Compare commits

..
5 Commits
Author SHA1 Message Date
releaser 16fbb60a5c chore(release): prepare for 1.6.9 (#400)
Unbound Release / Check Preconditions (push) Successful in 21s
Unbound Release / Create Tag (push) Skipped
Release / release (push) Successful in 1m12s
Unbound Release / Create Release (push) Successful in 26s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 32s
cron-checker / build (push) Successful in 13m3s
cron-checker / test (push) Successful in 57s
cron-checker / vulnerabilities (push) Successful in 51s
## [1.6.9] - 2026-08-17

### ⚙️ Miscellaneous Tasks

- *(deps)* Update golang:1.26.5 docker digest to e8ab809 (#392)
- *(deps)* Update go toolchain directive to v1.26.6 [security] (#395)
- *(deps)* Update golang docker tag to v1.26.6 (#394)
- Derive Go version from go.mod instead of 'stable' (#397)

<!-- generated by git-cliff -->

---

**Note:** Please use **Squash Merge** when merging this PR.

Reviewed-on: #400
Co-authored-by: Unbound Releaser <releaser@unbound.se>
2026-08-17 08:58:36 +00:00
argoyleandrenovate 7c0445b4ef ci: derive Go version from go.mod instead of 'stable' (#397)
Unbound Release / Create Release (push) Successful in 42s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Successful in 41s
Release / release (push) Successful in 1m50s
Unbound Release / Check Preconditions (push) Successful in 24s
cron-checker / build (push) Successful in 13m47s
cron-checker / vulnerabilities (push) Successful in 55s
cron-checker / test (push) Successful in 1m8s
Root cause of the failing `vulnerabilities` and `test` jobs on the open Renovate PRs.

`actions/setup-go` resolves `go-version: stable` from the `actions/go-versions` manifest. On 2026-08-14 that manifest still pointed at **go1.26.5**, which carries 4 stdlib vulnerabilities (GO-2026-6218, GO-2026-6090, GO-2026-5972, GO-2026-5026), so `govulncheck` failed. It also broke the `test` job on #396 once go.mod required `go >= 1.26.6`, since setup-go sets `GOTOOLCHAIN=local`.

Switching to `go-version-file: go.mod` makes CI install exactly the toolchain go.mod declares. Renovate already tracks that directive (#395), so the Go version stops depending on manifest publishing lag.

After this lands, #394 / #395 / #396 should be rebased and re-run.

---------

Co-authored-by: Renovate Bot <renovate@unbound.se>
Reviewed-on: #397
2026-08-17 08:24:28 +00:00
renovate 6258421a47 chore(deps): update golang docker tag to v1.26.6 (#394)
Unbound Release / Check Preconditions (push) Successful in 22s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Create Release (push) Successful in 26s
cron-checker / test (push) Successful in 56s
Release / release (push) Successful in 1m7s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 41s
cron-checker / vulnerabilities (push) Successful in 55s
cron-checker / build (push) Failing after 13m51s
2026-08-17 07:03:03 +00:00
renovate 989ecf4858 chore(deps): update go toolchain directive to v1.26.6 [security] (#395)
Unbound Release / Check Preconditions (push) Successful in 21s
Unbound Release / Create Release (push) Successful in 24s
cron-checker / test (push) Successful in 1m0s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Successful in 52s
cron-checker / vulnerabilities (push) Successful in 55s
Release / release (push) Successful in 1m17s
cron-checker / build (push) Successful in 10m51s
2026-08-17 06:35:48 +00:00
renovate e480a9582e chore(deps): update golang:1.26.5 docker digest to e8ab809 (#392)
Unbound Release / Generate Changelog and Handle PR (push) Successful in 36s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Check Preconditions (push) Successful in 21s
Unbound Release / Create Release (push) Successful in 42s
Release / release (push) Successful in 2m47s
cron-checker / build (push) Successful in 20m56s
cron-checker / test (push) Successful in 1m22s
cron-checker / vulnerabilities (push) Successful in 1m15s
2026-08-11 01:40:53 +00:00
5 changed files with 15 additions and 6 deletions
+2 -2
View File
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@v7 - uses: actions/checkout@v7
- uses: actions/setup-go@v7 - uses: actions/setup-go@v7
with: with:
go-version: 'stable' go-version-file: go.mod
- name: Run tests - name: Run tests
run: go test -race -coverprofile=coverage.txt ./... run: go test -race -coverprofile=coverage.txt ./...
@@ -24,7 +24,7 @@ jobs:
- uses: actions/checkout@v7 - uses: actions/checkout@v7
- uses: actions/setup-go@v7 - uses: actions/setup-go@v7
with: with:
go-version: 'stable' go-version-file: go.mod
- name: Check vulnerabilities - name: Check vulnerabilities
run: | run: |
go install golang.org/x/vuln/cmd/govulncheck@latest go install golang.org/x/vuln/cmd/govulncheck@latest
+1 -1
View File
@@ -1,3 +1,3 @@
{ {
"version": "1.6.8" "version": "1.6.9"
} }
+10 -1
View File
@@ -2,7 +2,16 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
## [1.6.8] - 2026-08-09 ## [1.6.9] - 2026-08-17
### ⚙️ Miscellaneous Tasks
- *(deps)* Update golang:1.26.5 docker digest to e8ab809 (#392)
- *(deps)* Update go toolchain directive to v1.26.6 [security] (#395)
- *(deps)* Update golang docker tag to v1.26.6 (#394)
- Derive Go version from go.mod instead of 'stable' (#397)
## [1.6.8] - 2026-08-10
### 🐛 Bug Fixes ### 🐛 Bug Fixes
+1 -1
View File
@@ -1,4 +1,4 @@
FROM amd64/golang:1.26.5@sha256:046e3207184bda57d569e7834781130b3c0f3e18fad78e86ad748eabd397f0ef as build FROM amd64/golang:1.26.6@sha256:9262b44222fad4e87aacd26b766bc1d9dddb7ea7b1bcad03bdce0f9c7f87f2bd as build
WORKDIR /build WORKDIR /build
ENV CGO_ENABLED=0 ENV CGO_ENABLED=0
ADD . /build ADD . /build
+1 -1
View File
@@ -2,7 +2,7 @@ module gitlab.com/unboundsoftware/cron-checker
go 1.26.0 go 1.26.0
toolchain go1.26.5 toolchain go1.26.6
require ( require (
github.com/alecthomas/kingpin/v2 v2.4.0 github.com/alecthomas/kingpin/v2 v2.4.0