From ee3391edbe7fad834562ff45e77ee287c9b22360 Mon Sep 17 00:00:00 2001 From: Antoine Toussaint Date: Sat, 22 Aug 2026 12:05:24 -0400 Subject: [PATCH 1/3] chore: pin core to v0.3.8 (Go 1.27 + build-recipe runners) Core v0.3.8 carries the Go 1.27 toolchain bump (core#338), the shared Go/Rust runners emitting build recipes (core#336), and the builder path fix aligning SingleImageBuildPlan with the output_directory contract (core#339). Whole-module build and vet are clean against it. Co-Authored-By: Claude Opus 4.8 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 95db64a6..01588f6a 100644 --- a/go.mod +++ b/go.mod @@ -9,7 +9,7 @@ require ( github.com/asottile/dockerfile v3.1.0+incompatible github.com/blang/semver v3.5.1+incompatible github.com/briandowns/spinner v1.23.2 - github.com/codefly-dev/core v0.3.6 + github.com/codefly-dev/core v0.3.8 github.com/codefly-dev/golor v0.1.3 github.com/codefly-dev/llm v0.1.7 github.com/codefly-dev/sdk-go v0.1.65 diff --git a/go.sum b/go.sum index de6023ba..ff27239d 100644 --- a/go.sum +++ b/go.sum @@ -95,8 +95,8 @@ github.com/clipperhouse/uax29/v2 v2.7.0 h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJ github.com/clipperhouse/uax29/v2 v2.7.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM= github.com/cloudflare/circl v1.6.5 h1:O64F26HEqNhznd/hrC5KZXVKYuKM2rx4deZDTc4ihQA= github.com/cloudflare/circl v1.6.5/go.mod h1:h5LNyxAc5nTue9DS5jT+48en2PSDYt3zdGnz5OstK6c= -github.com/codefly-dev/core v0.3.6 h1:lt5EyL+uS1Z6Vzg+V/HhpnIV43Lu5rN9E0k+ZslIKHk= -github.com/codefly-dev/core v0.3.6/go.mod h1:ca5IAJnFJSC3OPl5DcoRIi41BMfO0As8BaDGciYZ7nI= +github.com/codefly-dev/core v0.3.8 h1:iqXrad1zwpX1CzAKr53TeuYLWHV8B5QkhHVV6unb9Os= +github.com/codefly-dev/core v0.3.8/go.mod h1:4V8BP4F5mnRDZvylhC9P5N7rfifpAma5n3dW4YD+gtQ= github.com/codefly-dev/golor v0.1.3 h1:xmo+ceyJFRYZdvpWE2fNd0jeaadp/Ibm1BnganiGKOc= github.com/codefly-dev/golor v0.1.3/go.mod h1:sl/u/K1l7J0Pr3xyVZp8fOJYQItKKst1No9JqgzLLoY= github.com/codefly-dev/gortk v0.2.0 h1:7bOlS5valYz2zil+fZctQNcPCYBcPj86abcw9N8h1hQ= From 31452fb7ae5cc17b3bb59908532a60cdb8b5f5f6 Mon Sep 17 00:00:00 2001 From: Antoine Toussaint Date: Sat, 22 Aug 2026 13:10:52 -0400 Subject: [PATCH 2/3] ci(lint): build golangci-lint from source under the module toolchain The prebuilt golangci-lint binary (install-mode: binary, the action default) is built with Go 1.26 and refuses to lint this module now that it targets Go 1.27: "the Go language version (go1.26) used to build golangci-lint is lower than the targeted Go version (1.27.0)". Switch the action to install-mode: goinstall so it builds v2.12.2 from source under the job's 1.27 toolchain, matching `make lint`. Preserves only-new-issues. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/go.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 4dd59e20..b9d47b4e 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -147,4 +147,10 @@ jobs: uses: golangci/golangci-lint-action@v8 with: version: v2.12.2 + # Build the linter from source under the module's Go toolchain + # (1.27) instead of downloading the prebuilt binary, which is built + # with an older Go and refuses to lint a module targeting a newer + # one ("the Go language version used to build golangci-lint is lower + # than the targeted Go version"). Matches `make lint`. + install-mode: goinstall only-new-issues: true From 3765b98f621e526fdb3b5fd8b27dd6e5a821dd66 Mon Sep 17 00:00:00 2001 From: Antoine Toussaint Date: Sat, 22 Aug 2026 13:17:07 -0400 Subject: [PATCH 3/3] ci(lint): bump golangci-lint to v2.13.1 for Go 1.27 support v2.12.2 bundles staticcheck (honnef.co/go/tools) v0.7.0, whose IR builder panics analyzing Go 1.27 stdlib source: "buildir: unexpected expr: *ast.KeyValueExpr" on package internal/poll. v2.13.1 bundles v0.8.0, the first staticcheck release that understands Go 1.27. Bumped in both the workflow and the Makefile (kept in sync). Combined with install-mode: goinstall, lint now builds and runs under the module's 1.27 toolchain. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/go.yml | 6 +++++- Makefile | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index b9d47b4e..dd8cf890 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -146,7 +146,11 @@ jobs: - name: golangci-lint uses: golangci/golangci-lint-action@v8 with: - version: v2.12.2 + # v2.13.1 bundles staticcheck (honnef.co/go/tools) v0.8.0, the first + # release that understands Go 1.27 stdlib source; v2.12.2's v0.7.0 + # panics in its IR builder analyzing 1.27 packages. Keep in sync with + # GOLANGCI_LINT_VERSION in the Makefile. + version: v2.13.1 # Build the linter from source under the module's Go toolchain # (1.27) instead of downloading the prebuilt binary, which is built # with an older Go and refuses to lint a module targeting a newer diff --git a/Makefile b/Makefile index 5a3ffb08..dfb2e5ff 100644 --- a/Makefile +++ b/Makefile @@ -8,7 +8,7 @@ dashboard: cd web/dashboard && npm ci && npm run build # Keep in sync with the pinned version in .github/workflows/go.yml. -GOLANGCI_LINT_VERSION ?= v2.12.2 +GOLANGCI_LINT_VERSION ?= v2.13.1 .PHONY: install-golangci-lint install-golangci-lint: