84 Commits

Author SHA1 Message Date
dependabot[bot]
53a4b41ff5
build(deps): bump actions/cache from v2.1.4 to v2.1.5 (#1918)
Bumps [actions/cache](https://github.com/actions/cache) from v2.1.4 to v2.1.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.4...1a9e2138d905efd099035b49d8b7a3888c653ca8)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-19 07:54:18 +02:00
Ludovic Fernandez
5d10450bc9
dev: clean configuration, documentation, and code (#1911)
* Remove dead code related to golangci.com
* remove old build tags
* stale bot: remove bug label from `exemptLabels`
* order `gitignore` entries alphabetically
* doc: order `linters-settings` alphabetically
* remove obsolete exclude rule
* release: add docs prefix to skip the commit in the changelog
2021-04-14 12:48:48 +02:00
dependabot[bot]
0f3f9ef809
build(deps): bump github.com/mgechev/revive from 1.0.5 to 1.0.6 (#1908) 2021-04-12 10:27:47 +02:00
dependabot[bot]
c9ec73fdc3
build(deps): bump golangci/golangci-lint-action from v2.5.1 to v2.5.2 (#1889) 2021-04-05 11:52:02 +02:00
Ludovic Fernandez
a833cc1600
typecheck: improve error stack parsing. (#1886) 2021-04-04 10:55:39 +02:00
dependabot[bot]
07ae877464
build(deps): bump y18n from 4.0.0 to 4.0.1 in /.github/peril (#1879) 2021-04-01 03:20:32 +02:00
Ludovic Fernandez
75bc80d7d2
docs: update for v1.39.0 (#1876)
* docs: update for v1.39.0
* skip CVE for github.com/gogo/protobuf
2021-03-28 22:05:37 +02:00
Ludovic Fernandez
2e5e887406
Improve issue templates chooser. (#1821)
Add issue templates to improve triage and issue quality.

https://docs.github.com/en/github/building-a-strong-community/configuring-issue-templates-for-your-repository
2021-03-09 18:59:31 +01:00
Neha Viswanathan
507703b444
Update Docs and Assets Github Actions (#1460)
Some checks failed
Extra / Vulnerability scanner (push) Failing after 1m15s
CI / go-mod (push) Failing after 11m44s
CI / golangci-lint (push) Failing after 11m14s
Release a tag / release (push) Failing after 10m58s
CI / tests-on-windows (push) Has been cancelled
CI / tests-on-macos (push) Has been cancelled
CI / tests-on-unix (1.14) (push) Has been cancelled
CI / tests-on-unix (1.15) (push) Has been cancelled
CI / tests-on-unix (1.16) (push) Has been cancelled
CI / check_generated (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
2021-03-03 14:49:08 +01:00
dependabot[bot]
067cfac3e8
build(deps): bump golangci/golangci-lint-action from v2.4.0 to v2.5.1 (#1798) 2021-03-01 10:09:40 +01:00
Ludovic Fernandez
c3c7bcd7ac
docs: improve the bug issue template. (#1781) 2021-02-26 01:49:06 +01:00
dependabot[bot]
d6db13d763
build(deps): bump sonatype-nexus-community/nancy-github-action (#1762)
Bumps [sonatype-nexus-community/nancy-github-action](https://github.com/sonatype-nexus-community/nancy-github-action) from 1.0.1 to v1.0.2.
- [Release notes](https://github.com/sonatype-nexus-community/nancy-github-action/releases)
- [Commits](https://github.com/sonatype-nexus-community/nancy-github-action/compare/1.0.1...aae196481b961d446f4bff9012e4e3b63d7921a4)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Xiang Dai <long0dai@foxmail.com>
Co-authored-by: Xiang Dai <long0dai@foxmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-22 14:59:06 +08:00
Ludovic Fernandez
123da8e6c7
Add go1.16 support (#1740) 2021-02-17 05:17:41 +01:00
dependabot[bot]
80ebe52462
build(deps): bump golangci/golangci-lint-action from v2.3.0 to v2.4.0 (#1735)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2.3.0 to v2.4.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.3.0...544d2efb307b3f205f34886f2787046abe7fb26e)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-15 07:48:18 +01:00
dependabot[bot]
7dc0f311bb
build(deps): bump actions/cache from v2 to v2.1.4 (#1721) 2021-02-08 10:08:55 +01:00
dependabot[bot]
3fe444cba9
build(deps): bump lodash from 4.17.15 to 4.17.19 in /.github/peril (#1252)
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-11-06 09:01:12 +11:00
Tam Mach
52d26a3b72
fix(docker): Fix docker tag for alpine build (#1487)
Some checks failed
Extra / Vulnerability scanner (push) Failing after 15m32s
CI / go-mod (push) Failing after 15m30s
CI / golangci-lint (push) Failing after 15m28s
Release a tag / release (push) Failing after 15m26s
CI / tests-on-windows (push) Has been cancelled
CI / tests-on-macos (push) Has been cancelled
CI / tests-on-unix (1.13) (push) Has been cancelled
CI / tests-on-unix (1.14) (push) Has been cancelled
CI / tests-on-unix (1.15) (push) Has been cancelled
CI / check_generated (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
This commit is to avoid tag overriding due to parallel build for
multiple base images (e.g. debian and alpine).

Closes #1483 #1486

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-11-03 12:06:19 +11:00
Tam Mach
dc2d6b5119
build(docker): Fix version details in docker image (#1471)
Some checks failed
Extra / Vulnerability scanner (push) Failing after 41s
CI / go-mod (push) Failing after 17m9s
CI / golangci-lint (push) Failing after 15m36s
Release a tag / release (push) Failing after 15m34s
CI / tests-on-windows (push) Has been cancelled
CI / tests-on-macos (push) Has been cancelled
CI / tests-on-unix (1.13) (push) Has been cancelled
CI / tests-on-unix (1.14) (push) Has been cancelled
CI / tests-on-unix (1.15) (push) Has been cancelled
CI / check_generated (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
* build(docker): Fix version details in docker image

As part of #1383, multi-arch docker build was supported. However,
ldflags for version details was missing.

This commit is to add -ldflags as part of Docker build. I take this chance
to refactor github action as well.

Fixes #1468

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-28 09:03:51 +11:00
dependabot[bot]
f414375eb3
build(deps): bump golangci/golangci-lint-action from v2.2.1 to v2.3.0 (#1469)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2.2.1 to v2.3.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.2.1...e868220d9fd3b523f1a8fcfb69749e8c7521ba14)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-26 16:53:22 +11:00
odidev
3368a55627
Releasing docker image for arm64 (#1383) 2020-10-18 17:00:58 +11:00
dependabot[bot]
b2c7c377fe
build(deps): bump golangci/golangci-lint-action from v2 to v2.2.1 (#1447)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2 to v2.2.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2...54a84d46fb7183443c869b1b7d0dc34f640fcfd7)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-12 17:13:48 +11:00
Tam Mach
838f590a63
ci(dependabot): Change interval for npm to monthly (#1424)
npm packages are used for website only in this repo. Consider that
golangci-lint normally releases once a month, this commit is to change
interval for npm dependabot from weekly to monthly.

Main benefits could be:

- Reduce the noise for maintainers
- Improve generated CHANGELOG.
These changes are not useful for end users.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-11 18:56:29 +11:00
Tam Mach
c1d7cfd721
ci(nancy): Bump nancy version to 1.0.1 (#1410)
This commit is to update version to 1.0.1

Closes #1320

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-03 22:54:48 +10:00
Tam Mach
c88841dac4
ci(scan): Add codeQL scanning (#1405)
This commit is to add codeQL scanning, which is newly introduced feature
from github.

The scan will be run per PR, and periodically as well.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-01 20:17:07 +10:00
Tam Mach
f1630736e0
ci(dep): Check only for go.mod file (#1397)
This commit is to update go-mod github action step to check for only
go.mod file. Ideally, both go.mod and go.sum should be checked, however,
the current behavior of `go mod tidy` command will not clean up old
entries in go.sum.

Additionally, dependentbot is currently failing as there is dirty change
in go.sum file.
2020-09-26 16:30:55 +10:00
Melvin
8263147d07
fix Nancy's branch name (#1394) 2020-09-25 01:37:42 -07:00
Melvin
f6d7a75439
ci: prevent macos to be marked as passing upon failure (#1381) 2020-09-20 21:43:21 -07:00
Tam Mach
ad26b68751
build(dep): Ignore known dependency failure in nancy (#1378)
Currently nancy is always failed, and we seem to ignore it completely.
This reduces the value of having security scanning significantly.
Ideally, the underlying issue should be fixed, however it will require
long time for external collaboration.

This commit is to ignore two known dependency failures.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-09-21 13:14:03 +10:00
Tam Mach
d4ebf99e5e
build(go): Check if go.mod and go.sum are up to dated (#1377)
This commit is to add job to check if go.mod and go.sum are up to
date.

Also add go.sum into .gitattributes so that it will be considered
as generated file in PR review.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-09-21 07:48:49 +10:00
dependabot[bot]
857f744ac4
build(deps): bump node-fetch in /.github/contributors (#1363)
Bumps [node-fetch](https://github.com/bitinn/node-fetch) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/bitinn/node-fetch/releases)
- [Changelog](https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-13 08:30:16 +02:00
Tam Mach
8084559c42
Tag nancy version to v0.3 (#1321)
This is suggested by nancy team to avoid coming breaking change

Relates: #1320
2020-08-19 10:41:33 +10:00
Tam Mach
18fd36bdd1
build(golang1.15): Upgrade to golang 1.15 for smaller binary (#1303)
Golang 1.15 comes to few improvements, one of them is to have smaller
binary.

This PR is to make golang 1.15 as default version in CI, I also update
Docker based image to golang:1.15* as well.

Two issues faced with golang 1.15:
- Conflict between -v in `golangci-lint` and `go test`. Update to --verbose
to avoid the same. [1]
- `nolintlint_unused.go` testdata is not matching regex. Correct by adding one
space after //

[1]: https://github.com/golang/go/issues/40763

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-08-19 09:05:32 +10:00
Sergey Vilgelm
703f2affbc
Add tests-on-macos to cover all main platforms (#1279) 2020-08-04 21:34:32 +03:00
Sergey Vilgelm
20083f78d3
Update docs state (#1284) 2020-08-03 13:51:50 +08:00
Sergey Vilgelm
ba997c5710
Use the latest version of golangci-lint in action (#1280) 2020-08-02 14:08:47 -05:00
Sergey Vilgelm
cb2f12e7e1
Update the gen_github_action_config to add latest to assets (#1260) 2020-07-23 14:22:04 +08:00
Sergey Vilgelm
862ed88cf0
Run nancy validation for all dependencies (#1243)
* Run nancy validation for all dependencies

* Update pr-extra.yml

Use `-json` flag
2020-07-16 17:14:12 -05:00
dependabot[bot]
4f26f11ea3
build(deps): bump golangci/golangci-lint-action from v1.2.2 to v2 (#1247)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v1.2.2 to v2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v1.2.2...c238b72278d97934fd2cb007b97162d5b44757df)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-15 14:08:51 -05:00
Sergey Vilgelm
203bab67a5
Move dependabot config to .github folder (#1242) 2020-07-13 23:18:30 -05:00
Sergey Vilgelm
27a97ae49a
Update golangci-lint-action to use v1.2.2 (#1238) 2020-07-12 12:39:44 -05:00
Sergey Vilgelm
d287af010a
Explicitly pass GITHUB_TOKEN env to goreleaser action (#1215)
* Explicitly pass GITHUB_TOKEN env to goreleaser action
* Update the goreleaser-action and setup-go actions to v2
2020-07-08 11:02:59 +10:00
Tam Mach
afa9be632b
Use latest golangci-lint to lint golangci-lint (#1206)
Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-07-05 18:21:44 +10:00
Denis Isaev
57e4203661 dev: update contributors list
Take into account contributions in golancgi-lint-action.
Run `cd .github/contributors && npm run all`
2020-05-23 13:06:55 +03:00
Denis Isaev
156eaaa963
dev: update github action config (#1158) 2020-05-23 02:05:52 +03:00
Denis Isaev
fc0a898a6a
docs: update contributors listing 2020-05-19 15:04:40 +03:00
Denis Isaev
a1e1226977
docs: list contributors 2020-05-19 14:41:16 +03:00
Denis Isaev
810c194dc7
dev: disable mac os build because of timeouts 2020-05-17 21:47:30 +03:00
Denis Isaev
2c672912ea
dev: don't duplicate greeting 2020-05-17 18:27:05 +03:00
Denis Isaev
d093a22c28
dev: fix peril 2020-05-17 18:14:43 +03:00
Denis Isaev
4c94e3400e
dev: add peril to invite contributors
Invite a contributor to GolangCI
organization after a first pull request
get merged.
2020-05-17 17:44:43 +03:00