Merge pull request #954 from mackerelio/workflow-sha-pinning

update CI

Author: yseto

.github/workflows/create-release-pr.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-      - uses: mackerelio/mackerel-create-release-pull-request-action@main
+      - uses: mackerelio/mackerel-create-release-pull-request-action@c30e6538510d81ac7acb49cbadd7a6d15162006d # v0.0.1
         id: start
         with:
           github_token: ${{ secrets.MACKERELBOT_GITHUB_TOKEN }}
@@ -26,7 +26,7 @@ jobs:
           version_go_file_path: mackerel-check.go
           ignore_update_program_files: "true"
 
-      - uses: mackerelio/mackerel-create-release-pull-request-action@main
+      - uses: mackerelio/mackerel-create-release-pull-request-action@c30e6538510d81ac7acb49cbadd7a6d15162006d # v0.0.1
         with:
           github_token: ${{ secrets.MACKERELBOT_GITHUB_TOKEN }}
           finished: "true"

.github/workflows/test.yml

@@ -12,20 +12,25 @@ env:
   DEBIAN_FRONTEND: noninteractive
 jobs:
   lint:
-    uses: mackerelio/workflows/.github/workflows/go-lint.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
+    uses: mackerelio/workflows/.github/workflows/go-lint.yml@7653987676cc233af59a390d142b5cf6e65a526f # v1.6.0
   test:
-    uses: mackerelio/workflows/.github/workflows/go-test.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
+    uses: mackerelio/workflows/.github/workflows/go-test.yml@7653987676cc233af59a390d142b5cf6e65a526f # v1.6.0
+    with:
+      pre: |
+        echo "GOTOOLCHAIN=auto" >> $GITHUB_ENV
   test-linux:
-    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
+    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@7653987676cc233af59a390d142b5cf6e65a526f # v1.6.0
     with:
       run: |
+        export GOTOOLCHAIN=auto
         ./test.bash
         make testconvention
       os-versions: '["ubuntu-24.04"]'
   test-windows:
-    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
+    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@7653987676cc233af59a390d142b5cf6e65a526f # v1.6.0
     with:
       run: |
+        export GOTOOLCHAIN=auto
         go build -o check-log/check-log.exe ./check-log
         go build -o check-procs/check-procs.exe ./check-procs
         go build -o check-windows-eventlog/check-windows-evenglog.exe ./check-windows-eventlog
@@ -58,7 +63,7 @@ jobs:
         with:
           fetch-depth: 0
       - run: make clean build rpm deb
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: linux-build-artifacts
           path: |
@@ -70,17 +75,17 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/v')
     steps:
-      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: linux-build-artifacts
           path: artifacts/
-      - uses: mackerelio/staging-release-update-action@main
+      - uses: mackerelio/staging-release-update-action@bc0e3a9f7bd0d890dc044592a798bc307bacc956 # v0.0.1
         if: github.ref == 'refs/heads/master'
         with:
           directory: artifacts/
           github-token: ${{ secrets.GITHUB_TOKEN }}
           tag: staging
-      - uses: mackerelio/create-release-action@main
+      - uses: mackerelio/create-release-action@5af34070474b72efdb3f5057e50d2f3836453c56 # v0.0.4
         if: startsWith(github.ref, 'refs/tags/v')
         with:
           directory: artifacts/

.golangci.yml

@@ -1,21 +1,35 @@
+version: "2"
 linters:
-  # Detected a number of cases that could not be handled after the switchover,
-  # TODO remove this rule.
   disable:
     - errcheck
     - staticcheck
-linters-settings:
-  govet:
-    enable-all: true
-    disable:
-      # Detected a number of cases that could not be handled after the switchover,
-      # TODO remove this rule.
-      - fieldalignment
-      - shadow
-issues:
-  exclude-rules:
-    - path: _test\.go
-      linters:
-        - errcheck
-        - staticcheck
-        - ineffassign
+  settings:
+    govet:
+      disable:
+        - fieldalignment
+        - shadow
+      enable-all: true
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    rules:
+      - linters:
+          - errcheck
+          - ineffassign
+          - staticcheck
+        path: _test\.go
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

check-smtp/lib/check-smtp.go

@@ -38,7 +38,7 @@ func makeConn(host, port string, timeout int, isSMTPS bool, tlsConfig *tls.Confi
 	if isSMTPS {
 		return tls.DialWithDialer(&d, "tcp", fmt.Sprintf("%s:%s", host, port), tlsConfig)
 	}
-	return d.Dial("tcp", fmt.Sprintf("%s:%s", host, port))
+	return d.Dial("tcp", net.JoinHostPort(host, port))
 }
 
 func run(args []string) *checkers.Checker {