Go Report Card v1.1.7

Unit-test coverage

• Total Go statement coverage: 98.94%.
• CI now enforces a 95% floor using exact statement counts across all production Go packages, including CLI entry points.
• Add deterministic tests for analyzer protocols, report output, CLI policies, baselines, file-system errors and configuration boundaries.
• Preserve real-analyzer integration checks and validate with the race detector.

Fixes

• Preserve the original file and line when diagnostic messages reference another source location.

• Preserve nested source paths in generated repository links.

• Exclude directories and .go files from license detection.

• Reap analyzer subprocesses after parse failures and oversized output, releasing temporary directories on Windows.

• Reap analyzer subprocesses after parse failures and oversized output, releasing temporary directories on Windows.

• Reap analyzer subprocesses after parse failures and oversized output, releasing temporary directories on Windows.

• Parse Windows drive-letter diagnostics and reject malformed output without panicking.

• Reap analyzer subprocesses after parse failures and oversized output, releasing temporary directories on Windows.

Cross-platform CLI archives and SHA-256 checksums are attached.

Go Report Card v1.1.6

Unit-test coverage

• Total Go statement coverage: 98.94%.
• CI now enforces a 95% floor using exact statement counts across all production Go packages, including CLI entry points.
• Add deterministic tests for analyzer protocols, report output, CLI policies, baselines, file-system errors and configuration boundaries.
• Preserve real-analyzer integration checks and validate with the race detector.

Fixes

• Preserve nested source paths in generated repository links.
• Exclude directories and .go files from license detection.
• Reap analyzer subprocesses after parse failures and oversized output, releasing temporary directories on Windows.
• Parse Windows drive-letter diagnostics and reject malformed output without panicking.
• Reap analyzer subprocesses after parse failures and oversized output, releasing temporary directories on Windows.

Cross-platform CLI archives and SHA-256 checksums are attached.

Go Report Card v1.1.5

Changes

• Capitalize the badge label as Go Report and update the README badge example.
• Include the latest GitHub Actions dependency updates.

Validation

• Unit tests and GitHub CI passed.
• Release archives and checksums are attached.

v1

What's Changed

• chore(actions): bump actions/setup-go from 5 to 7 in the github-actions group by @dependabot[bot] in #1

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v1.0.0...v1

v1.1.4 — Go 1.27.3 and consumer toolchain preservation

Changes

• Require Go 1.27.3 and update compatible linter module dependencies.
• Select the consumer project toolchain after tool installation using go_version_file.
• Disable nested setup-go cache restores.
• Add smoke regressions verifying that the consumer Go version remains selected.

Validation

All PR and post-merge CI checks passed, including consumer toolchain smoke tests.

Full changelog: v1.1.3...v1.1.4

v1.1.3

Release notes

• Rebuild the CLI and bundled checking tools with Go 1.27.2 and updated tooling.
• Improve recovery publishing from immutable tags and preserve the correct source context for provenance.
• Publish checksums, signed archives and the CycloneDX SBOM.

What's Changed

• ci(release): allow a manual run to publish, so a failed tag push is recoverable by @soulteary in #8
• chore(actions): bump anchore/sbom-action from 0.24.2 to 0.24.3 in the github-actions group by @dependabot[bot] in #9
• chore: upgrade Go toolchain and builds to 1.27.2 by @soulteary in #10

Full Changelog: v1.1.2...v1.1.3

v1.1.2

What's Changed

• fix(release): make cosign signing work, and publish to an existing Release by @soulteary in #6
• fix(check): make the Markdown report deterministic by @soulteary in #7

Full Changelog: v1.1.1...v1.1.2

v1.1.1

What's Changed

• chore(actions): bump anchore/sbom-action from 0.24.0 to 0.24.2 in the github-actions group by @dependabot[bot] in #2
• ci: pin actions/setup-go to a commit SHA in action.yml by @soulteary in #3
• ci: stop the release workflow firing on floating version aliases by @soulteary in #4
• docs: cut v1.1.1 release notes by @soulteary in #5

New Contributors

• @soulteary made their first contribution in #3

Full Changelog: v1.1.0...v1.1.1

v1.1.0

What's Changed

• chore(actions): bump actions/setup-go from 5 to 7 in the github-actions group by @dependabot[bot] in #1

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v1.0.0...v1.1.0