Skip to content

Upgrade Go stack and add CI - #4

Merged
dillonstreator merged 1 commit into
mainfrom
upgrade/go-deps-and-ci
Jul 20, 2026
Merged

Upgrade Go stack and add CI#4
dillonstreator merged 1 commit into
mainfrom
upgrade/go-deps-and-ci

Conversation

@dillonstreator

Copy link
Copy Markdown
Member

Summary

  • Bump Go to 1.25 (toolchain 1.25.12) and refresh chi/v5, OpenTelemetry, and related deps to clear known vulnerabilities
  • Switch to official otelhttp (drop custom fork) by ordering Recoverer after request logging so panic logs still include reqId/traceId
  • Harden Docker (golang:1.25.12 + distroless static nonroot) and add a Go vet/build CI workflow

Test plan

  • go vet ./... and go build . succeed locally
  • govulncheck ./... reports no vulnerabilities
  • Hit /hi, /health, and /panic and confirm request/panic logs include reqId and traceId
  • Confirm CI workflow passes on this PR

Made with Cursor

Bump to Go 1.25.12 to clear stdlib vulns, migrate to chi/v5 and official otelhttp, and harden the Docker image with a Go CI workflow.

Co-authored-by: Cursor <cursoragent@cursor.com>
@dillonstreator
dillonstreator merged commit 9633dae into main Jul 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant