From 0ee4082bde7d0faac7e7294cd346c88e29f5f4bd Mon Sep 17 00:00:00 2001 From: Manuel de Brito Fontes Date: Sun, 8 Nov 2026 20:36:12 -0300 Subject: [PATCH 1/2] ci: keep golangci-lint's cache between runs setup-go keeps only Go's caches, so every lint-and-test run analysed every package from nothing. golangci-lint keys its cache by content, so any older copy is safe to start from: saved under the commit, restored from the newest, main's for a pull request. Fixes #51 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/go-cli.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/go-cli.yml b/.github/workflows/go-cli.yml index a100a9b..a828139 100644 --- a/.github/workflows/go-cli.yml +++ b/.github/workflows/go-cli.yml @@ -74,6 +74,16 @@ jobs: with: go-version-file: go.mod + # golangci-lint's analysis of each package, which setup-go does not keep, keyed by content + # inside, so any older copy is safe to start from: saved under the commit, restored from the + # newest - main's for a pull request. + - name: Lint findings, from the last run + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 + with: + path: artifacts/golangci-lint + key: golangci-lint-${{ github.sha }} + restore-keys: golangci-lint- + - run: go tool task lint - run: go tool task spec:compliance - run: go tool task vuln From e87d56517ff1ddec344806687811e6dffdf2f92f Mon Sep 17 00:00:00 2001 From: Manuel de Brito Fontes Date: Thu, 12 Nov 2026 14:06:49 -0300 Subject: [PATCH 2/2] build: move the Go toolchain to go1.27.4 GO-2026-6859 is fixed in go1.27.4, and vulngate reports it as called and fixed, so task vuln fails on main and every pull request until the toolchain moves. Co-Authored-By: Claude Opus 5.5 --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 9c62f9c..b2136a2 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/devcontainers/cli go 1.27.0 -toolchain go1.27.3 +toolchain go1.27.4 require ( github.com/Masterminds/semver/v3 v3.5.0