deliverator/.goreleaser.yaml at main · erickuhn19/deliverator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
# goreleaser config — https://goreleaser.com  (schema v2)
# Builds reproducible, CGO-free multi-platform binaries on a `v*` tag, attaches
# checksums + SBOMs, cosign-keyless-signs the checksums, publishes a GitHub Release,
# and updates the Homebrew tap. Rehearse with `goreleaser release --snapshot --clean`.
version: 2

project_name: deliverator

before:
  hooks:
    - go mod verify
    - go mod tidy

builds:
  - id: deliverator
    main: .
    binary: deliverator
    # CGO-free pure-Go build — cross-compiles cleanly and signs byte-identically to
    # the cgo build (golden (r,s,v) vectors verified under CGO_ENABLED=0).
    env:
      - CGO_ENABLED=0
    flags:
      - -trimpath
    ldflags:
      - -s -w
      - -X github.com/erickuhn19/deliverator/cmd.Version={{ .Version }}
      - -X github.com/erickuhn19/deliverator/cmd.Commit={{ .Commit }}
      - -X github.com/erickuhn19/deliverator/cmd.BuildDate={{ .CommitDate }}
    goos: [linux, darwin]
    goarch: [amd64, arm64]
    # Reproducible builds: stamp files with the commit time, not the build time.
    mod_timestamp: "{{ .CommitTimestamp }}"

archives:
  - id: deliverator
    formats: [tar.gz]
    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    files:
      - LICENSE
      - NOTICE
      - THIRD-PARTY-NOTICES.md
      - README.md
      - TOOLS.md
      - AGENTS.md

checksum:
  name_template: "checksums.txt"
  algorithm: sha256

sboms:
  - artifacts: archive

# Provenance: SLSA build-provenance attestations are attached in release.yml via
# actions/attest-build-provenance (keyless, GitHub OIDC) — verify a download with
# `gh attestation verify <file> --repo erickuhn19/deliverator`. Releases also ship
# sha256 checksums + per-archive SBOMs.

# Homebrew tap (cask — the non-deprecated path). Works for an unsigned CLI binary
# via the quarantine-strip hook, so `brew install` runs without a Gatekeeper prompt.
homebrew_casks:
  - name: deliverator
    repository:
      owner: erickuhn19
      name: homebrew-tap
      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
    homepage: "https://deliverator.net"
    description: "Non-custodial Hyperliquid execution + tracking CLI for autonomous LLM agents."
    commit_author:
      name: Eric Kuhn
      email: erickuhn19@gmail.com
    hooks:
      post:
        install: |
          if OS.mac?
            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/deliverator"]
          end

changelog:
  sort: asc
  use: github
  groups:
    - title: Features
      regexp: '^.*?feat(\(.+\))??!?:.+$'
      order: 0
    - title: Fixes
      regexp: '^.*?fix(\(.+\))??!?:.+$'
      order: 1
    - title: Others
      order: 999
  filters:
    exclude:
      - "^docs:"
      - "^test:"
      - "^chore:"
      - "^ci:"

release:
  github:
    owner: erickuhn19
    name: deliverator
  draft: false
  prerelease: auto
  name_template: "v{{ .Version }}"