Skip to content

ci: [sc-20335] pin setup-go to v7.0.0 so go-version-file takes effect - #7

Merged
devkoriel merged 1 commit into
mainfrom
sc-20335-ecies-setup-go-pin
Sep 10, 2026
Merged

devkoriel merged 1 commit into
mainfrom
sc-20335-ecies-setup-go-pin

Conversation

@devkoriel

Copy link
Copy Markdown

One-line CI fix, found while reviewing the same construction in dissig.

The workflow passes go-version-file: go.mod to actions/setup-go@bfdd3570, which is setup-go v2.2.0. That input was added in v3.2.0. On v2.2.0 it is ignored with an Unexpected input(s) warning, no toolchain is installed, and every run has been building and testing this library with whatever Go the ubuntu-latest image ships instead of the version go.mod declares (1.25.13). A green run has been an accident of the image's default.

Pinned to v7.0.0 (b7ad1dad31e06c5925ef5d2fc7ad053ef454303e), keeping the SHA-pinning convention. Checkout already runs before setup-go in this workflow, which v3+ requires so the action can read go.mod from the workspace.

Independent of #6 (which touches only ecies_test.go); either can merge first.

Test plan

  • CI run shows setup-go installing the go.mod toolchain (the "Setup go version spec" log line names 1.25.x) and no Unexpected input(s) warning
  • all existing build/test steps green

Refs: sc-20335

The workflow passes go-version-file: go.mod to actions/setup-go@bfdd3570, which is setup-go v2.2.0. That input was added in v3.2.0, so on v2.2.0 it is ignored with an 'Unexpected input(s)' warning, no toolchain is installed, and every job has been building and testing this library with whatever Go the ubuntu-latest image happens to ship rather than the version go.mod declares.

Pinned to v7.0.0 (b7ad1dad), keeping the SHA-pinning convention. Checkout already precedes setup-go here, which v3+ requires for go-version-file to resolve the file.
@devkoriel devkoriel self-assigned this Sep 10, 2026
@devkoriel
devkoriel merged commit 74312ba into main Sep 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant