Skip to content

Chore: upgrade and pin Go development tools - #277

Merged
mgoetzegb merged 1 commit into
mainfrom
codex/weekly-go-tooling-2026-11-02
Nov 6, 2026
Merged

mgoetzegb merged 1 commit into
mainfrom
codex/weekly-go-tooling-2026-11-02

Conversation

@mgoetzegb

@mgoetzegb mgoetzegb commented Nov 2, 2026 •

Copy link
Copy Markdown
Member

What

Update and pin the Makefile's Go tools against latest stable upstream tags checked on 2026-11-02:

Tool Before After
SWAG v1.16.4 v1.16.6
Mockery v3.8.1 v3.9.0
golangci-lint @latest v2.15.0
govulncheck @latest v1.9.0

Regenerate mocks with Mockery v3.9.0; the generated changes mark constructors and cleanup callbacks as test helpers. SWAG v2 release candidates were excluded. Old/new SWAG generation produced identical API files; existing generated-document drift was excluded.

Compatibility: go.mod declares Go 1.26.8; SWAG requires Go 1.18 and the other selected tool modules require Go 1.26.0. CI selects stable Go and Docker pins 1.27.3. Runtime validation used Go 1.27.3 with GOFLAGS=-buildvcs=false.

Passed: make generate-code, make api-docs, make build, go test ./... -run '^$', make lint (0 issues), make govulncheck (0 reachable symbol vulnerabilities; 3 vulnerabilities in required modules with no affected calls found), go test ./... -count=1 -timeout=180s with a dedicated disposable PostgreSQL 16 instance, and git diff --check. The initial web-test attempt without PostgreSQL failed on connection refusal; the complete rerun passed after starting the isolated database. Go 1.26.8 runtime and container/product E2E were not tested.

Why

Use current stable tooling and make lint and vulnerability scans reproducible instead of resolving moving @latest versions on each run.

Checklist

  • I have used the following LLMs/AI tools in this pull request: OpenAI Codex to inspect upstream versions, update pins, regenerate mocks, run validation, and prepare this PR.

@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.

@mgoetzegb
mgoetzegb marked this pull request as ready for review November 3, 2026 13:10
@mgoetzegb
mgoetzegb requested a review from a team as a code owner November 3, 2026 13:10
@mgoetzegb
mgoetzegb merged commit 56c43c2 into main Nov 6, 2026
16 checks passed
@mgoetzegb
mgoetzegb deleted the codex/weekly-go-tooling-2026-11-02 branch November 6, 2026 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants