Skip to content

release: prepare exact GA candidate for legal review - #4

Closed
shoesCodeFor wants to merge 29 commits into
mainfrom
dev/ga-release-candidate
Closed

shoesCodeFor wants to merge 29 commits into
mainfrom
dev/ga-release-candidate

Conversation

@shoesCodeFor

Copy link
Copy Markdown
Contributor

Summary

  • freezes the accumulated Go 1.26 JSONC implementation, security, fuzz, CI, and release-pipeline work
  • replaces the unprovenanced VS Code-derived benchmark fixture and schema with deterministic project-original synthetic data
  • preserves required Apache-2.0 upstream notices and adds modified-file notices
  • reconciles the completed FS-SEC-2026-001 point-in-time reporting determination
  • keeps internal agent, research, and active Sprout task artifacts outside the candidate

Verification

  • pinned preflight: actionlint 1.7.12, golangci-lint 2.12.0, govulncheck 1.7.0
  • go test -race -count=10 ./...
  • 96.334% atomic coverage
  • six CGO-disabled cross-compiles
  • all three fuzz targets exercised
  • 18 release identity checks
  • source-only GoReleaser 2.17.1 rehearsal matched commit e35ba74 exactly

No tag, release, module publication, or artifact distribution is part of this pull request.

marcozac and others added 29 commits August 3, 2023 23:25
Sanitize JSON with comments
* test: improve and add tests with medium sized file
feat: add `Unmarshal` function
* chore(scripts): rename`all-tests` to `test`
No effect on APIs: Sanitize was tested on the right ones
… `/*`

* perf: optimize `Unmarshal` replacing `bytes.ContainsRune` with `HasCommentRunes`

* test: add benchmarks for data without comment runes

* test: skip tests in `benchmark` script
* test: skip redundant benchmarks
Improve `Unmarshal` performance
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 4 to 5.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v4...v5)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v3...v4)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/checkout-4

chore(deps): bump actions/checkout from 3 to 4
…aser/goreleaser-action-5

chore(deps): bump goreleaser/goreleaser-action from 4 to 5
…v/codecov-action-4

chore(deps): bump codecov/codecov-action from 3 to 4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants