Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: yaronf/httpsign
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.5.2
Choose a base ref
...
head repository: yaronf/httpsign
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 5 commits
  • 14 files changed
  • 2 contributors

Commits on Jul 14, 2026

  1. chore: bump actions/checkout to v4 in CodeQL workflow 

    Align with test.yml and clear the Node 20 deprecation warning after the CodeQL Action v4 bump.

Co-authored-by: Cursor <[email protected]>
    @yaronf @cursoragent
    yaronf and cursoragent committed Jul 14, 2026
    Configuration menu
    Copy the full SHA
    6acf29d View commit details
    Browse the repository at this point in the history

  2. chore: replace Go Report Card with golangci-lint 

    Add a Lint workflow and config using the default linter set, fix the
findings, and swap the retired Report Card badge for the Lint status badge.

Co-authored-by: Cursor <[email protected]>
    @yaronf @cursoragent
    yaronf and cursoragent committed Jul 14, 2026
    Configuration menu
    Copy the full SHA
    86d4cd0 View commit details
    Browse the repository at this point in the history

  3. chore: bump GitHub Actions to Node 24 majors 

    Use checkout@v6, setup-go@v6, and golangci-lint-action@v9 so CI stops
warning about the deprecated Node 20 runtime.

Co-authored-by: Cursor <[email protected]>
    @yaronf @cursoragent
    yaronf and cursoragent committed Jul 14, 2026
    Configuration menu
    Copy the full SHA
    a37ff57 View commit details
    Browse the repository at this point in the history

  4. chore: enable revive unchecked-type-assertion 

    Catch single-value type assertions in production code (defense against
GHSA-6wwm-class panics); exclude *_test.go where fixture casts are common.

Co-authored-by: Cursor <[email protected]>
    @yaronf @cursoragent
    yaronf and cursoragent committed Jul 14, 2026
    Configuration menu
    Copy the full SHA
    2e46027 View commit details
    Browse the repository at this point in the history

Commits on Jul 28, 2026

  1. docs: fold jwx plans into a single JWX.md 

    Replace the historical v2/v3 migration write-ups with one maintainer doc:
stay on dual jwx until Go 1.27 stable, then cut over to jwx v4.2.0+ as an
httpsign major without a v2-only deprecation detour.

Co-authored-by: Cursor <[email protected]>
    @yaronf @cursoragent
    yaronf and cursoragent committed Jul 28, 2026
    Configuration menu
    Copy the full SHA
    de382d3 View commit details
    Browse the repository at this point in the history
Loading