Skip to content

chore: bump Go to 1.27, update Actions and tooling to latest - #4

Merged
cjunius merged 3 commits into
mainfrom
chore/bump-go-1.27-and-actions
Aug 30, 2026
Merged

cjunius merged 3 commits into
mainfrom
chore/bump-go-1.27-and-actions

Conversation

@cjunius

@cjunius cjunius commented Aug 30, 2026

Copy link
Copy Markdown
Owner

Summary

Go 1.27

  • go.mod: go 1.22.3go 1.27.0
  • CI matrix + lint / CodeQL / release workflows build & test on 1.27.x

GitHub Actions (folds in the dependabot github-actions group from #3, which this supersedes)

Action From To
actions/checkout v4 v7
actions/setup-go v5 v7
codecov/codecov-action v4 v7
github/codeql-action v3 v4
golangci/golangci-lint-action v6 v9
goreleaser/goreleaser-action v6 v7

All are pinned to their latest major (checkout v7.0.1, setup-go v7.0.0, codecov v7.0.0, codeql v4, golangci-lint-action v9.3.0, goreleaser v7.2.3).

Tooling to latest

  • golangci-lint v1.61.0v2.13.2 — required migrating .golangci.yml to the v2 schema (formatters gofumpt/goimports split into their own section; linters-settingslinters.settings; issues.exclude-ruleslinters.exclusions.rules). Default linters (errcheck, govet, ineffassign, staticcheck, unused) are implicit in v2 and dropped from the explicit list. Install path updated to the /v2 module in Makefile and pinned in lint.yml.
  • Dockerfile: distroless static-debian12static-debian13 (Debian 13 is now stable)
  • Go module deps: dragontoothmg has no newer tag/commit — already latest
  • govulncheck v1.1.4, goreleaser ~> v2 — already latest

Verification (local, Go 1.27.0)

  • go mod tidy (no go.sum change), go mod verify
  • go build ./..., go vet ./..., go test ./... — pass
  • golangci-lint run ./... (v2.13.2) — 0 issues
  • gofumpt -l . — clean

- go.mod: go 1.22.3 -> 1.27.0
- CI/lint/codeql/release workflows: build/test on Go 1.27.x
- Incorporate dependabot github-actions group bumps (PR #3):
  - actions/checkout v4 -> v7
  - actions/setup-go v5 -> v7
  - codecov/codecov-action v4 -> v7
  - github/codeql-action v3 -> v4
  - golangci/golangci-lint-action v6 -> v9
  - goreleaser/goreleaser-action v6 -> v7

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

- golangci-lint v1.61.0 -> v2.13.2; migrate .golangci.yml to the v2
  schema (formatters split out, exclusions restructured); update the
  install path to the /v2 module in Makefile and the CI pin
- Dockerfile: distroless static-debian12 -> static-debian13 (Debian 13
  is now stable)

Go module deps (dragontoothmg) already at latest; GitHub Actions already
pinned to their latest majors (checkout v7, setup-go v7, codecov v7,
codeql v4, golangci-lint-action v9, goreleaser v7).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@cjunius cjunius changed the title chore: bump Go to 1.27 and update GitHub Actions chore: bump Go to 1.27, update Actions and tooling to latest Aug 30, 2026
v1.1.4 panics ("unexpected expr: *ast.KeyValueExpr") when scanning code
built with Go 1.27; v1.7.0 scans clean.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@cjunius
cjunius merged commit 311df61 into main Aug 30, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants