a6764cf838Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action) from 1.0.4 to 1.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/golang/govulncheck-action/releases">golang/govulncheck-action's releases</a>.</em></p> <blockquote> <h2>v1.1.0</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/golang/govulncheck-action/compare/v1.0.4...v1.1.0">https://github.com/golang/govulncheck-action/compare/v1.0.4...v1.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="032d45514a"><code>032d455</code></a> action.yml: use step-level env vars instead of direct vars in commands</li> <li><a href="3fa7bd9cee"><code>3fa7bd9</code></a> action.yml: unset GOOS/GOARCH when installing govulncheck</li> <li><a href="31f7c54634"><code>31f7c54</code></a> action.yml: pin action dependencies to full commit SHAs</li> <li><a href="5accf6f1b7"><code>5accf6f</code></a> action.yml: update dependencies</li> <li><a href="357ea4a541"><code>357ea4a</code></a> action.yml: specify cache-dependency-path</li> <li><a href="1ea760651e"><code>1ea7606</code></a> action.yml: update actions to fix caching issue</li> <li><a href="f03a9d4ce4"><code>f03a9d4</code></a> README.md: fix typo</li> <li>See full diff in <a href="b625fbe08f...032d45514a">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
name: Nightly
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 2 * * *' # 2 AM UTC daily
|
|
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
vulncheck:
|
|
# Don't run scheduled builds on forks.
|
|
if: github.event_name != 'schedule' || github.repository == 'modelcontextprotocol/go-sdk'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Run govulncheck
|
|
uses: golang/govulncheck-action@032d45514ae346b1db93c04b0c90b841c370344f # v1.1.0
|
|
with:
|
|
go-version-file: go.mod
|
|
go-package: ./...
|
|
|
|
conformance:
|
|
# Don't run scheduled builds on forks.
|
|
if: github.event_name != 'schedule' || github.repository == 'modelcontextprotocol/go-sdk'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
- name: Set up Go
|
|
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
|
|
with:
|
|
go-version: "^1.26"
|
|
- name: Set up Node.js
|
|
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
|
|
with:
|
|
node-version: "22"
|
|
- name: Run server conformance tests
|
|
run: ./scripts/server-conformance.sh
|