Repository navigation
chore: align toolchain versions and enforce them in CI - #664
Merged
Merged
Conversation
Make .go-version the single source of truth (1.27.1) and align all go.mod files, the runner-image Go tarball, and reusable-generate-sbom.yml with it. Extend check-go-version.sh to cover tarball URLs and hardcoded go-version: in workflows, and add a workflow so it actually runs on PRs. Add .python-version and switch setup-python steps to python-version-file where a checkout is available. Rewrite tests/syntax_check.py to compile every tracked Python file and add a workflow to run it. Consolidate dependabot.yml with directories: and groups: so shared bumps land as one PR, and watch .github/actions/* for action pins. Add a pinned requirements.txt for audit_project_lifecycle_across_tools. Refresh AGENTS.md to match the actual state of the repo. Signed-off-by: Jeffrey Sica <me@jeefy.dev>
This was referenced Sep 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
First in a series of PRs working towards cleaning up, consolidating, and pruning things across this repo.
This one is guardrails so later work doesn't regress:
.go-versionis now the single source of truth (1.27.1); allgo.mod, Dockerfiles, the runner-image Go tarball, andreusable-generate-sbom.ymlmatch.check-go-version.shcovers those extra spots and now actually runs in CI (newcheck-go-version.yml)..python-version(3.13) +python-version-filein workflows that have a checkout.tests/syntax_check.pycompiles every tracked.pyfile and now runs in CI (newpython-syntax-check.yml).dependabot.ymlconsolidated withdirectories:andgroups:so shared bumps arrive as one PR; now also watches.github/actions/*.requirements.txtforaudit_project_lifecycle_across_tools.AGENTS.mdrefreshed to match reality.Local
go buildnot verified (toolchain fetch unavailable offline); the only Go change is thegodirective.