Pin goreleaser/nfpm version in oldstable images to v2.36.1 until Go 1.23 is released

[atc0005]

Overview

The v2.37.0 release of nfpm increased the minimum version of Go required to build the project.

Since the oldstable images provide Go 1.21, we need to pin the version of nfpm installed in those images to the last nfpm version that supports Go 1.21 (v2.36.1) until Go 1.22 is available via upstream oldstable images.

References

• Go Dependency: Bump github.com/goreleaser/nfpm/v2 from 2.36.1 to 2.37.0 in /tools #1529
• Update goreleaser/nfpm to v2.37.0 #1530 (comment)
• feat(deps): bump github.com/goreleaser/chglog from 0.5.0 to 0.6.0 goreleaser/nfpm#813
  • minimum Go version in upstream project bumped from 1.19 to 1.22
• Has the minimum Go version (intentionally) changed? goreleaser/nfpm#820
  • determine whether the minimum Go version change in nfpm is intentional

[atc0005]

Will plan to keep this GH issue open until Go 1.23 is released.

[atc0005]

No longer necessary.

The goreleaser/nfpm project reverted the minimum Go version change which allows the oldstable images to continue bundling current nfpm releases.