74 Commits

Author SHA1 Message Date
Ludovic Fernandez
bddc63a234
dev: fix CI workflow for Windows (#3134) 2022-08-24 22:10:51 +02:00
Ludovic Fernandez
970b0a5bd7
fix: set an explicit GOROOT in the Docker image for go-critic (#3106) 2022-08-21 14:07:08 +02:00
Kir Kolyshkin
3ffde13a17
dev: remove stable from actions/setup-go (#3055)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2022-08-04 04:12:44 +02:00
Ludovic Fernandez
1557692e59
feat: go1.19 support (#3037) 2022-08-03 20:53:06 +02:00
dependabot[bot]
d92f144dff
build(deps): bump goreleaser/goreleaser-action from 2 to 3 (#2876) 2022-05-24 17:40:05 +02:00
dependabot[bot]
a333689090
build(deps): bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#2858)
Some checks failed
Release a tag / release (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-17 09:05:08 +03:00
dependabot[bot]
d5201ad6e1
build(deps): bump docker/setup-qemu-action from 1 to 2 (#2837) 2022-05-10 08:10:08 +02:00
dependabot[bot]
028cb5e074
build(deps): bump docker/build-push-action from 2 to 3 (#2838)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-10 09:33:39 +08:00
dependabot[bot]
360807a605
build(deps): bump docker/setup-buildx-action from 1 to 2 (#2836)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1 to 2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-10 09:33:15 +08:00
dependabot[bot]
acceecf661
build(deps): bump github/codeql-action from 1 to 2 (#2782)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-25 23:42:17 +03:00
dependabot[bot]
ff93f27157
build(deps): bump actions/setup-go from 2 to 3 (#2763)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2 to 3.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-12 10:05:52 +03:00
Ludovic Fernandez
bffc8cefe2
dev: remove some TODO (#2743)
* chore: use go1.18 to test the previous version of golangci-lint
* chore: update gomnd configuration
2022-04-03 18:49:27 +02:00
dependabot[bot]
293b83d89c
build(deps): bump peter-evans/create-pull-request from 3 to 4 (#2699)
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3 to 4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v4)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-29 12:57:59 +08:00
dependabot[bot]
da0a6b3b8a
build(deps): bump actions/cache from 2.1.7 to 3 (#2674)
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.7...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-22 09:12:32 +08:00
Ludovic Fernandez
0c0804c6a4
go1.18 support (#2438) 2022-03-18 14:58:24 +01:00
dependabot[bot]
93a0015cfc
build(deps): bump actions/checkout from 2 to 3 (#2643) 2022-03-07 23:30:46 +01:00
dependabot[bot]
176ef3f7a3
build(deps): bump actions/setup-node from 2 to 3 (#2628) 2022-03-01 11:57:55 +01:00
dependabot[bot]
0bcc0a3ba1
build(deps): bump golangci/golangci-lint-action from 2.5.2 to 3.1.0 (#2627)
Co-authored-by: Sergey Vilgelm <sergey@vilgelm.com>
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2022-03-01 11:57:10 +01:00
dependabot[bot]
ba3453d2a8
build(deps): bump actions/cache from 2.1.6 to 2.1.7 (#2383) 2021-11-30 01:42:20 +01:00
Sergey Vilgelm
f47f4f5557
codeql: Remove unneeded steps (#2336)
Remove executing build and test, there is a special workflow for this and CodeQL does not require running any go code or building the app
Remove `git checkout HEAD^2`, not needed anymore: Warning: 1 issue was detected with this workflow: git checkout HEAD^2 is no longer necessary. Please remove this step as Code Scanning recommends analyzing the merge commit for best results.
Add permission to write the security events
2021-11-01 20:40:24 -07:00
dependabot[bot]
4ce9a19e7d
build(deps): bump github.com/go-critic/go-critic from 0.5.6 to 0.6.0 (#2041)
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
2021-10-23 00:51:11 +02:00
Ludovic Fernandez
aff4fc0b8b
Update Go versions used by the CI (#2183) 2021-08-17 20:35:55 +02:00
dependabot[bot]
4c27b33c49
build(deps): bump actions/cache from 2.1.5 to 2.1.6 (#2023)
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.5 to 2.1.6.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.5...v2.1.6)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-31 14:11:30 +08:00
Ludovic Fernandez
c610079e1d
feat: set the minimum Go version to go1.15 (#1926) 2021-05-01 12:12:39 +03:00
dependabot[bot]
53a4b41ff5
build(deps): bump actions/cache from v2.1.4 to v2.1.5 (#1918)
Bumps [actions/cache](https://github.com/actions/cache) from v2.1.4 to v2.1.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.4...1a9e2138d905efd099035b49d8b7a3888c653ca8)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-19 07:54:18 +02:00
Ludovic Fernandez
5d10450bc9
dev: clean configuration, documentation, and code (#1911)
* Remove dead code related to golangci.com
* remove old build tags
* stale bot: remove bug label from `exemptLabels`
* order `gitignore` entries alphabetically
* doc: order `linters-settings` alphabetically
* remove obsolete exclude rule
* release: add docs prefix to skip the commit in the changelog
2021-04-14 12:48:48 +02:00
dependabot[bot]
0f3f9ef809
build(deps): bump github.com/mgechev/revive from 1.0.5 to 1.0.6 (#1908) 2021-04-12 10:27:47 +02:00
dependabot[bot]
c9ec73fdc3
build(deps): bump golangci/golangci-lint-action from v2.5.1 to v2.5.2 (#1889) 2021-04-05 11:52:02 +02:00
Ludovic Fernandez
a833cc1600
typecheck: improve error stack parsing. (#1886) 2021-04-04 10:55:39 +02:00
Neha Viswanathan
507703b444
Update Docs and Assets Github Actions (#1460)
Some checks failed
Extra / Vulnerability scanner (push) Failing after 1m15s
CI / go-mod (push) Failing after 11m44s
CI / golangci-lint (push) Failing after 11m14s
Release a tag / release (push) Failing after 10m58s
CI / tests-on-windows (push) Has been cancelled
CI / tests-on-macos (push) Has been cancelled
CI / tests-on-unix (1.14) (push) Has been cancelled
CI / tests-on-unix (1.15) (push) Has been cancelled
CI / tests-on-unix (1.16) (push) Has been cancelled
CI / check_generated (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
2021-03-03 14:49:08 +01:00
dependabot[bot]
067cfac3e8
build(deps): bump golangci/golangci-lint-action from v2.4.0 to v2.5.1 (#1798) 2021-03-01 10:09:40 +01:00
dependabot[bot]
d6db13d763
build(deps): bump sonatype-nexus-community/nancy-github-action (#1762)
Bumps [sonatype-nexus-community/nancy-github-action](https://github.com/sonatype-nexus-community/nancy-github-action) from 1.0.1 to v1.0.2.
- [Release notes](https://github.com/sonatype-nexus-community/nancy-github-action/releases)
- [Commits](https://github.com/sonatype-nexus-community/nancy-github-action/compare/1.0.1...aae196481b961d446f4bff9012e4e3b63d7921a4)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Xiang Dai <long0dai@foxmail.com>
Co-authored-by: Xiang Dai <long0dai@foxmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-22 14:59:06 +08:00
Ludovic Fernandez
123da8e6c7
Add go1.16 support (#1740) 2021-02-17 05:17:41 +01:00
dependabot[bot]
80ebe52462
build(deps): bump golangci/golangci-lint-action from v2.3.0 to v2.4.0 (#1735)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2.3.0 to v2.4.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.3.0...544d2efb307b3f205f34886f2787046abe7fb26e)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-15 07:48:18 +01:00
dependabot[bot]
7dc0f311bb
build(deps): bump actions/cache from v2 to v2.1.4 (#1721) 2021-02-08 10:08:55 +01:00
Tam Mach
52d26a3b72
fix(docker): Fix docker tag for alpine build (#1487)
Some checks failed
Extra / Vulnerability scanner (push) Failing after 15m32s
CI / go-mod (push) Failing after 15m30s
CI / golangci-lint (push) Failing after 15m28s
Release a tag / release (push) Failing after 15m26s
CI / tests-on-windows (push) Has been cancelled
CI / tests-on-macos (push) Has been cancelled
CI / tests-on-unix (1.13) (push) Has been cancelled
CI / tests-on-unix (1.14) (push) Has been cancelled
CI / tests-on-unix (1.15) (push) Has been cancelled
CI / check_generated (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
This commit is to avoid tag overriding due to parallel build for
multiple base images (e.g. debian and alpine).

Closes #1483 #1486

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-11-03 12:06:19 +11:00
Tam Mach
dc2d6b5119
build(docker): Fix version details in docker image (#1471)
Some checks failed
Extra / Vulnerability scanner (push) Failing after 41s
CI / go-mod (push) Failing after 17m9s
CI / golangci-lint (push) Failing after 15m36s
Release a tag / release (push) Failing after 15m34s
CI / tests-on-windows (push) Has been cancelled
CI / tests-on-macos (push) Has been cancelled
CI / tests-on-unix (1.13) (push) Has been cancelled
CI / tests-on-unix (1.14) (push) Has been cancelled
CI / tests-on-unix (1.15) (push) Has been cancelled
CI / check_generated (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile.alpine]) (push) Has been cancelled
Release a tag / docker-release (map[Dockerfile:build/Dockerfile]) (push) Has been cancelled
* build(docker): Fix version details in docker image

As part of #1383, multi-arch docker build was supported. However,
ldflags for version details was missing.

This commit is to add -ldflags as part of Docker build. I take this chance
to refactor github action as well.

Fixes #1468

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-28 09:03:51 +11:00
dependabot[bot]
f414375eb3
build(deps): bump golangci/golangci-lint-action from v2.2.1 to v2.3.0 (#1469)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2.2.1 to v2.3.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.2.1...e868220d9fd3b523f1a8fcfb69749e8c7521ba14)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-26 16:53:22 +11:00
odidev
3368a55627
Releasing docker image for arm64 (#1383) 2020-10-18 17:00:58 +11:00
dependabot[bot]
b2c7c377fe
build(deps): bump golangci/golangci-lint-action from v2 to v2.2.1 (#1447)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2 to v2.2.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2...54a84d46fb7183443c869b1b7d0dc34f640fcfd7)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-12 17:13:48 +11:00
Tam Mach
c1d7cfd721
ci(nancy): Bump nancy version to 1.0.1 (#1410)
This commit is to update version to 1.0.1

Closes #1320

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-03 22:54:48 +10:00
Tam Mach
c88841dac4
ci(scan): Add codeQL scanning (#1405)
This commit is to add codeQL scanning, which is newly introduced feature
from github.

The scan will be run per PR, and periodically as well.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-10-01 20:17:07 +10:00
Tam Mach
f1630736e0
ci(dep): Check only for go.mod file (#1397)
This commit is to update go-mod github action step to check for only
go.mod file. Ideally, both go.mod and go.sum should be checked, however,
the current behavior of `go mod tidy` command will not clean up old
entries in go.sum.

Additionally, dependentbot is currently failing as there is dirty change
in go.sum file.
2020-09-26 16:30:55 +10:00
Melvin
8263147d07
fix Nancy's branch name (#1394) 2020-09-25 01:37:42 -07:00
Melvin
f6d7a75439
ci: prevent macos to be marked as passing upon failure (#1381) 2020-09-20 21:43:21 -07:00
Tam Mach
ad26b68751
build(dep): Ignore known dependency failure in nancy (#1378)
Currently nancy is always failed, and we seem to ignore it completely.
This reduces the value of having security scanning significantly.
Ideally, the underlying issue should be fixed, however it will require
long time for external collaboration.

This commit is to ignore two known dependency failures.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-09-21 13:14:03 +10:00
Tam Mach
d4ebf99e5e
build(go): Check if go.mod and go.sum are up to dated (#1377)
This commit is to add job to check if go.mod and go.sum are up to
date.

Also add go.sum into .gitattributes so that it will be considered
as generated file in PR review.

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-09-21 07:48:49 +10:00
Tam Mach
8084559c42
Tag nancy version to v0.3 (#1321)
This is suggested by nancy team to avoid coming breaking change

Relates: #1320
2020-08-19 10:41:33 +10:00
Tam Mach
18fd36bdd1
build(golang1.15): Upgrade to golang 1.15 for smaller binary (#1303)
Golang 1.15 comes to few improvements, one of them is to have smaller
binary.

This PR is to make golang 1.15 as default version in CI, I also update
Docker based image to golang:1.15* as well.

Two issues faced with golang 1.15:
- Conflict between -v in `golangci-lint` and `go test`. Update to --verbose
to avoid the same. [1]
- `nolintlint_unused.go` testdata is not matching regex. Correct by adding one
space after //

[1]: https://github.com/golang/go/issues/40763

Signed-off-by: Tam Mach <sayboras@yahoo.com>
2020-08-19 09:05:32 +10:00
Sergey Vilgelm
703f2affbc
Add tests-on-macos to cover all main platforms (#1279) 2020-08-04 21:34:32 +03:00