Sync feature/cbor-tinygo-beta with master branch

.github/workflows/ci-go-cover.yml

@@ -42,7 +42,7 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
     - name: Install Go
-      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
       with:
         go-version: 1.24
         check-latest: true

.github/workflows/ci.yml

@@ -34,7 +34,7 @@ jobs:
         go-version: [1.24, 1.25, 1.26]
     steps:
     - name: Install Go
-      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
       with:
         go-version: ${{ matrix.go-version }}
         check-latest: true

.github/workflows/codeql-analysis.yml

@@ -35,7 +35,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+      uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
       with:
         languages: ${{ matrix.language }}
 
@@ -44,7 +44,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+      uses: github/codeql-action/autobuild@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+      uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1

.github/workflows/govulncheck.yml

@@ -33,7 +33,7 @@ jobs:
         fetch-depth: 1
 
     - name: Install Go and setup env
-      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
       with:
         go-version: 1.26
         check-latest: true

.github/workflows/safer-golangci-lint.yml

@@ -41,7 +41,7 @@ jobs:
           fetch-depth: 1
 
       - name: Setup Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: ${{ env.GO_VERSION }}
           check-latest: true

README.md

@@ -234,26 +234,25 @@ __Install__: `go get github.com/fxamacker/cbor/v2` and `import "github.com/fxama
 
 > [!TIP]  
 >
-> Tinygo users can try beta/experimental branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta).
+> TinyGo users can try beta/experimental branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta).
 >
-> <details><summary> 🔎&nbsp; More about tinygo feature branch</summary>
+> <details><summary> 🔎&nbsp; More about TinyGo feature branch</summary>
 >
-> ### Tinygo
+> ### TinyGo
 >
-> Branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta) is based on fxamacker/cbor v2.7.0 and it can be compiled using tinygo v0.33 (also compiles with golang/go).
+> :warning: The `feature/cbor-tinygo-beta` branch is not currently fuzz tested.
 >
-> It passes unit tests (with both go1.22 and tinygo v0.33) and is considered beta/experimental for tinygo.
+> Branch [feature/cbor-tinygo-beta](https://github.com/fxamacker/cbor/tree/feature/cbor-tinygo-beta) tracks fxamacker/cbor master branch and it is updated periodically.  It can be compiled with both tinygo-org/tinygo (0.42.0-dev-801bd484 or newer) and golang/go compilers.
 >
-> :warning: The `feature/cbor-tinygo-beta` branch does not get fuzz tested yet.
+> This branch requires TinyGo 0.42.0-dev-801bd484 (or newer) because TinyGo v0.41.1 does not include a required fix ([tinygo-org/tinygo#5508](https://github.com/tinygo-org/tinygo/pull/5508)).
 >
-> Changes in this feature branch only affect tinygo compiled software.  Summary of changes:
-> - default `DecOptions.MaxNestedLevels` is reduced to 16 (was 32).  User can specify higher limit but 24+ crashes tests when compiled with tinygo v0.33.
-> - disabled decoding CBOR tag data to Go interface because tinygo v0.33 is missing needed feature.
-> - encoding error message can be different when encoding function type.
+> This branch passes unit tests (with both TinyGo and Go compilers) and it is considered experimental.
 >
-> Related tinygo issues:
-> - https://github.com/tinygo-org/tinygo/issues/4277
-> - https://github.com/tinygo-org/tinygo/issues/4458
+> Changes in this feature branch only affect TinyGo compiled software.  Summary of changes:
+> - Default `DecOptions.MaxNestedLevels` is reduced to 16 (was 32).  User can specify a higher limit when running with a larger stack.
+> - Encoding error message can be different when encoding function type.  For details, see [tinygo-org/tinygo#4458](https://github.com/tinygo-org/tinygo/issues/4458).
+>
+> NOTE: An older version of this branch [tinygo-beta/v2.7.0-tinygo0.33](https://github.com/fxamacker/cbor/tree/tinygo-beta/v2.7.0-tinygo0.33) (based on fxamacker/cbor v2.7.0) can be used with TinyGo v0.33.  It disables decoding CBOR tag data to Go interface values due to [tinygo-org/tinygo#4277](https://github.com/tinygo-org/tinygo/issues/4277).
 >
 > </details>