Skip to content

chore: align toolchain versions and enforce them in CI - #664

Merged
jeefy merged 1 commit into
cncf:mainfrom
jeefy:chore/phase0-alignment
Sep 9, 2026
Merged

jeefy merged 1 commit into
cncf:mainfrom
jeefy:chore/phase0-alignment

Conversation

@jeefy

@jeefy jeefy commented Sep 9, 2026

Copy link
Copy Markdown
Member

First in a series of PRs working towards cleaning up, consolidating, and pruning things across this repo.

This one is guardrails so later work doesn't regress:

  • .go-version is now the single source of truth (1.27.1); all go.mod, Dockerfiles, the runner-image Go tarball, and reusable-generate-sbom.yml match. check-go-version.sh covers those extra spots and now actually runs in CI (new check-go-version.yml).
  • .python-version (3.13) + python-version-file in workflows that have a checkout. tests/syntax_check.py compiles every tracked .py file and now runs in CI (new python-syntax-check.yml).
  • dependabot.yml consolidated with directories: and groups: so shared bumps arrive as one PR; now also watches .github/actions/*.
  • Pinned requirements.txt for audit_project_lifecycle_across_tools.
  • AGENTS.md refreshed to match reality.

Local go build not verified (toolchain fetch unavailable offline); the only Go change is the go directive.

Make .go-version the single source of truth (1.27.1) and align all
go.mod files, the runner-image Go tarball, and reusable-generate-sbom.yml
with it. Extend check-go-version.sh to cover tarball URLs and hardcoded
go-version: in workflows, and add a workflow so it actually runs on PRs.

Add .python-version and switch setup-python steps to python-version-file
where a checkout is available. Rewrite tests/syntax_check.py to compile
every tracked Python file and add a workflow to run it.

Consolidate dependabot.yml with directories: and groups: so shared bumps
land as one PR, and watch .github/actions/* for action pins. Add a pinned
requirements.txt for audit_project_lifecycle_across_tools.

Refresh AGENTS.md to match the actual state of the repo.

Signed-off-by: Jeffrey Sica <me@jeefy.dev>
@github-actions github-actions Bot added toc toc specific issue needs-triage Indicates an issue or PR that has not been triaged yet (has a 'triage/foo' label applied) needs-kind Indicates an issue or PR that is missing an issue type or kind (a kind/foo label) needs-priority Indicates an issue or PR missing a priority label needs-area Indicates an issue or PR missing an area label needs-status Indicates an issue or PR missing a status label area/ci CI/CD infrastructure and automation area/utilities Utilities and helper tools area/cloudrunners Cloud runner infrastructure area/infrastructure Infrastructure and deployment and removed needs-area Indicates an issue or PR missing an area label labels Sep 9, 2026
@jeefy
jeefy merged commit 2180ee0 into cncf:main Sep 9, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci CI/CD infrastructure and automation area/cloudrunners Cloud runner infrastructure area/infrastructure Infrastructure and deployment area/utilities Utilities and helper tools needs-kind Indicates an issue or PR that is missing an issue type or kind (a kind/foo label) needs-priority Indicates an issue or PR missing a priority label needs-status Indicates an issue or PR missing a status label needs-triage Indicates an issue or PR that has not been triaged yet (has a 'triage/foo' label applied) toc toc specific issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant