v0.6.0

Changelog

• 36e5d06 Merge branch 'main' into renovate/farcloser-limen-0.x
• 0db70af Merge pull request #147 from farcloser/renovate/farcloser-limen-0.x
• 0f36672 Merge pull request #151 from farcloser/claudio/20260920-registry-curl
• 0c179b8 Merge pull request #152 from farcloser/claudio/20260920-curl-baseline
• 61ac86e Merge pull request #153 from farcloser/renovate/github.com-forkcloser-dot-1.x
• dde42e7 Merge pull request #154 from farcloser/claudio/20260920-coreutils-names
• a8f1251 Merge pull request #155 from farcloser/claudio/20260920-vuln-binaries
• a070c85 Merge pull request #156 from farcloser/claudio/20260920-aqua-version
• b3fa920 Merge pull request #157 from farcloser/renovate/aqua-tools
• 308b18b Merge pull request #158 from farcloser/claudio/20260920-golangci-tool
• 8e95af2 Merge pull request #160 from farcloser/claudio/20260920-baseline-1
• ffa25bb Merge pull request #161 from farcloser/claudio/20260920-design-git
• f49b265 Merge pull request #162 from farcloser/claudio/20260920-nilaway
• ad83e96 Merge pull request #163 from farcloser/claudio/20260920-lint-links
• a7afa49 Merge pull request #164 from farcloser/claudio/20260920-lint-go-baseline
• 2c27ef2 Merge pull request #165 from farcloser/claudio/20260920-security
• 14b5d46 Merge pull request #166 from farcloser/claudio/20260920-perf
• 1766474 Merge pull request #167 from farcloser/claudio/20260920-baseline-2
• 25a7527 Merge pull request #168 from farcloser/claudio/20260927-multiline-if-init
• ee8b734 Merge pull request #169 from farcloser/claudio/20260927-reassign
• c368d64 Merge pull request #170 from farcloser/claudio/20260928-redundant-import-alias
• 543a075 Merge pull request #171 from farcloser/renovate/aqua-tools
• c3b9b0d Merge pull request #172 from farcloser/claudio/20260928-prefer-filepath-join
• 64aaaf5 Merge pull request #173 from farcloser/claudio/20260928-gci-siblings
• 26d4524 Merge pull request #174 from farcloser/claudio/20260928-fix-allowlist
• 43cf642 Merge pull request #175 from farcloser/claudio/20260928-links-second-pass
• 035f464 Merge pull request #176 from farcloser/claudio/20260928-constant-kind
• 84b62b4 Merge pull request #177 from farcloser/claudio/20260928-sloppy-reassign
• 0c220d5 Merge pull request #178 from farcloser/claudio/20260928-shadow-fix-form
• 1b8e43f Merge pull request #179 from farcloser/claudio/20260928-team-role
• 01decdc Merge pull request #180 from farcloser/claudio/20260928-errorlint-comparison
• cd88955 Merge pull request #181 from farcloser/claudio/20260928-awk-tmpdir
• 8f78a21 Merge pull request #182 from farcloser/claudio/20260929-seeded-header
• 0e8bbe7 aqua: pin forkcloser/curl in the baseline; the write job links its tools
• 3089547 baseline: complexity, length and literals move from revive to the single-purpose linters
• 452d76a baseline: errcheck excludes the Fprint family whatever the writer
• 49d9cab baseline: errcheck owns unchecked errors; revive's unhandled-error is off
• b7d16ee baseline: every finding on a line is shown, not the first
• f2288fc baseline: every gocritic checker, the duplicates and the pointer heuristics excepted
• af2cf1a baseline: every govet analyzer, fieldalignment excepted
• 8f39615 baseline: gocritic's preferFilepathJoin off, its fix changes behavior
• 56efcac baseline: gocritic's sloppyReassign off, it contradicts govet shadow
• 7aa40e9 baseline: goimports owns the import form, redundant-import-alias off
• 6402f36 baseline: goimports repairs what the fixers leave, crypto-hash off
• bf3e5aa baseline: golangci-lint v2.14.0, revive's multiline-if-init disabled
• b6b3a23 baseline: modernize applies to tests too
• b099ec0 baseline: nolintlint enforces the book's shape for a suppression
• 384f86c baseline: one tool per check; the duplicate and no-value linters go
• 1b609cc baseline: reassign guards every package variable, not only errors
• 4e3a47c baseline: the file is the reviewed record, verbatim
• 866e94a baseline: the per-linter settings measured at no cost, and the doctrine stated
• 852e009 baseline: the test exclusions are each project's own
• f703f8e baseline: usestdlibvars' constant-kind off, it matches ordinary labels
• 925eecf baseline: usetesting asks for t.Context and t.TempDir in tests
• 8723acc book: gocritic's rule load is the source-build argument met in the wild
• 9bfb76c book: how a shadowed error is fixed, reusing the variable in the if
• 0f5ac6a chore(deps): update aqua tools
• 4c8a83a chore(deps): update dependency aquaproj/aqua-registry to v4.567.0
• 9a74e7d chore(deps): update dependency farcloser/limen to v0.5.2
• d299d6e chore(deps): update module github.com/forkcloser/dot to v1.0.1
• 736800f chore: refresh checksums and converge the limen baseline
• 211af9d chore: refresh checksums and converge the limen baseline
• b64ec4a chore: refresh checksums and converge the limen baseline
• 28d8ca1 design: a pinned git for the hermetic rig, three options measured
• 2d4447a github: the org audit reads the team's role, not the caller's access
• ad478e2 github: the ruleset requires the security check where the lane exists
• 0a3e167 just: a perf family for the reports that judge nothing
• b15c5cf just: a security family for the scans that are not linters
• 1a15721 just: fix go applies only the linter fixes that cannot change behavior
• 0705f30 just: fix go proves the tree still compiles before it returns
• 883fffe just: lint links re-checks server errors once, a minute later
• 3c3581a just: lint shell hands awk its temp dir through the environment
• 3f060dd limen-lint-go: a project's gci sections go before localmodule
• e8f5492 lint-go: errorlint owns error comparisons again
• a0e6720 lint-go: the baseline is .limen/lint-go.yaml, pinned like its neighbours
• 447008e lint: NilAway as a lane of its own, and stale revive directives reported
• cd7ff5b lint: a binaries lane that scans every pinned Go binary for known vulnerabilities
• 836c243 lint: one Go lint baseline, per-project carve-outs, rendered at lint time
• 656b556 lint: the links overlay is .lint-links.toml, named after the lane
• be2bdfa lychee: the retry settings never covered a 503, say so
• 8fe9923 registry: coreutils under every name it provides
• b352587 registry: forkcloser/curl, the pinned curl for the hermetic PATH
• 7f110ff renovate: watch the aqua pin in the setup-aqua action
• 4419f14 rules: the seeded .lint-go.yaml shows every key the overlay accepts
• 23a887a tools: golangci-lint built by the pinned toolchain, in a module of its own
• 3f0b8c0 workflows: a canonical security lane, apart from ci
• e6be5a5 workflows: the seeded ones say they are the project's own