Skip to content

Commit 22efce0

Browse files
james-d-elliottjames-d-elliott
authored
ci: update for go 1.26 (#12)
1 parent 8d91f25 commit 22efce0

6 files changed

Lines changed: 156 additions & 39 deletions

File tree

‎.github/workflows/codeql.yml‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
name: 'CodeQL'
2+
on:
3+
push:
4+
branches:
5+
- 'master'
6+
pull_request:
7+
branches:
8+
- 'master'
9+
schedule:
10+
- cron: '0 0 * * 1'
11+
permissions:
12+
contents: 'read'
13+
jobs:
14+
analyze:
15+
name: 'Analyze'
16+
runs-on: 'ubuntu-latest'
17+
permissions:
18+
actions: 'read'
19+
contents: 'read'
20+
security-events: 'write'
21+
strategy:
22+
fail-fast: false
23+
matrix:
24+
language:
25+
- 'go'
26+
steps:
27+
- name: 'Harden Runner'
28+
uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
29+
with:
30+
egress-policy: 'audit'
31+
- name: 'Checkout'
32+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
33+
- name: 'Initialize CodeQL'
34+
uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
35+
with:
36+
languages: ${{ matrix.language }}
37+
- name: 'Build'
38+
uses: github/codeql-action/autobuild@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
39+
- name: 'Perform CodeQL Analysis'
40+
uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
41+
with:
42+
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: 'Dependency Review'
2+
on:
3+
pull_request: {}
4+
permissions:
5+
contents: 'read'
6+
jobs:
7+
dependency-review:
8+
name: 'Dependency Review'
9+
runs-on: 'ubuntu-latest'
10+
steps:
11+
- name: 'Harden Runner'
12+
uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
13+
with:
14+
egress-policy: 'audit'
15+
- name: 'Checkout Repository'
16+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
17+
- name: 'Dependency Review'
18+
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2

‎.github/workflows/go.yml‎

Lines changed: 28 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,62 @@
1-
name: "Go"
1+
name: 'Go'
22
on:
33
pull_request: {}
44
push:
55
branches:
6-
- "master"
6+
- 'master'
77
permissions:
8-
contents: "read"
8+
contents: 'read'
99
jobs:
1010
cover:
11-
name: "Coverage"
12-
runs-on: "ubuntu-latest"
11+
name: 'Coverage'
12+
runs-on: 'ubuntu-latest'
1313
steps:
14-
- name: "Harden Runner"
15-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
14+
- name: 'Harden Runner'
15+
uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
1616
with:
17-
egress-policy: "audit"
18-
- name: "Set up Go"
17+
egress-policy: 'audit'
18+
- name: 'Set up Go'
1919
uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
2020
with:
21-
go-version: 1.25
22-
- name: "Checkout"
21+
go-version: 1.26
22+
- name: 'Checkout'
2323
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
24-
- name: "Get Dependencies"
24+
- name: 'Get Dependencies'
2525
run: |
26-
go mod download
27-
- name: "Test"
26+
go get -v -t -d ./...
27+
- name: 'Test'
2828
run: |
2929
go test -coverprofile=coverage.txt -v ./...
30-
- name: "Coverage"
30+
- name: 'Coverage'
3131
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
3232
with:
3333
token: ${{ secrets.CODECOV_TOKEN }}
3434
build:
35-
name: "Build"
36-
runs-on: "ubuntu-latest"
35+
name: 'Build and Test'
36+
runs-on: 'ubuntu-latest'
3737
strategy:
3838
matrix:
3939
go:
40-
- "1.25"
40+
- '1.25'
41+
- '1.26'
4142
fail-fast: false
4243
steps:
43-
- name: "Harden Runner"
44-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
44+
- name: 'Harden Runner'
45+
uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
4546
with:
46-
egress-policy: "audit"
47-
- name: "Set up Go ${{ matrix.go }}"
47+
egress-policy: 'audit'
48+
- name: 'Set up Go ${{ matrix.go }}'
4849
uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
4950
with:
5051
go-version: ${{ matrix.go }}
51-
- name: "Checkout"
52+
- name: 'Checkout'
5253
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
53-
- name: "Get Dependencies"
54+
- name: 'Get Dependencies'
5455
run: |
55-
go get -v -t ./...
56-
- name: "Build"
56+
go get -v -t -d ./...
57+
- name: 'Build'
5758
run: |
5859
go build -v ./...
59-
- name: "Test"
60+
- name: 'Test'
6061
run: |
6162
go test -v ./...

‎.github/workflows/scorecards.yml‎

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
name: 'Scorecard'
2+
on:
3+
branch_protection_rule: {}
4+
schedule:
5+
- cron: '20 7 * * 2'
6+
push:
7+
branches:
8+
- 'master'
9+
permissions: 'read-all'
10+
jobs:
11+
analysis:
12+
name: 'Analysis'
13+
runs-on: 'ubuntu-latest'
14+
permissions:
15+
security-events: 'write'
16+
id-token: 'write'
17+
contents: 'read'
18+
actions: 'read'
19+
steps:
20+
- name: 'Harden Runner'
21+
uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
22+
with:
23+
egress-policy: 'audit'
24+
- name: 'Checkout'
25+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
26+
with:
27+
persist-credentials: false
28+
- name: 'Run'
29+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
30+
with:
31+
results_file: 'results.sarif'
32+
results_format: 'sarif'
33+
publish_results: true
34+
- name: 'Upload'
35+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
36+
with:
37+
name: 'SARIF file'
38+
path: 'results.sarif'
39+
retention-days: 5
40+
- name: 'Upload to Code Scanning Dashboard'
41+
uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
42+
with:
43+
sarif_file: 'results.sarif'

‎.renovaterc‎

Lines changed: 24 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,27 +1,40 @@
11
{
22
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
3+
"constraints": {
4+
"go": "1.26"
5+
},
36
"extends": [
47
"config:recommended",
58
":semanticCommitTypeAll(build)",
6-
":separatePatchReleases",
9+
":separatePatchReleases"
710
],
8-
"branchPrefix": "renovate-",
9-
"rebaseWhen": "conflicted",
1011
"ignorePresets": [
12+
":combinePatchMinorReleases",
1113
":prHourlyLimit2",
12-
":semanticPrefixFixDepsChoreOthers",
13-
"workarounds:all"
14+
":semanticPrefixFixDepsChoreOthers"
1415
],
15-
"prConcurrentLimit": 10,
16-
"prHourlyLimit": 100,
1716
"enabledManagers": [
18-
"docker-compose",
19-
"dockerfile",
20-
"github-actions",
2117
"gomod",
22-
"npm"
18+
"github-actions"
2319
],
2420
"postUpdateOptions": [
2521
"gomodTidy"
22+
],
23+
"branchPrefix": "renovate-",
24+
"rebaseWhen": "conflicted",
25+
"prConcurrentLimit": 10,
26+
"prHourlyLimit": 100,
27+
"labels": [
28+
"dependencies"
29+
],
30+
"packageRules": [
31+
{
32+
"matchDatasources": [
33+
"go"
34+
],
35+
"addLabels": [
36+
"go"
37+
]
38+
}
2639
]
2740
}

‎go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ module github.com/go-krb5/x
22

33
go 1.25.0
44

5-
toolchain go1.25.7
5+
toolchain go1.26.0
66

77
require (
88
github.com/google/uuid v1.6.0

0 commit comments

Comments
 (0)