6 Commits

Author	SHA1	Message	Date
dependabot[bot]	dd9db0dfd6	chore(deps): bump reviewdog/action-shellcheck from 1.27.0 to 1.32.0 (#70) ... Bumps [reviewdog/action-shellcheck](https://github.com/reviewdog/action-shellcheck) from 1.27.0 to 1.32.0. - [Release notes](https://github.com/reviewdog/action-shellcheck/releases) - [Commits](https://github.com/reviewdog/action-shellcheck/compare/v1.27.0...v1.32.0) --- updated-dependencies: - dependency-name: reviewdog/action-shellcheck dependency-version: 1.32.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-13 15:11:26 +01:00
dependabot[bot]	6f4144efe1	chore(deps): bump actions/checkout from 4 to 6 (#68) ... Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-13 14:47:32 +01:00
vmfunc	fcf9291653	ci: add explicit permissions to all workflows - fixes scorecard token-permissions ... Signed-off-by: vmfunc <celeste@linux.com>	2026-02-13 01:40:22 +01:00
vmfunc	83702e9a41	ci: overhaul workflows - lint, security scanning, release hardening ... - add golangci-lint job to go.yml (parallel with build+test) - add Go 1.23/1.24 version matrix, coverage only on 1.24 - upgrade setup-go@v4 to v5, codecov@v4 to v5 across all workflows - fix check-large-files bug (find|while never exits 1), exclude .git/ - add concurrency groups to push+PR workflows (no duplicate runs) - lowercase all workflow names to match project voice - add gosec, errorlint, gocognit, nilnil, wastedassign, usetesting linters - remove deprecated exportloopref (Go 1.22 fixed loop var capture) - new: govulncheck.yml - Go vuln scanner with call-graph analysis - new: scorecard.yml - OpenSSF supply chain scorecard - new: dependabot.yml - auto-update Go deps + Actions versions - release: SHA256 checksums + SBOM generation for all artifacts - add CODEOWNERS	2026-02-13 01:09:57 +01:00
vmfunc	75350458c1	chore: update github actions to latest versions ... - update actions/checkout from v2/v3 to v4 across all workflows - update reviewdog actions to latest versions - update jetbrains/qodana-action to v2024.3 - update actions/dependency-review-action to v4 - replace deprecated actions/create-release and upload-release-asset with softprops/action-gh-release@v2	2026-01-02 17:20:01 -08:00
vmfunc	ceb8712204	ci: various improvements to workflow	2024-10-15 02:51:52 +02:00