Releases: farcloser/limen
Releases · farcloser/limen
Release list
v0.6.2
Changelog
- 04041ee Merge pull request #184 from farcloser/renovate/farcloser-limen-0.x
- fc1843d Merge pull request #185 from farcloser/claudio/20260929-complexity-comment
- e6db555 Merge pull request #186 from farcloser/claudio/20260929-security-aggregate
- adc5f40 Merge pull request #187 from farcloser/claudio/20260929-baseline-revision
- 02f8441 chore(deps): update dependency farcloser/limen to v0.6.1
- 17e3a52 chore: refresh checksums and converge the limen baseline
- 55ec942 lint go: the suppression check fails a directive that silences nothing
- f1518ef lint-go: depguard's allow list covers production code only
- 7ca6673 lint-go: gocyclo and funlen off, gocognit owns complexity
- 46fe96b lint-go: staticcheck QF1001 and revive useless-break off
- 9568e7f lint-go: tests are exempt from five linters in the baseline
- 1e644c5 lint-go: the complexity comment stops promising a test exemption
- 21fdebb lint-go: varnamelen accepts Go's own short names
- f7f30b2 security: the workflow runs the project's
just security
v0.6.1
v0.6.0
Changelog
- 36e5d06 Merge branch 'main' into renovate/farcloser-limen-0.x
- 0db70af Merge pull request #147 from farcloser/renovate/farcloser-limen-0.x
- 0f36672 Merge pull request #151 from farcloser/claudio/20260920-registry-curl
- 0c179b8 Merge pull request #152 from farcloser/claudio/20260920-curl-baseline
- 61ac86e Merge pull request #153 from farcloser/renovate/github.com-forkcloser-dot-1.x
- dde42e7 Merge pull request #154 from farcloser/claudio/20260920-coreutils-names
- a8f1251 Merge pull request #155 from farcloser/claudio/20260920-vuln-binaries
- a070c85 Merge pull request #156 from farcloser/claudio/20260920-aqua-version
- b3fa920 Merge pull request #157 from farcloser/renovate/aqua-tools
- 308b18b Merge pull request #158 from farcloser/claudio/20260920-golangci-tool
- 8e95af2 Merge pull request #160 from farcloser/claudio/20260920-baseline-1
- ffa25bb Merge pull request #161 from farcloser/claudio/20260920-design-git
- f49b265 Merge pull request #162 from farcloser/claudio/20260920-nilaway
- ad83e96 Merge pull request #163 from farcloser/claudio/20260920-lint-links
- a7afa49 Merge pull request #164 from farcloser/claudio/20260920-lint-go-baseline
- 2c27ef2 Merge pull request #165 from farcloser/claudio/20260920-security
- 14b5d46 Merge pull request #166 from farcloser/claudio/20260920-perf
- 1766474 Merge pull request #167 from farcloser/claudio/20260920-baseline-2
- 25a7527 Merge pull request #168 from farcloser/claudio/20260927-multiline-if-init
- ee8b734 Merge pull request #169 from farcloser/claudio/20260927-reassign
- c368d64 Merge pull request #170 from farcloser/claudio/20260928-redundant-import-alias
- 543a075 Merge pull request #171 from farcloser/renovate/aqua-tools
- c3b9b0d Merge pull request #172 from farcloser/claudio/20260928-prefer-filepath-join
- 64aaaf5 Merge pull request #173 from farcloser/claudio/20260928-gci-siblings
- 26d4524 Merge pull request #174 from farcloser/claudio/20260928-fix-allowlist
- 43cf642 Merge pull request #175 from farcloser/claudio/20260928-links-second-pass
- 035f464 Merge pull request #176 from farcloser/claudio/20260928-constant-kind
- 84b62b4 Merge pull request #177 from farcloser/claudio/20260928-sloppy-reassign
- 0c220d5 Merge pull request #178 from farcloser/claudio/20260928-shadow-fix-form
- 1b8e43f Merge pull request #179 from farcloser/claudio/20260928-team-role
- 01decdc Merge pull request #180 from farcloser/claudio/20260928-errorlint-comparison
- cd88955 Merge pull request #181 from farcloser/claudio/20260928-awk-tmpdir
- 8f78a21 Merge pull request #182 from farcloser/claudio/20260929-seeded-header
- 0e8bbe7 aqua: pin forkcloser/curl in the baseline; the write job links its tools
