Skip to content

release: v0.7.2#6

Merged
mario-gc merged 3 commits intomainfrom
release/0.7.2
Apr 2, 2026
Merged

release: v0.7.2#6
mario-gc merged 3 commits intomainfrom
release/0.7.2

Conversation

@mario-gc
Copy link
Copy Markdown
Owner

@mario-gc mario-gc commented Apr 2, 2026

Release v0.7.2

Security

  • Updated Go version from 1.23 to 1.26
    • Fixes GO-2026-4602: FileInfo can escape from a Root in os
    • CVE-2026-27139 (Medium severity)
    • Ensures continued support (Go 1.23 ended Feb 11, 2026)
  • Removed temporary workaround for GO-2026-4602 in security.yml

Changed

  • Updated CI/CD workflows to use Go 1.26
  • Updated golangci-lint from v1.64.8 to v2.11.4 (built with Go 1.26)
  • Migrated .golangci.yml to v2 format
  • Updated golangci-lint-action from v6 to v7
  • Updated documentation to reflect Go 1.26+ requirement

Fixed

  • Added comments to all exported functions, types, and constants
  • Fixed all golangci-lint v2.11.4 warnings (53 issues resolved)

Merged PRs

Verification

  • ✅ All tests passing
  • ✅ golangci-lint v2.11.4: 0 issues
  • ✅ GitHub Actions workflows validated with act

mario-gc added 3 commits April 2, 2026 18:36
* fix: update Go version to 1.26 to fix GO-2026-4602

- Fixes CVE-2026-27139 (FileInfo can escape from a Root in os)
- Ensures continued support (Go 1.23 ended Feb 11, 2026)
- Removed temporary workaround for GO-2026-4602 in security.yml
- Updated CI/CD workflows to use Go 1.26
- Updated documentation to reflect Go 1.26+ requirement

* fix: update golangci-lint to v2.11.4 for Go 1.26 compatibility

- v1.64.8 was built with Go 1.24, incompatible with Go 1.26
- v2.11.4 is built with Go 1.26 and can lint Go 1.26 code

* fix: update golangci-lint-action to v7 and migrate config to v2

- golangci-lint v2 requires golangci-lint-action v7
- Migrated .golangci.yml to v2 format
- Moved gofmt/goimports to formatters section
- Removed gosimple (merged into staticcheck in v2)
- Updated CHANGELOG with migration details
* fix: add comments to exported functions and fix staticcheck issues

- Added comments to all exported functions across all packages
- Fixed 3 staticcheck QF1012 issues in cli/prompt.go
- Used fmt.Fprintf instead of WriteString(fmt.Sprintf(...))
- All 50 revive exported comment warnings resolved
- All tests passing

* fix: add comments to models and fix remaining staticcheck issues

- Added comments to all exported constants, variables, and types in models/models.go
- Added comment block for UI choice constants in cli/prompt.go
- Fixed 3 remaining QF1012 staticcheck issues in cli/prompt.go
- All 16 golangci-lint issues resolved (13 revive + 3 staticcheck)
@mario-gc mario-gc merged commit 3a8760b into main Apr 2, 2026
6 checks passed
@mario-gc mario-gc deleted the release/0.7.2 branch April 2, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant