Merge branch 'master' into agent/engineer-linux/a97ce245

Author: leaanthony

.github/workflows/auto-changelog-v3.yml

@@ -15,6 +15,8 @@ jobs:
   auto-changelog:
     if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
 
     permissions:
       contents: write

.github/workflows/build-and-test-v3.yml

@@ -95,6 +95,8 @@ jobs:
     runs-on: ${{ matrix.os }}
     if: github.base_ref == 'master'
     timeout-minutes: 25
+    env:
+      GOWORK: "off"
     strategy:
       fail-fast: false
       matrix:
@@ -198,6 +200,8 @@ jobs:
     needs: [test_js, test_go]
     runs-on: ${{ matrix.os }}
     if: github.base_ref == 'master'
+    env:
+      GOWORK: "off"
     strategy:
       fail-fast: false
       matrix:

.github/workflows/build-and-test.yml

@@ -13,6 +13,8 @@ jobs:
     name: Run Go Tests
     if: github.repository == 'wailsapp/wails'
     runs-on: ${{ matrix.os }}
+    env:
+      GOWORK: "off"
     strategy:
       matrix:
         os: [ubuntu-22.04, ubuntu-24.04, windows-latest, macos-latest]
@@ -86,6 +88,8 @@ jobs:
     name: Test Templates
     needs: test_go
     runs-on: ${{ matrix.os }}
+    env:
+      GOWORK: "off"
     strategy:
       fail-fast: true
       matrix:

.github/workflows/build-cross-image.yml

@@ -37,6 +37,8 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
     permissions:
       contents: read
       packages: write
@@ -110,6 +112,8 @@ jobs:
     needs: build
     if: ${{ inputs.skip_tests != 'true' }}
     runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
     strategy:
       fail-fast: false
       matrix:

.github/workflows/bump-webview2-v3.yml

@@ -0,0 +1,62 @@
+name: Bump webview2 in v3
+
+on:
+  repository_dispatch:
+    types: [bump-webview2-v3]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'webview2 version to bump to (e.g., v1.0.24)'
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  bump:
+    runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
+          cache: true
+          cache-dependency-path: "v3/go.sum"
+
+      - name: Determine version
+        id: version
+        run: |
+          if [ "${{ github.event_name }}" = "repository_dispatch" ]; then
+            VERSION="${{ github.event.client_payload.version }}"
+          else
+            VERSION="${{ inputs.version }}"
+          fi
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Bumping webview2 to version: $VERSION"
+
+      - name: Update v3 go.mod
+        working-directory: v3
+        run: |
+          go get github.com/wailsapp/wails/webview2@${{ steps.version.outputs.version }}
+          go mod tidy
+
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: bump/webview2-${{ steps.version.outputs.version }}
+          title: "chore(v3): bump webview2 to ${{ steps.version.outputs.version }}"
+          body: |
+            Bumps webview2 to version ${{ steps.version.outputs.version }}
+
+            Triggered by release-webview2 workflow.
+          commit-message: "chore(v3): bump webview2 to ${{ steps.version.outputs.version }}"
+          labels: dependencies, v3

.github/workflows/changelog-v3.yml

@@ -15,6 +15,8 @@ on:
 jobs:
   validate:
     runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
     permissions:
       contents: write
       pull-requests: write

.github/workflows/cross-compile-test-v3.yml

@@ -38,6 +38,8 @@ jobs:
     needs: check_approval
     runs-on: ${{ matrix.runner }}
     if: needs.check_approval.outputs.approved == 'true'
+    env:
+      GOWORK: "off"
     strategy:
       fail-fast: false
       matrix:

.github/workflows/nightly-release-v3.yml

@@ -19,6 +19,8 @@ on:
 jobs:
   nightly-release:
     runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
 
     permissions:
       contents: write

.github/workflows/pr-master.yml

@@ -10,6 +10,8 @@ on:
   workflow_dispatch: {}
 
 name: PR Checks (master)
+permissions:
+  contents: read
 
 jobs:
   check_docs:
@@ -52,6 +54,8 @@ jobs:
           )
         )
       )
+    env:
+      GOWORK: "off"
     strategy:
       matrix:
         os: [ubuntu-22.04, windows-latest, macos-latest, ubuntu-24.04]
@@ -98,6 +102,25 @@ jobs:
         working-directory: ./v2
         run: go test -v -tags webkit2_41 ./...
 
