Update goreleaser/goreleaser-action action (v7.2.2 → v7.2.3)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
goreleaser/goreleaser-action	action	patch	v7.2.2 → v7.2.3

---

Release Notes

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.2.3

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​563
• chore(deps): bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in #​565
• build: regenerate dist after undici 6.27.0 bump by @​caarlos0 in #​567
• ci: auto-rebuild dist on dependabot PRs by @​caarlos0 in #​568
• ci: use a GitHub App token to rebuild dist on dependabot PRs by @​caarlos0 in #​569

Full Changelog: goreleaser/goreleaser-action@v7.2.2...v7.2.3

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • "after 9am every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/goreleaser/goreleaser-action	f06c13b6b1a9625abc9e6e439d9c05a8f2190e94	🟢 4.9	Details Check Score Reason Maintained 🟢 10 25 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 1/23 approved changesets -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• .github/workflows/release.yml