Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/ci.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -18,8 +18,8 @@ jobs:
- run: go test -race ./...
- name: Check Go version consistency
run: |
mod_version="$(sed -nE 's/^go[[:space:]]+([0-9]+[.][0-9]+)([.][0-9]+)?([[:space:]]|$).*/\1/p' go.mod)"
docker_version="$(sed -nE 's|^FROM[[:space:]]+docker[.]io/library/golang:([0-9]+[.][0-9]+)([.][0-9]+)?-.*|\1|p' Dockerfile)"
mod_version="$(sed -nE 's/^go[[:space:]]+([0-9]+[.][0-9]+)([.][0-9]+)?([[:space:]]|$).*/\1\2/p' go.mod)"
docker_version="$(sed -nE 's|^FROM[[:space:]]+docker[.]io/library/golang:([0-9]+[.][0-9]+)([.][0-9]+)?-.*|\1\2|p' Dockerfile)"
if [ -z "$mod_version" ]; then
echo "::error::go.mod has no go directive"
exit 1
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1

FROM docker.io/library/golang:1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc AS builder
FROM docker.io/library/golang:1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
ARG TARGETOS
ARG TARGETARCH
ARG VERSION
Expand Down
2 changes: 1 addition & 1 deletion go.mod
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/misospace/alert-triage

go 1.27
go 1.27.1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Major: Upstream Go 1.27.1 release notes could not be fetched in the corpus, so the 'no breaking API changes' must_check is not fully verified; conservative stance required until notes are reviewed.

Automated finding from AI PR review.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still open after this push; carried forward. (as of e517e16)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Info (docs): Toolchain and Dockerfile are now coupled only at the major.minor level; a future patch bump that touched go command behaviour would need both files updated in lockstep.

Automated finding from AI PR review.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still open after this push; carried forward. (as of e517e16)


// yaml.v3 is the sole non-stdlib dependency (see AGENTS.md). It is pinned at
// v3.0.1; go.sum also carries its transitive test dep gopkg.in/check.v1 so the
Expand Down