From d9f1db886e92115dfc990582908ab588fb70c0c3 Mon Sep 17 00:00:00 2001 From: Jinsoo Heo Date: Thu, 10 Sep 2026 11:07:58 +0900 Subject: [PATCH] ci: [sc-20335] pin setup-go to v7.0.0 so go-version-file takes effect The workflow passes go-version-file: go.mod to actions/setup-go@bfdd3570, which is setup-go v2.2.0. That input was added in v3.2.0, so on v2.2.0 it is ignored with an 'Unexpected input(s)' warning, no toolchain is installed, and every job has been building and testing this library with whatever Go the ubuntu-latest image happens to ship rather than the version go.mod declares. Pinned to v7.0.0 (b7ad1dad), keeping the SHA-pinning convention. Checkout already precedes setup-go here, which v3+ requires for go-version-file to resolve the file. --- .github/workflows/go.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 1af8f79..ff62f88 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -14,7 +14,7 @@ jobs: - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 - name: Set up Go - uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: go.mod