fix(release-tool): use HTTP/2-specific timeouts for GraphQL queries (#169)

* feat: add GoReleaser with automated version bumping

- Add .goreleaser.yml with multi-platform build config
- Create release.yaml workflow with workflow_dispatch trigger
- Support manual version input or auto-bump (patch/minor/major)
- Auto-creates and pushes git tag
- Builds release-tool binaries for linux/darwin/windows (amd64/arm64)
- Auto-generates changelog from commits
- Publishes binaries to GitHub releases

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>

* fix(release-tool): use HTTP/2-specific timeouts for GraphQL queries

Replaces http.Transport with http2.Transport to properly handle timeouts
for GitHub's GraphQL API which uses HTTP/2.

Issue: http.Transport.IdleConnTimeout is ignored by HTTP/2 connections,
causing stream cancellation after ~11 seconds during long queries.

Solution: Use http2.Transport with ReadIdleTimeout and PingTimeout to
prevent stream cancellation by sending ping frames during long-running
queries (500+ commits).

Refs: https://github.com/Kong/kong-mesh/actions/runs/20380687072
Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>

---------

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>

Author: Automaat

cmd/internal/github/graphql.go

@@ -13,6 +13,7 @@ import (
 
 	"github.com/Masterminds/semver/v3"
 	"github.com/google/go-github/v79/github"
+	"golang.org/x/net/http2"
 )
 
 type GQLOutput struct {
@@ -147,15 +148,15 @@ func NewGQLClient(useGHAuth bool) (*GQLClient, error) {
 
 	cl := github.NewClient(nil).WithAuthToken(token)
 
-	// Configure HTTP client with appropriate timeouts for large GraphQL queries
-	// This prevents stream cancellation errors when fetching large changelogs
+	// Configure HTTP client with HTTP/2-specific timeouts for large GraphQL queries
+	// GitHub's GraphQL API uses HTTP/2, which requires http2.Transport for proper timeout handling
+	// ReadIdleTimeout prevents stream cancellation during long-running queries (500+ commits)
+	// by sending ping frames to keep the connection alive
 	httpClient := &http.Client{
 		Timeout: 5 * time.Minute,
-		Transport: &http.Transport{
-			ResponseHeaderTimeout: 2 * time.Minute,
-			ExpectContinueTimeout: 1 * time.Second,
-			// Increase idle connection timeout for long-running queries
-			IdleConnTimeout: 90 * time.Second,
+		Transport: &http2.Transport{
+			ReadIdleTimeout: 5 * time.Minute,
+			PingTimeout:     30 * time.Second,
 		},
 	}
 

go.mod

@@ -7,7 +7,8 @@ require (
 	github.com/google/go-github/v79 v79.0.0
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/spf13/cobra v1.10.1
-	golang.org/x/term v0.37.0
+	golang.org/x/net v0.48.0
+	golang.org/x/term v0.38.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
@@ -16,5 +17,6 @@ require (
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
-	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/sys v0.39.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
 )

go.sum

@@ -21,10 +21,14 @@ github.com/spf13/cobra v1.10.1/go.mod h1:7SmJGaTHFVBY0jW4NXGluQoLvhqFQM+6XSKD+P4
 github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
+golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
+golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q=
+golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=