upgrade to go 1.24.4 (#74)

dhth · web-flow · commit 657c01d6dd34 · 2025-06-25T14:08:10.000+05:30
Add scheduled vulncheck, change dependabot schedule
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,15 +3,15 @@ updates:
   - package-ecosystem: "gomod"
     directory: "/"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
     labels:
       - "dependencies"
     commit-message:
       prefix: "build"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
     labels:
       - "dependencies"
     commit-message:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -6,7 +6,7 @@ on:
       - 'main'
 
 env:
-  GO_VERSION: '1.24.3'
+  GO_VERSION: '1.24.4'
 
 jobs:
   changes:
@@ -15,6 +15,7 @@ jobs:
       contents: read
     outputs:
       code: ${{ steps.filter.outputs.code }}
+      deps: ${{ steps.filter.outputs.deps }}
       release: ${{ steps.filter.outputs.release }}
       workflows: ${{ steps.filter.outputs.workflows }}
       yml: ${{ steps.filter.outputs.yml }}
@@ -35,6 +36,10 @@ jobs:
               - "main.go"
               - ".github/actions/**"
               - ".github/workflows/main.yml"
+            deps:
+              - "go.mod"
+              - "go.sum"
+              - ".github/workflows/main.yml"
             release:
               - ".goreleaser.yaml"
               - ".github/workflows/main.yml"
@@ -191,3 +196,18 @@ jobs:
           /var/tmp/hours_head --dbpath=/var/tmp/throwaway-with-data.db report 3d -p
           /var/tmp/hours_head --dbpath=/var/tmp/throwaway-with-data.db log 3d -p
           /var/tmp/hours_head --dbpath=/var/tmp/throwaway-with-data.db stats 3d -p
+
+  vulncheck:
+    needs: changes
+    if: ${{ needs.changes.outputs.deps == 'true' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+      - name: install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: govulncheck
+        run: govulncheck ./...
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -4,7 +4,7 @@ on:
   pull_request:
 
 env:
-  GO_VERSION: '1.24.3'
+  GO_VERSION: '1.24.4'
 
 jobs:
   changes:
@@ -13,6 +13,7 @@ jobs:
       pull-requests: read
     outputs:
       code: ${{ steps.filter.outputs.code }}
+      deps: ${{ steps.filter.outputs.deps }}
       release: ${{ steps.filter.outputs.release }}
       workflows: ${{ steps.filter.outputs.workflows }}
       yml: ${{ steps.filter.outputs.yml }}
@@ -33,6 +34,10 @@ jobs:
               - "main.go"
               - ".github/actions/**"
               - ".github/workflows/pr.yml"
+            deps:
+              - "go.mod"
+              - "go.sum"
+              - ".github/workflows/pr.yml"
             release:
               - ".goreleaser.yaml"
               - ".github/workflows/pr.yml"
@@ -190,3 +195,18 @@ jobs:
           /var/tmp/hours_head --dbpath=/var/tmp/throwaway-with-data.db report 3d -p
           /var/tmp/hours_head --dbpath=/var/tmp/throwaway-with-data.db log 3d -p
           /var/tmp/hours_head --dbpath=/var/tmp/throwaway-with-data.db stats 3d -p
+
+  vulncheck:
+    needs: changes
+    if: ${{ needs.changes.outputs.deps == 'true' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+      - name: install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: govulncheck
+        run: govulncheck ./...
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ permissions:
   id-token: write
 
 env:
-  GO_VERSION: '1.24.3'
+  GO_VERSION: '1.24.4'
 
 jobs:
   release:
diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml
@@ -0,0 +1,23 @@
+name: vulncheck
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 2 * * 2,6'
+
+env:
+  GO_VERSION: '1.24.4'
+
+jobs:
+  vulncheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+      - name: install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: govulncheck
+        run: govulncheck ./...
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/dhth/hours
 
-go 1.24.3
+go 1.24.4
 
 require (
 	github.com/charmbracelet/bubbles v0.21.0
