Commit graph

8 commits

Author SHA1 Message Date
senke
13c21ac114 feat(ci): add go vet and gofmt check to backend CI
INF-04: Backend CI now runs go vet and gofmt to catch issues early.
2026-02-22 17:35:42 +01:00
senke
d3245b2e4b fix(build): unify Go version to 1.24 across Dockerfile and CI
SEC-09: go.mod declares Go 1.24.0 but Dockerfile.production used 1.23
and backend-ci.yml used 1.23. Aligned both to 1.24.
2026-02-22 17:32:17 +01:00
senke
7b3356eb6b ci(backend): add coverage report generation and upload 2026-02-14 20:21:28 +01:00
senke
e99447027c ci(backend): run Go tests without -short, add test DB service 2026-02-14 20:20:54 +01:00
senke
40db0b4c43 fix(ci): upgrade deprecated actions, fix Go version
production-deploy.yml:
- Replace actions-rs/toolchain@v1 with dtolnay/rust-toolchain@stable
- Upgrade actions/cache@v3 -> @v4
- Upgrade github/codeql-action/upload-sarif@v2 -> @v3
- Upgrade actions/upload-artifact@v3 -> @v4

backend-ci.yml:
- Upgrade Go 1.22 -> 1.23 to match go.mod (1.23.8)

Addresses audit findings A08: deprecated actions and outdated Go version.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 23:14:50 +01:00
senke
49bc0c1443 ci: upgrade remaining GitHub Actions and remove || true patterns
- backend-ci.yml: remove || true from govulncheck
- frontend-ci.yml: remove || true from npm audit
- cd.yml: upgrade checkout@v3 -> v4, buildx-action@v2 -> v3
- chat-ci.yml: replace actions-rs/toolchain@v1 with dtolnay/rust-toolchain@stable
- stream-ci.yml: replace actions-rs/toolchain@v1 with dtolnay/rust-toolchain@stable

Zero remaining `|| true` patterns across all 11 workflow files.
Zero remaining deprecated action references.

Completes CI hardening started in C1.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 22:54:35 +01:00
senke
bbbe557eca ci: add npm audit, govulncheck, cargo audit to CI
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 21:33:27 +01:00
okinrev
6e2e16fbb5 initial: initial repo set up (README, LICENSE, CONTRIBUTORS, etc...) 2025-12-03 13:54:23 +01:00