Merge branch 'master' into clone-dir

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,19 @@
+---
+name: Feature request
+about: A new feature or proposed changed behavior
+title: 'Feature request: '
+labels: enhancement
+assignees: ''
+
+---
+
+**The feature request**
+<!-- A description of the new feature or changed behavior -->
+
+**My use case**
+<!-- Please describe in detail how you intend to use this feature -->
+
+**Implementation**
+<!-- Mark one of the boxes below with an [X] -->
+- [ ] I would like to contribute this feature if it's a suitable addition to multi-gitter
+- [ ] I have no intention of adding this feature myself.

.github/renovate.json

@@ -0,0 +1,87 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "dependencyDashboard": true,
+    "enabledManagers": [
+        "github-actions",
+        "gomod"
+    ],
+    "semanticCommitType": "dep",
+    "semanticCommitScope": "",
+    "vulnerabilityAlerts": {
+        "labels": [
+            "security"
+        ]
+    },
+    "minimumReleaseAge": "3 days",
+    "packageRules": [
+        {
+            "description": "Update non-major Github Actions releases monthly in group",
+            "groupName": "all non-major Github Actions",
+            "matchManagers": [
+                "github-actions"
+            ],
+            "matchUpdateTypes": [
+                "minor",
+                "patch",
+                "pin",
+                "pinDigest",
+                "digest"
+            ],
+            "schedule": [
+                "on the first day of the month also on the 2nd day of the month before 5pm"
+            ]
+        },
+        {
+            "description": "Require an approval for major Github Actions releases",
+            "matchManagers": [
+                "github-actions"
+            ],
+            "matchUpdateTypes": [
+                "major"
+            ],
+            "dependencyDashboardApproval": true
+        },
+        {
+            "description": "Update non-major Go modules releases monthly and merge automatically",
+            "matchManagers": [
+                "gomod"
+            ],
+            "matchUpdateTypes": [
+                "minor",
+                "patch",
+                "digest"
+            ],
+            "automerge": true,
+            "automergeType": "branch",
+            "schedule": [
+                "on the first day of the month also on the 2nd day of the month before 5pm"
+            ]
+        },
+        {
+            "description": "Update major Go modules releases monthly",
+            "matchManagers": [
+                "gomod"
+            ],
+            "matchUpdateTypes": [
+                "major"
+            ],
+            "schedule": [
+                "on the first day of the month also on the 2nd day of the month before 5pm"
+            ]
+        }
+    ],
+    "prConcurrentLimit": 5,
+    "prHourlyLimit": 3,
+    "postUpdateOptions": [
+        "gomodUpdateImportPaths",
+        "gomodTidy"
+    ],
+    "github-actions": {
+        "enabled": true,
+        "pinDigests": true,
+        "semanticCommitType": "ci"
+    },
+    "gomod": {
+        "enabled": true
+    }
+}

.github/workflows/build.yaml

@@ -1,17 +1,20 @@
 name: Building
 on: [push, pull_request]
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
-          go-version: "^1.15.5"
+          go-version-file: "go.mod"
 
       - name: Build
         run: go build main.go

.github/workflows/codeql-analysis.yml

@@ -9,8 +9,15 @@ on:
   schedule:
     - cron: '10 6 * * 2'
 
+permissions:
+  contents: read
+
 jobs:
   analyze:
+    permissions:
+      actions: read  # for github/codeql-action/init to get workflow details
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/autobuild to send a status report
     name: Analyze
     runs-on: ubuntu-latest
 
@@ -21,16 +28,21 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+    - name: Set up Go
+      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      with:
+        go-version-file: 'go.mod'
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@dc021d495cb77b369e4d9d04a501700fd83b8c51 # v2.24.0
       with:
         languages: ${{ matrix.language }}
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@dc021d495cb77b369e4d9d04a501700fd83b8c51 # v2.24.0
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@dc021d495cb77b369e4d9d04a501700fd83b8c51 # v2.24.0

.github/workflows/coverage.yaml

@@ -1,19 +1,21 @@
 name: Testing Coverage
 on: [push, pull_request]
+permissions:
+  contents: read
 jobs:
   build:
     name: Test and Coverage
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
-          go-version: "^1.15.5"
+          go-version-file: "go.mod"
 
       - name: Prepare coverage
         run: mkdir coverage
@@ -22,12 +24,12 @@ jobs:
         run: SKIP_TYPES=time-dependent go test ./... -coverpkg=$( go list ./... | grep -v /tests | grep -v /tools | paste -sd "," -) -coverprofile coverage/coverage.out
 
       - name: Coverage convert
-        uses: jandelgado/[email protected]
+        uses: jandelgado/gcov2lcov-action@c680c0f7c7442485f1749eb2a13e54a686e76eb5 # v1.0.9
         with:
           infile: coverage/coverage.out
           outfile: coverage/lcov.info
 
       - name: Coveralls report
-        uses: coverallsapp/github-action@v2
+        uses: coverallsapp/github-action@3dfc5567390f6fa9267c0ee9c251e4c8c3f18949 # v2.2.3
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docs.yaml

@@ -5,18 +5,23 @@ on:
 
 name: Generate docs
 
+permissions:
+  contents: read
+
 jobs:
   build:
+    permissions:
+      contents: write  # for Git to git push
     name: Release
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
-          go-version: "^1.15.5"
+          go-version-file: "go.mod"
         id: go
 
       - name: Generate docs

.github/workflows/fuzz.yaml

@@ -0,0 +1,20 @@
+name: Fuzzing
+on: [push, pull_request]
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Fuzzing
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - name: Set up Go
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+        with:
+          go-version-file: "go.mod"
+
+      - name: Fuzz
+        run: go test ./tests -fuzz . -fuzztime=2m

.github/workflows/goreleaser-check.yaml

@@ -0,0 +1,29 @@
+name: Check GoReleaser config
+on:
+  push:
+    branches:
+      - 'release-please--**'
+
+permissions:
+  contents: read
+
+jobs:
+  verify-goreleaser:
+    name: Check GoReleaser config
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+        with:
+          go-version-file: "go.mod"
+
+      - name: Check GoReleaser config
+        uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
+        with:
+          version: latest
+          args: check

.github/workflows/linting.yaml

@@ -1,13 +1,20 @@
 name: reviewdog
 on: [pull_request]
+permissions:
+  contents: read
+
 jobs:
   golangci-lint:
+    permissions:
+      checks: write  # for reviewdog/action-golangci-lint to report issues using checks
+      contents: read  # for actions/checkout to fetch code
     name: golangci-lint
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: golangci-lint
-        uses: reviewdog/action-golangci-lint@v2
+        uses: reviewdog/action-golangci-lint@8e1117c7d327bbfb1eb7ec8dc2d895d13e6e17c3 # v2.6.0
         with:
+          go_version_file: "go.mod"
           level: warning

.github/workflows/readme.yaml

@@ -5,18 +5,23 @@ on:
 
 name: Generate readme
 
+permissions:
+  contents: read
+
 jobs:
   build:
+    permissions:
+      contents: write  # for Git to git push
     name: Release
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
-          go-version: "^1.15.5"
+          go-version-file: "go.mod"
         id: go
 
       - name: Generate readme