Skip to content

Commit 67de24f

Browse files
authored
1 parent d9e864c commit 67de24f

19 files changed

+173
-163
lines changed

.github/workflows/ci.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -29,13 +29,13 @@ jobs:
2929
steps:
3030
# Harden workflow runner
3131
- name: Harden workflow runner (audit all outbound calls)
32-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
32+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
3333
with:
3434
egress-policy: audit
3535

3636
# Checkout code
3737
- name: Checkout repository
38-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
38+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3939
with:
4040
persist-credentials: false
4141

@@ -48,7 +48,7 @@ jobs:
4848

4949
# Go
5050
- name: Set up Go
51-
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
51+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
5252
with:
5353
go-version: 1.25.x
5454

@@ -91,13 +91,13 @@ jobs:
9191
steps:
9292
# Harden workflow runner
9393
- name: Harden workflow runner (audit all outbound calls)
94-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
94+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
9595
with:
9696
egress-policy: audit
9797

9898
# Checkout code
9999
- name: Checkout repository
100-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
100+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
101101
with:
102102
persist-credentials: false
103103

@@ -110,7 +110,7 @@ jobs:
110110

111111
# Go
112112
- name: Set up Go
113-
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
113+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
114114
with:
115115
go-version: 1.25.x
116116

@@ -148,13 +148,13 @@ jobs:
148148
steps:
149149
# Harden workflow runner
150150
- name: Harden workflow runner (audit all outbound calls)
151-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
151+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
152152
with:
153153
egress-policy: audit
154154

155155
# Checkout code
156156
- name: Checkout repository
157-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
157+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
158158
with:
159159
persist-credentials: false
160160

@@ -167,24 +167,24 @@ jobs:
167167

168168
# Go
169169
- name: Set up Go
170-
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
170+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
171171
with:
172172
go-version: ${{ matrix.go-version }}
173173

174174
# Style consistency and static analysis using 'golangci-lint'
175175
# https://github.com/golangci/golangci-lint-action
176176
- name: Static analysis
177-
uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
177+
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
178178
with:
179-
version: v2.6
179+
version: v2.7
180180

181181
# Run unit tests
182182
- name: Test
183183
run: make test
184184

185185
# Save artifacts
186186
- name: Save artifacts
187-
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
187+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
188188
with:
189189
name: assets-${{ matrix.go-version }}
190190
path: |

.github/workflows/codeql.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,13 +26,13 @@ jobs:
2626
steps:
2727
# Harden workflow runner
2828
- name: Harden workflow runner (audit all outbound calls)
29-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
29+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
3030
with:
3131
egress-policy: audit
3232

3333
# Checkout code
3434
- name: Checkout repository
35-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
35+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3636
with:
3737
persist-credentials: false
3838

@@ -52,7 +52,7 @@ jobs:
5252

5353
# Initializes the CodeQL tools for scanning.
5454
- name: Initialize CodeQL
55-
uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
55+
uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
5656
with:
5757
languages: ${{ matrix.language }}
5858
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
6262

6363
# Auto build attempts to build any compiled languages (C/C++, C#, or Java).
6464
- name: Auto build
65-
uses: github/codeql-action/autobuild@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
65+
uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
6666

6767
# Run manual build only if auto-build fails
6868
- name: Manual build
@@ -75,4 +75,4 @@ jobs:
7575
# Can be excluded if the commit message contains: [skip codeql]
7676
- name: Perform CodeQL analysis
7777
if: ${{ !contains(env.commit_msg, '[skip codeql]') }}
78-
uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
78+
uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8

.github/workflows/dependency-review.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,13 +13,13 @@ jobs:
1313
steps:
1414
# Harden workflow runner
1515
- name: Harden workflow runner (audit all outbound calls)
16-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
16+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
1717
with:
1818
egress-policy: audit
1919

2020
# Checkout code
2121
- name: Checkout repository
22-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
22+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2323
with:
2424
persist-credentials: false
2525

.github/workflows/maintenance.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
steps:
1414
# Harden workflow runner
1515
- name: Harden workflow runner (audit all outbound calls)
16-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
16+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
1717
with:
1818
egress-policy: audit
1919

.github/workflows/ossf-scorecard.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@ jobs:
1818
steps:
1919
# Harden workflow runner
2020
- name: Harden workflow runner (audit all outbound calls)
21-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
21+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2222
with:
2323
egress-policy: audit
2424

2525
# Checkout code
2626
- name: Checkout repository
27-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
27+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2828
with:
2929
persist-credentials: false
3030

@@ -51,14 +51,14 @@ jobs:
5151

5252
# Upload the results as artifacts in the workflow run
5353
- name: Save artifacts
54-
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
54+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
5555
with:
5656
name: SARIF file
5757
path: results.sarif
5858
retention-days: 5
5959

6060
# Upload the results to GitHub's code scanning dashboard.
6161
- name: Upload results to code-scanning
62-
uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
62+
uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
6363
with:
6464
sarif_file: results.sarif

.golangci.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,18 @@ linters:
8989
simple: true
9090
range-loops: true
9191
for-loops: false
92+
revive:
93+
max-open-files: 100
94+
enable-default-rules: true
95+
rules:
96+
# managed by `lll`
97+
- name: line-length-limit
98+
severity: warning
99+
disabled: true
100+
# managed by `gocyclo`
101+
- name: cognitive-complexity
102+
severity: warning
103+
disabled: true
92104
exclusions:
93105
generated: lax
94106
rules:

buf.lock

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
version: v2
33
deps:
44
- name: buf.build/bufbuild/protovalidate
5-
commit: 52f32327d4b045a79293a6ad4e7e1236
6-
digest: b5:cbabc98d4b7b7b0447c9b15f68eeb8a7a44ef8516cb386ac5f66e7fd4062cd6723ed3f452ad8c384b851f79e33d26e7f8a94e2b807282b3def1cd966c7eace97
5+
commit: 2a1774d888024a9b93ce7eb4b59f6a83
6+
digest: b5:6b7f9bc919b65e5b79d7b726ffc03d6f815a412d6b792970fa6f065cae162107bd0a9d47272c8ab1a2c9514e87b13d3fbf71df614374d62d2183afb64be2d30a
77
- name: buf.build/googleapis/googleapis
88
commit: 61b203b9a9164be9a834f58c37be6f62
99
digest: b5:7811a98b35bd2e4ae5c3ac73c8b3d9ae429f3a790da15de188dc98fc2b77d6bb10e45711f14903af9553fa9821dff256054f2e4b7795789265bc476bec2f088c

buf.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,5 @@ modules:
1515
- path: proto
1616
deps:
1717
- buf.build/googleapis/googleapis:61b203b9a9164be9a834f58c37be6f62
18-
- buf.build/bufbuild/protovalidate:v1.0.0
18+
- buf.build/bufbuild/protovalidate:v1.1.0
1919
- buf.build/grpc-ecosystem/grpc-gateway:v2.27.3

go.mod

Lines changed: 41 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ go 1.24.0
55
toolchain go1.24.2
66

77
require (
8-
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.10-20250912141014-52f32327d4b0.1
9-
buf.build/go/protovalidate v1.0.1
8+
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.10-20251209175733-2a1774d88802.1
9+
buf.build/go/protovalidate v1.1.0
1010
dario.cat/mergo v1.0.2
1111
filippo.io/csrf v0.2.1
1212
github.com/awnumar/memguard v0.23.0
@@ -30,38 +30,38 @@ require (
3030
github.com/rs/zerolog v1.34.0
3131
github.com/sirupsen/logrus v1.9.3
3232
github.com/soheilhy/cmux v0.1.5
33-
github.com/spf13/cobra v1.10.1
33+
github.com/spf13/cobra v1.10.2
3434
github.com/spf13/pflag v1.0.10
3535
github.com/spf13/viper v1.21.0
3636
github.com/stretchr/testify v1.11.1
3737
go.mongodb.org/mongo-driver v1.17.6
38-
go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo v0.63.0
39-
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0
40-
go.opentelemetry.io/contrib/instrumentation/host v0.63.0
41-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
42-
go.opentelemetry.io/contrib/instrumentation/runtime v0.63.0
43-
go.opentelemetry.io/otel v1.38.0
44-
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0
45-
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0
46-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0
47-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0
48-
go.opentelemetry.io/otel/exporters/prometheus v0.60.0
49-
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.38.0
50-
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.38.0
51-
go.opentelemetry.io/otel/metric v1.38.0
52-
go.opentelemetry.io/otel/sdk v1.38.0
53-
go.opentelemetry.io/otel/sdk/metric v1.38.0
54-
go.opentelemetry.io/otel/trace v1.38.0
38+
go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo v0.64.0
39+
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.64.0
40+
go.opentelemetry.io/contrib/instrumentation/host v0.64.0
41+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0
42+
go.opentelemetry.io/contrib/instrumentation/runtime v0.64.0
43+
go.opentelemetry.io/otel v1.39.0
44+
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.39.0
45+
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.39.0
46+
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0
47+
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.39.0
48+
go.opentelemetry.io/otel/exporters/prometheus v0.61.0
49+
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0
50+
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.39.0
51+
go.opentelemetry.io/otel/metric v1.39.0
52+
go.opentelemetry.io/otel/sdk v1.39.0
53+
go.opentelemetry.io/otel/sdk/metric v1.39.0
54+
go.opentelemetry.io/otel/trace v1.39.0
5555
go.temporal.io/sdk v1.38.0
5656
go.uber.org/goleak v1.3.0
5757
go.uber.org/zap v1.27.1
58-
golang.org/x/crypto v0.45.0
59-
golang.org/x/sync v0.18.0
60-
golang.org/x/term v0.37.0
58+
golang.org/x/crypto v0.46.0
59+
golang.org/x/sync v0.19.0
60+
golang.org/x/term v0.38.0
6161
golang.org/x/time v0.14.0
62-
google.golang.org/genproto/googleapis/api v0.0.0-20251022142026-3a174f9686a8
62+
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217
6363
google.golang.org/grpc v1.77.0
64-
google.golang.org/protobuf v1.36.10
64+
google.golang.org/protobuf v1.36.11
6565
gopkg.in/yaml.v3 v3.0.1
6666
gorm.io/gorm v1.31.1
6767
storj.io/drpc v0.0.34
@@ -81,7 +81,7 @@ require (
8181
github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd // indirect
8282
github.com/charmbracelet/x/term v0.2.1 // indirect
8383
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
84-
github.com/ebitengine/purego v0.8.4 // indirect
84+
github.com/ebitengine/purego v0.9.1 // indirect
8585
github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a // indirect
8686
github.com/fatih/color v1.15.0 // indirect
8787
github.com/felixge/httpsnoop v1.0.4 // indirect
@@ -95,14 +95,13 @@ require (
9595
github.com/golang/mock v1.7.0-rc.1 // indirect
9696
github.com/golang/snappy v1.0.0 // indirect
9797
github.com/google/cel-go v0.26.1 // indirect
98-
github.com/grafana/regexp v0.0.0-20240518133315-a468a5bfb3bc // indirect
9998
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 // indirect
10099
github.com/inconshreveable/mousetrap v1.1.0 // indirect
101100
github.com/jinzhu/inflection v1.0.0 // indirect
102101
github.com/jinzhu/now v1.1.5 // indirect
103-
github.com/klauspost/compress v1.18.0 // indirect
102+
github.com/klauspost/compress v1.18.2 // indirect
104103
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
105-
github.com/lufia/plan9stats v0.0.0-20250827001030-24949be3fa54 // indirect
104+
github.com/lufia/plan9stats v0.0.0-20251013123823-9fd1530e3ec3 // indirect
106105
github.com/mattn/go-colorable v0.1.13 // indirect
107106
github.com/mattn/go-isatty v0.0.20 // indirect
108107
github.com/mattn/go-runewidth v0.0.16 // indirect
@@ -113,38 +112,38 @@ require (
113112
github.com/pelletier/go-toml/v2 v2.2.4 // indirect
114113
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
115114
github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
116-
github.com/prometheus/common v0.66.1 // indirect
117-
github.com/prometheus/otlptranslator v0.0.2 // indirect
118-
github.com/prometheus/procfs v0.17.0 // indirect
115+
github.com/prometheus/common v0.67.4 // indirect
116+
github.com/prometheus/otlptranslator v1.0.0 // indirect
117+
github.com/prometheus/procfs v0.19.2 // indirect
119118
github.com/rivo/uniseg v0.4.7 // indirect
120119
github.com/robfig/cron v1.2.0 // indirect
121120
github.com/sagikazarmark/locafero v0.11.0 // indirect
122-
github.com/shirou/gopsutil/v4 v4.25.7 // indirect
121+
github.com/shirou/gopsutil/v4 v4.25.11 // indirect
123122
github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
124123
github.com/spf13/afero v1.15.0 // indirect
125124
github.com/spf13/cast v1.10.0 // indirect
126125
github.com/stoewer/go-strcase v1.3.1 // indirect
127126
github.com/stretchr/objx v0.5.2 // indirect
128127
github.com/subosito/gotenv v1.6.0 // indirect
129-
github.com/tklauser/go-sysconf v0.3.15 // indirect
130-
github.com/tklauser/numcpus v0.10.0 // indirect
128+
github.com/tklauser/go-sysconf v0.3.16 // indirect
129+
github.com/tklauser/numcpus v0.11.0 // indirect
131130
github.com/xdg-go/pbkdf2 v1.0.0 // indirect
132-
github.com/xdg-go/scram v1.1.2 // indirect
131+
github.com/xdg-go/scram v1.2.0 // indirect
133132
github.com/xdg-go/stringprep v1.0.4 // indirect
134133
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
135134
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
136135
github.com/yusufpapurcu/wmi v1.2.4 // indirect
137136
github.com/zeebo/errs v1.4.0 // indirect
138137
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
139-
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect
140-
go.opentelemetry.io/proto/otlp v1.7.1 // indirect
138+
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 // indirect
139+
go.opentelemetry.io/proto/otlp v1.9.0 // indirect
141140
go.temporal.io/api v1.54.0 // indirect
142141
go.uber.org/multierr v1.11.0 // indirect
143-
go.yaml.in/yaml/v2 v2.4.2 // indirect
142+
go.yaml.in/yaml/v2 v2.4.3 // indirect
144143
go.yaml.in/yaml/v3 v3.0.4 // indirect
145144
golang.org/x/exp v0.0.0-20250813145105-42675adae3e6 // indirect
146145
golang.org/x/net v0.47.0 // indirect
147-
golang.org/x/sys v0.38.0 // indirect
148-
golang.org/x/text v0.31.0 // indirect
149-
google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 // indirect
146+
golang.org/x/sys v0.39.0 // indirect
147+
golang.org/x/text v0.32.0 // indirect
148+
google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
150149
)

0 commit comments

Comments
 (0)