chore: clear lint debt + supply-chain hardening (26.09)#12
Merged
Conversation
Post-Planning.md tightening pass.
- golangci-lint run ./... now passes clean. 21 baseline findings
resolved: errcheck on Close/Body.Close (defer func() { _ = ...
}()), staticcheck QF1008/QF1012, gocritic ifElseChain and
exitAfterDefer in cmd/console.
- cmd/console main restructured so os.Exit lives in main() and
the real work is in run() int — deferred cleanup now runs on
every error path.
- renovate.json added: weekly gomod minor/patch bundle, auto-merge
for GH Actions + Docker digest bumps, immediate vuln alerts.
- internal/tracing test added: empty-endpoint Setup, middleware
span propagation, HTTPClient transport wrapping.
- semconv bumped 1.26.0 → 1.40.0 to match the otel SDK schema URL.
- FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true in both ci.yml and
release.yml — pre-empts the September 2026 Node.js 20 removal
that would otherwise hard-fail CI.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Post-Planning.md tightening pass — clears lint debt that 26.06's `golangci-lint` integration catches but never fixed, and pre-empts the September 2026 Node.js 20 → 24 transition on GitHub Actions before it bites.
```
$ golangci-lint run ./...
0 issues.
```
Highlights
Test plan
🤖 Generated with Claude Code