boilerplate v0.17.0: Static Linux Binaries and Two Rendering Fixes

boilerplate v0.17.0 landed on October 14, 2026. The change that will matter most to anyone deploying the tool: the linux/amd64 binary is now statically linked because cgo is disabled during the build. Alongside that, this release fixes two render time bugs and refreshes a long list of Go dependencies.

The full release notes and downloads are on the GitHub release page.

Static linux/amd64 binary

PR #326 disables cgo so the linux/amd64 build is statically linked. That removes shared library surprises when you run the binary in scratch or distroless containers, which is a common way to distribute boilerplate templates in CI. It is a small build change with practical payoff for anyone packaging the tool.

Render fixes worth knowing about

Two fixes touch template rendering behavior:

  • PR #333 fixes rendering of a dependency’s output-folder when render time variables are used during warm reprocessing. Previously those variables were not resolved correctly in that path.
  • PR #332 marks the extension-less IsTextFile fixture as binary. This tightens how the tool classifies files without extensions, which affects processing decisions.

If you rely on dependency output folders with variable driven paths, the first fix is the one to check against your templates.

Dependency updates

Most remaining changes are dependency maintenance, driven largely by Dependabot. Notable bumps include golang.org/x/net to 0.55.0, golang.org/x/crypto to 0.52.0, and google.golang.org/grpc to 1.82.1. There are also grouped updates covering nine and five go-dependencies. The GitHub Actions workflows got bumps too, including actions/cache to 6 and actions/checkout to 7. PR #327 repairs test compilation that the dependency bumps had broken. These are routine updates, but the x/net and x/crypto bumps are worth having if you track CVE exposure.

Upgrade notes

Nothing here is flagged as breaking. The static linking change alters how you distribute the binary, not its behavior. If you build your own images, grab the new release rather than rebuilding old tags if you want the statically linked linux/amd64 binary. The render fixes change edge case behavior, so templates that depended on the old output-folder handling deserve a quick test run.

Where to get it

← All updates