From a8f70d9931c92a8eb2d7d724d672f1980eff29db Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Sun, 23 Aug 2026 13:31:33 +0200 Subject: [PATCH 1/2] ci: update actions and golangci-lint for go1.27 The current golangci-lint version isn't compatible with go1.27; run golangci-lint Running [/home/runner/golangci-lint-2.12.2-linux-amd64/golangci-lint config path] in [/home/runner/work/log/log] ... Running [/home/runner/golangci-lint-2.12.2-linux-amd64/golangci-lint config verify] in [/home/runner/work/log/log] ... Running [/home/runner/golangci-lint-2.12.2-linux-amd64/golangci-lint run] in [/home/runner/work/log/log] ... Error: ../../../../../opt/hostedtoolcache/go/1.27.0/x64/src/internal/poll/splice_linux.go:237:21: unknown field rfd in struct literal of type splicePipe (typecheck) return &splicePipe{rfd: fds[0], wfd: fds[1]} ^ Signed-off-by: Sebastiaan van Stijn --- .github/workflows/ci.yml | 20 ++++++++++---------- .golangci.yml | 3 +++ 2 files changed, 13 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 51eeea1..1fb48b6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,7 +9,7 @@ on: env: GOTOOLCHAIN: local -permissions: # added using https://github.com/step-security/secure-workflows +permissions: contents: read jobs: @@ -30,17 +30,16 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] steps: - - uses: actions/setup-go@v7 + - uses: actions/setup-go@v7.0.0 with: go-version: stable cache: false # see actions/setup-go#368 - - uses: actions/checkout@v6 - - uses: golangci/golangci-lint-action@v9 + - uses: actions/checkout@v7.0.1 + - uses: golangci/golangci-lint-action@v9.3.0 with: - version: v2.12 + version: v2.13 skip-cache: true - args: --timeout=5m # # Project checks @@ -52,12 +51,12 @@ jobs: timeout-minutes: 5 steps: - - uses: actions/setup-go@v7 + - uses: actions/setup-go@v7.0.0 with: go-version: stable cache: false # see actions/setup-go#368 - - uses: actions/checkout@v6 + - uses: actions/checkout@v7.0.1 with: path: src/github.com/containerd/log fetch-depth: 25 @@ -80,14 +79,15 @@ jobs: - stable steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7.0.1 with: path: src/github.com/containerd/log - - uses: actions/setup-go@v7 + - uses: actions/setup-go@v7.0.0 with: go-version: ${{ matrix.go-version }} go-version-file: src/github.com/containerd/log/go.mod # used when go-version is empty + cache: false # see actions/setup-go#368 - name: Set env shell: bash diff --git a/.golangci.yml b/.golangci.yml index c747d1f..5c3bdd7 100644 --- a/.golangci.yml +++ b/.golangci.yml @@ -45,3 +45,6 @@ formatters: - releases - reports - test + +run: + timeout: 5m From c93ae2c45014f542f49901f1854c84afb4caf423 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Sun, 23 Aug 2026 13:34:35 +0200 Subject: [PATCH 2/2] ci: pin actions by sha and set dependabot cooldown Signed-off-by: Sebastiaan van Stijn --- .github/dependabot.yml | 2 ++ .github/workflows/ci.yml | 16 ++++++++-------- 2 files changed, 10 insertions(+), 8 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bccacde..fd666cc 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,3 +5,5 @@ updates: schedule: interval: "weekly" open-pull-requests-limit: 5 + cooldown: + default-days: 7 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1fb48b6..5191c19 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -30,13 +30,13 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] steps: - - uses: actions/setup-go@v7.0.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: stable cache: false # see actions/setup-go#368 - - uses: actions/checkout@v7.0.1 - - uses: golangci/golangci-lint-action@v9.3.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0 with: version: v2.13 skip-cache: true @@ -51,17 +51,17 @@ jobs: timeout-minutes: 5 steps: - - uses: actions/setup-go@v7.0.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: stable cache: false # see actions/setup-go#368 - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: src/github.com/containerd/log fetch-depth: 25 - - uses: containerd/project-checks@v1.2.2 + - uses: containerd/project-checks@d7751f3c375b8fe4a84c02a068184ee4c1f59bc4 # v1.2.2 with: working-directory: src/github.com/containerd/log repo-access-token: ${{ secrets.GITHUB_TOKEN }} @@ -79,11 +79,11 @@ jobs: - stable steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: src/github.com/containerd/log - - uses: actions/setup-go@v7.0.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: ${{ matrix.go-version }} go-version-file: src/github.com/containerd/log/go.mod # used when go-version is empty