Develop

.github/workflows/go-combined-analysis.yml

@@ -38,7 +38,7 @@ jobs:
           lerian_ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
           go_version: '1.25'
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          golangci_lint_version: 'v2.4.0'
+          golangci_lint_version: 'v2.11.2'
 
   GoSec:
     name: Run GoSec to SDK

.gitignore

@@ -1,5 +1,4 @@
 .idea/*
-CLAUDE.md
 .DS_Store
 .claude/
 .mcp.json
@@ -12,4 +11,8 @@ coverage.html
 *_coverage.html
 
 # Security scan reports
-gosec-report.sarif
+gosec-report.sarif
+
+docs/codereview/
+.codegraph/
+vendor/

.golangci.yml

@@ -3,6 +3,7 @@ run:
   tests: false
 linters:
   enable:
+    # --- Existing linters ---
     - bodyclose
     - depguard
     - dogsled
@@ -20,18 +21,56 @@ linters:
     - reassign
     - revive
     - staticcheck
-    - thelper
-    - tparallel
     - unconvert
     - unparam
     - usestdlibvars
     - wastedassign
     - wsl_v5
+
+    # --- Tier 1: Safety & Correctness ---
+    - errorlint        # type assertions on errors, missing %w
+    - exhaustive       # non-exhaustive enum switches
+    - fatcontext       # context growing in loop
+    - forcetypeassert  # unchecked type assertions (sync.Map etc.)
+    - gosec            # security issues (math/rand for jitter etc.)
+    - nilnil           # return nil, nil ambiguity
+    - noctx            # net.Listen/exec.Command without context
+
+    # --- Tier 2: Code Quality & Modernization ---
+    - goconst          # repeated string literals
+    - gocritic         # if-else→switch, deprecated comments
+    - inamedparam      # unnamed interface params
+    - intrange         # integer range loops
+    - mirror           # allocation savings (bytes.Equal etc.)
+    - modernize        # Go modernization suggestions
+    - perfsprint       # fmt.Errorf→errors.New where applicable
+
+    # --- Tier 3: Zero-Issue Guards ---
+    - asasalint                  # variadic any argument passing
+    - copyloopvar                # loop variable capture prevention
+    - durationcheck              # time.Duration math bugs
+    - exptostd                   # x/exp to stdlib migration
+    - gocheckcompilerdirectives  # malformed //go: comments
+    - makezero                   # make with non-zero length passed to append
+    - musttag                    # struct tag validation for marshaling
+    - nilnesserr                 # subtle nil error patterns
+    - recvcheck                  # receiver consistency
+    - rowserrcheck               # SQL rows.Err() checks
+    - spancheck                  # OTEL span lifecycle
+    - sqlclosecheck              # SQL resource close
+    - testifylint                # testify assertion patterns
+
   settings:
-    wsl_v5:
-      allow-first-in-block: true
-      allow-whole-block: false
-      branch-max-lines: 2
+    # --- New settings ---
+    exhaustive:
+      default-signifies-exhaustive: true
+
+    goconst:
+      min-len: 3
+      min-occurrences: 3
+      ignore-tests: true
+
+    # --- Existing settings (unchanged) ---
     depguard:
       rules:
         main:
@@ -60,6 +99,11 @@ linters:
         - name: use-any
           severity: warning
           disabled: false
+    wsl_v5:
+      allow-first-in-block: true
+      allow-whole-block: false
+      branch-max-lines: 2
+
   exclusions:
     generated: lax
     rules:

.goreleaser.yml

@@ -1,42 +1,10 @@
 version: 2
 
-builds:
-  - id: "auth"
-    env:
-      - CGO_ENABLED=0
-    main: ./cmd
-    binary: auth
-
-    goos:
-      - linux
-      - windows
-      - darwin
-      - freebsd
-
-    goarch:
-      - "386"
-      - amd64
-      - arm
-      - ppc64
+# lib-commons/v4 is a Go library (no binary to build).
+# GoReleaser is used only for changelog generation and GitHub release creation.
 
-    goarm:
-      - "7"
-
-archives:
-  - format: zip
-
-nfpms:
-  - id: packages
-    license: Apache-2.0 license
-    maintainer: Lerian Studio Technologies <https://github.com/LerianStudio/>
-    package_name: auth
-    homepage: https://github.com/LerianStudio/auth
-    bindir: /usr/local/bin
-    formats:
-      - apk
-      - deb
-      - rpm
-      - archlinux
+builds:
+  - skip: true
 
 changelog:
   sort: asc