Skip to content

ci: harden workflows, upgrade actions, fix caching#19

Merged
umputun merged 2 commits intoumputun:masterfrom
paskal:ci/workflow-hardening
Mar 16, 2026
Merged

ci: harden workflows, upgrade actions, fix caching#19
umputun merged 2 commits intoumputun:masterfrom
paskal:ci/workflow-hardening

Conversation

@paskal
Copy link
Contributor

@paskal paskal commented Mar 7, 2026

Changes

  • Reorder checkout before setup-go for proper dependency caching
  • Upgrade all GitHub Actions to latest versions (checkout@v6, setup-go@v6, golangci-lint-action@v9, goreleaser-action@v7, setup-qemu@v4, setup-buildx@v4)
  • Add permissions: contents: read for CI, permissions: contents: write for release
  • Add persist-credentials: false to checkout steps
  • Add fetch-depth: 0 to release.yml checkout for goreleaser — it needs full git history for changelog generation and tag resolution (see https://goreleaser.com/ci/actions/)
  • Fix goveralls pattern (combined install + submit)
  • Update release.yml Go version from 1.22 to 1.24 to match go.mod
  • Upgrade golangci-lint to v2.11.1

Verified golangci-lint passes with v2.11.1.

@paskal paskal requested a review from umputun as a code owner March 7, 2026 19:29
goreleaser needs full git history for changelog generation and tag
resolution. See https://goreleaser.com/ci/actions/
@umputun umputun merged commit d85b9d5 into umputun:master Mar 16, 2026
2 checks passed
@paskal paskal deleted the ci/workflow-hardening branch March 16, 2026 07:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants