unboundsoftware/cron-checker
6
0
Fork 0
Code Issues 1 Pull Requests 1 Actions 2 Packages Projects Releases 32 Activity

ci: derive Go version from go.mod instead of 'stable' (#397)
Unbound Release / Check Preconditions (push) Successful in 24s
Details
Unbound Release / Create Tag (push) Skipped
Details
Unbound Release / Generate Changelog and Handle PR (push) Successful in 41s
Details
Unbound Release / Create Release (push) Successful in 42s
Details
Release / release (push) Successful in 1m50s
Details
cron-checker / build (push) Successful in 13m47s
Details
cron-checker / test (push) Successful in 1m8s
Details
cron-checker / vulnerabilities (push) Successful in 55s
Details

Browse Source 
Root cause of the failing `vulnerabilities` and `test` jobs on the open Renovate PRs.

`actions/setup-go` resolves `go-version: stable` from the `actions/go-versions` manifest. On 2026-08-14 that manifest still pointed at **go1.26.5**, which carries 4 stdlib vulnerabilities (GO-2026-6218, GO-2026-6090, GO-2026-5972, GO-2026-5026), so `govulncheck` failed. It also broke the `test` job on #396 once go.mod required `go >= 1.26.6`, since setup-go sets `GOTOOLCHAIN=local`.

Switching to `go-version-file: go.mod` makes CI install exactly the toolchain go.mod declares. Renovate already tracks that directive (#395), so the Go version stops depending on manifest publishing lag.

After this lands, #394 / #395 / #396 should be rebased and re-run.

---------

Co-authored-by: Renovate Bot <renovate@unbound.se>
Reviewed-on: #397
This commit was merged in pull request #397.
This commit is contained in:
argoyle
2026-08-17 08:24:28 +00:00
co-authored by renovate
parent 6258421a47
commit 7c0445b4ef
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yaml
+2 -2
View File
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@v7 - uses: actions/checkout@v7
- uses: actions/setup-go@v7 - uses: actions/setup-go@v7
with: with:
go-version: 'stable' go-version-file: go.mod
- name: Run tests - name: Run tests
run: go test -race -coverprofile=coverage.txt ./... run: go test -race -coverprofile=coverage.txt ./...
@@ -24,7 +24,7 @@ jobs:
- uses: actions/checkout@v7 - uses: actions/checkout@v7
- uses: actions/setup-go@v7 - uses: actions/setup-go@v7
with: with:
go-version: 'stable' go-version-file: go.mod
- name: Check vulnerabilities - name: Check vulnerabilities
run: | run: |
go install golang.org/x/vuln/cmd/govulncheck@latest go install golang.org/x/vuln/cmd/govulncheck@latest