bump golangci-lint and allow release-assets.githubusercontent.com

.github/workflows/codeql-analysis.yml

@@ -51,6 +51,7 @@ jobs:
           sum.golang.org:443
           uploads.github.com:443
           objects.githubusercontent.com:443
+          release-assets.githubusercontent.com:443
 
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

.github/workflows/lint.yml

@@ -32,4 +32,4 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
         with:
-          version: v2.1
+          version: v2.3

.golangci.yml

@@ -81,7 +81,7 @@ linters:
     - usetesting
     - wastedassign
     - whitespace
-    - wsl
+    - wsl_v5
     - zerologlint
     # - cyclop
     # - depguard

cmd/krel/cmd/sign_blobs.go

@@ -141,6 +141,7 @@ func runSignBlobs(signOpts *signOptions, signBlobOpts *signBlobOptions, args []s
 	}
 
 	var tempDir string
+
 	defer func() {
 		if tempDir != "" {
 			os.RemoveAll(tempDir)

cmd/publish-release/cmd/github_test.go

@@ -30,9 +30,11 @@ func TestProcessRemoteAsset(t *testing.T) {
 
 	prev := os.Getenv(gacVar)
 	defer t.Setenv(gacVar, prev)
+
 	t.Setenv(gacVar, "")
 
 	files := []string{}
+
 	defer func() {
 		for _, f := range files {
 			os.RemoveAll(f)

dependencies.yaml

@@ -408,7 +408,7 @@ dependencies:
 
   # golangci-lint-version
   - name: "golangci-lint"
-    version: v2.1
+    version: v2.3
     refPaths:
       - path: .github/workflows/lint.yml
         match: "version: v\\d+.\\d+?\\.?(\\d+)?"

pkg/binary/binary_unit_test.go

@@ -27,6 +27,7 @@ import (
 func TestContainsString(t *testing.T) {
 	tmpfile, err := os.CreateTemp(t.TempDir(), "")
 	require.NoError(t, err)
+
 	defer os.Remove(tmpfile.Name())
 
 	// Decode a fragment of kubectl into a temporary file:

pkg/gcp/build/build.go

@@ -254,6 +254,7 @@ func RunSingleJob(o *Options, jobName, uploaded, version string, subs map[string
 		}
 
 		defer f.Close()
+
 		cmd.AddWriter(f)
 	}
 
@@ -362,6 +363,7 @@ func RunBuildJobs(o *Options) []error {
 	for k, v := range vs {
 		go func(job string, vc map[string]string) {
 			defer w.Done()
+
 			logrus.Infof("Starting job %q...", job)
 
 			if err := RunSingleJob(o, job, uploaded, tag, mergeMaps(extraSubs, vc)); err != nil {

pkg/notes/document/document_test.go

@@ -279,6 +279,7 @@ func setupTestDir(t *testing.T, dir string) {
 
 func repoTagTarball(t *testing.T, path, repoTag string) {
 	const manifestJSON = "manifest.json"
+
 	manifestJSONPath := filepath.Join(filepath.Dir(path), manifestJSON)
 	require.NoError(t, os.WriteFile(
 		manifestJSONPath,

pkg/notes/notes.go

@@ -653,6 +653,7 @@ type commitList struct {
 func (l *commitList) Add(c []*gogithub.RepositoryCommit) {
 	l.Lock()
 	defer l.Unlock()
+
 	l.list = append(l.list, c...)
 }
 
@@ -917,6 +918,7 @@ type resultList struct {
 func (l *resultList) Add(r *Result) {
 	l.Lock()
 	defer l.Unlock()
+
 	l.list = append(l.list, r)
 }
 

pkg/release/publish.go

@@ -465,6 +465,7 @@ func (p *Publisher) PublishReleaseNotesIndex(
 		}
 
 		defer os.RemoveAll(tempDir)
+
 		tempIndexFile := filepath.Join(tempDir, releaseNotesIndex)
 
 		if err := p.client.CopyToLocal(

pkg/testgrid/testgrid-scraper.go

@@ -40,6 +40,7 @@ func ReqTestgridDashboardSummaries(ctx context.Context, dashboardNames []Dashboa
 	// Worker
 	requestData := func(done <-chan interface{}, dashboardNames ...DashboardName) <-chan SummaryLookup {
 		summaryLookups := make(chan SummaryLookup)
+
 		go func() {
 			defer close(summaryLookups)
 
@@ -163,6 +164,7 @@ func (d *JobData) Overview() (Overview, error) {
 // UnmarshalTestgridSummary used to unmarshal bytes into TestgridSummary.
 func UnmarshalTestgridSummary(data []byte) (JobData, error) {
 	var r JobData
+
 	err := json.Unmarshal(data, &r)
 
 	return r, err