unboundsoftware/cron-checker
6
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 32 Activity

ci: derive Go version from go.mod instead of 'stable'
cron-checker / test (push) Skipped
cron-checker / vulnerabilities (push) Skipped
cron-checker / build (push) Skipped
cron-checker / vulnerabilities (pull_request) Failing after 1m11s
Details
cron-checker / test (pull_request) Successful in 1m35s
Details
cron-checker / build (pull_request) Skipped
Details

Browse Source 
actions/setup-go resolves 'stable' from the go-versions manifest, which lagged behind the go1.26.6 security release and installed the vulnerable go1.26.5. That both failed govulncheck and broke builds once go.mod required >= 1.26.6 (GOTOOLCHAIN=local).

Using go-version-file keeps CI on exactly the toolchain go.mod asks for, which Renovate already keeps current.
This commit is contained in:
argoyle
2026-08-17 08:24:17 +02:00
parent e480a9582e
commit ac49f3c2a6
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yaml
+2 -2
View File
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@v7 - uses: actions/checkout@v7
- uses: actions/setup-go@v7 - uses: actions/setup-go@v7
with: with:
go-version: 'stable' go-version-file: go.mod
- name: Run tests - name: Run tests
run: go test -race -coverprofile=coverage.txt ./... run: go test -race -coverprofile=coverage.txt ./...
@@ -24,7 +24,7 @@ jobs:
- uses: actions/checkout@v7 - uses: actions/checkout@v7
- uses: actions/setup-go@v7 - uses: actions/setup-go@v7
with: with:
go-version: 'stable' go-version-file: go.mod
- name: Check vulnerabilities - name: Check vulnerabilities
run: | run: |
go install golang.org/x/vuln/cmd/govulncheck@latest go install golang.org/x/vuln/cmd/govulncheck@latest