build: upgrade buf and goreleaser (#495)

* build: upgrade buf and goreleaser

* build: update workflows

* lint: fix lint issues

* build: change action version

Author: ravisuhag

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,13 @@
+Raystack takes the security of our software products and services seriously.
+
+If you believe you have found a security vulnerability in this project, you can report it to us directly using [private vulnerability reporting][].
+
+- Include a description of your investigation of the this project's codebase and why you believe an exploit is possible.
+- POCs and links to code are greatly encouraged.
+- Such reports are not eligible for a bounty reward.
+
+**Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.**
+
+Thanks for helping make GitHub safe for everyone.
+
+[private vulnerability reporting]: https://github.com/raystack/meteor/security/advisories

.github/ISSUE_TEMPLATE/feature_request.md

@@ -16,10 +16,9 @@ jobs:
           fetch-depth: 0
       - run: git fetch --force --tags
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
-          go-version: "stable"
-          cache: true
+          go-version-file: "go.mod"
       - name: Get release tag
         id: get_version
         uses: battila7/get-version-action@v2
@@ -29,16 +28,3 @@ jobs:
           distribution: goreleaser
           version: ~v2
           args: --snapshot --clean
-      - name: Login to GitHub Packages Docker Registry
-        uses: docker/login-action@v1
-        with:
-          registry: docker.pkg.github.com
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      - name: Login to DockerHub
-        uses: docker/login-action@v1
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Push Images
-        run: docker push docker.io/raystack/meteor:latest

.github/SECURITY.md

@@ -1,5 +1,4 @@
-name: docs
-
+name: Docs
 on:
   push:
     branches:
@@ -11,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/setup-node@v2
       - name: Installation
         uses: bahmutov/npm-install@v1

.github/workflows/build.yml

@@ -1,25 +1,30 @@
-name: lint
-
+name: Lint
 on:
   push:
-    branches:
-      - main
+    paths:
+      - "**.go"
+      - go.mod
+      - go.sum
   pull_request:
+    paths:
+      - "**.go"
+      - go.mod
+      - go.sum
 
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.20"
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-      - name: Run linter
-        uses: golangci/golangci-lint-action@v3
+          go-version-file: "go.mod"
+
+      - name: Run checks
+        uses: golangci/golangci-lint-action@v6
         with:
-          version: v1.53
+          version: v1.60
           args: --timeout=5m

.github/workflows/build_dev.yml

@@ -1,5 +1,4 @@
-name: release
-
+name: Release
 on:
   push:
     tags:
@@ -18,8 +17,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "stable"
-          cache: true
+          go-version-file: "go.mod"
       - name: Login to DockerHub
         uses: docker/login-action@v1
         with:

.github/workflows/docs.yml

@@ -1,5 +1,4 @@
 name: Test
-
 on:
   push:
   pull_request:
@@ -10,12 +9,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
-          go-version: '1.20'
-          cache: true
+          go-version-file: "go.mod"
       - name: Install dependencies
         run: sudo apt-get install build-essential
       - name: Run Test
@@ -32,12 +30,12 @@ jobs:
       plugins: ${{ steps.set-matrix.outputs.plugins }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - id: set-matrix
         run: |
           echo "plugins=$(find plugins -mindepth 2 -maxdepth 2 -type d | sed 's/plugins\///' | awk 'BEGIN{printf "["} {printf "%s\"%s\"",sep,$0; sep=","} END{print ",\".\"]"}')" >> $GITHUB_OUTPUT
 
-  plugins-test:
+  plugins:
     needs: pretest
     runs-on: ubuntu-latest
     if: |
@@ -49,12 +47,11 @@ jobs:
         plugins: ${{ fromJson(needs.pretest.outputs.plugins) }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
-          go-version: '1.20'
-          cache: true
+          go-version-file: "go.mod"
       - name: Install dependencies
         run: sudo apt-get install build-essential
       - name: Run Test
@@ -67,15 +64,14 @@ jobs:
 
   coverage:
     runs-on: ubuntu-latest
-    needs: [test, plugins-test]
+    needs: [test, plugins]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
-          go-version: '1.20'
-          cache: true
+          go-version-file: "go.mod"
       - name: Download coverage
         uses: actions/download-artifact@v3
         with:
@@ -89,4 +85,4 @@ jobs:
           COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           go install github.com/mattn/goveralls@v0.0.11
-          goveralls -coverprofile=$(ls -1 coverage*.out | paste -sd "," -) -service=github
+          goveralls -coverprofile=$(ls -1 coverage*.out | paste -sd "," -) -service=github

.github/workflows/lint.yml

@@ -11,33 +11,26 @@ before:
     - make clean
 
 changelog:
+  use: github
   sort: asc
   filters:
-    exclude:
-      - "^docs:"
-      - "^test:"
-      - "^build:"
+    exclude: ["^docs:", "^test:", "^build:", "^refactor:", "^style:", "^chore:"]
 
 builds:
   - main: ./main.go
-    id: "linux"
     binary: meteor
     flags: [-a]
     ldflags:
       - -X github.com/raystack/meteor/cmd.Version={{.Tag}}
       - -X github.com/raystack/meteor/cmd.BuildCommit={{.FullCommit}}
       - -X github.com/raystack/meteor/cmd.BuildDate={{.Date}}
     goos: ["linux", "windows", "darwin"]
-    goarch: [amd64, arm64] # skip goarch 386 and arm due to conflicts with "github.com/blastrain/vitess-sqlparser" library
+    goarch: [amd64, arm64] # Skip goarch 386 and arm due to conflicts with "github.com/blastrain/vitess-sqlparser" library
     env:
       - CGO_ENABLED=0
-    ignore: # skip goarch 386 and arm due to conflicts with "github.com/blastrain/vitess-sqlparser" library
-      - goos: linux
-        goarch: 386
+    ignore:
       - goos: linux
         goarch: arm
-      - goos: windows
-        goarch: 386
       - goos: windows
         goarch: arm
 
@@ -51,7 +44,7 @@ checksum:
   name_template: "checksums.txt"
 
 snapshot:
-  name_template: "{{ .Tag }}-next"
+  version_template: "{{ .Tag }}-next"
 
 dockers:
   - goos: linux
@@ -69,10 +62,7 @@ nfpms:
     description: "Metadata collection tool."
     homepage: https://github.com/raystack/meteor
     license: Apache 2.0
-    formats:
-      - deb
-      - rpm
-      - apk
+    formats: [deb, rpm, apk]
 
 scoops:
   - homepage: "https://github.com/raystack/meteor"