diff --git a/.github/workflows/ci-go-cover.yml b/.github/workflows/ci-go-cover.yml index a7fd1a13..69e6a2aa 100644 --- a/.github/workflows/ci-go-cover.yml +++ b/.github/workflows/ci-go-cover.yml @@ -42,7 +42,7 @@ jobs: - name: Checkout code uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Install Go - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.24 check-latest: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index dfa3091b..cd973405 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -34,7 +34,7 @@ jobs: go-version: [1.24, 1.25, 1.26] steps: - name: Install Go - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: ${{ matrix.go-version }} check-latest: true diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b8ea198f..bebe05e3 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -35,7 +35,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 with: languages: ${{ matrix.language }} @@ -44,7 +44,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/autobuild@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index cb78d8f2..d77d9331 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -33,7 +33,7 @@ jobs: fetch-depth: 1 - name: Install Go and setup env - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: 1.26 check-latest: true diff --git a/.github/workflows/safer-golangci-lint.yml b/.github/workflows/safer-golangci-lint.yml index 5a7d19b9..355d886a 100644 --- a/.github/workflows/safer-golangci-lint.yml +++ b/.github/workflows/safer-golangci-lint.yml @@ -41,7 +41,7 @@ jobs: fetch-depth: 1 - name: Setup Go - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version: ${{ env.GO_VERSION }} check-latest: true diff --git a/README.md b/README.md index efe84a11..53296ff3 100644 --- a/README.md +++ b/README.md @@ -234,26 +234,25 @@ __Install__: `go get github.com/fxamacker/cbor/v2` and `import "github.com/fxama > [!TIP] > -> Tinygo users can try beta/experimental branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta). +> TinyGo users can try beta/experimental branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta). > ->
🔎  More about tinygo feature branch +>
🔎  More about TinyGo feature branch > -> ### Tinygo +> ### TinyGo > -> Branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta) is based on fxamacker/cbor v2.7.0 and it can be compiled using tinygo v0.33 (also compiles with golang/go). +> :warning: The `feature/cbor-tinygo-beta` branch is not currently fuzz tested. > -> It passes unit tests (with both go1.22 and tinygo v0.33) and is considered beta/experimental for tinygo. +> Branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta) tracks fxamacker/cbor master branch and it is updated periodically. It can be compiled with both tinygo-org/tinygo (0.42.0-dev-801bd484 or newer) and golang/go compilers. > -> :warning: The `feature/cbor-tinygo-beta` branch does not get fuzz tested yet. +> This branch requires TinyGo 0.42.0-dev-801bd484 (or newer) because TinyGo v0.41.1 does not include a required fix ([tinygo-org/tinygo#5508](https://github.com/tinygo-org/tinygo/pull/5508)). > -> Changes in this feature branch only affect tinygo compiled software. Summary of changes: -> - default `DecOptions.MaxNestedLevels` is reduced to 16 (was 32). User can specify higher limit but 24+ crashes tests when compiled with tinygo v0.33. -> - disabled decoding CBOR tag data to Go interface because tinygo v0.33 is missing needed feature. -> - encoding error message can be different when encoding function type. +> This branch passes unit tests (with both TinyGo and Go compilers) and it is considered experimental. > -> Related tinygo issues: -> - https://github.com/tinygo-org/tinygo/issues/4277 -> - https://github.com/tinygo-org/tinygo/issues/4458 +> Changes in this feature branch only affect TinyGo compiled software. Summary of changes: +> - Default `DecOptions.MaxNestedLevels` is reduced to 16 (was 32). User can specify a higher limit when running with a larger stack. +> - Encoding error message can be different when encoding function type. For details, see [tinygo-org/tinygo#4458](https://github.com/tinygo-org/tinygo/issues/4458). +> +> NOTE: An older version of this branch [tinygo-beta/v2.7.0-tinygo0.33](https://github.com/fxamacker/cbor/tree/tinygo-beta/v2.7.0-tinygo0.33) (based on fxamacker/cbor v2.7.0) can be used with TinyGo v0.33. It disables decoding CBOR tag data to Go interface values due to [tinygo-org/tinygo#4277](https://github.com/tinygo-org/tinygo/issues/4277). > >