v0.6.0

v0.6.0 (2026-07-26) — mostly a maintenance/cleanup release

• Swapped the process/port backend: replaced two dead libraries (go-ps, GOnetstat, both unmaintained since 2023) with gopsutil/v4. Same behavior, same YAML schema — just a healthier dependency underneath. Got proper test coverage for both while I was in there, since there wasn't any before.
• Two new resource fields riding on that swap: process.status and process.user (catch zombies or stuff running since 2023) with gopsutil/v4. Same behavior, same YAML schema — just a healthier dependency underneath. Got proper test coverage for both while I was in there, since there wasn't any before.
• Two new resource fields riding on that swap: process.status and process.user (catch zombies or stuff running as root), and port.pid (which process owns a listening socket). port.pid isn't auto-populated by goss add/discovery on purpose — PIDs churn on every restart, so baking one into a generated file would just be stale noise. Add it by hand if you actually want it checked.
• Found and fixed a real bug while adding port.pid: the matcher dispatcher had no case for that field's return type, so it would've silently failed every check with a cryptic "unknown method signature" error. Only caught it because I wrote a test that exercised the real dispatch path instead of stopping at a mock.
• Security/dependency hygiene: bumped x/crypto (a Trivy flag on an unused subpackage — not exploitable, just noise reduction with a script to keep it honest going forward) and x/text (this one's a real CVE fix, infinite loop on bad input). Pinned the Go toolchain to 1.26.5 to clear a stdlib TLS vuln flagged by govulncheck.
• Docs/branding: gave the project its own logo instead of the bare Krameff badge, fleshed out docs/index.md to actually link every doc page, and added a migration doc for anyone moving from upstream goss-org/goss.
• CI fix: docs-only PRs were triggering the full lint/coverage/integration matrix because the paths-ignore filter was missing on one trigger — now skips correctly.filter was missing on one trigger — now skips correctly.

Net effect: nothing changes for existing gossfiles, but you get three new optional fields, cleaner deps, and one dispatcher bug that never actually shipped broken

What's Changed

• Docs by @uk-bolly in https://github.com/krameff/goss/pull/24
• Bump github.com/prometheus/common from 0.69.0 to 0.70.0 by @dependabot[bot] in https://github.com/krameff/goss/pull/25
• Bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in https://github.com/krameff/goss/pull/26
• Security/xcrypto by @uk-bolly in https://github.com/krameff/goss/pull/27
• Feat/gopsutil migration by @uk-bolly in https://github.com/krameff/goss/pull/28
• Bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in https://github.com/krameff/goss/pull/29
• Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in https://github.com/krameff/goss/pull/30
• Bump mkdocs-material from 9.7.6 to 9.7.7 in /docs by @dependabot[bot] in https://github.com/krameff/goss/pull/31
• updated integrations tests to use regex to stop updated causing failures by @uk-bolly in https://github.com/krameff/goss/pull/38
• Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/krameff/goss/pull/32
• Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in https://github.com/krameff/goss/pull/33
• Bump docker/login-action from 4.4.0 to 4.5.1 by @dependabot[bot] in https://github.com/krameff/goss/pull/34
• Bump DavidAnson/markdownlint-cli2-action from 24.0.0 to 24.1.0 by @dependabot[bot] in https://github.com/krameff/goss/pull/35
• Bump actions/setup-python from 6.3.0 to 7.0.0 by @dependabot[bot] in https://github.com/krameff/goss/pull/37
• Docs update by @uk-bolly in https://github.com/krameff/goss/pull/40
• New release gopsutil adopted and fixes by @uk-bolly in https://github.com/krameff/goss/pull/39

Full Changelog: v0.5.0...v0.6.0