296586911f
chore(deps): bump reviewdog/action-markdownlint from 0.27.0 to 0.28.0 ( #370 )
...
Bumps [reviewdog/action-markdownlint](https://github.com/reviewdog/action-markdownlint ) from 0.27.0 to 0.28.0.
- [Release notes](https://github.com/reviewdog/action-markdownlint/releases )
- [Commits](https://github.com/reviewdog/action-markdownlint/compare/v0.27.0...v0.28.0 )
---
updated-dependencies:
- dependency-name: reviewdog/action-markdownlint
dependency-version: 0.28.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 09:37:37 -07:00
61c4d33f5c
chore(deps): bump reviewdog/action-markdownlint from 0.26.2 to 0.27.0 ( #265 )
...
Bumps [reviewdog/action-markdownlint](https://github.com/reviewdog/action-markdownlint ) from 0.26.2 to 0.27.0.
- [Release notes](https://github.com/reviewdog/action-markdownlint/releases )
- [Commits](https://github.com/reviewdog/action-markdownlint/compare/v0.26.2...v0.27.0 )
---
updated-dependencies:
- dependency-name: reviewdog/action-markdownlint
dependency-version: 0.27.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 12:55:29 -07:00
064484ff4d
chore(deps): bump actions/checkout from 6 to 7 ( #143 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 16:49:01 -07:00
1eab6143bb
chore(deps): bump reviewdog/action-markdownlint from 0.24.0 to 0.26.2 ( #73 )
...
Bumps [reviewdog/action-markdownlint](https://github.com/reviewdog/action-markdownlint ) from 0.24.0 to 0.26.2.
- [Release notes](https://github.com/reviewdog/action-markdownlint/releases )
- [Commits](https://github.com/reviewdog/action-markdownlint/compare/v0.24.0...v0.26.2 )
---
updated-dependencies:
- dependency-name: reviewdog/action-markdownlint
dependency-version: 0.26.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 15:11:23 +01:00
6f4144efe1
chore(deps): bump actions/checkout from 4 to 6 ( #68 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 14:47:32 +01:00
vmfunc
fcf9291653
ci: add explicit permissions to all workflows - fixes scorecard token-permissions
...
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 01:40:22 +01:00
vmfunc
83702e9a41
ci: overhaul workflows - lint, security scanning, release hardening
...
- add golangci-lint job to go.yml (parallel with build+test)
- add Go 1.23/1.24 version matrix, coverage only on 1.24
- upgrade setup-go@v4 to v5, codecov@v4 to v5 across all workflows
- fix check-large-files bug (find|while never exits 1), exclude .git/
- add concurrency groups to push+PR workflows (no duplicate runs)
- lowercase all workflow names to match project voice
- add gosec, errorlint, gocognit, nilnil, wastedassign, usetesting linters
- remove deprecated exportloopref (Go 1.22 fixed loop var capture)
- new: govulncheck.yml - Go vuln scanner with call-graph analysis
- new: scorecard.yml - OpenSSF supply chain scorecard
- new: dependabot.yml - auto-update Go deps + Actions versions
- release: SHA256 checksums + SBOM generation for all artifacts
- add CODEOWNERS
2026-02-13 01:09:57 +01:00
vmfunc
75350458c1
chore: update github actions to latest versions
...
- update actions/checkout from v2/v3 to v4 across all workflows
- update reviewdog actions to latest versions
- update jetbrains/qodana-action to v2024.3
- update actions/dependency-review-action to v4
- replace deprecated actions/create-release and upload-release-asset
with softprops/action-gh-release@v2
2026-01-02 17:20:01 -08:00
vmfunc
ceb8712204
ci: various improvements to workflow
2024-10-15 02:51:52 +02:00
