ci(release): use built-in GITHUB_TOKEN and pin release actions

.github/workflows/release.yml

@@ -5,27 +5,29 @@ on:
     tags:
       - "*" # triggers only if push new tag version, like `0.8.4` or else
 
+permissions:
+  contents: write # create the release and upload assets with the built-in token
+
 jobs:
   build:
     name: GoReleaser build
     runs-on: ubuntu-latest
 
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0 # See: https://goreleaser.com/ci/actions/
 
-      - name: Set up Go 1.22
-        uses: actions/setup-go@v2
+      - name: Set up Go
+        uses: actions/setup-go@v5
         with:
-          go-version: 1.22
-        id: go
+          go-version-file: go.mod
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@master
+        uses: goreleaser/goreleaser-action@v6
         with:
-          version: latest
+          version: "~> v2"
           args: release --clean
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.goreleaser.yml

@@ -1,3 +1,4 @@
+version: 2
 project_name: smcli
 builds:
   - env: [CGO_ENABLED=0]
@@ -8,8 +9,8 @@ builds:
 
 nfpms:
 - maintainer: Carlos A Becker <root@carlosbecker.dev>
-  description: Sample project.
-  homepage: https://github.com/caarlos0/tasktimer
+  description: Manage Supermicro servers through their BMC (Redfish).
+  homepage: https://github.com/Charlie-Root/smcli
   license: MIT
   formats:
   - deb