From e0f329b724fe703a39fe3ea7b9a059c58099ef06 Mon Sep 17 00:00:00 2001 From: Nicholas Wiersma Date: Sat, 21 Feb 2026 06:18:36 +0200 Subject: [PATCH 1/4] chore: add govulncheck --- .github/workflows/govulncheck.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/govulncheck.yml diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml new file mode 100644 index 0000000..ce587cf --- /dev/null +++ b/.github/workflows/govulncheck.yml @@ -0,0 +1,29 @@ +on: + push: + branches: + - main + pull_request: + schedule: # daily at 04:00 UTC + - cron: '0 4 * * *' + +permissions: + contents: read + +name: govulncheck +jobs: + govulncheck: + + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v6 + + - name: Install Go + id: install-go + uses: actions/setup-go@v6 + with: + go-version-file: go.mod + + - name: Run govalncheck + run: | + go run golang.org/x/vuln/cmd/govulncheck@latest ./... From c36ad5da94b25a94a881e6f502df1b7dcb90b4a6 Mon Sep 17 00:00:00 2001 From: Nicholas Wiersma Date: Sat, 21 Feb 2026 06:22:57 +0200 Subject: [PATCH 2/4] fix: bump go version --- go.mod | 6 +++--- go.sum | 4 ++++ 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 3586097..e124157 100644 --- a/go.mod +++ b/go.mod @@ -1,9 +1,9 @@ module github.com/hamba/statter/v2 -go 1.25.1 +go 1.25.7 require ( - github.com/VictoriaMetrics/metrics v1.41.1 + github.com/VictoriaMetrics/metrics v1.41.2 github.com/cactus/go-statsd-client/v5 v5.1.0 github.com/go4org/hashtriemap v0.0.0-20251130024219-545ba229f689 github.com/hamba/logger/v2 v2.9.0 @@ -28,7 +28,7 @@ require ( go.opentelemetry.io/otel v1.38.0 // indirect go.opentelemetry.io/otel/trace v1.38.0 // indirect go.yaml.in/yaml/v2 v2.4.2 // indirect - golang.org/x/sys v0.39.0 // indirect + golang.org/x/sys v0.41.0 // indirect google.golang.org/protobuf v1.36.8 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect ) diff --git a/go.sum b/go.sum index 6ece8d9..1988295 100644 --- a/go.sum +++ b/go.sum @@ -1,5 +1,7 @@ github.com/VictoriaMetrics/metrics v1.41.1 h1:xYQilpPmq5BPB+uIbe4Iygdw1cSiI4obYQjfLdQN2Xo= github.com/VictoriaMetrics/metrics v1.41.1/go.mod h1:xDM82ULLYCYdFRgQ2JBxi8Uf1+8En1So9YUwlGTOqTc= +github.com/VictoriaMetrics/metrics v1.41.2 h1:pLQ4Mw9TqXFq3ZsZVJkz88JHpjL9LY5NHTY3v2gBNAw= +github.com/VictoriaMetrics/metrics v1.41.2/go.mod h1:xDM82ULLYCYdFRgQ2JBxi8Uf1+8En1So9YUwlGTOqTc= github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM= github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw= github.com/cactus/go-statsd-client/v5 v5.1.0 h1:sbbdfIl9PgisjEoXzvXI1lwUKWElngsjJKaZeC021P4= @@ -57,6 +59,8 @@ go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI= go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU= golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk= golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= +golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k= +golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= google.golang.org/protobuf v1.36.8 h1:xHScyCOEuuwZEc6UtSOvPbAT4zRh0xcNRYekJwfqyMc= google.golang.org/protobuf v1.36.8/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= From dbf19063ca8a8559a9bdcceb32e0bd2b3aeded9e Mon Sep 17 00:00:00 2001 From: Nicholas Wiersma Date: Sat, 21 Feb 2026 06:28:23 +0200 Subject: [PATCH 3/4] fix: be specific about go version --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index a64d49f..3a875b7 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,7 +9,7 @@ jobs: test: strategy: matrix: - go-version: [ "1.25", "1.26" ] + go-version: [ "1.25.7", "1.26" ] runs-on: ubuntu-latest env: GOLANGCI_LINT_VERSION: v2.9.0 From 2a7f1b75ea2cac762808343df746fc82ff1dec8e Mon Sep 17 00:00:00 2001 From: Nicholas Wiersma Date: Sat, 21 Feb 2026 06:31:11 +0200 Subject: [PATCH 4/4] fix: try antoher option --- .github/workflows/test.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3a875b7..dd51762 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,7 +9,7 @@ jobs: test: strategy: matrix: - go-version: [ "1.25.7", "1.26" ] + go-version: [ "1.25", "1.26" ] runs-on: ubuntu-latest env: GOLANGCI_LINT_VERSION: v2.9.0 @@ -23,6 +23,7 @@ jobs: uses: actions/setup-go@v6 with: go-version: ${{ matrix.go-version }} + check-latest: true - name: Download dependencies run: go mod download