At a minimum, the following measures apply:
- Unit testing with
race
condition check on various Go versions and platforms (via GitHub Actions). - Static code analysis and lint check with golangci-lint (via GitHub Actions).
- Code scanning with CodeQL (via GitHub Actions).
- Dependabot alerts (via GitHub Security).
- Security advisories (via GitHub Security).
- Keeping the version of
go.mod
up-to-date only if the avove tests pass (via GitHub Actions).
Version/Section | Status | Note |
---|---|---|
Go 1.22 ... latest | Including Go 1.22 | |
Golangci-lint v1.57.2 or later | ||
Security advisories | Enabled | |
Dependabot alerts | Enabled | (Viewable only for admins) |
Code scanning alerts | Enabled |
Note: Currently, Go 1.22 is the minimum supported version, which matches the minimum version of the dependent packages and linters. Depending on these versions, the minimum supported version may change in the future. Though, we encourage you to use the latest version of Go.
- We check the latest version of
go.mod
every week and update it when it has passed all tests.