Merge pull request #145 from pjbgf/goversion

build: Pin dependencies, enable CodeQL for GH actions and bump Go versions

Author: pjbgf

.github/workflows/codeql.yml

@@ -21,7 +21,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'go' ]
+        language: [ 'go', 'actions' ]
 
     steps:
       - name: Checkout code

.github/workflows/test.yml

@@ -10,7 +10,7 @@ jobs:
   test:
     strategy:
       matrix:
-        go-version: [1.22.x,1.23.x,1.24.x]
+        go-version: [1.23.x,1.24.x,1.25.x]
         platform: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.platform }}
     steps:

.github/workflows/test_wasip1.yml

@@ -11,7 +11,7 @@ jobs:
   test:
     strategy:
       matrix:
-        go-version: [1.23.x,1.24.x]
+        go-version: [1.24.x,1.25.x]
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
@@ -24,7 +24,7 @@ jobs:
 
     - name: Install wasirun
       run: |
-        go install github.com/stealthrocket/wasi-go/cmd/wasirun@latest
+        go install github.com/stealthrocket/wasi-go/cmd/wasirun@v0.8.0
 
     - name: Test
       run: make wasitest

Makefile

@@ -14,7 +14,7 @@ $(GOLANGCI):
 
 .PHONY: test
 test:
-	$(GOTEST) -race -timeout 300s ./...
+	$(GOTEST) -race -timeout 900s ./...
 
 test-coverage:
 	echo "" > $(COVERAGE_REPORT); \

scripts/wasirun-wrapper

@@ -3,7 +3,7 @@
 # Wrapper script for wasirun to be executable by go test -exec
 #
 
-which wasirun || go install github.com/stealthrocket/wasi-go/cmd/wasirun@latest
+which wasirun || go install github.com/stealthrocket/wasi-go/cmd/wasirun@v0.8.0
 
 # Make temp dir for for mapping into wasirun
 map_dir=$(mktemp -d)