- 3089547 baseline: complexity, length and literals move from revive to the single-purpose linters
- 452d76a baseline: errcheck excludes the Fprint family whatever the writer
- 49d9cab baseline: errcheck owns unchecked errors; revive's unhandled-error is off
- b7d16ee baseline: every finding on a line is shown, not the first
- f2288fc baseline: every gocritic checker, the duplicates and the pointer heuristics excepted
- af2cf1a baseline: every govet analyzer, fieldalignment excepted
- 8f39615 baseline: gocritic's preferFilepathJoin off, its fix changes behavior
- 56efcac baseline: gocritic's sloppyReassign off, it contradicts govet shadow
- 7aa40e9 baseline: goimports owns the import form, redundant-import-alias off
- 6402f36 baseline: goimports repairs what the fixers leave, crypto-hash off
- bf3e5aa baseline: golangci-lint v2.14.0, revive's multiline-if-init disabled
- b6b3a23 baseline: modernize applies to tests too
- b099ec0 baseline: nolintlint enforces the book's shape for a suppression
- 384f86c baseline: one tool per check; the duplicate and no-value linters go
- 1b609cc baseline: reassign guards every package variable, not only errors
- 4e3a47c baseline: the file is the reviewed record, verbatim
- 866e94a baseline: the per-linter settings measured at no cost, and the doctrine stated
- 852e009 baseline: the test exclusions are each project's own
- f703f8e baseline: usestdlibvars' constant-kind off, it matches ordinary labels
- 925eecf baseline: usetesting asks for t.Context and t.TempDir in tests
- 8723acc book: gocritic's rule load is the source-build argument met in the wild
- 9bfb76c book: how a shadowed error is fixed, reusing the variable in the if
- 0f5ac6a chore(deps): update aqua tools
- 4c8a83a chore(deps): update dependency aquaproj/aqua-registry to v4.567.0
- 9a74e7d chore(deps): update dependency farcloser/limen to v0.5.2
- d299d6e chore(deps): update module github.com/forkcloser/dot to v1.0.1
- 736800f chore: refresh checksums and converge the limen baseline
- 211af9d chore: refresh checksums and converge the limen baseline
- b64ec4a chore: refresh checksums and converge the limen baseline
- 28d8ca1 design: a pinned git for the hermetic rig, three options measured
- 2d4447a github: the org audit reads the team's role, not the caller's access
- ad478e2 github: the ruleset requires the security check where the lane exists
- 0a3e167 just: a perf family for the reports that judge nothing
- b15c5cf just: a security family for the scans that are not linters
- 1a15721 just: fix go applies only the linter fixes that cannot change behavior
- 0705f30 just: fix go proves the tree still compiles before it returns
- 883fffe just: lint links re-checks server errors once, a minute later
- 3c3581a just: lint shell hands awk its temp dir through the environment
- 3f060dd limen-lint-go: a project's gci sections go before localmodule
- e8f5492 lint-go: errorlint owns error comparisons again
- a0e6720 lint-go: the baseline is .limen/lint-go.yaml, pinned like its neighbours
- 447008e lint: NilAway as a lane of its own, and stale revive directives reported
- cd7ff5b lint: a binaries lane that scans every pinned Go binary for known vulnerabilities
- 836c243 lint: one Go lint baseline, per-project carve-outs, rendered at lint time
- 656b556 lint: the links overlay is .lint-links.toml, named after the lane
- be2bdfa lychee: the retry settings never covered a 503, say so
- 8fe9923 registry: coreutils under every name it provides
- b352587 registry: forkcloser/curl, the pinned curl for the hermetic PATH
- 7f110ff renovate: watch the aqua pin in the setup-aqua action
- 4419f14 rules: the seeded .lint-go.yaml shows every key the overlay accepts
- 23a887a tools: golangci-lint built by the pinned toolchain, in a module of its own
- 3f0b8c0 workflows: a canonical security lane, apart from ci
- e6be5a5 workflows: the seeded ones say they are the project's own
v0.5.2
v0.5.1
Changelog
- 0f810fb Merge pull request #146 from farcloser/claudio/20260920-renovate-seed
- d6d95bb Merge pull request #148 from farcloser/claudio/20260920-renovate-groups
- 761d533 Merge pull request #149 from farcloser/claudio/20260920-checksum-verifiers
- 88bbd8c renovate: group tool, action and Go module bumps into one pull request each
- ecccb16 renovate: seed from a file of its own, and name a superseded config
- 22f1e35 workflows: link the verifier proxies before the pins refresh
v0.5.0
Changelog
- 01e633f Merge pull request #101 from farcloser/renovate/aquaproj-aqua-registry-4.x
- 02e6a99 Merge pull request #107 from farcloser/claudio/20260912-renovate-processing
- f6386ba Merge pull request #108 from farcloser/renovate/farcloser-limen-0.x
- f947503 Merge pull request #109 from farcloser/claudio/20260913-ci-caches
- 2c88619 Merge pull request #110 from farcloser/claudio/20260913-windows-defender
- cb053c1 Merge pull request #111 from farcloser/claudio/20260913-lint-shell-forks
- 1bfe95b Merge pull request #112 from farcloser/claudio/20260913-setup-aqua-revoke
- 8d5a73f Merge pull request #113 from farcloser/claudio/20260913-drop-measurement
- 144e412 Merge pull request #114 from farcloser/claudio/20260913-toolchain-check-stderr
- 44a319e Merge pull request #115 from farcloser/claudio/20260913-drop-defender
- aa7dd93 Merge pull request #116 from farcloser/claudio/20260913-renovate-first-run
- b1aea32 Merge pull request #117 from farcloser/claudio/20260913-dot-forkcloser
- 26b6b55 Merge pull request #118 from farcloser/claudio/20260913-tooling-split
- 9d03c75 Merge pull request #120 from farcloser/claudio/20260913-gomod-major-tidy
- 2b0d412 Merge pull request #121 from farcloser/claudio/20260913-contribute-grep
- 7db0c7d Merge pull request #122 from farcloser/claudio/20260913-one-commit-per-thing
- 1a77778 Merge pull request #123 from farcloser/claudio/20260913-curl-repo-name
- 7775a16 Merge pull request #124 from farcloser/claudio/20260913-new-repository
- 2c37d11 Merge pull request #125 from farcloser/claudio/20260913-no-issues
- b964b4c Merge pull request #126 from farcloser/claudio/20260913-contract-tests
- 075306b Merge pull request #127 from farcloser/claudio/20260913-gate-create
- c145927 Merge pull request #128 from farcloser/renovate/cli-cli-2.x
- 857d848 Merge pull request #129 from farcloser/claudio/20260918-renovate-idempotent
- 3d4a613 Merge pull request #130 from farcloser/claudio/20260918-automerge-plan
- 03d05be Merge pull request #131 from farcloser/claudio/20260918-retired-table
- 334aa11 Merge pull request #132 from farcloser/claudio/20260918-identity-gh
- 1257eb9 Merge pull request #133 from farcloser/claudio/20260918-app-context
- 9abd4e2 Merge pull request #134 from farcloser/claudio/20260918-cli-package
- 609be1a Merge pull request #135 from farcloser/claudio/20260919-rules-blackbox
- 7b8eac9 Merge pull request #136 from farcloser/claudio/20260919-github-blackbox
- 3464b68 Merge pull request #137 from farcloser/claudio/20260919-runner-images
- c6bac11 Merge pull request #138 from farcloser/claudio/20260919-gitattributes-patches
- 12d75dc Merge pull request #139 from farcloser/renovate/aquaproj-aqua-registry-4.x
- aa25bca Merge pull request #140 from farcloser/claudio/20260919-owner-handle
- 9399d6a Merge pull request #141 from farcloser/claudio/20260919-pins
- ede10cf Merge pull request #142 from farcloser/claudio/20260919-github-context
- c6f4c93 Merge pull request #143 from farcloser/claudio/20260920-dockerfile-lane-trap
- 9332dfa Merge pull request #144 from farcloser/claudio/20260919-verify-clearsign
- efe8983 Merge pull request #145 from farcloser/claudio/20260920-deps
- ecdd723 agents: no GitHub issues unless the human asks; the owning session gets the message
