chore: update GoReleaser configuration and auto-tag workflow

- Commented out GPG signing configuration in .goreleaser.yml for clarity.
- Modified the default value for the skip_signing input in auto-tag-release.yml to true, allowing for easier skipping of GPG signing during releases.

Author: yuaotian

.github/workflows/auto-tag-release.yml

@@ -15,14 +15,10 @@ on:
       - ".gitignore"
   workflow_call:
     inputs:
-      gpg_private_key:
-        required: false
-        type: string
-        description: "GPG private key for signing releases"
       skip_signing:
         required: false
         type: boolean
-        default: false
+        default: true
         description: "Skip GPG signing of releases"
 
 permissions:

.goreleaser.yml

@@ -42,17 +42,17 @@ checksum:
   name_template: 'checksums.txt'
   algorithm: sha256
 
-signs:
-  - cmd: gpg
-    args:
-      - "--batch"
-      - "--local-user"
-      - "{{ .Env.GPG_FINGERPRINT }}"
-      - "--output"
-      - "${signature}"
-      - "--detach-sign"
-      - "${artifact}"
-    artifacts: all
+# signs:
+#   - cmd: gpg
+#     args:
+#       - "--batch"
+#       - "--local-user"
+#       - "{{ .Env.GPG_FINGERPRINT }}"
+#       - "--output"
+#       - "${signature}"
+#       - "--detach-sign"
+#       - "${artifact}"
+#     artifacts: all
 
 changelog:
   sort: asc