Improve CI and security#53

Merged

parttimenerd merged 12 commits into

parttimenerd:master

May 29, 2026

Commits on May 22, 2026

Harden CI/CD security: pin actions, add environments, branch protection
parttimenerd
committed

Commits on May 28, 2026

Fix input validation bugs: tilde expansion, path traversal, whitespace args, -v shorthand
parttimenerd
committed
Bump pytest from 8.4.1 to 9.0.3
parttimenerd
committed
Add gosec and govulncheck; bump Go to 1.24.6
parttimenerd
committed
Fix golangci-lint v2 config; emit govulncheck findings as CI annotations
parttimenerd
committed
Fix CI: gosec G702, bump GitHub Actions to Node.js 24 versions
parttimenerd
committed
Fix gosec G702: nolint annotations for javaPath/cmdArgs exec.Command calls
parttimenerd
committed
Simplify exec.Command: hardcode "cf" instead of cmdArgs[0]
parttimenerd
committed
Bump Node.js from 18 (EOL) to 24 (Active LTS)
parttimenerd
committed
Fix govulncheck annotation script, update deps, bump Go to 1.25.0
parttimenerd
committed
Fix govulncheck step on Windows: add shell: bash for /dev/null redirect
parttimenerd
committed
Bump upload-artifact to v7 and download-artifact to v8 (Node 24)
parttimenerd
committed