GitHub

Post-v1.0.0 review follow-ups: CI/supply-chain hardening, test-coverage gaps surfaced by type-parameter diversity, library ergonomics, docs edge cases. Filed from the full agent-stack review run immediately after v1.0.0 shipped.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

v1.0.1

ci: SHA-pin all third-party GitHub Actions in every workflow

ci: add timeout-minutes to every workflow job

ci: branch-protection guard job asserting required checks floor

ci: post-release verification job (attestation + pkg.go.dev)

ci: patch-pin Go toolchain in release workflow for reproducible provenance

test: add type-parameter diversity matrix across the suite

test: add nil-pointer V and zero-value V edge-case tests

test: add Clear concurrency tests (Clear during Store, Clear during Range)

test: extend BDD feature file with CAS/CAD and full concurrency rule

test: add BenchmarkRangeParallel and overhead pairs for Swap/CAS/CAD

test: large-map correctness tests (10k+ entries) for Len/Keys/Values/Map

test: add CompareAndSwap panic test for non-comparable interface V

test: tighten TestRangeDuringWrites to assert no-duplicate-visits

test: extend FuzzConcurrent to drive Swap/Clear/CAS/CAD/Range

test: commit fuzz corpus under testdata/fuzz/

test: add ExampleSyncMap_concurrent for pkg.go.dev

test: build-tag repo-only tests so consumer 'go test ./...' stays clean

feat: pre-allocate Keys/Values/Map slices using Len

fix: normalise Keys/Values nil-vs-empty slice with Map

feat: comma-ok guard remaining type assertions for defence-in-depth

chore: make 'make security' fail-fast when govulncheck is absent

ci: sign release checksums.txt and attach SBOM via GoReleaser

ci: tag-exists pre-flight + demote proxy-warm to advisory

ci: harden Dependabot auto-merge with PR diff allowlist

chore: document CLA_ASSISTANT_PAT rotation + evaluate GitHub App migration

v1.0.1

List view