push-action#1137</a></li>
</ul>
<blockquote>
<p>[!NOTE]
This major release adds support for generating <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/">Build
summary</a> and exporting build record for your build. You can disable
this feature by setting <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/#disable-job-summary">
<code>DOCKER_BUILD_NO_SUMMARY: true</code> environment variable in your
workflow</a>.</p>
</blockquote>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0">https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0</a></p>
<h2>v5.4.0</h2>
<ul>
<li>Show builder information before building by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1128">docker/build-push-action#1128</a></li>
<li>Handle attestations correctly with provenance and sbom inputs by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1086">docker/build-push-action#1086</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.19.0 to 0.24.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1088">docker/build-push-action#1088</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1105">docker/build-push-action#1105</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1121">docker/build-push-action#1121</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1127">docker/build-push-action#1127</a></li>
<li>Bump undici from 5.28.3 to 5.28.4 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1090">docker/build-push-action#1090</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0">https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0</a></p>
<h2>v5.3.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.18.0 to 0.19.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1080">docker/build-push-action#1080</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0">https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0</a></p>
<h2>v5.2.0</h2>
<ul>
<li>Disable quotes detection for <code>outputs</code> input by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1074">docker/build-push-action#1074</a></li>
<li>Warn about ignored inputs by <a
href="https://github.com/favonia"><code>@​favonia</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1019">docker/build-push-action#1019</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.14.0 to 0.18.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1070">docker/build-push-action#1070</a></li>
<li>Bump undici from 5.26.3 to 5.28.3 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1057">docker/build-push-action#1057</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0">https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0</a></p>
<h2>v5.1.0</h2>
<ul>
<li>Add <code>annotations</code> input by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/992">docker/build-push-action#992</a></li>
<li>Add <code>secret-envs</code> input by <a
href="https://github.com/elias-lundgren"><code>@​elias-lundgren</code></a>
in <a
href="https://redirect.github.com/docker/build-push-action/pull/980">docker/build-push-action#980</a></li>
<li>Bump <code>@​babel/traverse</code> from 7.17.3 to 7.23.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/991">docker/build-push-action#991</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.13.0-rc.1 to
0.14.0 in <a
href="https://redirect.github.com/docker/build-push-action/pull/990">docker/build-push-action#990</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1006">docker/build-push-action#1006</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0">https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/build-push-action/commit/5176d81f87c23d6fc96624dfdbcd9f3830bbe445"><code>5176d81</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1191">#1191</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/ec10ae8f9620b3ff186577a79d805aba55e6f189"><code>ec10ae8</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/597e8fc4142a1a043ae022afc9184006fc25d448"><code>597e8fc</code></a>
chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.34.0 to
0.35.0</li>
<li><a
href="https://github.com/docker/build-push-action/commit/e050dfa622d93dfcc095192a984db567cb14f0f0"><code>e050dfa</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1186">#1186</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li><a
href="https://github.com/docker/build-push-action/commit/d1fcdb6ee033b0415f4dc6ce5c6ea4475008f6e7"><code>d1fcdb6</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/a6067b9a1aaf9ff2710b9ddae4948955d83cd3dd"><code>a6067b9</code></a>
chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.33.0 to
0.34.0</li>
<li><a
href="https://github.com/docker/build-push-action/commit/1ca370b3a9802c92e886402e0dd88098a2533b12"><code>1ca370b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1183">#1183</a>
from crazy-max/revert-gha-cache-to</li>
<li><a
href="https://github.com/docker/build-push-action/commit/2c95ebed5c303261a63c148b68f4ce3023814acc"><code>2c95ebe</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/build-push-action/commit/d189d0ef33a3269ad4a3c50511f63fb7b6d63809"><code>d189d0e</code></a>
Revert &quot;set repository and ghtoken attributes for gha cache
type&quot;</li>
<li><a
href="https://github.com/docker/build-push-action/commit/a254f8ca60a858f3136a2f1f23a60969f2c402dd"><code>a254f8c</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1179">#1179</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/build-push-action/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />

Updates `anchore/sbom-action` from 0.16.0 to 0.17.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.0</h2>
<h2>Changes in v0.17.0</h2>
<ul>
<li>chore(deps): update Syft to v1.9.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/479">#479</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/474">#474</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
<li>chore(deps): bump peter-evans/create-pull-request from 6.0.5 to
6.1.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/475">#475</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
<li>chore: serialize tests to prevent install race (<a
href="https://redirect.github.com/anchore/sbom-action/issues/478">#478</a>)
[<a href="https://github.com/willmurphyscode">willmurphyscode</a>]</li>
</ul>
<h2>v0.16.1</h2>
<h2>Changes in v0.16.1</h2>
<ul>
<li>fix: workaround windows install issue (<a
href="https://redirect.github.com/anchore/sbom-action/issues/477">#477</a>)
[<a href="https://github.com/willmurphyscode">willmurphyscode</a>]</li>
<li>fix: allow users to properly use the file input over the default
path value (<a
href="https://redirect.github.com/anchore/sbom-action/issues/471">#471</a>)
[<a href="https://github.com/komish">komish</a>]</li>
<li>chore(deps): update Syft to v1.5.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/470">#470</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>docs: notes for matrix and required permissions (<a
href="https://redirect.github.com/anchore/sbom-action/issues/469">#469</a>)
[<a href="https://github.com/kzantow">kzantow</a>]</li>
<li>chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/466">#466</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anchore/sbom-action/commit/d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5"><code>d94f46e</code></a>
chore(deps): update Syft to v1.9.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/479">#479</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/ee41e6a02ae14ba7c759082d65330fc0377476b2"><code>ee41e6a</code></a>
chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/474">#474</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/23e0b38264299f4696f46bf5eec395522e74548a"><code>23e0b38</code></a>
chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/475">#475</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/f4035cdb8eb39fd4e7b545e3acd16f92cf84acc2"><code>f4035cd</code></a>
chore: serialize tests to prevent install race (<a
href="https://redirect.github.com/anchore/sbom-action/issues/478">#478</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/f3253ca2ff8122dbea159485124fb950533f77dc"><code>f3253ca</code></a>
chore(deps): update Syft to v1.8.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/473">#473</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/95b086ac308035dc0850b3853be5b7ab108236a8"><code>95b086a</code></a>
fix: workaround windows install script (<a
href="https://redirect.github.com/anchore/sbom-action/issues/477">#477</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/72370e18af3add17e587ca8533fab7d28d2b0bee"><code>72370e1</code></a>
fix: allow users to properly use the file input over the default path
value (...</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/e28bab51878dc8b0a6ee2e3c1de6adf48a3aee42"><code>e28bab5</code></a>
chore(deps): update Syft to v1.5.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/470">#470</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/2283abe365797ff88b160542ad78bed017d8b4c9"><code>2283abe</code></a>
docs: notes for matrix and required permissions (<a
href="https://redirect.github.com/anchore/sbom-action/issues/469">#469</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/07e5b3aee7e43056aa294cf574ee7331fd066f17"><code>07e5b3a</code></a>
chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/466">#466</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/e8d2a6937ecead383dfe75190d104edd1f9c5751...d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5">compare
view</a></li>
</ul>
</details>
<br />

Updates `goreleaser/goreleaser-action` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<blockquote>
<p>[!WARNING]
<strong>This is a breaking change!</strong></p>
<p>Follow the instructions <a
href="https://goreleaser.com/blog/goreleaser-v2/#upgrading">here</a> to
upgrade!</p>
</blockquote>
<h2>What's Changed</h2>
<ul>
<li>feat!: use &quot;~&gt; v2&quot; as default by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/463">goreleaser/goreleaser-action#463</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0">https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0</a></p>
<h2>v5.1.0</h2>
<h2>Important</h2>
<p>This version changes the default behavior of <code>latest</code> to
<code>~&gt; v1</code>.</p>
<p>The next major of this action (v6), will change this to <code>~&gt;
v2</code>, and will be launched together with GoReleaser v2.</p>
<h2>What's Changed</h2>
<ul>
<li>docs: bump actions to latest major by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/435">goreleaser/goreleaser-action#435</a></li>
<li>chore(deps): bump docker/bake-action from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/436">goreleaser/goreleaser-action#436</a></li>
<li>chore(deps): bump codecov/codecov-action from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/437">goreleaser/goreleaser-action#437</a></li>
<li>chore(deps): bump actions/setup-go from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/443">goreleaser/goreleaser-action#443</a></li>
<li>chore(deps): bump actions/upload-artifact from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/444">goreleaser/goreleaser-action#444</a></li>
<li>Delete .kodiak.toml by <a
href="https://github.com/vedantmgoyal9"><code>@​vedantmgoyal9</code></a>
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/446">goreleaser/goreleaser-action#446</a></li>
<li>chore(deps): bump codecov/codecov-action from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/448">goreleaser/goreleaser-action#448</a></li>
<li>chore(deps): bump ip from 2.0.0 to 2.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/450">goreleaser/goreleaser-action#450</a></li>
<li>Upgrade setup-go action version in README by <a
href="https://github.com/kishaningithub"><code>@​kishaningithub</code></a>
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/455">goreleaser/goreleaser-action#455</a></li>
<li>chore(deps): bump tar from 6.1.14 to 6.2.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/456">goreleaser/goreleaser-action#456</a></li>
<li>chore: use corepack to install yarn by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/458">goreleaser/goreleaser-action#458</a></li>
<li>feat: lock this major version of the action to use '~&gt; v1' as
'latest' by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/461">goreleaser/goreleaser-action#461</a></li>
<li>chore(deps): bump semver from 7.6.0 to 7.6.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/462">goreleaser/goreleaser-action#462</a></li>
<li>chore(deps): bump <code>@​actions/http-client</code> from 2.2.0 to
2.2.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/451">goreleaser/goreleaser-action#451</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/vedantmgoyal9"><code>@​vedantmgoyal9</code></a>
made their first contribution in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/446">goreleaser/goreleaser-action#446</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0">https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/286f3b13b1b49da4ac219696163fb8c1c93e1200"><code>286f3b1</code></a>
ci: fix tests</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/beac41031402cb955b6b1325b39dc6a3aaddfa61"><code>beac410</code></a>
ci: update workflow and .goreleaser.yml</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/18bbabc70c50bcffbadb2dc68d6d5266056978cb"><code>18bbabc</code></a>
feat!: use &quot;~&gt; v2&quot; as default (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/463">#463</a>)</li>
<li>See full diff in <a
href="https://github.com/goreleaser/goreleaser-action/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />

Updates `fsfe/reuse-action` from 3 to 4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fsfe/reuse-action/releases">fsfe/reuse-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>Changes</h2>
<ul>
<li>Bumped to v4 of reuse-tool in <a
href="https://redirect.github.com/fsfe/reuse-action/issues/32">#32</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fsfe/reuse-action/commit/3ae3c6bdf1257ab19397fab11fd3312144692083"><code>3ae3c6b</code></a>
Merge pull request <a
href="https://redirect.github.com/fsfe/reuse-action/issues/32">#32</a>
from carmenbianca/bump-v4</li>
<li><a
href="https://github.com/fsfe/reuse-action/commit/f807a9c430a41f86faea1660aea0e72cb7bc64d4"><code>f807a9c</code></a>
Bump to v4</li>
<li><a
href="https://github.com/fsfe/reuse-action/commit/00117e703c11f93157f67d8657fe29640209e186"><code>00117e7</code></a>
Merge pull request <a
href="https://redirect.github.com/fsfe/reuse-action/issues/29">#29</a>
from jsoref/spelling</li>
<li><a
href="https://github.com/fsfe/reuse-action/commit/910515a29b4d21f3dce0c3d550c2bd865d967678"><code>910515a</code></a>
spelling: github</li>
<li><a
href="https://github.com/fsfe/reuse-action/commit/cfe13687ba5c5571ab2d8addd054ab256376e403"><code>cfe1368</code></a>
activate v3 workflow test</li>
<li>See full diff in <a
href="https://github.com/fsfe/reuse-action/compare/v3...v4">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Fabian Burth <fabian.burth@sap.com>

.github/workflows/flake_vendorhash.yaml

@@ -34,7 +34,7 @@ jobs:
         with:
           token: ${{ steps.generate_token.outputs.token }}
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v12
+        uses: DeterminateSystems/nix-installer-action@v13
       - name: Update ocm vendor hash
         run: nix run .#nixpkgs.nix-update -- --flake --version=skip ocm
       - name: Check diff and create action summary

.github/workflows/push_ocm.yaml

@@ -60,7 +60,7 @@ jobs:
           cache-source: go-build-cache
 
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           # supported platforms of https://hub.docker.com/_/golang/tags?page=1&name=1.22-alpine3.19

.github/workflows/release.yaml

@@ -142,7 +142,7 @@ jobs:
         go-version-file: '${{ github.workspace }}/go.mod'
 
     - name: Setup Syft
-      uses: anchore/sbom-action/download-syft@e8d2a6937ecead383dfe75190d104edd1f9c5751 # v0.16.0
+      uses: anchore/sbom-action/download-syft@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0.17.0
 
     - name: Setup Cosign
       uses: sigstore/cosign-installer@v3.5.0
@@ -225,7 +225,7 @@ jobs:
         git push origin ${{ env.RELEASE_VERSION }}
 
     - name: Run GoReleaser
-      uses: goreleaser/goreleaser-action@v5
+      uses: goreleaser/goreleaser-action@v6
       with:
         distribution: goreleaser
         version: latest

.github/workflows/reuse_helper_tool.yaml

@@ -8,4 +8,4 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - name: REUSE Compliance Check
-      uses: fsfe/reuse-action@v3
+      uses: fsfe/reuse-action@v4