OpenCHAMI / ochami / 38298648301
11%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 195
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 11.399%. Remained the same
38298648301

push

github

web-flow 
fix(deps): synchronize Go updates and validate Renovate configuration (#198)

* fix(deps): update go modules (minor/patch)

* fix(deps): synchronize Go updates and resolve HTTP/2 vulnerabilities

The Go version update raises go.mod to 1.27.2 while the Docker builder
remains on 1.27.1. This causes go mod download to fail because the
container uses GOTOOLCHAIN=local.

Group the Go directive and golang Docker image into a dedicated
Renovate PR. Apply a consistent seven-day release delay and require
two updates before creating the group, so Go version updates wait
for the corresponding Docker image update.

Update the Docker builder to Go 1.27.2 to match go.mod.

Upgrade golang.org/x/net to v0.60.0 to address the HTTP/2
vulnerabilities reported by govulncheck. Include its required
golang.org/x/crypto and golang.org/x/text updates, and regenerate
module checksums with go mod tidy.

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>

* ci(renovate): validate config and manage validator version pins

Add a PR workflow that validates renovate.json when the config,
Makefile, or validation workflow changes. Run the repository config
validator with Node.js 24, read-only permissions, and a ten-minute
timeout.

Add make renovate-check for local validation using the same
validator version and flags as CI. Follow the existing Makefile
conventions with command discovery, a missing-command guard, a
phony target, and a help description.

Pin the validator to Renovate 44.154.1 in both environments.
Store the Makefile pin in a top-level RENOVATE_VERSION variable
that supports command-line overrides.

Configure a Renovate custom regex manager to detect the Makefile
variable and workflow package pin through the npm datasource.
Group their updates into one PR to keep local and CI validation
aligned.

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>

---------

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.githu... (continued)

1605 of 14080 relevant lines covered (11.4%)

0.7 hits per line

Jobs
ID Job ID Ran Files Coverage
1 38298648301.1 195
11.4
GitHub Action Run
Source Files on build 38298648301