Merge branch 'main' into test-ci

Author: vladopajic

.github/.testcoverage-local.yml

@@ -6,7 +6,7 @@ threshold:
   total: 98
 override:
 - path: badgestorer/github.go$  ## is integration test
-  threshold: 64
+  threshold: 43
 - path: path/path.go$           ## requires windows to be tested
   threshold: 66
 exclude:

.github/workflows/action-docker-test.yml

@@ -1,5 +1,7 @@
 name: action-test (docker version)
-on: [push]
+on:
+  pull_request:
+  merge_group:
 jobs:
   build-dev-image:
     name: build dev image
@@ -8,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest 
     steps:
     - name: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: login to GitHub container registry
       uses: docker/login-action@v3
@@ -40,10 +42,10 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 

.github/workflows/action-source-test.yml

@@ -7,10 +7,10 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 

.github/workflows/lint.yml

@@ -1,21 +1,23 @@
 name: lint
-on: [push]
+on:
+  pull_request:
+  merge_group:
 jobs:
   lint:
     name: lint
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
       - name: go mod tidy check
         uses: katexochen/go-tidy-check@v2
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v7
+        uses: golangci/golangci-lint-action@v9
         with:
-          version: v2.0.1 # LINT_VERSION: update version in other places
+          version: v2.6.1 # LINT_VERSION: update version in other places
       - id: govulncheck
         uses: golang/govulncheck-action@v1

.github/workflows/pr.yml

@@ -16,6 +16,6 @@ jobs:
     name: semantic title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -11,9 +11,9 @@ jobs:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
@@ -29,7 +29,7 @@ jobs:
             
       - name: update the major version tag
         id: majorver
-        uses: actions/publish-action@v0.3.0
+        uses: actions/publish-action@v0.4.0
         with:
           source-tag: ${{ env.RELEASE_VERSION }}
 

.github/workflows/test.yml

@@ -1,5 +1,7 @@
 name: test
-on: [push]
+on:
+  pull_request:
+  merge_group:
 permissions:
   contents: write
   pull-requests: write
@@ -12,9 +14,9 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
@@ -24,7 +26,7 @@ jobs:
         run: go test -race -count=1 -failfast -shuffle=on -coverprofile=${{ matrix.os }}-profile -covermode=atomic -coverpkg=./... ./... 
 
       - name: upload cover profile artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: ${{ matrix.os }}-profile
           path: ${{ matrix.os }}-profile
@@ -36,18 +38,18 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: download ubuntu-latest-profile
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: ubuntu-latest-profile
       - name: download macos-latest-profile
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: macos-latest-profile
       - name: download windows-latest-profile
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: windows-latest-profile
 
@@ -73,7 +75,7 @@ jobs:
           diff-base-breakdown-file-name: ${{ steps.download-main-breakdown.outputs.found_artifact == 'true' && 'main.breakdown' || '' }}
 
       - name: upload artifact (main.breakdown)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         if: github.ref_name == 'main'
         with:
           name: main.breakdown

.golangci.yml

@@ -14,6 +14,7 @@ linters:
     - dupl
     - dupword
     - durationcheck
+    - embeddedstructfieldcheck
     - err113
     - errchkjson
     - errname
@@ -24,6 +25,7 @@ linters:
     - forbidigo
     - forcetypeassert
     - funlen
+    - funcorder
     - gocheckcompilerdirectives
     - gochecknoglobals
     - gochecknoinits
@@ -44,6 +46,7 @@ linters:
     - inamedparam
     - interfacebloat
     - intrange
+    - iotamixing
     - lll
     - loggercheck
     - maintidx
@@ -86,7 +89,7 @@ linters:
     - wastedassign
     - whitespace
     - wrapcheck
-    - wsl
+    - wsl_v5
     - zerologlint
   settings:
     dupl:

.testcoverage.example.yml

@@ -41,6 +41,10 @@ exclude:
     - \.pb\.go$    # excludes all protobuf generated files
     - ^pkg/bar     # exclude package `pkg/bar`
 
+# (optional; default false)
+# When true, requires all coverage-ignore annotations to include explanatory comments
+force-annotation-comment: false
+
 # If specified, saves the current test coverage breakdown to this file.
 #
 # Typically, this breakdown is generated only for main (base) branches and 
@@ -60,12 +64,12 @@ diff:
   # Allowed threshold for the test coverage difference (in percentage) 
   # between the feature branch and the base branch.
   #
-  # By default, this is disabled (set to nil). Valid values range from 
+  # By default, this is disabled (set to null). Valid values range from 
   # -100.0 to +100.0.
   #
   # Example: 
   #   If set to 0.5, an error will be reported if the feature branch has 
   #   less than 0.5% more coverage than the base.
   #
   #   If set to -0.5, the check allows up to 0.5% less coverage than the base.
-  threshold: nil
+  threshold: null

Dockerfile

@@ -1,5 +1,5 @@
 # GO_VERSION: automatically update to most recent via dependabot
-FROM golang:1.24.5 AS builder
+FROM golang:1.25.3 AS builder
 WORKDIR /workspace
 
 COPY go.mod go.mod