- 66f2695 agents: on GitHub, the human is @apostasie
- b98be18 agents: one commit per thing, iteration squashed into the commit it amends
- 79f0ac6 book: the aqua / tools/go.mod line, and golangci-lint as the exception
- 3bcf569 book: the fleet's curl packages repository is forkcloser/curl
- 6a365c6 book: the order of creating a repository, and the two traps in it
- 57adf16 book: the red first run on a Renovate bump is expected, and why
- 29aa3c3 book: what the CI matrix proves, and why a lane is never skipped
- 3337da0 chore(deps): update dependency aquaproj/aqua-registry to v4.563.0
- 6d22580 chore(deps): update dependency aquaproj/aqua-registry to v4.564.0
- eb923b0 chore(deps): update dependency cli/cli to v2.101.0
- 0a260be chore(deps): update dependency farcloser/limen to v0.4.0
- 51559b4 chore: update aqua checksums and converge the limen baseline
- 8530bc4 chore: update aqua checksums and converge the limen baseline
- f778c53 chore: update aqua checksums and converge the limen baseline
- 4822379 chore: update aqua checksums and converge the limen baseline
- f79d2b5 ci: cache the Go build and aqua's store on the verify legs
- 074fcb1 ci: drop the Defender step, measured neutral
- ce9d706 ci: drop the cache-size measurement step
- efa6eb9 ci: turn Defender's real-time scan off on the windows legs
- 8d3a53b cli: move the command into internal/cli, tested from outside through Run
- 3c31688 contribute: the tooling-link grep must not match the trailer it mandates
- 103d930 doctrine: consumers get the contract only; tests are black-box, no indirection
- 4c1be1b gitattributes: vendored diffs are exempt from the whitespace check
- 102a964 github: assert Renovate is processing the repository, not merely installed
- ae2df28 github: black-box tests, and the gh seam goes
- 47a9ff5 github: do not plan auto-merge on a private repository in a Free organization
- 879fac6 github: never create limen:main on a repository whose ci.yaml has no gate job
- 8757ba1 github: one context for the run, from the CLI down to every gh call
- 44de074 github: the App registration takes a context; its test seams go
- 4151767 github: the users lookup honors GITHUB_API_URL instead of a test seam
- 223d4d7 gotools: dot is forkcloser/dot, and a retired directive is removed
- 3d817ac lint: let the golangci toolchain probe fail loudly, or not at all
- e54c138 lint: name the line when the dockerfile lane dies silently
- 9407f25 lint: shellcheck with a handful of processes, not one per file
- 35267c0 pins: artifacts a build fetches by hand, pinned by digest in one file
- 1e8c61d pins: verify PGP-clearsigned sums in-process, with limen's own OpenPGP reader
- 568461f renovate: keep go mod tidy running on major Go bumps, with the rewrite tool pinned
- 39c9323 renovate: runner images are targets, not dependencies to bump
- eee07fc rules: black-box tests, and the go and aqua seams go
- 7d4309f rules: derive the retired aqua packages from the gotools tables
- 99675a6 rules: leave a value-identical renovate.json untouched
- fc87595 setup-aqua: guard the installer's own download against schannel revocation
- a804818 tools: update every pin to the latest release before the release
Contributors
apostasie
Assets 9
v0.4.0
Changelog
- 6ca4de9 Merge pull request #100 from farcloser/claudio/20260912-quint
- 78e0cbb Merge pull request #102 from farcloser/claudio/20260912-contribute-sandbox
- b4bab42 Merge pull request #103 from farcloser/claudio/20260912-tools-go
- 108d3bd Merge pull request #104 from farcloser/claudio/20260912-tools-update-all
- 5b4580d Merge pull request #105 from farcloser/claudio/20260912-tools-bump
- a293ea1 Merge pull request #106 from farcloser/claudio/20260912-readme-case
- 28ec280 Merge pull request #83 from farcloser/renovate/farcloser-limen-0.x
