Skip to content

chore: add dependabot config; branch CI with lint and security scanning; harden release workflow; update Go ver; pre-commit hook#99

Merged
Yakitrak merged 17 commits intoYakitrak:mainfrom
TriplEight:main
Mar 4, 2026
Merged

chore: add dependabot config; branch CI with lint and security scanning; harden release workflow; update Go ver; pre-commit hook#99
Yakitrak merged 17 commits intoYakitrak:mainfrom
TriplEight:main

Conversation

@TriplEight
Copy link
Contributor

@TriplEight TriplEight commented Mar 2, 2026

This project requires some security.

It will be easier to review one by one:
TriplEight#5
TriplEight#6
TriplEight#10

After you merge it

  1. enable everything on https://github.com/Yakitrak/notesmd-cli/settings/security_analysis
  2. run make install-hooks

TriplEight and others added 17 commits March 2, 2026 15:41
chore: add dependabot config; branch CI with lint and security scanning; harden release workflow; update Go ver
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2 to 7.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v2...v7)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…easer/goreleaser-action-7

chore(deps): bump goreleaser/goreleaser-action from 2 to 7
  - Disable fieldalignment govet check (too aggressive for CLI structs)
  - Exclude gosec false positives G204/G301/G302/G304/G306 (local CLI)
  - Add nolint:nilerr to intentional WalkDir skip and config fallback patterns
  - Fix ineffassign in vault_default_name_test.go (lines 33, 76, 90, 172)
  - Apply gosimple S1009 in frontmatter.go (nil map has len 0)
  - Fix errcheck violations in config_test.go, open_test.go, obsidian_path_test.go
…re-commit

  - Remove trailing tabs on blank lines in utils_test.go (gofmt)
  - Simplify //nolint:nilerr comments to standard format (no -- suffix)
  - Add golangci-lint to pre-commit hook when available
branch CI with lint and security scanning; harden release workflow; update Go ver; pre-commit hook
Copy link
Owner

@Yakitrak Yakitrak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Yakitrak Yakitrak merged commit 55976ac into Yakitrak:main Mar 4, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants