SEC-090: Automated trusted workflow pinning (2024-06-17) (#173)

* Result of tsccr-helper -log-level=info gha update -latest .

* Add version to .goreleaser file

---------

Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Austin Valle <austinvalle@gmail.com>

Author: hashicorp-tsccr[bot]

.github/workflows/ci-goreleaser.yml

@@ -18,6 +18,6 @@ jobs:
       - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           go-version-file: 'go.mod'
-      - uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5.1.0
+      - uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
         with:
           args: check

.github/workflows/release.yml

@@ -93,7 +93,7 @@ jobs:
           cd .changes
           sed -e "1{/# /d;}" -e "2{/^$/d;}" ${{ needs.changelog-version.outputs.version }}.md > /tmp/release-notes.txt
 
-      - uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5.1.0
+      - uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.goreleaser.yml

@@ -1,3 +1,4 @@
+version: 2
 project_name: tfplugingen-openapi
 builds:
 - main: ./cmd/tfplugingen-openapi