Update workflows and dependencies

Author: bcessa

.github/dependabot.yml

@@ -11,7 +11,7 @@ updates:
       - "dependencies"
     schedule:
       # how often to look for updates
-      interval: "weekly"
+      interval: "monthly"
       # what day to use for opening new requests
       day: "monday"
       # check for npm updates at 0hrs UTC
@@ -27,4 +27,4 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "monthly"

.github/workflows/ci.yml

@@ -16,10 +16,10 @@ jobs:
     timeout-minutes: 10
     steps:
       # Go 1.14
-      - name: Set up Go 1.14
+      - name: Set up Go 1.15
         uses: actions/setup-go@v2
         with:
-          go-version: ^1.14
+          go-version: ^1.15
 
       # Checkout code
       - name: Checkout repository
@@ -49,7 +49,7 @@ jobs:
       - name: Static analysis
         uses: golangci/golangci-lint-action@v2
         with:
-          version: v1.29
+          version: v1.32
 
       # Run unit tests
       - name: Test

.github/workflows/release.yml

@@ -12,10 +12,10 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     steps:
       # Go 1.14
-      - name: Set up Go 1.14
+      - name: Set up Go 1.15
         uses: actions/setup-go@v2
         with:
-          go-version: ^1.14
+          go-version: ^1.15
 
       # Checkout code
       - name: Checkout repository
@@ -54,4 +54,7 @@ jobs:
           version: latest
           args: release --rm-dist --skip-validate
         env:
+          # https://docs.github.com/en/free-pro-team@latest/actions/reference/authentication-in-a-workflow
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+          # Login of the user that initiated the workflow run
+          GITHUB_USER: ${{ github.actor }}

.goreleaser.yml

@@ -1,3 +1,5 @@
+# main project identifier
+project_name: tredctl
 # produced artifacts are stored in this folder
 dist: dist
 # customize execution
@@ -38,29 +40,28 @@ builds:
 # https://goreleaser.com/customization/archive/
 archives:
   # a single project can produce multiple archives
-  -
-    name_template: "tredctl_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+  - name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
 # generate integrity checksums
 # https://goreleaser.com/customization/checksum/
 checksum:
-  name_template: 'tredctl_{{ .Version }}_checksums.txt'
+  name_template: "{{ .ProjectName }}_{{ .Version }}_checksums.txt"
   algorithm: sha256
 # Include source code package on the release
 # https://goreleaser.com/customization/source/
 source:
-  enabled: false
+  enabled: true
 # produce test releases
 # https://goreleaser.com/customization/snapshots/
 snapshot:
-  name_template: '{{ .Tag }}-next'
+  name_template: "{{ .Version }}-next"
 # configure the 'CHANGELOG.md' file produced
 # https://goreleaser.com/customization/release/#customize-the-changelog
 changelog:
   sort: asc
   filters:
     exclude:
-      - '^docs:'
-      - '^test:'
+      - "^docs:"
+      - "^test:"
       - typo
 # Produce homebrew formulas for the project artifacts
 # https://goreleaser.com/customization/homebrew/

Makefile

@@ -55,14 +55,14 @@ release:
 ## scan: Look for known vulnerabilities in the project dependencies
 # https://github.com/sonatype-nexus-community/nancy
 scan:
-	@nancy -quiet go.sum
+	@go list -f '{{if not .Indirect}}{{.}}{{end}}' -mod=mod -m all | nancy sleuth -o text
 
 ## test: Run unit tests excluding the vendor dependencies
 test:
 	go test -v -race -failfast -coverprofile=coverage.report ./...
 	go tool cover -html coverage.report -o coverage.html
 
 ## updates: List available updates for direct dependencies
+# https://github.com/golang/go/wiki/Modules#how-to-upgrade-and-downgrade-dependencies
 updates:
-	# https://github.com/golang/go/wiki/Modules#how-to-upgrade-and-downgrade-dependencies
-	go list -u -f '{{if (and (not (or .Main .Indirect)) .Update)}}{{.Path}}: {{.Version}} -> {{.Update.Version}}{{end}}' -m all 2> /dev/null
+	@go list -mod=mod -u -f '{{if (and (not (or .Main .Indirect)) .Update)}}{{.Path}}: {{.Version}} -> {{.Update.Version}}{{end}}' -m all 2> /dev/null

go.mod

@@ -3,13 +3,13 @@ module github.com/bryk-io/tred-cli
 go 1.13
 
 require (
-	github.com/cheggaaa/pb/v3 v3.0.4
+	github.com/cheggaaa/pb/v3 v3.0.5
 	github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b // indirect
 	github.com/pkg/errors v0.9.1
-	github.com/sirupsen/logrus v1.6.0
-	github.com/spf13/cobra v1.0.0
+	github.com/sirupsen/logrus v1.7.0
+	github.com/spf13/cobra v1.1.1
 	github.com/spf13/viper v1.7.1
 	github.com/x-cray/logrus-prefixed-formatter v0.5.2
-	go.bryk.io/x v0.0.0-20200804135449-2d3679bd6c48
-	golang.org/x/crypto v0.0.0-20200728195943-123391ffb6de
+	go.bryk.io/x v0.0.0-20201109215750-b97ba1a6d63a
+	golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897
 )