chore(deps): bump the go-dependencies group across 1 directory with 17 updates #843
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR Validation | |
| on: | |
| pull_request: | |
| branches: [develop, release-candidate, main] | |
| types: [opened, edited, synchronize, reopened, ready_for_review] | |
| permissions: | |
| actions: read | |
| contents: read | |
| id-token: write | |
| issues: write | |
| pull-requests: write | |
| security-events: write | |
| jobs: | |
| validate: | |
| uses: LerianStudio/github-actions-shared-workflows/.github/workflows/go-pr-validation.yml@v1.46.5 | |
| with: | |
| enforce_source_branches: true | |
| allowed_source_branches: 'hotfix/*|release-candidate' | |
| target_branches_for_source_check: 'main' | |
| # crm and fees are valid commit scopes even though both now live inside the | |
| # ledger binary. Scope is warn-only (require_scope: false). | |
| pr_title_scopes: | | |
| crm | |
| ledger | |
| tracer | |
| fees | |
| api | |
| pkg | |
| infra | |
| migrations | |
| scripts | |
| deps | |
| ci | |
| docs | |
| tests | |
| go_version: "1.26.5" | |
| golangci_lint_version: "v2.12.2" | |
| app_name_prefix: "midaz" | |
| # Analysis-class filter: every component dir with in-tree Go code. CRM rolls | |
| # up under components/ledger (a ledger package tree, not a standalone | |
| # component); reporter was extracted out of this repo entirely. | |
| filter_paths: | | |
| components/ledger | |
| components/tracer | |
| go_private_modules: "github.com/LerianStudio/*" | |
| ignore_file: ".trivyignore" | |
| shared_paths: | | |
| go.mod | |
| go.sum | |
| components/ | |
| pkg/ | |
| Makefile | |
| secrets: inherit | |
| # Required gate: regenerate OpenAPI/Swagger docs and fail if the committed | |
| # artifacts under components/<c>/api and postman/specs are stale. The openapi.yaml | |
| # step runs openapitools/openapi-generator-cli, which requires Docker on the runner. | |
| check-docs: | |
| name: Check Docs | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Go | |
| uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 | |
| with: | |
| go-version: '1.26.4' | |
| cache: true | |
| - name: Install swag | |
| run: | | |
| go install github.com/swaggo/swag/cmd/swag@v1.16.6 | |
| echo "$(go env GOPATH)/bin" >> "$GITHUB_PATH" | |
| # check-docs.sh converts the Huma OAS dumps via node -e "require('js-yaml')" | |
| # under NODE_PATH=postman/generator/node_modules. node_modules is gitignored, | |
| # so the deps must be installed here or the require fails. | |
| - name: Install doc generator deps | |
| run: npm ci --prefix postman/generator | |
| - name: Verify docs are up to date | |
| run: CHECK_DOCS_REGEN=1 make check-docs | |
| # Required gate: regenerate the gRPC stubs from proto/ and fail if the committed | |
| # stubs under pkg/proto are stale. buf and the protoc plugins run via pinned | |
| # remote plugins (BUF_VERSION + buf.gen.yaml), so no global install is needed. | |
| check-proto: | |
| name: Check Proto | |
| runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Go | |
| uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 | |
| with: | |
| go-version: '1.26.4' | |
| cache: true | |
| - name: Verify protobuf stubs are up to date | |
| run: make proto-check |