- a8dd217 Merge pull request #86 from farcloser/claudio/20260908-gofumpt-extra
- dcad6f9 Merge pull request #87 from farcloser/renovate/go-github.com-moby-buildkit-vulnerability
- cbb9815 Merge pull request #88 from farcloser/renovate/go-golang.org-x-image-vulnerability
- c657906 Merge pull request #89 from farcloser/claudio/20260907-org-security-config
- 48aaae7 Merge pull request #90 from farcloser/renovate/goreleaser-goreleaser-2.x
- 6dbfbfc Merge pull request #91 from farcloser/renovate/golang.org-x-tools-0.x
- 7e60b1c Merge pull request #92 from farcloser/renovate/golang.org-x-vuln-1.x
- 9af24e0 Merge pull request #93 from farcloser/claudio/20260912-all-repos
- fb9da1c Merge pull request #95 from farcloser/claudio/20260912-paginate
- 2aa6d9f Merge pull request #96 from farcloser/claudio/20260912-enforced-422
- 5d20fda Merge pull request #97 from farcloser/claudio/20260912-contribute-fetch
- 47dba8f Merge pull request #98 from farcloser/claudio/20260912-alerts-unverifiable
- 3001f5b Merge pull request #99 from farcloser/claudio/20260913-require-approval
- 2977dc4 aqua: add Quint to the baseline chain
- 33bef58 aqua: move every tool to its latest, in one run
- 111ea26 chore(deps): update dependency farcloser/limen to v0.3.0
- e49e9bd chore(deps): update dependency goreleaser/goreleaser to v2.18.1
- a739445 chore(deps): update module github.com/moby/buildkit to v0.31.1 [security]
- 0e74bd5 chore(deps): update module golang.org/x/image to v0.41.0 [security]
- 452c857 chore(deps): update module golang.org/x/tools to v0.50.0
- 0bf1348 chore(deps): update module golang.org/x/vuln to v1.8.0
- dc96ad5 chore: update aqua checksums and converge the limen baseline
- 31ffa9d chore: update aqua checksums and converge the limen baseline
- fd7ffc9 contribute: cut the worktree under .claude/worktrees, without touching .git/config
- 99341f3 contribute: fetch through git c, and cut the worktree from origin/main
- bf47931 github: assert Dependabot security updates off in org security configurations
- 3cf0331 github: do not read an unreadable Dependabot-alerts endpoint as disabled
- 0f5a4c4 github: name the organization when an enforced configuration refuses a write
- 3e8ecb4 github: paginate the sweep's repository listing
- 2228bf7 github: read every list whole
- a0f4522 github: require one approving review on the default branch
- ea0050a github: sweep every repository in an organization with -all-repos
- 9f854f7 golangci: spell out gofumpt's extra rules; the deprecation names only one
- a3b523e rules: find README and LICENSE case-insensitively, by their on-disk name
- b079da2 tools: add, set, update and remove the Go tool directives too
- 211a814 tools: update every tool when called with no argument
v0.3.0
Changelog
- 706ff1f Merge pull request #79 from farcloser/renovate/farcloser-limen-0.x
- 28e60e7 Merge pull request #84 from farcloser/claudio/20260908-commit-payload
- 0ee8e4e Merge pull request #85 from farcloser/claudio/20260907-no-go-install
- 98c52e0 chore(deps): update dependency farcloser/limen to v0.2.1
- cc20fcf chore: update aqua checksums and converge the limen baseline
- af81fca ci: the tools job comment stops naming go_install
- 46d71e5 renovate: the go_install manager retires with the pins
- 3186c22 rules: the gotools rule reaches every repository
- 0e4222c tools: every Go-built tool is a tools/go.mod tool directive
- 7db8033 update-aqua-checksum: build the commit payload on disk, never on a command line
v0.2.2
Changelog
- 7ac3d3a AGENTS.md: broken tooling is reported, never worked around in silence
- e714c3a Merge pull request #80 from farcloser/claudio/20260907-report-breakage
- e3aadc4 Merge pull request #82 from farcloser/claudio/20260907-renovate-json
- 46c3950 renovate: the seeded config is plain renovate.json, and enables forkProcessing