+  # Gate job: provides the bare "Run Go Tests" check name that branch protection requires.
+  # The matrix job above posts "Run Go Tests (os, version)" per platform; this job
+  # aggregates those results under the exact name the rule expects.
+  test_go_gate:
+    name: Run Go Tests
+    runs-on: ubuntu-latest
+    needs: [test_go]
+    if: always()
+    steps:
+      - name: Check matrix result
+        run: |
+          result="${{ needs.test_go.result }}"
+          if [[ "$result" == "success" || "$result" == "skipped" ]]; then
+            echo "Go tests result: $result — gate passed"
+          else
+            echo "Go tests result: $result — gate failed"
+            exit 1
+          fi
+
   # This job will run instead of test_go for the update-sponsors branch
   skip_tests:
     name: Skip Tests (Sponsor Update)
@@ -109,3 +132,47 @@ jobs:
           echo "Skipping tests for sponsor update branch"
           echo "This is an automated update of the sponsors image."
         continue-on-error: true
+
+  # Aggregate job that satisfies the "Run Go Tests" branch protection required check.
+  # Matrix jobs report as "Run Go Tests (os, version)" — no single check with the bare
+  # name is ever posted, so the requirement is never fulfilled without this fan-in job.
+  go_test_results:
+    name: Run Go Tests
+    if: >
+      always() &&
+      github.repository == 'wailsapp/wails' &&
+      (
+        github.event.pull_request.head.ref == 'update-sponsors' ||
+        (
+          github.event.pull_request.head.ref != 'update-sponsors' &&
+          (
+            github.event_name == 'workflow_dispatch' ||
+            (
+              github.event.pull_request.base.ref == 'master' &&
+              (
+                github.event_name == 'pull_request' ||
+                (github.event_name == 'pull_request_review' && github.event.review.state == 'approved')
+              )
+            )
+          )
+        )
+      )
+    needs: [test_go, skip_tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          test_result="${{ needs.test_go.result }}"
+          skip_result="${{ needs.skip_tests.result }}"
+          branch="${{ github.event.pull_request.head.ref }}"
+
+          if [[ "$test_result" == "success" ]]; then
+            exit 0
+          fi
+
+          if [[ "$branch" == "update-sponsors" && "$skip_result" == "success" ]]; then
+            exit 0
+          fi
+
+          echo "Go tests result: $test_result"
+          echo "Skip tests result: $skip_result"
+          exit 1

.github/workflows/release-webview2.yml

@@ -0,0 +1,91 @@
+name: Release webview2
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to release (e.g., v1.0.24). Leave empty to auto-increment.'
+        required: false
+        type: string
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    env:
+      GOWORK: "off"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
+          cache: true
+          cache-dependency-path: "webview2/go.sum"
+
+      - name: Determine next version
+        id: version
+        run: |
+          if [ -n "${{ inputs.version }}" ]; then
+            VERSION="${{ inputs.version }}"
+          else
+            # Auto-increment patch from last webview2/v* tag
+            LAST_TAG=$(git tag -l "webview2/v*" | sort -V | tail -n 1)
+            if [ -z "$LAST_TAG" ]; then
+              VERSION="v1.0.24"
+            else
+              # Extract version number without webview2/ prefix
+              LAST_VERSION=${LAST_TAG#webview2/}
+              # Increment patch version
+              MAJOR=$(echo $LAST_VERSION | cut -d. -f1)
+              MINOR=$(echo $LAST_VERSION | cut -d. -f2)
+              PATCH=$(echo $LAST_VERSION | cut -d. -f3)
+              PATCH=$((PATCH + 1))
+              VERSION="v${MAJOR}.${MINOR}.${PATCH}"
+            fi
+          fi
+
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Releasing webview2 at version: $VERSION"
+
+      - name: Build and test webview2
+        working-directory: webview2
+        run: |
+          echo "Building webview2..."
+          go build ./...
+          go test ./...
+
+      - name: Create and push tag
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -a "webview2/${{ steps.version.outputs.version }}" -m "Release webview2 ${{ steps.version.outputs.version }}"
+          git push origin "webview2/${{ steps.version.outputs.version }}"
+
+      - name: Create GitHub release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: webview2/${{ steps.version.outputs.version }}
+          release_name: webview2 ${{ steps.version.outputs.version }}
+          body: |
+            Release of webview2 ${{ steps.version.outputs.version }}
+          draft: false
+          prerelease: false
+          latest: false
+
+      - name: Trigger bump workflow
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          event-type: bump-webview2-v3
+          client-payload:
+            version: ${{ steps.version.outputs.version }}