Skip to content

[Sync] Update project files from source repository (2f986b0) - #160

Merged
mrz1836 merged 2 commits into
masterfrom
chore/sync-files-third-party-sdks-20260307-152048-2f986b0
Mar 7, 2026
Merged

mrz1836 merged 2 commits into
masterfrom
chore/sync-files-third-party-sdks-20260307-152048-2f986b0

Conversation

@mrz1836

@mrz1836 mrz1836 commented Mar 7, 2026

Copy link
Copy Markdown
Owner

What Changed

  • Refactored .github/actions/parse-env/action.yml to set ENV_JSON as an environment variable in the env: section instead of as a shell variable in the run: script
  • Updated GOVULNCHECK_GO_VERSION from 1.26.0 to 1.26.1 in .github/env/00-core.env
  • Updated GO_PRE_COMMIT_GOLANGCI_LINT_VERSION from v2.10.1 to v2.11.1 in .github/env/10-pre-commit.env
  • Updated MAGE_X_GOLANGCI_LINT_VERSION from v2.10.1 to v2.11.1 in .github/env/10-mage-x.env

Why It Was Necessary

  • The environment variable refactoring in the parse-env action improves security by avoiding shell interpolation of the JSON input, reducing risk of command injection
  • Updating govulncheck to version 1.26.1 ensures the latest Go vulnerability scanning capabilities are available
  • Upgrading golangci-lint to v2.11.1 across pre-commit and mage-x configurations provides the latest linting rules and bug fixes

Testing Performed

  • Verified that the parse-env action correctly processes environment variables with the new env: section approach
  • Confirmed that all version updates are syntactically valid and reference existing tool releases
  • Validated that environment configuration files maintain proper formatting and variable definitions

Impact / Risk

  • Low Risk: The parse-env refactoring is a best-practice improvement that makes the action more secure without changing its functionality
  • No Breaking Changes: Version updates are minor/patch releases that maintain backward compatibility
  • CI/CD Impact: Updated tool versions will be automatically picked up by workflows using these environment configurations

@mrz1836 mrz1836 self-assigned this Mar 7, 2026
@mrz1836 mrz1836 added automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps labels Mar 7, 2026
@github-actions github-actions Bot added update General updates size/S Small change (11-50 lines) labels Mar 7, 2026
Remove unnecessary and add appropriate gosec nolint directives, then update HTTP test requests to use context.Background() for proper context handling.
@mrz1836
mrz1836 merged commit 6010949 into master Mar 7, 2026
72 of 74 checks passed
@github-actions
github-actions Bot deleted the chore/sync-files-third-party-sdks-20260307-152048-2f986b0 branch March 7, 2026 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps size/S Small change (11-50 lines) update General updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

⌂ 换网址