Skip to content

chore: promote development to main (2026-10-19) - #45

Merged
Wikid82 merged 15 commits into
mainfrom
development
Oct 19, 2026
Merged

Wikid82 merged 15 commits into
mainfrom
development

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Promote development to main

Date: 2026-10-19
Trigger: Scheduled weekly promotion
CI on development HEAD: https://github.com/Wikid82/go_notify_yourself/actions/runs/39233573526

Commits being promoted

d05ac8c fix(deps): update koanf to v2.4.1
f7074d2 fix(deps): update gabriel-vasile/mimetype to v1.4.16
15c3972 fix(deps): update koanf to v2.4.0
996d8b5 chore(deps): update github/codeql-action to v4.39.0
a768215 fix(deps): update lefthook to v2.2.2
1509cae fix(deps): update doublestar to v4.10.3 and staticcheck to master
f50839f chore(deps): bump golang.org/x indirect dependencies
90b64b7 chore(deps): update github/codeql-action action to v4.38.3 (#44)
6d61adb chore(deps): update github/codeql-action action to v4.38.3
cf7a730 fix(deps): update Go version to 1.27.2 and bump dependencies
b8f62d6 chore(deps): update lefthook to v2.2.0 and go-runewidth to v0.0.31, bump golang.org/x/tools to v0.51.0
a9dc172 chore(deps): bump koanf to v2.3.8 and go-colorable to v0.1.16
e140a36 chore(ci): harden workflow permissions and checkout credentials
6ef461e chore(deps): update Go dependencies and bump tool deps in script
6e93c1e chore: propagate main into development (#43)

Merge instructions — important

Use "Create a merge commit", not squash or rebase. Squashing collapses every
feat:/fix: commit into one bullet-list body, which release-please can't parse —
version bumps and changelog entries silently stop working.


Opened automatically by Promote development to main.

Wikid82 and others added 15 commits October 5, 2026 10:57
Refresh go.mod and go.sum with the latest versions, including
lefthook v2.1.17. Drop the unused go-json-experiment, go-spew,
testify-related and gopkg.in/check.v1 indirect entries that tidy
no longer needs.

Add `go get -u tool` to notify_dep_update.sh so tool directives such
as lefthook are updated, since `./...` does not cover them.
Address Aikido findings: set workflow-level permissions to {} in
release-please with job-level grants, and set persist-credentials: false
on all actions/checkout steps (no workflow pushes via git).

Co-Authored-By: Claude <noreply@anthropic.com>
Update indirect golang.org/x modules to their latest minor versions:
mod 0.42.0, net 0.61.0, sync 0.24.0, sys 0.49.0, term 0.47.0,
and text 0.43.0.
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@Wikid82
Wikid82 merged commit 19a2f13 into main Oct 19, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants