Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: znkr/diff
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.0.0
Choose a base ref
...
head repository: znkr/diff
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.0.1
Choose a head ref
  • 6 commits
  • 6 files changed
  • 1 contributor

Commits on Mar 22, 2026

  1. all: update API stability status from beta to stable

    @znkr
    znkr committed Mar 22, 2026
    Configuration menu
    Copy the full SHA
    1d17605 View commit details
    Browse the repository at this point in the history

  2. all: replace Dependabot with govulncheck and latest-deps CI 

    Remove Dependabot configuration and add two targeted GitHub Actions
workflows, as recommended by Filippo Valsorda [1]:

- vuln.yml: runs govulncheck daily to check for vulnerabilities in
  symbols actually reachable by this module, rather than flooding
  with alerts for unused transitive dependencies.

- latest-deps.yml: runs the test suite daily against the latest
  upstream dependency versions, catching breakage early without
  auto-updating go.mod on every release.

Both workflows support manual triggering via workflow_dispatch.
The existing govulncheck step in go.yml is kept as a PR gate.

[1] https://words.filippo.io/dependabot/
    @znkr
    znkr committed Mar 22, 2026
    Configuration menu
    Copy the full SHA
    46aa700 View commit details
    Browse the repository at this point in the history

  3. all: use latest stable Go in latest-deps workflow 

    Updated dependencies may require a newer Go version than what's in
go.mod, causing spurious failures. Use the latest stable Go toolchain
instead.
    @znkr
    znkr committed Mar 22, 2026
    Configuration menu
    Copy the full SHA
    1728d29 View commit details
    Browse the repository at this point in the history

  4. all: require go1.24.13 

    go1.24.13 is the latest minor release with a number of security fixes.
    @znkr
    znkr committed Mar 22, 2026
    Configuration menu
    Copy the full SHA
    f5352f2 View commit details
    Browse the repository at this point in the history

  5. all: bump actions/checkout and actions/setup-go to v5 for Node.js 24 … 

    …support
    @znkr
    znkr committed Mar 22, 2026
    Configuration menu
    Copy the full SHA
    6f60f98 View commit details
    Browse the repository at this point in the history

  6. all: bump actions/setup-go to v6 for Node.js 24 support

    @znkr
    znkr committed Mar 22, 2026
    Configuration menu
    Copy the full SHA
    cfe6dd5 View commit details
    Browse the repository at this point in the history
Loading