Merge pull request 'Update actions/checkout action to v7' (#6 ) from renovate/actions-checkout-7.x into main

Reviewed-on: #6
Merge pull request 'Update dependency golangci/golangci-lint to v2.13.1' (#5 ) from renovate/golangci-golangci-lint-2.x into main
2026-08-23 08:32:16 +07:00 · 2026-08-23 00:00:20 +07:00 · 2026-08-22 17:00:20 +00:00 · 2026-08-22 17:00:14 +00:00 · 2026-08-11 15:40:47 +07:00 · 2026-08-11 15:29:22 +07:00
4 changed files with 10 additions and 8 deletions
@@ -22,7 +22,7 @@ jobs:
    runs-on: ${{ matrix.arch }}
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7

      - name: Login to Docker Registry
        uses: docker/login-action@v3
@@ -22,7 +22,7 @@ jobs:
    runs-on: ${{ matrix.arch }}
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7

      - name: Login to Docker Registry
        uses: docker/login-action@v3
@@ -22,7 +22,7 @@ jobs:
    runs-on: ${{ matrix.arch }}
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7

      - name: Login to Docker Registry
        uses: docker/login-action@v3
@@ -1,7 +1,7 @@
 FROM node:lts-slim

 ARG GO_VERSION=1.26
-ARG GOLANGCI_LINT_VERSION=v2.12.2
+ARG GOLANGCI_LINT_VERSION=v2.13.1

 ENV DEBIAN_FRONTEND=noninteractive \
    PATH=/usr/local/go/bin:${PATH}
@@ -24,10 +24,12 @@ RUN set -eux; \
    rm -rf /usr/local/go; \
    tar -C /usr/local -xzf /tmp/go.tgz; \
    rm -f /tmp/go.tgz; \
-    curl -fsSL -o /tmp/golangci-lint-install.sh \
-        "https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh"; \
-    sh /tmp/golangci-lint-install.sh -b /usr/local/bin "${GOLANGCI_LINT_VERSION}"; \
-    rm -f /tmp/golangci-lint-install.sh; \
+    gcl_ver="${GOLANGCI_LINT_VERSION#v}"; \
+    curl -fsSL -o /tmp/gcl.tgz \
+        "https://github.com/golangci/golangci-lint/releases/download/${GOLANGCI_LINT_VERSION}/golangci-lint-${gcl_ver}-${go_arch}.tar.gz"; \
+    tar -C /tmp -xzf /tmp/gcl.tgz; \
+    install -m 0755 "/tmp/golangci-lint-${gcl_ver}-${go_arch}/golangci-lint" /usr/local/bin/golangci-lint; \
+    rm -rf /tmp/gcl.tgz "/tmp/golangci-lint-${gcl_ver}-${go_arch}"; \
    rm -rf /var/lib/apt/lists/*

 WORKDIR /app
Author	SHA1	Message	Date
thuanle	48dc44b00d	Merge pull request 'Update actions/checkout action to v7' (#6 ) from renovate/actions-checkout-7.x into main Reviewed-on: #6	2026-08-23 08:32:16 +07:00
renovatebot	ad7269b2b6	Merge pull request 'Update dependency golangci/golangci-lint to v2.13.1' (#5 ) from renovate/golangci-golangci-lint-2.x into main node-go image / build (amd64) (push) Successful in 5s Details node-go image / build (arm64) (push) Successful in 13s Details node-go image / amend-manifest (push) Successful in 12s Details	2026-08-23 00:00:20 +07:00
renovatebot	92d4a6853c	Update actions/checkout action to v7	2026-08-22 17:00:20 +00:00
renovatebot	521fb6965e	Update dependency golangci/golangci-lint to v2.13.1 node-go image / build (amd64) (push) Successful in 1m15s Details node-go image / build (arm64) (push) Successful in 2m21s Details node-go image / amend-manifest (push) Successful in 19s Details	2026-08-22 17:00:14 +00:00
thuanle	364e78b608	Merge pull request 'fix(node-go): golangci-lint install.sh checksum bug → tải tarball trực tiếp' (#4 ) from fix/node-go-golangci-lint-checksum into main node-go image / build (arm64) (push) Successful in 15s Details node-go image / build (amd64) (push) Successful in 1m22s Details node-go image / amend-manifest (push) Successful in 3s Details Reviewed-on: #4	2026-08-11 15:40:47 +07:00
thuanleandClaude	ae32c66e82	fix(node-go): install golangci-lint directly, bypass install.sh checksum bug node-go image / build (arm64) (push) Successful in 14s Details node-go image / build (amd64) (push) Failing after 0s Details node-go image / amend-manifest (push) Skipped Details The official install.sh (master branch) fails checksum verification because it matches the .tar.gz line against the .sbom.json checksum (the tarball filename is a prefix of the sbom filename). The downloaded tarball is NOT corrupt - its real sha256 matches the checksums file - install.sh just picks the wrong line. Replace install.sh with a direct tarball download + extract, reusing the existing go_arch variable. Consistent with how Go itself is installed in this Dockerfile (no checksum verification either). Co-Authored-By: Claude <noreply@anthropic.com>	2026-08-11 15:29:22 +07:00
thuanle	5d37cee6af	Merge pull request 'feat(node-go): thêm golangci-lint + Renovate auto-bump' (#3 ) from feat/node-go-golangci-lint into main node-go image / build (arm64) (push) Failing after 53s Details node-go image / build (amd64) (push) Failing after 1m29s Details node-go image / amend-manifest (push) Skipped Details Reviewed-on: #3	2026-08-11 15:22:29 +07:00