.github/ISSUE_TEMPLATE/config.yml

@@ -2,7 +2,7 @@ blank_issues_enabled: false
 contact_links:
   - name: Questions
     url: https://github.com/golangci/golangci-lint/discussions
-    about: If you have a question, or are looking for advice, please post on our discussions forum!
+    about: If you have a question, or are looking for advice, please post on our Discussions forum!
   - name: golangci-lint documentation
     url: https://golangci-lint.run
-    about: Please take a look to our documenation.
+    about: Please take a look to our documentation.

.github/contributors/generate.ts

@@ -123,6 +123,7 @@ const main = async () => {
       renovate: true,
       fossabot: true,
       golangcibot: true,
+      kortschak: true,
     }
 
     const res: DataJSON = {

.github/dependabot.yml

@@ -4,32 +4,24 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
+      day: "sunday"
+      time: "11:00" # 11am UTC
     ignore:
       # ignore forked linters because of their versioning issues. TODO: fix it.
       - dependency-name: "github.com/golangci/*"
-    reviewers:
-      - "golangci/team"
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
       interval: weekly
-    reviewers:
-      - "golangci/team"
   - package-ecosystem: docker
     directory: "/build"
     schedule:
       interval: weekly
-    reviewers:
-      - "golangci/team"
   - package-ecosystem: gomod
     directory: "/scripts/gen_github_action_config"
     schedule:
       interval: weekly
-    reviewers:
-      - "golangci/team"
   - package-ecosystem: npm
     directory: "/docs"
     schedule:
       interval: monthly
-    reviewers:
-      - "golangci/team"

.github/workflows/codeql.yaml

@@ -19,41 +19,31 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
 
+    permissions:
+      # required for all workflows
+      security-events: write
+
     strategy:
       fail-fast: false
       matrix:
         # Override automatic language detection by changing the below list
         # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
         # TODO: Enable for javascript later
-        language: [ 'go' ]
-        # Learn more...
-        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+        language: [ 'go']
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
-        with:
-          # We must fetch at least the immediate parents so that if this is
-          # a pull request then we can checkout the head.
-          fetch-depth: 2
-
-      # If this run was triggered by a pull request event, then checkout
-      # the head of the pull request instead of the merge commit.
-      - run: git checkout HEAD^2
-        if: ${{ github.event_name == 'pull_request' }}
+        uses: actions/checkout@v3
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@v2
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
           # By default, queries listed here will override any specified in a config file.
           # Prefix the list here with "+" to use these queries and those in the config file.
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
-      # Use manual build instead of auto build
-      - run: make build test
-
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@v2

.github/workflows/post-release.yml

@@ -10,16 +10,17 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.GOLANGCI_LINT_TOKEN }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Install Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
-          go-version: 1.17
+          # stable: 'false' # Keep this line to be able to use rc and beta version of Go (ex: 1.18.0-rc1).
+          go-version: 1.18
 
       - name: Update GitHub action config
         run: make assets/github-action-config.json
 
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v3
         with:
           node-version: "15"
           check-latest: true
@@ -33,7 +34,7 @@ jobs:
         run: make update_netlify_state
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@v4
         with:
           base: master
           token: ${{ secrets.GOLANGCI_LINT_TOKEN }}

.github/workflows/pr-extra.yml

@@ -1,18 +1,20 @@
 name: Extra
 on:
   push:
-    tags:
-      - v*
     branches:
       - master
   pull_request:
+
 jobs:
   vulns:
     name: Vulnerability scanner
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v2
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
+        with:
+          # stable: 'false' # Keep this line to be able to use rc and beta version of Go (ex: 1.18.0-rc1).
+          go-version: 1.18
       - name: Run go list
         run: go list -json -m all > go.list
       - name: Nancy