Please sign the dco

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 25.04%. Comparing base (488eb97) to head (12222a4).
⚠️ Report is 471 commits behind head on main.

@@             Coverage Diff             @@
##             main    #2563       +/-   ##
===========================================
- Coverage   66.46%   25.04%   -41.42%     
===========================================
  Files          92      189       +97     
  Lines        9258    24424    +15166     
===========================================
- Hits         6153     6117       -36     
- Misses       2359    17544    +15185     
- Partials      746      763       +17     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@cpanato done!

thanks @cpanato!

is there a timeline on the next release?

thanks @cpanato!

is there a timeline on the next release?

I looked at the CVE and while yes, we imported the package referenced, we do not use the code path that contains the vulnerability. I'm not sure there is a huge rush to push out a new release here, unless I'm missing something?

cc @haydentherapper

@bobcallaway my understanding it's that not a rush either. Only downside is scanners marking it as possibly vulnerable (e.g. rekor is imported by cosign, which is imported by goreleaser, which is how I got here 😂)

@caarlos0 that makes sense (and thanks for goreleaser - we love it!) we have a couple other changes we'd like to get in soon and should cut another release in the next couple weeks.

cool, I'll keep an eye out for it.

thanks for cosign & co, I love it :)