micro--go-micro
Asim Aslam
2cf95b27c8
govulncheck reported 30 reachable vulnerabilities. Remediation: - Pin `toolchain go1.25.12` and build CI on Go 1.25 (lint/tests workflows): clears ~24 Go standard-library CVEs (crypto/tls, crypto/x509, net/http, html/template, net/url, os, …) that were present under go1.24.7. - Bump `golang.org/x/net` v0.38.0 -> v0.55.0 and `google.golang.org/grpc` v1.71.1 -> v1.79.3 (grpc raises the module's Go directive to 1.25). Result: govulncheck drops from 30 -> 2. The remaining two (github.com/jackc/pgx/v4, github.com/jackc/pgproto3/v2) have no upstream fix and require a pgx v5 migration — tracked separately; the govulncheck gate will follow with those explicitly allow-listed until migrated. Note: this raises go-micro's minimum Go to 1.25 (forced by the grpc security bump). Verified: build, go vet, and the ai/agent/flow/store/registry/broker/ wrapper/cmd + grpc/net-dependent packages pass on 1.25.12. Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL Co-authored-by: Claude <noreply@anthropic.com>
31 行
575 B
YAML
31 行
575 B
YAML
name: Lint
|
|
on:
|
|
push:
|
|
branches:
|
|
- "**"
|
|
pull_request:
|
|
types:
|
|
- opened
|
|
- reopened
|
|
- synchronize
|
|
branches:
|
|
- "**"
|
|
jobs:
|
|
golangci:
|
|
name: golangci-lint
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "1.25"
|
|
check-latest: true
|
|
cache: true
|
|
- name: golangci-lint
|
|
uses: golangci/golangci-lint-action@v8
|
|
with:
|
|
version: v2.5.0
|